last executing test programs:

6.528581278s ago: executing program 4 (id=1311):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x92a)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0xd, 0xf36, 0x8, "f494bfeba3160200160000000000006d004000"})
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x633, 0x0, 0x1, 0x0, 0x1, "672003cb5123a56bcb1230867a0f34eb4cbaf0", 0x2, 0x2})

6.492142729s ago: executing program 4 (id=1313):
syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f0000000580)='./file1\x00', 0x8488, &(0x7f00000005c0), 0xfe, 0x1101, &(0x7f0000001640)="$eJzs2T+LE0EYB+Df7MZ/VWSvXwQtLOS4I36BKxTSWtuIXOVVl0rx4/hx9AqxP67X4sB+ZU02UQkEkqgcPA8s8+7LO7vvlDMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I2SryU5qJJmyFVJStK2F9OrJO2Qv/+xrlLy4nQ6e3Y+eT5LUv8sL/eGkpKkOX54t5k0k+a4eXpw8ujT7O27N6/Ozk7PlzVtLq/3v5Sy6AcAAAD4Xbezz//5/wAAAMAmeztIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhSN17FzRBUSUrSthfTqyTtmnm3/lF/AAAAwO5Kqrwcr8vPjwFWnuTLuCzz/fi99PFRPqyZv1G1fc8AAABww3V3FsGv9+vl9mo//jij5da5zz3IKIeH8/fFkG8nSZ3k6I+PX16/fz08pav/9loAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAHO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAGCvAAAA///e69c/")
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000f00)='.\x00', 0x127a628, &(0x7f0000001800)=ANY=[@ANYRES32=0x0, @ANYBLOB="34771e7745f2e26297cfd7ec55afcb50b97c5e40513e6b6a84c1445b948c59456dcaadcb51f62a8a639cf208239d2001e92bd765d672a4de1737e0502569bb4bb64c54bb10a754c2e1b6a0a988c6ccb74670d807dc592f35783caa7d73aa45688c4ccf67d7a0ba6ddfbb9719a755943090fc233d49f62ac31d233eb89ef27730695e3d7f505b565b4239ca10d9853b2e43368facfc9c6f7d67ea87a72dfd6b50ac126032a6112b077dd56137857e617eab50a4d4095930e644b61a263d3785e5e4db53e872d6bb558b554dee7a5c15466d05f907c0bd58bacc49f2417da7", @ANYRES8, @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

5.160692052s ago: executing program 4 (id=1320):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

4.45638212s ago: executing program 3 (id=1327):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000003, 0x0, 0xc2e}]})

4.347072732s ago: executing program 3 (id=1328):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2)

4.343023913s ago: executing program 1 (id=1329):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x2}, 0x1c)
r0 = msgget$private(0x0, 0x3ac)
msgsnd(r0, &(0x7f00000000c0)=ANY=[], 0x8, 0x800)
msgrcv(r0, 0x0, 0x0, 0x1, 0x2000)

4.232932725s ago: executing program 1 (id=1332):
syz_mount_image$reiserfs(&(0x7f0000000200), &(0x7f0000000580)='./file1\x00', 0x8488, &(0x7f00000005c0), 0xfe, 0x1101, &(0x7f0000001640)="$eJzs2T+LE0EYB+Df7MZ/VWSvXwQtLOS4I36BKxTSWtuIXOVVl0rx4/hx9AqxP67X4sB+ZU02UQkEkqgcPA8s8+7LO7vvlDMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I2SryU5qJJmyFVJStK2F9OrJO2Qv/+xrlLy4nQ6e3Y+eT5LUv8sL/eGkpKkOX54t5k0k+a4eXpw8ujT7O27N6/Ozk7PlzVtLq/3v5Sy6AcAAAD4Xbezz//5/wAAAMAmeztIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhSN17FzRBUSUrSthfTqyTtmnm3/lF/AAAAwO5Kqrwcr8vPjwFWnuTLuCzz/fi99PFRPqyZv1G1fc8AAABww3V3FsGv9+vl9mo//jij5da5zz3IKIeH8/fFkG8nSZ3k6I+PX16/fz08pav/9loAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAHO3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAGCvAAAA///e69c/")
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000f00)='.\x00', 0x127a628, &(0x7f0000001800)=ANY=[@ANYRES32=0x0, @ANYBLOB="34771e7745f2e26297cfd7ec55afcb50b97c5e40513e6b6a84c1445b948c59456dcaadcb51f62a8a639cf208239d2001e92bd765d672a4de1737e0502569bb4bb64c54bb10a754c2e1b6a0a988c6ccb74670d807dc592f35783caa7d73aa45688c4ccf67d7a0ba6ddfbb9719a755943090fc233d49f62ac31d233eb89ef27730695e3d7f505b565b4239ca10d9853b2e43368facfc9c6f7d67ea87a72dfd6b50ac126032a6112b077dd56137857e617eab50a4d4095930e644b61a263d3785e5e4db53e872d6bb558b554dee7a5c15466d05f907c0bd58bacc49f2417da7", @ANYRES8, @ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

3.545764392s ago: executing program 3 (id=1334):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x17b}]})

3.418656326s ago: executing program 1 (id=1335):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x6})
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfa, {}, [@NHA_MASTER={0xffffffffffffff1c, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xff}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)

3.330395788s ago: executing program 0 (id=1336):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x200c0001}, 0x0)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@shortname_win95}, {@utf8no}]}, 0x7f, 0x2c7, &(0x7f0000001c40)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1001c60, 0x0, 0x1, 0x0, 0x0)

3.276669429s ago: executing program 3 (id=1337):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x6, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
io_uring_setup(0x2f35, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfa, {}, [@NHA_MASTER={0xffffffffffffff1c, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r8, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18)
r9 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xff}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)

2.942641397s ago: executing program 0 (id=1338):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x3, 0x4400008, 0x3, 0xff, 0x17, "00a6400d00000400f8ffffff00"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x8)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd)

2.736964333s ago: executing program 0 (id=1341):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="c725847d9a242a917c53c1cfb49a"], 0x0)

2.697022194s ago: executing program 0 (id=1342):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.clone_children\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000140)=0x80, 0x6)

2.585019186s ago: executing program 2 (id=1344):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2)

2.583260406s ago: executing program 0 (id=1354):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x6, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_setup(0x2f35, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfa, {}, [@NHA_MASTER={0xffffffffffffff1c, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r8, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18)
r9 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xff}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)

2.4166019s ago: executing program 3 (id=1345):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

1.851233894s ago: executing program 1 (id=1346):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_setup(0x2f35, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfa, {}, [@NHA_MASTER={0xffffffffffffff1c, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xff}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318)
read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020}, 0x2020)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)

1.756121577s ago: executing program 2 (id=1347):
r0 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
getpeername$packet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)

1.65182257s ago: executing program 0 (id=1348):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x3, 0x444b, &(0x7f0000004480)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x101000, 0x150)
lseek(r0, 0x1, 0x0)
getdents(r0, 0x0, 0x58)

1.468952704s ago: executing program 2 (id=1349):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x200c0001}, 0x0)
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)={[{@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_win95}, {@uni_xlateno}, {@numtail}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@shortname_win95}, {@utf8no}]}, 0x7f, 0x2c7, &(0x7f0000001c40)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1001c60, 0x0, 0x1, 0x0, 0x0)

1.468789334s ago: executing program 3 (id=1350):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f000000d680)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

724.706853ms ago: executing program 1 (id=1351):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x53, 0x7, 0x2008, {0x1000, 0x1}, {0x74, 0x2}, @ramp={0x6, 0x1, {0x1c33, 0xf, 0x4, 0x5}}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f)

690.396723ms ago: executing program 4 (id=1352):
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xfffffff6}}}}}}, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x3c, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1={0xff, 0x0, '\x00', 0x0}}}}}}}}, 0x0)

665.187904ms ago: executing program 2 (id=1353):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f", 0x10}, {&(0x7f0000004100)="d288", 0x2}], 0x2)

512.973328ms ago: executing program 4 (id=1355):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000003, 0x0, 0xc2e}]})

512.688488ms ago: executing program 1 (id=1356):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x6, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
io_uring_setup(0x2f35, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfa, {}, [@NHA_MASTER={0xffffffffffffff1c, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r8, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18)
r9 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xff}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)

381.587281ms ago: executing program 4 (id=1357):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x6})
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfa, {}, [@NHA_MASTER={0xffffffffffffff1c, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r6, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18)
r7 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xff}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)

180.746356ms ago: executing program 2 (id=1358):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002700)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xffff}, {0x0, 0xfff3}, {0x1, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

0s ago: executing program 2 (id=1359):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x6, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_setup(0x2f35, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfa, {}, [@NHA_MASTER={0xffffffffffffff1c, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r8, &(0x7f0000000500)='-294967295 2000000000 0\n', 0x18)
r9 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r10 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'geneve1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xff}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318)
read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020)
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)

kernel console output (not intermixed with test programs):

