last executing test programs:

3m0.162715565s ago: executing program 0 (id=44):
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd"], 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0)

2m58.211897165s ago: executing program 0 (id=67):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000001"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000340)={0x0, <r1=>0x0}}, 0x10)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r1, 0xffffffff, 0x10}, 0xc)

2m58.067207689s ago: executing program 0 (id=71):
fsopen(0x0, 0x0)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
setuid(0xee01)
keyctl$chown(0x4, r0, 0xee01, 0x0)

2m57.915534764s ago: executing program 0 (id=75):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000000)='./file0\x00')
open(&(0x7f0000000040)='./file2/file0\x00', 0x2000, 0x81)

2m57.158290547s ago: executing program 0 (id=84):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1bc}, 0x8)

2m56.536191586s ago: executing program 0 (id=90):
r0 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x24, 0x8c, {0x8c, 0xd, "b896c28615930742936fc346205dbb7becfebf23a6031287806ab2dcc257881bdc514a7286480eb5ec1e44ccdac2ee3fa60b8b796e135bda63691e7985003ece2aeafcc4545ba9d46cce82e854c673457cf338381bb4fb71522295a189306dcff4f6013aef302e723f958a9aae82dc71e7ab67b8eeb7ea8da4b3276d4658b54f7388da9470802aa9c594"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, 0x0)

2m56.267141344s ago: executing program 32 (id=90):
r0 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x24, 0x8c, {0x8c, 0xd, "b896c28615930742936fc346205dbb7becfebf23a6031287806ab2dcc257881bdc514a7286480eb5ec1e44ccdac2ee3fa60b8b796e135bda63691e7985003ece2aeafcc4545ba9d46cce82e854c673457cf338381bb4fb71522295a189306dcff4f6013aef302e723f958a9aae82dc71e7ab67b8eeb7ea8da4b3276d4658b54f7388da9470802aa9c594"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, 0x0)

2m18.126941145s ago: executing program 3 (id=448):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x201, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000004}, 0x800)

2m18.079469217s ago: executing program 3 (id=450):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={<r1=>0x0, <r2=>0x0, <r3=>0x0}, &(0x7f00000002c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES16=r1, @ANYRESHEX=r3, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fa, &(0x7f0000006a80)="$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")
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.metacopy\x00')

2m17.869833463s ago: executing program 3 (id=455):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040))

2m17.586604152s ago: executing program 3 (id=459):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80000001, 0x325967a866141052)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

2m17.204128483s ago: executing program 3 (id=462):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0xf, 0x4, 0x8, 0x1}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000016000000b40000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x22)

2m15.545512384s ago: executing program 3 (id=471):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7, 0x33c, &(0x7f0000000140)="$eJzs3T1PFE8cB/DvzN7D3h/CfwUMiZVBSawIYKGxkRhi4xuwMESEIyGsmCgmSmJEa2PsTEws7ayNvgVtjG9AKwpjpQ2xcM3Mzt7OrrN3ewgsyPeTeLfszcNvbmb2ZiDngoiOrEtzn1+d3VL/RB2AB+ACIAH4QA3AcYz5d9fWexbkdY4E4pzijzSLa21XVh8mhxGon2oYtM/R3oiiKPrSM9V38+zveTxUDWHPYIsEmmZ26tf/lRGwGbfraLF6WGxjG/cwVGU4RERUPfP5L82nxKBZv0sJTJh1+GH//M+sb7ari+NA6Hz+y/jnSKj353/9ktrvrayH7aV4C6d6Xya7RFdZzjERpW93A/HI8gaaMg0grcVNxyJbyythe3JTF/AYFw0r2ah+XAKkdbIo2kb8NO7Ym3bRre3dDeg21FUbZgriH+lWo3MD/O4rnrurm/9QIibxXnwU8yLACyyl6z/r3QtyUyWOf6q4RN3KIE6VaWUa/jH1UDuR9MDb12krW0Xvqw9PxeKiShH59XuQxPmsUZwLw8j+WiFu3XRx63SuEaAm9K7BzjXTSfTTmWs0X1druR62JxdvhUWDfnc5d3TiqbgqxvENbzBnrf+lSj2B4pmZmeVCpzQjI9ue3NWgplMW9GOGHoI3+5qZpF12dnR3T3AD5zF05/7G6kIYtm9Xf5BMlR1mP7nL8cQD0QxHdUY9W2ngq4M6gLIlS+TPRACsM7+iKHJmr2E/uqCum3ruZdrkjdUFYa552cTJJC9bhbpy5l6aLU4MYBaAOSP6rMs+eNjJ1UwLLJX9h+ptfcY9IJOo9mGCJFVlXvLQLDVTWjuo9MqD1YWw/0sKHT5pp2PsWtXBUBXUukvE+z9rvzKlrzrqIUj3P/V83qhX4VaJ0wU7oGH9+F+5HVyn2MJ14kBy0GPPdeoMcDpXo0RS46N8sYGJEwfxr5L9/ylDzOETrvP3/0REREREREREREREREREREREREREh02/30bYydcJsjVuHcH/eIOIiIiIiIiIiIiIiIiIiIiIiIiIiIiI6O9Y9/8FPH3HmIbr/r/d7tSkefGdX/zduP+vV+L+v2Kzj1YSkcvvAAAA//93NVkN")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

2m15.422280737s ago: executing program 33 (id=471):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x7, 0x33c, &(0x7f0000000140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

2.489785285s ago: executing program 2 (id=1954):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14)
sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)

1.744882917s ago: executing program 2 (id=1961):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x2, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x94}, 0x1, 0x7a00}, 0x0)

1.673529939s ago: executing program 6 (id=1964):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x4000}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0xba01}, 0x1)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b000019000780080003000000000008