2049, want=34225520826, limit=256
[  262.944127][ T6539] FAT-fs (loop2): Directory bread(block 64) failed
[  262.951473][ T6537] Buffer I/O error on dev loop1, logical block 34225520825, lost async page write
[  263.121973][ T6537] attempt to access beyond end of device
[  263.121973][ T6537] loop1: rw=2049, want=34225520827, limit=256
[  263.157020][ T6539] FAT-fs (loop2): Directory bread(block 65) failed
[  263.280634][ T6539] FAT-fs (loop2): Directory bread(block 66) failed
[  263.300552][ T6537] Buffer I/O error on dev loop1, logical block 34225520826, lost async page write
[  263.450837][ T6539] FAT-fs (loop2): Directory bread(block 67) failed
[  263.516642][ T6537] attempt to access beyond end of device
[  263.516642][ T6537] loop1: rw=2049, want=34225520828, limit=256
[  263.585894][ T6539] FAT-fs (loop2): Directory bread(block 68) failed
[  263.611842][ T6539] FAT-fs (loop2): Directory bread(block 69) failed
[  263.662188][ T6537] Buffer I/O error on dev loop1, logical block 34225520827, lost async page write
[  263.685494][ T6543] loop4: detected capacity change from 0 to 2048
[  263.692961][ T6539] FAT-fs (loop2): Directory bread(block 70) failed
[  263.710388][ T4192] ocfs2: Unmounting device (7,3) on (node local)
[  263.750456][ T6539] FAT-fs (loop2): Directory bread(block 71) failed
[  263.836712][ T6539] FAT-fs (loop2): Directory bread(block 72) failed
[  263.872673][ T6543] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  263.935806][ T6539] FAT-fs (loop2): Directory bread(block 73) failed
[  264.012784][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.617'.
[  264.614495][ T6553] loop1: detected capacity change from 0 to 256
[  265.068204][ T6557] loop0: detected capacity change from 0 to 1024
[  265.412347][ T6556] loop4: detected capacity change from 0 to 4096
[  265.502844][ T6556] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  265.617666][ T6566] loop2: detected capacity change from 0 to 256
[  265.805112][ T6568] xt_hashlimit: size too large, truncated to 1048576
[  265.811952][ T6568] xt_hashlimit: max too large, truncated to 1048576
[  265.819446][ T6568] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  266.470215][ T6573] comedi comedi1: Cannot bond this driver to itself!
[  267.128379][ T6581] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  267.300617][ T6582] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  267.329047][ T6582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.494361][ T6562] loop3: detected capacity change from 0 to 32768
[  267.686622][ T6586] loop2: detected capacity change from 0 to 256
[  268.246636][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'.
[  268.274606][ T6592] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  268.927372][ T6594] loop0: detected capacity change from 0 to 512
[  268.963481][ T6572] loop1: detected capacity change from 0 to 32768
[  269.016997][ T6594] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.633: Attempting to read directory block (0) that is past i_size (16)
[  269.244714][ T6594] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  269.284607][ T6594] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000080,data_err=ignore,auto_da_alloc,discard,norecovery,grpjquota=.test_dummy_encryption=v1,sysvgroups,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  269.292912][ T6606] loop4: detected capacity change from 0 to 1024
[  269.376448][ T6609] xt_hashlimit: size too large, truncated to 1048576
[  269.383295][ T6609] xt_hashlimit: max too large, truncated to 1048576
[  269.389966][ T6609] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  269.575977][ T6598] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set
[  269.882046][ T6612] loop3: detected capacity change from 0 to 64
[  270.005442][ T6612] MINIX-fs: mounting file system with errors, running fsck is recommended
[  270.049780][ T6569] hfsplus: b-tree write err: -5, ino 25
[  270.055694][ T6569] hfsplus: b-tree write err: -5, ino 4
[  270.061249][ T6569] hfsplus: b-tree write err: -5, ino 2
[  270.476533][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'.
[  270.508225][ T6623] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  271.195828][ T6620] loop3: detected capacity change from 0 to 256
[  271.214305][ T6616] loop2: detected capacity change from 0 to 164
[  271.846435][ T6627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  271.870639][ T6627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  272.072676][ T6616] iso9660: Corrupted directory entry in block 2 of inode 1920
[  272.446371][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'.
[  272.474517][ T6640] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  273.043594][ T6643] loop1: detected capacity change from 0 to 256
[  273.060494][ T6646] loop0: detected capacity change from 0 to 1024
[  273.162920][ T6648] loop3: detected capacity change from 0 to 512
[  273.192765][ T4307] hfsplus: b-tree write err: -5, ino 25
[  273.215846][ T4307] hfsplus: b-tree write err: -5, ino 4
[  273.223572][ T6652] loop4: detected capacity change from 0 to 256
[  273.257655][ T6650] loop1: detected capacity change from 0 to 256
[  273.263098][ T4307] hfsplus: b-tree write err: -5, ino 2
[  273.331278][ T6648] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.652: Attempting to read directory block (0) that is past i_size (16)
[  273.405847][ T6648] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  273.459321][ T6648] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000080,data_err=ignore,auto_da_alloc,discard,norecovery,grpjquota=.test_dummy_encryption=v1,sysvgroups,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  273.601406][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'.
[  273.629139][ T6660] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  273.717580][ T6659] loop1: detected capacity change from 0 to 1764
[  274.316664][ T6659] iso9660: Corrupted directory entry in block 2 of inode 1920
[  274.509031][ T6663] loop0: detected capacity change from 0 to 8192
[  274.594557][ T6668] xt_hashlimit: size too large, truncated to 1048576
[  274.601420][ T6668] xt_hashlimit: max too large, truncated to 1048576
[  274.608114][ T6668] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  275.065200][ T6666] Symlink component flag not implemented
[  275.120248][ T6666] Symlink component flag not implemented
[  275.127154][ T6666] Symlink component flag not implemented (129)
[  275.133486][ T6666] Symlink component flag not implemented (6)
[  275.235970][ T6644] set_capacity_and_notify: 1 callbacks suppressed
[  275.235983][ T6644] loop2: detected capacity change from 0 to 32768
[  275.724719][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.662'.
[  275.737330][ T6682] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  275.858473][ T6683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  275.921818][ T6683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.329252][ T6689] loop0: detected capacity change from 0 to 256
[  276.436015][ T6685] loop2: detected capacity change from 0 to 4096
[  276.554613][ T6691] xt_hashlimit: size too large, truncated to 1048576
[  276.561703][ T6691] xt_hashlimit: max too large, truncated to 1048576
[  276.568428][ T6691] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  276.800658][ T6685] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  277.161061][ T6694] loop0: detected capacity change from 0 to 256
[  277.433795][ T6702] loop4: detected capacity change from 0 to 512
[  277.456388][ T6676] loop3: detected capacity change from 0 to 32768
[  277.520969][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'.
[  277.549058][ T6704] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  278.238592][ T6709] xt_hashlimit: size too large, truncated to 1048576
[  278.245358][ T6709] xt_hashlimit: max too large, truncated to 1048576
[  278.252062][ T6709] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  278.444342][ T6711] loop1: detected capacity change from 0 to 764
[  278.455434][ T6702] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  278.511032][ T6702] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  278.583986][ T6711] Symlink component flag not implemented
[  278.631967][ T6711] Symlink component flag not implemented
[  278.835844][ T6711] Symlink component flag not implemented (129)
[  278.842138][ T6711] Symlink component flag not implemented (6)
[  278.880367][ T6713] loop3: detected capacity change from 0 to 8192
[  278.946687][ T6719] xt_hashlimit: size too large, truncated to 1048576
[  278.953475][ T6719] xt_hashlimit: max too large, truncated to 1048576
[  278.960248][ T6719] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  279.788102][ T6725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.676'.
[  280.528770][ T6733] loop0: detected capacity change from 0 to 256
[  280.599600][ T6737] xt_hashlimit: size too large, truncated to 1048576
[  280.606437][ T6737] xt_hashlimit: max too large, truncated to 1048576
[  280.613086][ T6737] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  281.042219][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'.
[  281.071635][ T6740] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  281.675031][ T6742] loop1: detected capacity change from 0 to 16
[  281.698733][ T6736] loop3: detected capacity change from 0 to 4096
[  281.714399][ T6744] loop2: detected capacity change from 0 to 512
[  281.773744][ T6736] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  281.815853][ T6742] erofs: (device loop1): mounted with root inode @ nid 36.
[  281.817567][ T6748] loop0: detected capacity change from 0 to 22
[  281.837184][ T6744] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 8: comm syz.2.685: lblock 0 mapped to illegal pblock 8 (length 1)
[  281.854656][ T6742] attempt to access beyond end of device
[  281.854656][ T6742] loop1: rw=524288, want=1072, limit=16
[  281.868195][ T6729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  281.883962][ T4193] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[61, 4035] out[9000]
[  281.911632][ T6748] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  281.916875][ T6744] EXT4-fs (loop2): Remounting filesystem read-only
[  281.921200][ T6742] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89
[  281.934274][ T6729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.936401][ T6742] attempt to access beyond end of device
[  281.936401][ T6742] loop1: rw=524288, want=56, limit=16
[  281.950629][ T6744] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.685: error -117 reading directory block
[  281.974328][ T6744] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  281.982763][ T6744] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #2: block 8: comm syz.2.685: lblock 0 mapped to illegal pblock 8 (length 1)
[  282.022194][ T6748] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  282.025642][ T6744] EXT4-fs (loop2): Remounting filesystem read-only
[  282.096282][ T6742] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -41 in[61, 4035] out[8192]
[  282.143087][   T26] audit: type=1800 audit(1788538940.386:6): pid=6742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.683" name="file2" dev="loop1" ino=89 res=0 errno=0
[  282.155613][ T6744] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.685: error -117 reading directory block
[  282.210984][ T6744] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  282.281636][ T6744] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,init_itable,noinit_itable,discard,resuid=0x0000000000000000,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,usrquota,usrjquota=.,resgid=0x0000000000000000,nolazytime,,. Quota mode: writeback.
[  282.594396][ T6758] xt_hashlimit: size too large, truncated to 1048576
[  282.601313][ T6758] xt_hashlimit: max too large, truncated to 1048576
[  282.607986][ T6758] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  283.160872][ T6761] loop1: detected capacity change from 0 to 512
[  283.255240][ T6754] loop3: detected capacity change from 0 to 4096
[  283.299383][ T6754] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  283.495860][ T6761] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  283.519181][ T6761] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.912325][ T6773] xt_hashlimit: size too large, truncated to 1048576
[  283.919142][ T6773] xt_hashlimit: max too large, truncated to 1048576
[  283.925852][ T6773] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  283.936356][ T6772] netlink: 132 bytes leftover after parsing attributes in process `syz.0.692'.
[  285.058332][ T6787] loop4: detected capacity change from 0 to 256
[  285.122811][ T6789] loop2: detected capacity change from 0 to 1024
[  285.209869][ T6795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.707'.
[  285.259976][ T6789] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  285.709867][ T6789] hfsplus: filesystem is marked journaled, leaving read-only.
[  285.992500][ T6805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  286.093436][ T6805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.201298][ T6809] netlink: 68 bytes leftover after parsing attributes in process `syz.3.714'.
[  286.874130][ T6814] loop2: detected capacity change from 0 to 512
[  286.909102][ T6816] loop3: detected capacity change from 0 to 512
[  287.034241][ T6814] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.704: Attempting to read directory block (0) that is past i_size (16)
[  287.064160][ T6814] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  287.066656][ T6816] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  287.083063][ T6814] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000080,data_err=ignore,auto_da_alloc,discard,norecovery,grpjquota=.test_dummy_encryption=v1,sysvgroups,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[  287.154658][ T6816] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.175134][ T6823] netlink: 68 bytes leftover after parsing attributes in process `syz.1.718'.
[  287.733945][ T6822] xt_hashlimit: size too large, truncated to 1048576
[  287.797421][ T6822] xt_hashlimit: max too large, truncated to 1048576
[  287.806338][ T6822] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  287.930704][ T6810] loop4: detected capacity change from 0 to 32768
[  288.317995][ T6810] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page
[  288.317995][ T6810] 
[  288.709282][ T6810] ERROR: (device loop4): remounting filesystem as read-only
[  288.755901][ T6810] ialloc: diAlloc returned -5!
[  288.822061][ T6828] loop2: detected capacity change from 0 to 4096
[  289.117433][ T6828] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  289.198309][ T6839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.710'.
[  289.861428][ T6845] loop1: detected capacity change from 0 to 22
[  289.916240][ T6845] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  289.942800][ T6845] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  290.208338][ T6851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  290.223414][ T6851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.312623][ T6858] netlink: 68 bytes leftover after parsing attributes in process `syz.2.720'.
[  290.588675][ T6856] loop3: detected capacity change from 0 to 2048
[  291.070248][ T6865] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  291.793320][ T6864] loop4: detected capacity change from 0 to 4096
[  291.878541][ T6864] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  292.172966][ T6879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.728'.
[  292.475075][ T6880] xt_hashlimit: size too large, truncated to 1048576
[  292.482129][ T6880] xt_hashlimit: max too large, truncated to 1048576
[  292.488868][ T6880] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  292.688841][ T6866] loop2: detected capacity change from 0 to 32768
[  292.764994][ T6884] loop0: detected capacity change from 0 to 4096
[  292.822435][ T6884] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  292.890860][ T6866] ERROR: (device loop2): dbFindCtl: Corrupt dmapctl page
[  292.890860][ T6866] 
[  292.912834][ T6866] ERROR: (device loop2): remounting filesystem as read-only
[  292.936929][ T6866] ialloc: diAlloc returned -5!
[  293.084796][ T6893] loop3: detected capacity change from 0 to 256
[  293.185283][ T6895] loop1: detected capacity change from 0 to 1024
[  293.270948][ T6895] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  294.270843][ T6895] hfsplus: filesystem is marked journaled, leaving read-only.
[  294.607705][ T6923] netlink: 132 bytes leftover after parsing attributes in process `syz.4.743'.
[  295.452267][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'.
[  295.464335][ T6931] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  295.475985][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  295.488339][ T6930] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  296.261646][ T6933] xt_hashlimit: size too large, truncated to 1048576
[  296.268419][ T6933] xt_hashlimit: max too large, truncated to 1048576
[  296.275017][ T6933] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  297.581120][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'.
[  297.610157][ T6952] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  297.952448][ T6954] loop3: detected capacity change from 0 to 512
[  298.011196][ T6961] loop0: detected capacity change from 0 to 256
[  298.055197][ T6963] loop4: detected capacity change from 0 to 1024
[  298.101281][ T6954] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 8: comm syz.3.756: lblock 0 mapped to illegal pblock 8 (length 1)
[  298.121489][ T6954] EXT4-fs (loop3): Remounting filesystem read-only
[  298.128576][ T6954] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.756: error -117 reading directory block
[  298.142066][ T6954] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  298.150856][ T6954] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 8: comm syz.3.756: lblock 0 mapped to illegal pblock 8 (length 1)
[  298.186165][ T6963] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  298.199952][ T6954] EXT4-fs (loop3): Remounting filesystem read-only
[  298.211880][ T6954] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.756: error -117 reading directory block
[  298.322073][ T6968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  298.340799][ T6968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  298.659315][ T6954] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  298.834937][ T6954] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,init_itable,noinit_itable,discard,resuid=0x0000000000000000,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,usrquota,usrjquota=.,resgid=0x0000000000000000,nolazytime,,. Quota mode: writeback.
[  298.854094][ T6963] hfsplus: filesystem is marked journaled, leaving read-only.
[  299.155326][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[  299.167412][ T6974] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  299.875846][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'.
[  300.345504][ T6975] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  300.666568][ T6982] netlink: 68 bytes leftover after parsing attributes in process `syz.1.763'.
[  301.041840][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'.
[  301.054274][ T6989] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  301.800406][ T6993] xt_hashlimit: size too large, truncated to 1048576
[  301.807214][ T6993] xt_hashlimit: max too large, truncated to 1048576
[  301.813855][ T6993] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  302.375688][ T6117] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  302.596531][ T7015] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  303.051479][ T7015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.765737][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'.
[  303.999151][ T7019] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  304.044414][ T7023] loop1: detected capacity change from 0 to 4096
[  304.086637][ T6117] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.235197][ T6117] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  304.321904][ T7023] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  304.425788][ T6117] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  304.440825][ T6117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.672195][ T6117] usb 3-1: Product: syz
[  304.676947][ T6117] usb 3-1: Manufacturer: syz
[  304.681557][ T6117] usb 3-1: SerialNumber: syz
[  304.772320][ T7047] xt_hashlimit: size too large, truncated to 1048576
[  304.779147][ T7047] xt_hashlimit: max too large, truncated to 1048576
[  304.785908][ T7047] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  305.409091][ T6117] cdc_ncm 3-1:1.0: skipping garbage
[  305.414675][ T6117] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing
[  305.422469][ T6117] cdc_ncm 3-1:1.0: bind() failure
[  305.432832][ T6117] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  305.443371][ T6117] cdc_ncm 3-1:1.1: bind() failure
[  305.453961][ T6117] usb 3-1: USB disconnect, device number 8
[  305.768028][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'.
[  305.796518][ T7058] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  306.850493][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'.
[  306.878956][ T7077] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  307.847713][ T7087] netlink: 68 bytes leftover after parsing attributes in process `syz.3.797'.
[  308.068671][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'.
[  308.080995][ T7089] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  309.320756][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  309.413284][ T7100] netlink: 88 bytes leftover after parsing attributes in process `syz.4.806'.
[  309.810188][ T7105] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  309.831946][ T7103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  309.848007][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'.
[  310.158281][ T7126] loop1: detected capacity change from 0 to 164
[  310.192689][ T7124] loop3: detected capacity change from 0 to 2048
[  310.342425][ T7124] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.040672][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  311.358816][ T7145] loop0: detected capacity change from 0 to 64
[  311.518356][ T7142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  311.655603][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'.
[  311.682955][ T7148] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  311.898880][ T7150] loop4: detected capacity change from 0 to 256
[  312.347393][ T7150] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[  312.380174][ T7150] process 'syz.4.829' launched './file0' with NULL argv: empty string added
[  312.475931][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  312.508899][ T7150] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cc59b60 iblock : 0, err : -5)
[  312.583053][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  312.659585][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'.
[  312.689016][ T7169] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  312.809770][ T7150] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cc59b60 iblock : 0, err : -5)
[  313.252290][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  313.259755][ T7150] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cc59b60 iblock : 1, err : -5)
[  313.269779][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  313.285251][ T7150] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cc59b60 iblock : 2, err : -5)
[  313.343873][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  313.350233][ T7150] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cc59b60 iblock : 3, err : -5)
[  313.361209][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  313.367475][ T7150] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cc59b60 iblock : 4, err : -5)
[  313.390633][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  313.414603][ T7150] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cc59b60 iblock : 5, err : -5)
[  313.575346][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  314.162571][ T7150] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cc59b60 iblock : 6, err : -5)
[  314.184770][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  314.193383][ T7150] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cc59b60 iblock : 7, err : -5)
[  314.245174][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  314.262638][ T7189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  314.610084][ T7150] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805cc59b60 iblock : 0, err : -5)
[  314.699414][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  314.749582][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  314.764154][ T7189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  314.826443][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  314.846557][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  314.871160][ T7192] loop0: detected capacity change from 0 to 4096
[  314.878962][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  314.885058][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  314.891165][ T7150] exFAT-fs (loop4): error, broken FAT chain.
[  314.913641][ T7198] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  315.012237][ T7200] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  315.085147][ T6250] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  315.249329][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'.
[  315.277667][ T7207] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  316.209577][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'.
[  316.221641][ T7221] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  316.232769][ T6250] usb 2-1: Using ep0 maxpacket: 16
[  316.715969][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  317.466423][ T7220] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  317.488642][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  317.496909][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  318.579025][ T7237] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  318.594316][ T6250] usb 2-1: unable to read config index 0 descriptor/start: -71
[  318.609245][ T6250] usb 2-1: can't read configurations, error -71
[  318.945379][ T7237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  318.973748][ T7238] tipc: Started in network mode
[  318.979388][ T7238] tipc: Node identity , cluster identity 4711
[  319.004974][ T4231] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  319.012547][ T6118] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  319.087532][ T7244] netlink: 88 bytes leftover after parsing attributes in process `syz.1.862'.
[  319.143600][ T7245] loop4: detected capacity change from 0 to 4096
[  319.222589][ T7251] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  319.254995][ T6118] usb 4-1: Using ep0 maxpacket: 32
[  319.551949][ T4231] usb 3-1: too many endpoints for config 0 interface 0 altsetting 43: 254, using maximum allowed: 30
[  319.551998][ T6118] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  319.580243][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'.
[  319.607953][ T7262] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  320.045835][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'.
[  320.735217][ T4231] usb 3-1: config 0 interface 0 altsetting 43 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  320.765356][ T4231] usb 3-1: config 0 interface 0 altsetting 43 endpoint 0x2 has invalid maxpacket 512, setting to 8
[  320.819694][ T7261] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  320.831271][ T4231] usb 3-1: config 0 interface 0 altsetting 43 has 2 endpoint descriptors, different from the interface descriptor's value: 254
[  320.845034][ T4231] usb 3-1: config 0 interface 0 has no altsetting 0
[  320.851810][ T4231] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  320.861705][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.871784][ T6118] usb 4-1: string descriptor 0 read error: -71
[  320.912917][ T6118] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  320.930886][ T4231] usb 3-1: config 0 descriptor??
[  320.997891][ T4231] usb 3-1: can't set config #0, error -71
[  321.010301][ T6118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.205007][ T4231] usb 3-1: USB disconnect, device number 9
[  321.226332][ T6118] usb 4-1: config 0 descriptor??
[  321.915642][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'.
[  321.927997][ T7271] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  322.008087][ T6118] usb 4-1: can't set config #0, error -71
[  322.173204][ T6118] usb 4-1: USB disconnect, device number 8
[  322.204728][ T6117] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  322.516833][ T7286] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  322.597765][ T7283] netlink: 88 bytes leftover after parsing attributes in process `syz.3.874'.
[  322.615417][ T7286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  323.154700][ T4229] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  323.174960][ T6117] usb 5-1: Using ep0 maxpacket: 32
[  323.265230][ T7296] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in;
[  323.265230][ T7296]    program syz.3.880 not setting count and/or reply_len properly
[  323.294817][ T6117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.326391][ T6117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.356895][ T6117] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  323.377142][ T6117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.524716][ T6251] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  323.550920][ T6117] usb 5-1: config 0 descriptor??
[  323.723209][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'.
[  323.735505][ T7306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  324.514629][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'.
[  324.736578][ T6117] hub 5-1:0.0: USB hub found
[  325.001829][ T7307] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  325.013109][ T6251] usb 1-1: Using ep0 maxpacket: 16
[  325.140208][ T4229] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  325.150879][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.160708][ T4229] usb 2-1: config 0 descriptor??
[  325.165823][ T6117] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  325.181410][ T7310] loop4: detected capacity change from 0 to 4096
[  325.234725][ T4229] usb 2-1: can't set config #0, error -71
[  325.235413][ T6251] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  325.254562][ T6251] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  325.266423][ T4229] usb 2-1: USB disconnect, device number 10
[  325.274844][ T6117] usbhid 5-1:0.0: can't add hid device: -71
[  325.287256][ T7313] loop2: detected capacity change from 0 to 2048
[  325.293689][ T6251] usb 1-1: config 0 interface 0 has no altsetting 0
[  325.307806][ T6117] usbhid: probe of 5-1:0.0 failed with error -71
[  325.329067][ T7318] loop3: detected capacity change from 0 to 64
[  325.370119][ T6117] usb 5-1: USB disconnect, device number 7
[  325.416237][ T7319] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  325.478493][ T7310] NILFS (loop4): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  325.520860][ T7313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  325.628675][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  325.655982][ T7321] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  325.685243][ T6251] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  325.933694][ T6251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.141393][ T6251] usb 1-1: Product: syz
[  326.203618][ T6251] usb 1-1: Manufacturer: syz
[  326.213560][ T6251] usb 1-1: SerialNumber: syz
[  326.225816][ T7321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  326.312986][ T7323] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in;
[  326.312986][ T7323]    program syz.0.893 not setting count and/or reply_len properly
[  326.331959][ T6251] usb 1-1: config 0 descriptor??
[  326.364662][ T6251] usb 1-1: can't set config #0, error -71
[  326.400162][ T6251] usb 1-1: USB disconnect, device number 7
[  326.537083][ T7332] tipc: Started in network mode
[  326.542024][ T7332] tipc: Node identity , cluster identity 4711
[  326.562464][ T7335] capability: warning: `syz.0.896' uses 32-bit capabilities (legacy support in use)
[  326.743584][ T7342] netlink: 'syz.4.898': attribute type 1 has an invalid length.
[  326.802475][ T7342] netlink: 128 bytes leftover after parsing attributes in process `syz.4.898'.
[  326.858185][ T7349] loop2: detected capacity change from 0 to 64
[  326.939748][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'.
[  326.969658][ T7350] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  327.634517][ T7354] loop0: detected capacity change from 0 to 4096
[  327.637650][ T7352] loop4: detected capacity change from 0 to 2048
[  328.168462][ T7361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  328.484022][ T7352] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  328.616889][ T7361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  328.632755][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'.
[  328.751642][ T7364] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  328.852538][ T7354] NILFS (loop0): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  328.951357][ T7329] loop1: detected capacity change from 0 to 32768
[  328.979486][ T7370] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in;
[  328.979486][ T7370]    program syz.2.907 not setting count and/or reply_len properly
[  329.061080][ T7329] 
[  329.061080][ T7329]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.061080][ T7329] 
[  329.458144][ T7376] tipc: Started in network mode
[  329.485840][ T4230] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  329.524739][   T26] audit: type=1800 audit(2000000025.001:7): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.894" name="file1" dev="loop1" ino=4 res=0 errno=0
[  329.590218][ T7376] tipc: Node identity , cluster identity 4711
[  329.695490][ T4191] 
[  329.695490][ T4191]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.695490][ T4191] 
[  329.754376][ T4191] 
[  329.754376][ T4191]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.754376][ T4191] 
[  329.798513][ T7383] netlink: 56 bytes leftover after parsing attributes in process `syz.4.913'.
[  330.022603][ T4230] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  330.044276][ T4230] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  330.054064][ T4230] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  330.130443][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'.
[  330.157774][ T7392] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  330.331080][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.429451][ T7395] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  330.799360][ T7395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  330.894791][ T4230] usb-storage 3-1:1.0: USB Mass Storage device detected
[  330.947032][ T4230] scsi host1: usb-storage 3-1:1.0
[  331.009852][ T7403] loop1: detected capacity change from 0 to 2048
[  331.028995][ T7407] loop4: detected capacity change from 0 to 64
[  331.092130][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'.
[  331.120409][ T7408] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  331.872127][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  331.893690][ T7410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.144581][ T7403] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  332.480945][ T7419] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in;
[  332.480945][ T7419]    program syz.1.923 not setting count and/or reply_len properly
[  332.676995][ T7424] xt_hashlimit: size too large, truncated to 1048576
[  332.683767][ T7424] xt_hashlimit: max too large, truncated to 1048576
[  332.690448][ T7424] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  332.927449][ T4686] usb 3-1: USB disconnect, device number 10
[  333.342776][ T7423] loop3: detected capacity change from 0 to 4096
[  333.555004][ T7433] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  333.956448][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'.
[  333.977066][ T7420] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  334.001617][ T7435] loop2: detected capacity change from 0 to 256
[  334.011569][ T7423] NILFS (loop3): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  334.037853][ T7435] exfat: Deprecated parameter 'namecase'
[  334.074705][ T7435] exfat: Deprecated parameter 'namecase'
[  334.103106][ T7435] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  334.590072][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.932'.
[  334.620163][ T7451] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  335.190592][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  335.203263][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  335.332528][ T7452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  335.561753][ T7455] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in;
[  335.561753][ T7455]    program syz.4.937 not setting count and/or reply_len properly
[  335.608931][ T7453] loop0: detected capacity change from 0 to 2048
[  335.664004][ T4686] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  335.852775][ T7453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  335.936742][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'.
[  335.965181][ T7464] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  336.117378][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  336.454105][ T6116] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  336.585307][ T7466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  336.633678][ T7466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  336.654202][ T4686] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  336.678876][ T4686] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  336.954142][ T6116] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  336.967726][ T6116] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  336.977305][ T6116] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  337.314870][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'.
[  337.327081][ T7482] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  337.359660][ T4686] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  337.366341][ T6116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.392530][ T6116] usb 3-1: config 0 descriptor??
[  337.420530][ T4686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.428667][ T4686] usb 4-1: Product: syz
[  337.432839][ T4686] usb 4-1: Manufacturer: syz
[  337.437522][ T4686] usb 4-1: SerialNumber: syz
[  337.458079][ T4686] usb 4-1: config 0 descriptor??
[  337.458501][ T6116] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  337.502217][ T6116] dvb-usb: bulk message failed: -22 (3/0)
[  337.519637][ T4686] usb 4-1: can't set config #0, error -71
[  337.544695][ T4686] usb 4-1: USB disconnect, device number 9
[  337.747567][ T6116] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  337.818483][ T7493] netlink: 68 bytes leftover after parsing attributes in process `syz.1.950'.
[  337.908991][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'.
[  337.921547][ T7492] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  338.305646][ T6116] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  338.330822][ T6116] usb 3-1: media controller created
[  338.357216][ T6116] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  338.449451][ T6116] dvb-usb: bulk message failed: -22 (6/0)
[  338.512084][ T6116] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  338.569590][ T7504] loop1: detected capacity change from 0 to 2048
[  338.598278][ T6116] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  338.656551][ T6116] dvb-usb: schedule remote query interval to 150 msecs.
[  338.663564][ T6116] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  338.721245][ T7504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  338.744728][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'.
[  338.772067][ T7510] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  339.327970][ T6116] usb 3-1: USB disconnect, device number 11
[  339.446211][ T6116] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  340.013118][ T7516] xt_hashlimit: size too large, truncated to 1048576
[  340.020233][ T7516] xt_hashlimit: max too large, truncated to 1048576
[  340.026935][ T7516] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  340.034466][ T7517] IPVS: set_ctl: invalid protocol: 0 2.0.0.0:2304
[  340.426469][ T6117] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  340.543800][ T6251] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  340.614202][ T7534] loop2: detected capacity change from 0 to 64
[  340.650322][ T7536] loop3: detected capacity change from 0 to 256
[  340.834546][ T6251] usb 2-1: Using ep0 maxpacket: 32
[  340.964948][ T6251] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 17, changing to 8
[  340.998539][ T6251] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.056565][ T6251] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  341.100929][ T6251] usb 2-1: config 0 interface 0 has no altsetting 0
[  341.136249][ T6251] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  341.191613][ T6251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.354352][ T7536] exfat: Deprecated parameter 'namecase'
[  341.360058][ T7536] exfat: Deprecated parameter 'namecase'
[  341.364447][ T6251] usb 2-1: config 0 descriptor??
[  341.426209][ T7543] loop0: detected capacity change from 0 to 1024
[  341.463272][ T7536] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  341.526346][ T6117] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  341.546692][ T6117] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  341.631573][ T7543] hfsplus: bad catalog entry type
[  341.645767][ T4309] hfsplus: b-tree write err: -5, ino 25
[  341.671990][ T4309] hfsplus: b-tree write err: -5, ino 4
[  341.710920][ T4309] hfsplus: b-tree write err: -5, ino 2
[  341.732134][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'.
[  341.759790][ T7549] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  342.098491][ T6251] input: Apple Inc. Magic Trackpad 2 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:0265.0001/input/input9
[  342.315889][ T6117] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  342.353578][ T6117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.407514][ T6117] usb 5-1: Product: syz
[  342.432471][ T6117] usb 5-1: Manufacturer: syz
[  342.452094][ T6251] magicmouse 0003:05AC:0265.0001: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0265] on usb-dummy_hcd.1-1/input0
[  342.452769][ T6117] usb 5-1: SerialNumber: syz
[  342.525301][ T6251] usb 2-1: USB disconnect, device number 11
[  342.530519][ T6117] usb 5-1: config 0 descriptor??
[  342.593886][ T7519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  342.602123][ T7519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  342.968632][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'.
[  342.980864][ T7567] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  343.434413][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'.
[  344.188590][ T7568] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  344.214866][ T7519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  344.233587][ T7519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  344.372456][ T7559] fido_id[7559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  344.598270][ T6117] Error reading MAC address
[  344.612066][ T6117] usb 5-1: USB disconnect, device number 8
[  344.681935][ T7579] xt_hashlimit: size too large, truncated to 1048576
[  344.688857][ T7579] xt_hashlimit: max too large, truncated to 1048576
[  344.695632][ T7579] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  345.507053][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'.
[  345.637245][ T7597] netlink: 68 bytes leftover after parsing attributes in process `syz.3.984'.
[  346.514583][ T6251] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  346.562710][ T7583] loop1: detected capacity change from 0 to 32768
[  346.632270][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.991'.
[  346.660986][ T7606] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  346.813745][ T6251] usb 3-1: Using ep0 maxpacket: 8
[  346.965441][ T6251] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.136529][ T6251] usb 3-1: config 0 interface 0 has no altsetting 0
[  347.271646][ T6251] usb 3-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00
[  347.280821][ T6251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.319020][ T6251] usb 3-1: config 0 descriptor??
[  347.348300][ T7583] XFS (loop1): Mounting V5 Filesystem
[  347.486497][ T7583] XFS (loop1): Ending clean mount
[  347.515219][ T7583] XFS (loop1): Quotacheck needed: Please wait.
[  347.552428][ T4307] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x2444 dinode
[  347.568992][ T4307] XFS (loop1): Unmount and run xfs_repair
[  347.576422][ T4307] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  347.590087][ T4307] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  347.600398][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'.
[  347.609916][ T4307] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  347.621899][ T4307] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[  347.631872][ T7617] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  347.644903][ T4307] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 04 1a  4.Xh...=........
[  347.654842][ T4307] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  347.664887][ T4307] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 16 72 6f a4  .............ro.
[  347.674378][ T4307] 00000060: ff ff ff ff b2 47 c7 b6 00 00 00 00 00 00 00 05  .....G..........
[  347.683638][ T4307] 00000070: 00 00 00 01 00 04 00 80 00 00 00 00 00 00 00 08  ................
[  347.723025][ T7583] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  347.816146][ T6251] maltron 0003:058F:9410.0002: unknown main item tag 0x0
[  347.833251][ T6251] maltron 0003:058F:9410.0002: unknown main item tag 0x0
[  347.840348][ T6251] maltron 0003:058F:9410.0002: unknown main item tag 0x0
[  347.893460][ T6251] maltron 0003:058F:9410.0002: unknown main item tag 0x0
[  347.911278][ T4191] XFS (loop1): Unmounting Filesystem
[  347.917074][ T6251] maltron 0003:058F:9410.0002: unknown main item tag 0x0
[  347.927192][ T6251] maltron 0003:058F:9410.0002: item fetching failed at offset 30/40
[  347.947855][ T6251] maltron: probe of 0003:058F:9410.0002 failed with error -22
[  348.047683][ T6251] usb 3-1: USB disconnect, device number 12
[  348.273977][ T7629] xt_hashlimit: size too large, truncated to 1048576
[  348.280816][ T7629] xt_hashlimit: max too large, truncated to 1048576
[  348.287604][ T7629] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  348.373557][ T5898] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  348.863416][ T5898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  348.908305][ T5898] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  349.153511][ T5898] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  349.162588][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.183141][ T5898] usb 1-1: Product: syz
[  349.199729][ T5898] usb 1-1: Manufacturer: syz
[  349.214697][ T5898] usb 1-1: SerialNumber: syz
[  349.238942][ T5898] usb 1-1: config 0 descriptor??
[  349.286050][ T7625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  349.298271][ T7625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  349.720004][ T7625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  349.819898][ T7625] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  350.033186][ T6116] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  350.123139][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  350.149535][ T7649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  350.173199][ T5898] Error reading MAC address
[  350.204180][ T5898] usb 1-1: USB disconnect, device number 8
[  350.283869][ T6116] usb 5-1: Using ep0 maxpacket: 16
[  350.392649][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1003'.
[  350.403311][ T6116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.405110][ T7653] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  350.423098][ T6116] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.439718][ T6116] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  350.452889][ T6116] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  350.468362][ T4229] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  350.476234][ T6116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.494132][ T6116] usb 5-1: config 0 descriptor??
[  350.835880][ T4229] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.846872][ T4229] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  350.862046][ T4229] usb 4-1: config 0 interface 0 has no altsetting 0
[  350.869175][ T4229] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  350.878613][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.888208][ T4229] usb 4-1: config 0 descriptor??
[  350.975225][ T6116] microsoft 0003:045E:07DA.0003: No inputs registered, leaving
[  350.987046][ T6116] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  350.998562][ T6116] microsoft 0003:045E:07DA.0003: no inputs found
[  351.004964][ T6116] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[  351.177481][ T6250] usb 5-1: USB disconnect, device number 9
[  351.388065][ T4229] hid-multitouch 0003:0EEF:72C4.0004: No inputs registered, leaving
[  351.397374][ T4229] hid-multitouch 0003:0EEF:72C4.0004: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0
[  351.588194][ T4229] usb 4-1: USB disconnect, device number 10
[  352.147638][ T7665] loop4: detected capacity change from 0 to 1024
[  352.237758][ T7665] hfsplus: bad catalog entry type
[  352.303047][ T4215] hfsplus: b-tree write err: -5, ino 25
[  352.314506][ T4215] hfsplus: b-tree write err: -5, ino 4
[  352.345963][ T4215] hfsplus: b-tree write err: -5, ino 2
[  352.393194][ T4229] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  352.465970][ T7674] xt_hashlimit: size too large, truncated to 1048576
[  352.472730][ T7674] xt_hashlimit: max too large, truncated to 1048576
[  352.479438][ T7674] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  352.823742][ T4229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  352.862449][ T4229] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  352.927067][ T4229] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  352.985879][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.084621][ T4229] usb-storage 1-1:1.0: USB Mass Storage device detected
[  353.199928][ T4229] scsi host1: usb-storage 1-1:1.0
[  354.206633][ T7700] loop3: detected capacity change from 0 to 64
[  354.229240][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1020'.
[  354.239003][ T7701] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1020'.
[  354.299636][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1024'.
[  354.332138][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'.
[  354.385827][ T7702] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  354.527800][ T6250] logitech-hidpp-device 0005:046D:B012.0005: Device not connected
[  354.912203][ T7719] loop3: detected capacity change from 0 to 8192
[  354.985263][ T7721] xt_hashlimit: size too large, truncated to 1048576
[  354.992068][ T7721] xt_hashlimit: max too large, truncated to 1048576
[  354.998790][ T7721] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  355.157007][ T7719] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  355.342202][ T7719] REISERFS (device loop3): using ordered data mode
[  355.500239][ T7719] reiserfs: using flush barriers
[  355.559980][ T6118] usb 1-1: USB disconnect, device number 9
[  355.582868][ T7719] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  355.653277][ T7719] REISERFS (device loop3): checking transaction log (loop3)
[  355.703774][ T7719] REISERFS (device loop3): Using r5 hash to sort names
[  355.712084][ T7719] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  356.267014][ T7730] xt_hashlimit: size too large, truncated to 1048576
[  356.273812][ T7730] xt_hashlimit: max too large, truncated to 1048576
[  356.801458][ T7736] loop0: detected capacity change from 0 to 1024
[  357.139159][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'.
[  357.162271][ T7744] loop0: detected capacity change from 0 to 1024
[  357.177689][ T6118] logitech-hidpp-device 0005:046D:B012.0006: Device not connected
[  357.284299][ T7746] loop2: detected capacity change from 0 to 256
[  357.372480][ T7732] loop4: detected capacity change from 0 to 32768
[  357.604322][ T7732] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1032 (7732)
[  357.717796][ T7758] xt_hashlimit: size too large, truncated to 1048576
[  357.724660][ T7758] xt_hashlimit: max too large, truncated to 1048576
[  357.732049][ T7758] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old?
[  357.752752][ T5899] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  358.002717][ T5899] usb 1-1: Using ep0 maxpacket: 8
[  358.154878][ T5899] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  358.289642][ T5899] usb 1-1: config 0 has no interface number 0
[  358.322753][ T5899] usb 1-1: config 0 interface 1 has no altsetting 0
[  358.358293][ T7732] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  358.383902][ T7756] loop1: detected capacity change from 0 to 8192
[  358.392979][ T7732] BTRFS info (device loop4): setting nodatasum
[  358.399158][ T7732] BTRFS info (device loop4): force zlib compression, level 3
[  358.419383][ T7732] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  358.482981][ T7732] BTRFS info (device loop4): use lzo compression, level 0
[  358.525415][ T7732] BTRFS info (device loop4): turning on flush-on-commit
[  358.543345][ T5899] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  358.576224][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.615543][ T7732] BTRFS info (device loop4): enabling auto defrag
[  358.627486][ T5899] usb 1-1: Product: syz
[  358.631669][ T5899] usb 1-1: Manufacturer: syz
[  358.681784][ T7732] BTRFS info (device loop4): max_inline at 4096
[  358.729392][ T5899] usb 1-1: SerialNumber: syz
[  358.762460][ T7732] BTRFS info (device loop4): using free space tree
[  358.906128][ T5899] usb 1-1: config 0 descriptor??
[  358.934511][ T7732] BTRFS info (device loop4): has skinny extents
[  359.262980][ T5899] i2c-cp2615: probe of 1-1:0.1 failed with error -22
[  359.388767][ T7776] loop2: detected capacity change from 0 to 256
[  359.523634][ T5899] usb 1-1: USB disconnect, device number 10
[  359.643673][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  359.675014][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  359.814406][ T7785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  360.526282][ T7732] BTRFS error (device loop4): open_ctree failed: -22
[  360.542638][ T4528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4528)
[  360.664754][ T6118] logitech-hidpp-device 0005:046D:B012.0007: Device not connected
[  361.029099][ T7807] loop3: detected capacity change from 0 to 8192
[  361.097217][ T7807] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  361.399850][ T7807] REISERFS (device loop3): using ordered data mode
[  361.538540][ T7807] reiserfs: using flush barriers
[  361.817206][ T7807] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  361.897060][ T7807] REISERFS (device loop3): checking transaction log (loop3)
[  361.917843][ T7807] REISERFS (device loop3): Using r5 hash to sort names
[  361.929193][ T7807] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  361.978719][ T7807] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  362.144425][ T7803] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "./cgroup"
[  362.392155][ T7828] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  362.408832][ T7828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  363.312710][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'.
[  363.325709][ T7833] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  363.616488][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1070'.
[  363.628576][ T7839] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  363.641528][ T7844] capability: warning: `syz.3.1061' uses deprecated v2 capabilities in a way that may be insecure
[  363.858099][ T7848] loop2: detected capacity change from 0 to 4096
[  363.884145][ T7846] loop0: detected capacity change from 0 to 4096
[  364.023951][ T7861] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  364.042015][ T7862] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  364.460105][ T7868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  364.477316][ T7868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  365.132266][ T6118] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  365.176578][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1079'.
[  365.188942][ T7879] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  365.298389][ T7870] loop0: detected capacity change from 0 to 8192
[  365.344040][ T6116] usb 2-1: new low-speed USB device number 12 using dummy_hcd
[  365.408885][ T7870] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  365.438837][ T7870] REISERFS (device loop0): using ordered data mode
[  365.459062][ T7870] reiserfs: using flush barriers
[  365.472317][ T6118] usb 3-1: Using ep0 maxpacket: 16
[  365.487733][ T7870] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  365.518870][ T7870] REISERFS (device loop0): checking transaction log (loop0)
[  365.534126][ T7870] REISERFS (device loop0): Using r5 hash to sort names
[  365.541305][ T7870] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  365.602568][ T6118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.629455][ T7885] usb usb8: check_ctrlrecip: process 7885 (syz.4.1080) requesting ep 01 but needs 81
[  365.632222][ T6118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.639666][ T7885] usb usb8: usbfs: process 7885 (syz.4.1080) did not claim interface 0 before use
[  365.667033][ T6118] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  365.686045][ T6118] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  365.695776][ T6118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.704420][ T6116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  365.728543][ T6116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  365.740208][ T6118] usb 3-1: config 0 descriptor??
[  365.752092][ T6116] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  365.775166][ T6116] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  365.787907][ T6116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.798930][ T6116] usb 2-1: config 0 descriptor??
[  365.823580][ T7876] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  365.990180][ T7895] loop4: detected capacity change from 0 to 4096
[  366.119544][ T7895] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  366.215081][ T7900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  366.266876][ T7900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  366.755801][ T6118] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[  366.764865][ T6116] hid (null): unknown global tag 0xa3
[  366.780169][ T6116] asus 0003:0B05:17E0.0009: unexpected long global item
[  366.788268][ T6118] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  366.813192][ T6116] asus 0003:0B05:17E0.0009: Asus hid parse failed: -22
[  366.820087][ T6116] asus: probe of 0003:0B05:17E0.0009 failed with error -22
[  366.842180][ T4230] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  366.858098][ T6118] microsoft 0003:045E:07DA.0008: no inputs found
[  366.878880][ T6118] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  366.891589][ T6116] usb 2-1: USB disconnect, device number 12
[  366.951466][ T6118] usb 3-1: USB disconnect, device number 13
[  367.066025][ T7903] fido_id[7903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  367.222690][ T4230] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.251747][ T4230] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  367.289033][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0
[  367.317553][ T4230] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  367.342122][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.367020][ T4230] usb 1-1: config 0 descriptor??
[  367.417510][ T7911] loop2: detected capacity change from 0 to 8192
[  367.522290][ T7911] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  367.531502][ T7911] REISERFS (device loop2): using ordered data mode
[  367.615348][ T7911] reiserfs: using flush barriers
[  367.646289][ T7911] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  367.696432][ T7911] REISERFS (device loop2): checking transaction log (loop2)
[  367.705601][ T7911] REISERFS (device loop2): Using r5 hash to sort names
[  367.712806][ T7911] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  367.723568][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'.
[  367.736861][ T7927] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  367.836860][ T7928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  367.992710][ T7928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  368.415759][ T4230] hid-multitouch 0003:0EEF:72C4.000A: No inputs registered, leaving
[  368.453893][ T4230] hid-multitouch 0003:0EEF:72C4.000A: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0
[  368.547358][ T4230] usb 1-1: USB disconnect, device number 11
[  368.696700][ T7931] fido_id[7931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  368.751602][ T7933] loop3: detected capacity change from 0 to 4096
[  368.834982][ T7933] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  368.964333][ T6118] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  369.052505][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'.
[  369.057533][ T7919] loop1: detected capacity change from 0 to 32768
[  369.145532][ T7919] gfs2: fsid=.{-.['\#: Trying to join cluster "lock_nolock", ".{-.['\#"
[  369.181035][   T23] logitech-hidpp-device 0005:046D:B012.000B: Device not connected
[  369.202124][ T7919] gfs2: fsid=.{-.['\#: Now mounting FS (format 0)...
[  369.294747][ T7919] gfs2: fsid=.{-.['\#.s: journal 0 mapped with 1 extents in 0ms
[  369.352362][ T6118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.378747][ T6118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.410262][ T6118] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  369.426650][ T6118] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  369.439381][ T6118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.450039][ T6118] usb 3-1: config 0 descriptor??
[  369.472349][ T4230] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  369.568612][ T7919] gfs2: fsid=.{-.['\#.s: first mount done, others may mount
[  369.842678][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  369.978772][ T6118] plantronics 0003:047F:FFFF.000C: unbalanced collection at end of report description
[  369.996457][ T4230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  370.164095][ T6118] plantronics 0003:047F:FFFF.000C: parse failed
[  370.253187][ T4230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  370.301662][ T6118] plantronics: probe of 0003:047F:FFFF.000C failed with error -22
[  370.409940][ T4230] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  370.419605][ T6118] usb 3-1: USB disconnect, device number 14
[  370.490773][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.514479][ T4230] usb 1-1: config 0 descriptor??
[  370.532329][ T7943] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  370.628263][ T7961] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  370.661252][ T7961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  371.424542][ T7967] loop2: detected capacity change from 0 to 4096
[  371.442399][ T4230] hid (null): unknown global tag 0xa3
[  371.472834][ T4230] asus 0003:0B05:17E0.000D: unexpected long global item
[  371.480212][ T4230] asus 0003:0B05:17E0.000D: Asus hid parse failed: -22
[  371.519681][ T4230] asus: probe of 0003:0B05:17E0.000D failed with error -22
[  371.564988][ T7967] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  371.726366][ T4230] usb 1-1: USB disconnect, device number 12
[  371.784267][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'.
[  371.797976][ T7983] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  372.959828][ T7995] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  372.987613][ T7995] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  373.116307][ T7995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  373.287834][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'.
[  373.701791][ T4229] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  373.941764][ T4229] usb 1-1: Using ep0 maxpacket: 16
[  373.957496][ T8016] loop1: detected capacity change from 0 to 2048
[  374.033458][ T8016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  374.062058][ T4229] usb 1-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  374.076052][ T8023] loop4: detected capacity change from 0 to 8
[  374.092357][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  374.125373][ T4229] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024
[  374.137601][ T4229] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  374.150206][ T4229] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  374.258268][ T8023] SQUASHFS error: Failed to read block 0x1ec: -5
[  374.263124][ T8029] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1136'.
[  374.274003][ T8023] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  374.322939][ T4229] usb 1-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  374.343484][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.351505][ T4229] usb 1-1: Product: syz
[  374.357480][ T4229] usb 1-1: Manufacturer: syz
[  374.386068][ T4229] usb 1-1: SerialNumber: syz
[  374.412159][ T7993] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  374.557123][ T6118] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  374.764539][ T8038] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  374.784622][ T8038] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  375.489845][ T8044] loop4: detected capacity change from 0 to 256
[  375.542607][ T8044] exfat: Deprecated parameter 'utf8'
[  375.547945][ T8044] exfat: Deprecated parameter 'utf8'
[  375.554922][ T8044] exfat: Deprecated parameter 'utf8'
[  375.574924][ T4229] usb 1-1: MIDIStreaming interface descriptor not found
[  375.606420][ T8044] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  375.620612][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'.
[  375.658402][ T4229] usb 1-1: USB disconnect, device number 13
[  375.664702][ T6118] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  375.692270][ T6118] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  375.694599][ T8056] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  375.746200][ T6118] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  375.833417][ T6118] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  375.834785][ T8061] loop0: detected capacity change from 0 to 8
[  375.859702][ T6118] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  375.870042][ T6118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.872359][ T8059] loop3: detected capacity change from 0 to 2048
[  375.977075][ T8059] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  376.001523][ T8061] SQUASHFS error: Failed to read block 0x1ec: -5
[  376.008197][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.031735][ T8061] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  376.240683][ T8070] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1150'.
[  376.281264][ T8072] tipc: Started in network mode
[  376.288714][ T8072] tipc: Node identity @, cluster identity 4711
[  376.325382][ T8072] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  376.590703][ T6118] gud 3-1:1.0: Failed to get properties (error=-71)
[  376.606742][ T6118] gud: probe of 3-1:1.0 failed with error -71
[  376.707999][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  376.730078][ T8083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  376.776206][ T7793] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  377.232444][ T7793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.259771][ T6118] usb 3-1: USB disconnect, device number 15
[  377.346952][ T7793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.360131][ T7793] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  377.373017][ T7793] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  377.385453][ T7793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.398327][ T7793] usb 1-1: config 0 descriptor??
[  377.431717][ T4229] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  377.671582][ T4229] usb 4-1: Using ep0 maxpacket: 16
[  377.737301][ T8096] loop2: detected capacity change from 0 to 2048
[  377.792786][ T4229] usb 4-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  377.818532][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  377.834471][ T8101] loop1: detected capacity change from 0 to 2048
[  377.841093][ T4229] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024
[  377.853193][ T4229] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  377.863571][ T4229] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  377.880503][ T8096] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  377.883470][ T7793] plantronics 0003:047F:FFFF.000E: unbalanced collection at end of report description
[  377.915623][ T8085] loop4: detected capacity change from 0 to 32768
[  377.922709][ T7793] plantronics 0003:047F:FFFF.000E: parse failed
[  377.929063][ T7793] plantronics: probe of 0003:047F:FFFF.000E failed with error -22
[  377.970384][ T8101] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  377.989471][ T8085] gfs2: fsid=.{-.['\#: Trying to join cluster "lock_nolock", ".{-.['\#"
[  378.010253][ T8101] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  378.024649][ T8085] gfs2: fsid=.{-.['\#: Now mounting FS (format 0)...
[  378.035327][ T8106] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1165'.
[  378.045280][ T4229] usb 4-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  378.055639][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.063917][ T4229] usb 4-1: Product: syz
[  378.068346][ T4229] usb 4-1: Manufacturer: syz
[  378.068586][ T8101] fs-verity: sha512 using implementation "sha512-avx2"
[  378.073104][ T4229] usb 4-1: SerialNumber: syz
[  378.092115][ T8080] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  378.115568][ T8085] gfs2: fsid=.{-.['\#.s: journal 0 mapped with 1 extents in 0ms
[  378.132361][ T8101] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 5 vs 100663301 free clusters
[  378.166185][ T7793] usb 1-1: USB disconnect, device number 14
[  378.175551][ T8101] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -28
[  378.451689][ T8111] tipc: Started in network mode
[  378.454595][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[  378.456679][ T8111] tipc: Node identity S, cluster identity 4711
[  378.463329][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[  378.470249][ T8111] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  378.491755][ T4229] usb 4-1: MIDIStreaming interface descriptor not found
[  378.518750][ T8085] gfs2: fsid=.{-.['\#.s: first mount done, others may mount
[  378.536991][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'.
[  378.549822][ T8112] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  378.608737][ T4229] usb 4-1: USB disconnect, device number 11
[  378.839744][ T8114] Bluetooth: hci0: unsupported parameter 5161
[  378.852615][ T8114] Bluetooth: hci0: unsupported parameter 8192
[  378.858790][ T8114] Bluetooth: hci0: unsupported parameter 5161
[  378.871457][ T8114] Bluetooth: hci0: unsupported parameter 8192
[  379.062383][ T8121] loop1: detected capacity change from 0 to 256
[  379.175063][ T8122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  379.254419][ T8121] exfat: Deprecated parameter 'utf8'
[  379.293006][ T8121] exfat: Deprecated parameter 'utf8'
[  379.391886][ T7793] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  379.403706][ T8121] exfat: Deprecated parameter 'utf8'
[  379.511038][ T5895] Bluetooth: hci0: command 0x0401 tx timeout
[  379.774140][ T8122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  379.796540][ T8121] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  379.888995][ T7793] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  379.925809][ T7793] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  379.975929][ T7793] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  379.996158][ T7793] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  380.030076][ T7793] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  380.046290][ T7793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.123118][ T8131] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1176'.
[  380.198291][ T8137] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1188'.
[  380.336007][ T8146] tipc: Started in network mode
[  380.340905][ T8146] tipc: Node identity S, cluster identity 4711
[  380.364095][ T8146] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  380.491084][ T8132] loop2: detected capacity change from 0 to 32768
[  380.523279][ T8132] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  380.541544][ T8132] BTRFS info (device loop2): setting nodatasum
[  380.557939][ T8132] BTRFS info (device loop2): force zlib compression, level 3
[  380.576200][ T8132] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  380.591400][ T8132] BTRFS info (device loop2): use lzo compression, level 0
[  380.608770][ T8132] BTRFS info (device loop2): turning on flush-on-commit
[  380.626692][ T8132] BTRFS info (device loop2): enabling auto defrag
[  380.633475][ T8132] BTRFS info (device loop2): max_inline at 4096
[  380.639746][ T8132] BTRFS info (device loop2): using free space tree
[  380.674234][ T8132] BTRFS info (device loop2): has skinny extents
[  380.724172][ T8132] BTRFS info (device loop2): enabling ssd optimizations
[  380.767163][ T7793] gud 4-1:1.0: Failed to get properties (error=-71)
[  380.785117][ T7793] gud: probe of 4-1:1.0 failed with error -71
[  380.813915][ T8150] loop0: detected capacity change from 0 to 32768
[  380.829662][ T8150] gfs2: fsid=.{-.['\#: Trying to join cluster "lock_nolock", ".{-.['\#"
[  380.838155][ T8150] gfs2: fsid=.{-.['\#: Now mounting FS (format 0)...
[  380.851458][ T8150] gfs2: fsid=.{-.['\#.s: journal 0 mapped with 1 extents in 0ms
[  380.861931][ T7793] usb 4-1: USB disconnect, device number 12
[  381.001173][ T8150] gfs2: fsid=.{-.['\#.s: first mount done, others may mount
[  381.731109][ T8187] xt_hashlimit: size too large, truncated to 1048576
[  381.738048][ T8187] xt_hashlimit: max too large, truncated to 1048576
[  382.429443][ T8193] tipc: Started in network mode
[  382.438399][ T8193] tipc: Node identity S, cluster identity 4711
[  382.455003][ T8193] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  382.644360][ T8189] loop0: detected capacity change from 0 to 32768
[  382.681829][ T8189] JBD2: Ignoring recovery information on journal
[  382.713503][ T8189] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  382.761515][   T26] audit: type=1800 audit(2000000078.244:8): pid=8189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1191" name="file1" dev="loop0" ino=16946 res=0 errno=0
[  382.805369][ T8189] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  382.829976][ T8189] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  382.833246][ T4264] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  382.840925][ T8189] OCFS2: File system is now read-only.
[  382.853377][ T8189] (syz.0.1191,8189,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  382.862035][ T8189] (syz.0.1191,8189,1):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  382.870829][ T8189] (syz.0.1191,8189,1):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  382.879384][ T8189] (syz.0.1191,8189,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30
[  382.888331][ T8189] (syz.0.1191,8189,1):ocfs2_write_cluster:1156 ERROR: status = -30
[  382.896470][ T8189] (syz.0.1191,8189,1):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30
[  382.905387][ T8189] (syz.0.1191,8189,1):ocfs2_write_begin_nolock:1823 ERROR: status = -30
[  382.914388][ T8189] (syz.0.1191,8189,1):ocfs2_dio_wr_get_block:2245 ERROR: status = -30
[  382.925993][ T8189] (syz.0.1191,8189,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5
[  382.951009][ T4184] ocfs2: Unmounting device (7,0) on (node local)
[  383.064948][ T8200] loop3: detected capacity change from 0 to 32768
[  383.088777][ T8200] gfs2: fsid=.{-.['\#: Trying to join cluster "lock_nolock", ".{-.['\#"
[  383.101233][ T4264] usb 3-1: Using ep0 maxpacket: 16
[  383.107030][ T8200] gfs2: fsid=.{-.['\#: Now mounting FS (format 0)...
[  383.146415][ T8204] Bluetooth: hci0: unsupported parameter 5161
[  383.153217][ T8204] Bluetooth: hci0: unsupported parameter 8192
[  383.162417][ T8200] gfs2: fsid=.{-.['\#.s: journal 0 mapped with 1 extents in 0ms
[  383.173454][ T8204] Bluetooth: hci0: unsupported parameter 5161
[  383.191373][ T8204] Bluetooth: hci0: unsupported parameter 8192
[  383.222459][ T4264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  383.267160][ T4264] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  383.286468][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.318969][ T4264] usb 3-1: config 0 descriptor??
[  383.473057][ T8200] gfs2: fsid=.{-.['\#.s: first mount done, others may mount
[  383.513895][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'.
[  383.526421][ T8211] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  383.814644][ T4264] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0
[  383.831698][ T4264] mcp2221 0003:04D8:00DD.000F: item fetching failed at offset 1/5
[  383.831724][ T8216] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio)
[  383.854228][ T4264] mcp2221 0003:04D8:00DD.000F: can't parse reports
[  383.870742][ T4264] mcp2221: probe of 0003:04D8:00DD.000F failed with error -22
[  383.933422][ T8216] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio)
[  384.123715][ T4264] usb 3-1: USB disconnect, device number 16
[  384.635418][ T8240] xt_hashlimit: size too large, truncated to 1048576
[  384.642269][ T8240] xt_hashlimit: max too large, truncated to 1048576
[  384.777835][ T8238] loop0: detected capacity change from 0 to 1024
[  385.225628][ T8238] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none.
[  385.246940][ T8238] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  385.294274][   T26] audit: type=1800 audit(2000000080.784:9): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1221" name="file1" dev="loop0" ino=15 res=0 errno=0
[  385.733805][ T8256] xt_hashlimit: size too large, truncated to 1048576
[  385.740581][ T8256] xt_hashlimit: max too large, truncated to 1048576
[  386.381173][ T5895] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  386.405588][ T8258] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio)
[  386.451405][ T8252] loop2: detected capacity change from 0 to 32768
[  386.469938][ T8259] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio)
[  386.492853][ T8252] gfs2: fsid=.{-.['\#: Trying to join cluster "lock_nolock", ".{-.['\#"
[  386.504778][ T8252] gfs2: fsid=.{-.['\#: Now mounting FS (format 0)...
[  386.530719][ T8252] gfs2: fsid=.{-.['\#.s: journal 0 mapped with 1 extents in 0ms
[  386.651139][ T5895] usb 4-1: Using ep0 maxpacket: 32
[  386.666100][ T8252] gfs2: fsid=.{-.['\#.s: first mount done, others may mount
[  386.786001][ T5895] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  386.800570][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.818740][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  386.833907][ T5895] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  386.843057][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.854134][ T5895] usb 4-1: config 0 descriptor??
[  387.020678][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'.
[  387.033127][ T8266] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  387.333137][ T5895] elecom 0003:056E:011C.0010: item fetching failed at offset 5/6
[  387.341350][ T5895] elecom: probe of 0003:056E:011C.0010 failed with error -22
[  387.543843][ T4203] usb 4-1: USB disconnect, device number 13
[  387.732993][ T8274] loop2: detected capacity change from 0 to 256
[  388.204629][ T8290] loop2: detected capacity change from 0 to 1024
[  388.264456][ T8293] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio)
[  388.327976][ T8294] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio)
[  388.363476][ T8290] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none.
[  388.377160][ T8290] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  388.401086][   T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  388.410957][   T26] audit: type=1800 audit(2000000083.894:10): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1228" name="file1" dev="loop2" ino=15 res=0 errno=0
[  388.567309][ T8303] loop1: detected capacity change from 0 to 256
[  388.671095][   T23] usb 4-1: Using ep0 maxpacket: 16
[  388.709227][ T8301] loop2: detected capacity change from 0 to 32768
[  388.773941][ T8301] JBD2: Ignoring recovery information on journal
[  388.811166][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.825098][   T23] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  388.834766][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.844883][   T23] usb 4-1: config 0 descriptor??
[  388.856196][ T8301] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  388.906711][   T26] audit: type=1800 audit(2000000084.394:11): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1233" name="file1" dev="loop2" ino=16946 res=0 errno=0
[  388.917937][ T8301] OCFS2: ERROR (device loop2): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  388.957340][ T8312] loop1: detected capacity change from 0 to 256
[  388.959697][ T8301] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  388.974854][ T8301] OCFS2: File system is now read-only.
[  388.980507][ T8301] (syz.2.1233,8301,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  388.989379][ T8301] (syz.2.1233,8301,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  388.997679][ T8301] (syz.2.1233,8301,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  389.006315][ T8301] (syz.2.1233,8301,0):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30
[  389.015028][ T8301] (syz.2.1233,8301,0):ocfs2_write_cluster:1156 ERROR: status = -30
[  389.023439][ T8301] (syz.2.1233,8301,0):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30
[  389.032158][ T8301] (syz.2.1233,8301,0):ocfs2_write_begin_nolock:1823 ERROR: status = -30
[  389.041301][ T8301] (syz.2.1233,8301,0):ocfs2_dio_wr_get_block:2245 ERROR: status = -30
[  389.049814][ T8301] (syz.2.1233,8301,0):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5
[  389.136810][ T4188] ocfs2: Unmounting device (7,2) on (node local)
[  389.213550][ T8316] loop1: detected capacity change from 0 to 2048
[  389.303644][   T23] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0
[  389.303942][ T4203] hid-generic 0000:FFFFFFFE:0800.0012: unknown main item tag 0x0
[  389.320087][ T8316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  389.332784][ T4203] hid-generic 0000:FFFFFFFE:0800.0012: unknown main item tag 0x0
[  389.340684][   T23] mcp2221 0003:04D8:00DD.0011: item fetching failed at offset 1/5
[  389.349939][ T4203] hid-generic 0000:FFFFFFFE:0800.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  389.387618][   T23] mcp2221 0003:04D8:00DD.0011: can't parse reports
[  389.448254][   T23] mcp2221: probe of 0003:04D8:00DD.0011 failed with error -22
[  389.468238][ T4191] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  389.469406][ T8324] fido_id[8324]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  389.518959][   T23] usb 4-1: USB disconnect, device number 14
[  389.810992][ T4203] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  390.065162][ T8333] loop1: detected capacity change from 0 to 256
[  390.075974][ T8334] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio)
[  390.131498][ T8333] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  390.141327][ T8335] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio)
[  390.161125][ T4203] usb 3-1: not running at top speed; connect to a high speed hub
[  390.251172][ T8337] loop1: detected capacity change from 0 to 1024
[  390.261270][ T4203] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  390.264253][ T8339] loop0: detected capacity change from 0 to 256
[  390.313158][ T8337] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none.
[  390.330120][ T8337] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  390.363493][   T26] audit: type=1800 audit(2000000085.854:12): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1246" name="file1" dev="loop1" ino=15 res=0 errno=0
[  390.441245][ T4203] usb 3-1: New USB device found, idVendor=1853, idProduct=0001, bcdDevice= 1.00
[  390.473280][ T4203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  390.488379][ T4203] usb 3-1: Product: syz
[  390.518321][ T4203] usb 3-1: Manufacturer: syz
[  390.603777][ T4203] usb 3-1: Found UVC 1.00 device syz (1853:0001)
[  390.610390][ T4203] usb 3-1: No streaming interface found for terminal 2.
[  390.640035][ T4203] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input16
[  390.900839][   T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  390.944577][ T5895] usb 3-1: USB disconnect, device number 17
[  391.010051][ T8346] JBD2: Ignoring recovery information on journal
[  391.117371][ T8346] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  391.161595][   T23] usb 4-1: Using ep0 maxpacket: 32
[  391.212640][   T26] audit: type=1800 audit(2000000086.704:13): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1250" name="file1" dev="loop1" ino=16946 res=0 errno=0
[  391.233247][    C1] vkms_vblank_simulate: vblank timer overrun
[  391.256714][ T8346] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  391.282190][ T8346] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  391.293536][ T8346] OCFS2: File system is now read-only.
[  391.370917][ T8346] (syz.1.1250,8346,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  391.390037][ T8346] (syz.1.1250,8346,1):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  391.435258][ T8346] (syz.1.1250,8346,1):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  391.460806][ T8346] (syz.1.1250,8346,1):ocfs2_add_clusters_in_btree:4830 ERROR: status = -30
[  391.492122][   T23] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  391.504445][ T8346] (syz.1.1250,8346,1):ocfs2_write_cluster:1156 ERROR: status = -30
[  391.517235][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.541925][ T8346] (syz.1.1250,8346,1):ocfs2_write_cluster_by_desc:1251 ERROR: status = -30
[  391.553604][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1255'.
[  391.565931][ T8363] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  391.583666][   T23] usb 4-1: Product: syz
[  391.596347][   T23] usb 4-1: Manufacturer: syz
[  391.605465][ T8346] (syz.1.1250,8346,1):ocfs2_write_begin_nolock:1823 ERROR: status = -30
[  391.619503][   T23] usb 4-1: SerialNumber: syz
[  391.637309][ T8346] (syz.1.1250,8346,1):ocfs2_dio_wr_get_block:2245 ERROR: status = -30
[  391.658380][   T23] usb 4-1: config 0 descriptor??
[  391.680319][ T8346] (syz.1.1250,8346,1):ocfs2_dio_end_io:2448 ERROR: Direct IO failed, bytes = -5
[  391.743775][ T4191] ocfs2: Unmounting device (7,1) on (node local)
[  391.976970][ T8362] set_capacity_and_notify: 2 callbacks suppressed
[  391.977011][ T8362] loop2: detected capacity change from 0 to 32768
[  392.155947][   T23] airspy 4-1:0.0: Board ID: 00
[  392.161391][   T23] airspy 4-1:0.0: Firmware version: 
[  392.178603][ T8362] XFS (loop2): Mounting V5 Filesystem
[  392.368831][ T8362] XFS (loop2): Ending clean mount
[  392.438809][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'.
[  392.452202][ T8379] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  392.577017][ T4188] XFS (loop2): Unmounting Filesystem
[  392.590951][   T23] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e
[  392.618775][   T23] airspy 4-1:0.0: Registered as swradio24
[  392.632127][   T23] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  392.667769][   T23] usb 4-1: USB disconnect, device number 15
[  392.943360][ T8382] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio)
[  393.007645][ T8383] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcmmio)
[  393.146516][ T8387] loop3: detected capacity change from 0 to 1024
[  393.155204][ T8385] loop0: detected capacity change from 0 to 2048
[  393.228038][ T8385] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  393.244377][ T8385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  393.290112][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,,errors=continue. Quota mode: none.
[  393.299393][ T8385] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field
[  393.305906][ T8387] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  393.320296][ T8392] loop2: detected capacity change from 0 to 256
[  393.345113][   T26] audit: type=1800 audit(2000000088.834:14): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1262" name="file1" dev="loop3" ino=15 res=0 errno=0
[  393.365465][    C1] vkms_vblank_simulate: vblank timer overrun
[  394.026164][ T8405] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  394.087837][ T8405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  394.648777][ T8394] loop3: detected capacity change from 0 to 32768
[  394.658115][ T8401] loop2: detected capacity change from 0 to 32768
[  394.727691][ T8394] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1265 (8394)
[  394.785972][ T8394] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  394.802300][ T8394] BTRFS info (device loop3): force clearing of disk cache
[  394.810102][ T8409] program syz.2.1271 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  394.835805][ T8394] BTRFS info (device loop3): enabling auto defrag
[  394.859947][ T8394] BTRFS info (device loop3): max_inline at 428
[  394.885615][ T8394] BTRFS info (device loop3): enabling disk space caching
[  394.899194][ T8394] BTRFS info (device loop3): disk space caching is enabled
[  394.909306][ T8394] BTRFS info (device loop3): has skinny extents
[  394.970701][ T4203] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  395.164664][ T5895] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  395.198037][ T8394] BTRFS info (device loop3): enabling ssd optimizations
[  395.215907][ T8394] BTRFS info (device loop3): clearing free space tree
[  395.248723][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1273'.
[  395.262194][ T8433] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  395.278102][ T8394] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  395.301166][ T8394] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  395.322300][ T4203] usb 1-1: Using ep0 maxpacket: 32
[  395.333246][ T8436] loop4: detected capacity change from 0 to 1024
[  395.441580][ T5895] usb 3-1: Using ep0 maxpacket: 8
[  395.450672][ T4203] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  395.478787][ T4203] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.520359][ T4203] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  395.533624][ T4214] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  395.580726][ T5895] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  395.596539][ T5895] usb 3-1: config 179 has no interface number 0
[  395.601854][ T4203] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  395.605961][ T5895] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  395.622168][ T4203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.657067][ T5895] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  395.660929][ T4203] usb 1-1: config 0 descriptor??
[  395.676941][ T5895] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  395.703874][ T5895] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  395.733475][ T5895] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  395.750771][ T5895] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  395.760164][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.790953][ T8412] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  395.927411][ T8446] loop4: detected capacity change from 0 to 1024
[  396.131907][    C1] vkms_vblank_simulate: vblank timer overrun
[  396.192188][ T5895] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input17
[  396.203261][ T4203] elecom 0003:056E:011C.0013: item fetching failed at offset 5/6
[  396.222470][ T4203] elecom: probe of 0003:056E:011C.0013 failed with error -22
[  396.388561][ T8448] loop1: detected capacity change from 0 to 32768
[  396.415216][ T5900] usb 3-1: USB disconnect, device number 18
[  396.421369][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  396.421568][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  396.452613][ T5900] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  396.507993][ T8453] usb 1-1: USB disconnect, device number 15
[  396.612632][ T8457] loop3: detected capacity change from 0 to 64
[  396.846691][ T8459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  396.864088][ T8459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  397.344460][   T26] audit: type=1800 audit(2000000092.835:15): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1277" name="file2" dev="loop3" ino=21 res=0 errno=0
[  397.394943][   T26] audit: type=1800 audit(2000000092.835:16): pid=8457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1277" name="file2" dev="loop3" ino=21 res=0 errno=0
[  397.646593][ T8465] loop2: detected capacity change from 0 to 1024
[  397.853126][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'.
[  397.880277][ T8480] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  397.963216][ T8479] loop1: detected capacity change from 0 to 256
[  398.673355][ T8486] loop3: detected capacity change from 0 to 1024
[  398.712568][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'.
[  398.725085][ T8487] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  398.857196][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1301'.
[  398.890159][ T8491] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  399.496135][ T8490] loop1: detected capacity change from 0 to 2048
[  399.590616][ T8490] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  399.689297][ T8490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  399.774281][ T8500] db_root: cannot be changed: target drivers registered
[  399.816202][ T8490] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field
[  399.848196][ T8493] loop2: detected capacity change from 0 to 8192
[  399.920183][ T8478] loop4: detected capacity change from 0 to 32768
[  399.958256][ T8478] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1288 (8478)
[  399.985310][ T8493] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  400.007754][ T8493] REISERFS (device loop2): using ordered data mode
[  400.022243][ T8478] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  400.048422][ T8478] BTRFS info (device loop4): force clearing of disk cache
[  400.079456][ T8512] loop1: detected capacity change from 0 to 64
[  400.090571][ T8478] BTRFS info (device loop4): enabling auto defrag
[  400.099330][ T8510] loop0: detected capacity change from 0 to 1024
[  400.105877][ T8493] reiserfs: using flush barriers
[  400.111748][ T8478] BTRFS info (device loop4): max_inline at 428
[  400.118907][ T8478] BTRFS info (device loop4): enabling disk space caching
[  400.129229][ T8493] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  400.140903][ T8510] EXT4-fs (loop0): inline encryption not supported
[  400.155075][ T8493] REISERFS (device loop2): checking transaction log (loop2)
[  400.166488][ T8493] REISERFS (device loop2): Using r5 hash to sort names
[  400.177598][ T8493] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  400.182956][ T8478] BTRFS info (device loop4): disk space caching is enabled
[  400.222951][ T5900] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  400.236448][ T8478] BTRFS info (device loop4): has skinny extents
[  400.252962][   T26] audit: type=1800 audit(2000000095.745:17): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1297" name="file2" dev="loop1" ino=21 res=0 errno=0
[  400.304277][ T8510] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.1300: lblock 2 mapped to illegal pblock 2 (length 1)
[  400.317460][   T26] audit: type=1800 audit(2000000095.775:18): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1297" name="file2" dev="loop1" ino=21 res=0 errno=0
[  400.426854][ T8510] EXT4-fs (loop0): Remounting filesystem read-only
[  400.433693][ T8510] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  400.442421][ T8510] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.1300: Invalid inode table block 1 in block_group 0
[  400.471095][ T8510] EXT4-fs (loop0): Remounting filesystem read-only
[  400.479308][ T8510] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  400.500441][ T5900] usb 4-1: Using ep0 maxpacket: 32
[  400.528174][ T8510] EXT4-fs (loop0): Remounting filesystem read-only
[  400.536097][ T8510] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.1300: mark_inode_dirty error
[  400.551863][ T8510] EXT4-fs (loop0): Remounting filesystem read-only
[  400.569168][ T8510] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  400.611054][ T8510] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1300: Failed to acquire dquot type 0
[  400.620647][ T5900] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  400.638376][ T5900] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  400.647965][ T8510] EXT4-fs (loop0): Remounting filesystem read-only
[  400.653031][ T5900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  400.663341][ T8510] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  400.666888][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  400.688969][ T8478] BTRFS info (device loop4): enabling ssd optimizations
[  400.699965][ T8478] BTRFS info (device loop4): clearing free space tree
[  400.707152][ T5900] usb 4-1: config 1 has no interface number 0
[  400.713383][ T8478] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  400.732731][ T5900] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  400.747303][ T8478] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  400.759369][ T8510] EXT4-fs (loop0): Remounting filesystem read-only
[  400.768114][ T8510] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.1300: mark_inode_dirty error
[  400.800394][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.899391][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'.
[  400.914128][ T8540] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  400.924181][ T5900] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  400.947575][ T8510] EXT4-fs (loop0): Remounting filesystem read-only
[  400.961518][ T8510] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  401.017951][ T8510] EXT4-fs (loop0): 1 orphan inode deleted
[  401.059740][ T8510] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,noblock_validity,grpquota,max_batch_time=0x00000000000008c9,inlinecrypt,errors=remount-ro,. Quota mode: writeback.
[  401.170336][ T5900] snd_usb_pod 4-1:1.1: set_interface failed
[  401.186871][ T4215] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  401.203892][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1303'.
[  401.234417][ T8543] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  401.237725][ T5900] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  401.264192][ T5900] snd_usb_pod: probe of 4-1:1.1 failed with error -71
[  401.266816][ T4215] EXT4-fs (loop0): Remounting filesystem read-only
[  401.288390][ T5900] usb 4-1: USB disconnect, device number 16
[  401.311297][ T4215] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  401.311483][ T8510] EXT4-fs (loop0): shut down requested (2)
[  401.331063][ T4215] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0
[  401.414380][ T4215] EXT4-fs (loop0): Remounting filesystem read-only
[  401.596110][ T8545] loop0: detected capacity change from 0 to 1024
[  401.981770][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'.
[  402.011934][ T8554] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  402.555137][ T8558] db_root: cannot be changed: target drivers registered
[  402.563534][ T8562] loop2: detected capacity change from 0 to 2048
[  402.590893][ T8562] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  402.710279][ T8562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  402.755876][ T8569] loop3: detected capacity change from 0 to 128
[  402.865938][ T8567] loop4: detected capacity change from 0 to 8192
[  402.881054][ T8562] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field
[  403.030001][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'.
[  403.059097][ T8576] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  403.185375][ T8567] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  403.353398][ T8567] REISERFS (device loop4): using ordered data mode
[  403.574378][ T8567] reiserfs: using flush barriers
[  403.609717][ T8578] Set syz1 is full, maxelem 14 reached
[  403.678164][ T8567] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  403.760500][ T8567] REISERFS (device loop4): checking transaction log (loop4)
[  403.773794][ T8567] REISERFS (device loop4): Using r5 hash to sort names
[  403.786878][ T8567] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  403.818349][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1317'.
[  403.830626][ T8583] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  404.047902][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1319'.
[  404.060933][ T8586] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  404.065626][ T8588] loop3: detected capacity change from 0 to 2048
[  404.148068][ T8589] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  404.288813][ T8582] loop2: detected capacity change from 0 to 32768
[  404.312978][ T8582] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1315 (8582)
[  404.348104][ T8595] loop3: detected capacity change from 0 to 256
[  404.369700][ T8582] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  404.391358][ T8582] BTRFS info (device loop2): force clearing of disk cache
[  404.409127][ T8582] BTRFS info (device loop2): enabling auto defrag
[  404.423312][ T8582] BTRFS info (device loop2): max_inline at 428
[  404.440258][ T8582] BTRFS info (device loop2): enabling disk space caching
[  404.447692][ T8582] BTRFS info (device loop2): disk space caching is enabled
[  404.455488][ T8582] BTRFS info (device loop2): has skinny extents
[  404.617218][ T8582] BTRFS info (device loop2): enabling ssd optimizations
[  404.629756][ T8582] BTRFS info (device loop2): clearing free space tree
[  404.637235][ T8582] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  404.648477][ T8618] db_root: cannot be changed: target drivers registered
[  404.660179][ T8582] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  404.882019][  T144] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  405.064874][ T8632] loop1: detected capacity change from 0 to 8192
[  405.129782][ T8632] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  405.160836][ T8632] REISERFS (device loop1): using ordered data mode
[  405.172756][ T8632] reiserfs: using flush barriers
[  405.195102][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'.
[  405.224941][ T8636] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  405.274375][ T8632] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  405.403657][ T8632] REISERFS (device loop1): checking transaction log (loop1)
[  405.489795][ T8632] REISERFS (device loop1): Using r5 hash to sort names
[  405.566743][ T8632] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  405.988869][ T8646] loop0: detected capacity change from 0 to 256
[  406.077968][ T8651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1333'.
[  406.100447][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'.
[  406.112702][ T8649] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  406.297680][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'.
[  406.311039][ T8652] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  406.350552][ T8656] db_root: cannot be changed: target drivers registered
[  406.824170][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'.
[  407.194627][ T8671] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  407.793703][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1346'.
[  407.822375][ T8687] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  407.924952][ T8686] loop2: detected capacity change from 0 to 256
[  408.837349][ T8684] loop3: detected capacity change from 0 to 32768
[  408.954564][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1356'.
[  408.967119][ T8701] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  409.022795][ T8684] JBD2: Ignoring recovery information on journal
[  409.057116][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'.
[  409.069781][ T8703] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  409.134647][ T8684] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  409.175596][ T8683] loop0: detected capacity change from 0 to 32768
[  409.211429][ T8684] 
[  409.213784][ T8684] ======================================================
[  409.220791][ T8684] WARNING: possible circular locking dependency detected
[  409.227995][ T8684] syzkaller #0 Not tainted
[  409.232406][ T8684] ------------------------------------------------------
[  409.239445][ T8684] syz.3.1350/8684 is trying to acquire lock:
[  409.245433][ T8684] ffff8880747ec2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x44b0
[  409.258886][ T8684] 
[  409.258886][ T8684] but task is already holding lock:
[  409.266337][ T8684] ffff88805cdc5c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x47d/0x1390
[  409.275924][ T8684] 
[  409.275924][ T8684] which lock already depends on the new lock.
[  409.275924][ T8684] 
[  409.286543][ T8684] 
[  409.286543][ T8684] the existing dependency chain (in reverse order) is:
[  409.295661][ T8684] 
[  409.295661][ T8684] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  409.303467][ T8684]        down_read+0x44/0x2e0
[  409.308249][ T8684]        ocfs2_init_acl+0x307/0x770
[  409.313439][ T8684]        ocfs2_mknod+0x15de/0x2510
[  409.318554][ T8684]        ocfs2_create+0x192/0x420
[  409.323581][ T8684]        path_openat+0x120a/0x2fb0
[  409.328784][ T8684]        do_filp_open+0x1df/0x400
[  409.333796][ T8684]        do_sys_openat2+0x14b/0x500
[  409.338985][ T8684]        __x64_sys_openat+0x135/0x160
[  409.344371][ T8684]        do_syscall_64+0x4c/0xa0
[  409.349337][ T8684]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  409.355809][ T8684] 
[  409.355809][ T8684] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  409.364311][ T8684]        down_read+0x44/0x2e0
[  409.368990][ T8684]        ocfs2_start_trans+0x3a6/0x6f0
[  409.374556][ T8684]        ocfs2_shutdown_local_alloc+0x1f3/0xac0
[  409.380880][ T8684]        ocfs2_dismount_volume+0x1e1/0x890
[  409.386706][ T8684]        generic_shutdown_super+0x130/0x300
[  409.392592][ T8684]        kill_block_super+0x7c/0xe0
[  409.397803][ T8684]        deactivate_locked_super+0x93/0xf0
[  409.403650][ T8684]        cleanup_mnt+0x426/0x4d0
[  409.408605][ T8684]        task_work_run+0x125/0x1a0
[  409.413780][ T8684]        exit_to_user_mode_loop+0x10f/0x130
[  409.419739][ T8684]        exit_to_user_mode_prepare+0xee/0x180
[  409.425814][ T8684]        syscall_exit_to_user_mode+0x16/0x40
[  409.431905][ T8684]        do_syscall_64+0x58/0xa0
[  409.436872][ T8684]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  409.443380][ T8684] 
[  409.443380][ T8684] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  409.450878][ T8684]        ocfs2_start_trans+0x2a7/0x6f0
[  409.456436][ T8684]        ocfs2_shutdown_local_alloc+0x1f3/0xac0
[  409.462667][ T8684]        ocfs2_dismount_volume+0x1e1/0x890
[  409.468470][ T8684]        generic_shutdown_super+0x130/0x300
[  409.474442][ T8684]        kill_block_super+0x7c/0xe0
[  409.479639][ T8684]        deactivate_locked_super+0x93/0xf0
[  409.485449][ T8684]        cleanup_mnt+0x426/0x4d0
[  409.490378][ T8684]        task_work_run+0x125/0x1a0
[  409.495521][ T8684]        exit_to_user_mode_loop+0x10f/0x130
[  409.501421][ T8684]        exit_to_user_mode_prepare+0xee/0x180
[  409.507487][ T8684]        syscall_exit_to_user_mode+0x16/0x40
[  409.513465][ T8684]        do_syscall_64+0x58/0xa0
[  409.518406][ T8684]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  409.524827][ T8684] 
[  409.524827][ T8684] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  409.535448][ T8684]        down_write+0x38/0x60
[  409.540125][ T8684]        ocfs2_reserve_suballoc_bits+0x16d/0x44b0
[  409.546553][ T8684]        ocfs2_reserve_clusters_with_limit+0x3b9/0xc10
[  409.553589][ T8684]        ocfs2_mknod+0xf0e/0x2510
[  409.558621][ T8684]        ocfs2_create+0x192/0x420
[  409.563650][ T8684]        path_openat+0x120a/0x2fb0
[  409.568770][ T8684]        do_filp_open+0x1df/0x400
[  409.573792][ T8684]        do_sys_openat2+0x14b/0x500
[  409.579073][ T8684]        __x64_sys_openat+0x135/0x160
[  409.584440][ T8684]        do_syscall_64+0x4c/0xa0
[  409.589460][ T8684]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  409.595881][ T8684] 
[  409.595881][ T8684] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  409.606399][ T8684]        __lock_acquire+0x2c66/0x7b50
[  409.611912][ T8684]        lock_acquire+0x19e/0x400
[  409.616928][ T8684]        down_write+0x38/0x60
[  409.621594][ T8684]        ocfs2_reserve_suballoc_bits+0x16d/0x44b0
[  409.628011][ T8684]        ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  409.634943][ T8684]        ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0
[  409.641094][ T8684]        ocfs2_xattr_set+0xc68/0x1390
[  409.646456][ T8684]        __vfs_setxattr+0x3d8/0x410
[  409.651716][ T8684]        __vfs_setxattr_noperm+0x126/0x5e0
[  409.657523][ T8684]        vfs_setxattr+0x167/0x2e0
[  409.662551][ T8684]        setxattr+0x2cb/0x360
[  409.667437][ T8684]        path_setxattr+0x147/0x290
[  409.672697][ T8684]        __x64_sys_setxattr+0xb7/0xd0
[  409.678105][ T8684]        do_syscall_64+0x4c/0xa0
[  409.683147][ T8684]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  409.689988][ T8684] 
[  409.689988][ T8684] other info that might help us debug this:
[  409.689988][ T8684] 
[  409.700217][ T8684] Chain exists of:
[  409.700217][ T8684]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  409.700217][ T8684] 
[  409.717512][ T8684]  Possible unsafe locking scenario:
[  409.717512][ T8684] 
[  409.725048][ T8684]        CPU0                    CPU1
[  409.730417][ T8684]        ----                    ----
[  409.735779][ T8684]   lock(&oi->ip_xattr_sem);
[  409.740350][ T8684]                                lock(&journal->j_trans_barrier);
[  409.748162][ T8684]                                lock(&oi->ip_xattr_sem);
[  409.755256][ T8684]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  409.762544][ T8684] 
[  409.762544][ T8684]  *** DEADLOCK ***
[  409.762544][ T8684] 
[  409.770683][ T8684] 3 locks held by syz.3.1350/8684:
[  409.775790][ T8684]  #0: ffff888077c72460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  409.785101][ T8684]  #1: ffff88805cdc5f48 (&sb->s_type->i_mutex_key#37){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0
[  409.795521][ T8684]  #2: ffff88805cdc5c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x47d/0x1390
[  409.805444][ T8684] 
[  409.805444][ T8684] stack backtrace:
[  409.811362][ T8684] CPU: 0 PID: 8684 Comm: syz.3.1350 Not tainted syzkaller #0
[  409.818740][ T8684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  409.829479][ T8684] Call Trace:
[  409.832784][ T8684]  <TASK>
[  409.835788][ T8684]  dump_stack_lvl+0x188/0x250
[  409.840512][ T8684]  ? load_image+0x410/0x410
[  409.845083][ T8684]  ? show_regs_print_info+0x20/0x20
[  409.850276][ T8684]  ? print_circular_bug+0x12b/0x1a0
[  409.855482][ T8684]  check_noncircular+0x296/0x330
[  409.860417][ T8684]  ? add_chain_block+0x9b0/0x9b0
[  409.865351][ T8684]  ? lockdep_lock+0xf1/0x1f0
[  409.869934][ T8684]  ? mark_lock+0x94/0x320
[  409.874501][ T8684]  ? _find_first_zero_bit+0xd1/0xf0
[  409.879730][ T8684]  __lock_acquire+0x2c66/0x7b50
[  409.884591][ T8684]  ? igrab+0x87/0x90
[  409.888480][ T8684]  ? verify_lock_unused+0x140/0x140
[  409.893669][ T8684]  ? do_raw_spin_lock+0x128/0x2f0
[  409.898690][ T8684]  ? __rwlock_init+0x140/0x140
[  409.903526][ T8684]  ? do_raw_spin_unlock+0x11d/0x230
[  409.908717][ T8684]  ? _raw_spin_unlock+0x24/0x40
[  409.913566][ T8684]  lock_acquire+0x19e/0x400
[  409.918062][ T8684]  ? ocfs2_reserve_suballoc_bits+0x16d/0x44b0
[  409.924215][ T8684]  ? __might_sleep+0xf0/0xf0
[  409.928918][ T8684]  ? read_lock_is_recursive+0x10/0x10
[  409.934297][ T8684]  ? verify_lock_unused+0x140/0x140
[  409.939952][ T8684]  down_write+0x38/0x60
[  409.944102][ T8684]  ? ocfs2_reserve_suballoc_bits+0x16d/0x44b0
[  409.950181][ T8684]  ocfs2_reserve_suballoc_bits+0x16d/0x44b0
[  409.956089][ T8684]  ? __lock_acquire+0x7b50/0x7b50
[  409.961121][ T8684]  ? mark_lock+0x94/0x320
[  409.965559][ T8684]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  409.971535][ T8684]  ? lock_chain_count+0x20/0x20
[  409.976377][ T8684]  ? __rwlock_init+0x140/0x140
[  409.981127][ T8684]  ? ocfs2_block_group_search+0x470/0x470
[  409.986872][ T8684]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  409.992781][ T8684]  ? lockdep_hardirqs_on+0x94/0x140
[  409.998002][ T8684]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  410.003878][ T8684]  ? _raw_spin_unlock+0x40/0x40
[  410.008712][ T8684]  ? stack_trace_save+0xa6/0xf0
[  410.013572][ T8684]  ? stack_trace_snprint+0xe0/0xe0
[  410.018665][ T8684]  ? stack_depot_save+0x41b/0x460
[  410.023810][ T8684]  ? __kasan_kmalloc+0xc6/0xe0
[  410.028658][ T8684]  ? __kasan_kmalloc+0xaf/0xe0
[  410.033516][ T8684]  ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0
[  410.040003][ T8684]  ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0
[  410.045796][ T8684]  ? ocfs2_xattr_set+0xc68/0x1390
[  410.050924][ T8684]  ? __vfs_setxattr+0x3d8/0x410
[  410.055814][ T8684]  ? __vfs_setxattr_noperm+0x126/0x5e0
[  410.061291][ T8684]  ? vfs_setxattr+0x167/0x2e0
[  410.065964][ T8684]  ? setxattr+0x2cb/0x360
[  410.070435][ T8684]  ? path_setxattr+0x147/0x290
[  410.075298][ T8684]  ? __x64_sys_setxattr+0xb7/0xd0
[  410.080658][ T8684]  ? do_syscall_64+0x4c/0xa0
[  410.085274][ T8684]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  410.091358][ T8684]  ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  410.097713][ T8684]  ? ocfs2_init_steal_slots+0x150/0x150
[  410.103277][ T8684]  ? ocfs2_xattr_block_set+0x2da0/0x2da0
[  410.108900][ T8684]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  410.115083][ T8684]  ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0
[  410.120975][ T8684]  ? ocfs2_prepare_refcount_xattr+0xfe0/0xfe0
[  410.127059][ T8684]  ? ocfs2_truncate_log_needs_flush+0x12c/0x300
[  410.133446][ T8684]  ? ocfs2_remove_btree_range+0x15e0/0x15e0
[  410.139593][ T8684]  ? ocfs2_xattr_ibody_find+0xc6/0x780
[  410.145049][ T8684]  ? up_write+0x1b6/0x410
[  410.149367][ T8684]  ocfs2_xattr_set+0xc68/0x1390
[  410.154228][ T8684]  ? __ocfs2_xattr_set_handle+0xf20/0xf20
[  410.159982][ T8684]  ? verify_lock_unused+0x140/0x140
[  410.165184][ T8684]  ? aa_get_newest_label+0xf5/0x5a0
[  410.170822][ T8684]  ? posix_xattr_acl+0x8f/0xb0
[  410.175690][ T8684]  ? evm_protect_xattr+0x33f/0x9b0
[  410.180834][ T8684]  ? ima_inode_post_setattr+0x320/0x320
[  410.186595][ T8684]  ? ocfs2_xattr_trusted_get+0x40/0x40
[  410.192062][ T8684]  __vfs_setxattr+0x3d8/0x410
[  410.196742][ T8684]  __vfs_setxattr_noperm+0x126/0x5e0
[  410.202016][ T8684]  vfs_setxattr+0x167/0x2e0
[  410.206503][ T8684]  ? xattr_permission+0x510/0x510
[  410.211508][ T8684]  ? _copy_from_user+0x111/0x170
[  410.216508][ T8684]  ? setxattr+0x22b/0x360
[  410.220819][ T8684]  setxattr+0x2cb/0x360
[  410.224966][ T8684]  ? path_setxattr+0x290/0x290
[  410.229725][ T8684]  ? __mnt_want_write+0x1e2/0x260
[  410.234879][ T8684]  path_setxattr+0x147/0x290
[  410.239456][ T8684]  ? simple_xattr_list_add+0xf0/0xf0
[  410.244846][ T8684]  ? lock_chain_count+0x20/0x20
[  410.249785][ T8684]  __x64_sys_setxattr+0xb7/0xd0
[  410.254657][ T8684]  do_syscall_64+0x4c/0xa0
[  410.259066][ T8684]  ? clear_bhb_loop+0x30/0x80
[  410.263732][ T8684]  ? clear_bhb_loop+0x30/0x80
[  410.268683][ T8684]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  410.274600][ T8684] RIP: 0033:0x7f8f2a07d159
[  410.279157][ T8684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  410.298851][ T8684] RSP: 002b:00007f8f282d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  410.307396][ T8684] RAX: ffffffffffffffda RBX: 00007f8f2a304fa0 RCX: 00007f8f2a07d159
[  410.315404][ T8684] RDX: 0000200000000140 RSI: 00002000000001c0 RDI: 0000200000000000
[  410.323368][ T8684] RBP: 00007f8f2a114024 R08: 0000000000000001 R09: 0000000000000000
[  410.331329][ T8684] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000
[  410.339288][ T8684] R13: 00007f8f2a305038 R14: 00007f8f2a304fa0 R15: 00007ffeb82acb98
[  410.347360][ T8684]  </TASK>
[  410.432340][ T8683] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  410.433224][ T8713] loop1: detected capacity change from 0 to 256
[  410.462046][ T8683] JBD2: Ignoring recovery information on journal
[  410.469201][ T8683] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[  410.500609][ T8683] JBD2: bad block at offset 32
[  410.501107][ T8713] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  410.534136][ T4192] ocfs2: Unmounting device (7,3) on (node local)
[  410.542361][ T8683] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  410.654269][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'.
[  410.886471][ T8713] exFAT-fs (loop1): hint_cluster is invalid (17)
[  410.909794][ T4184] ocfs2: Unmounting device (7,0) on (node local)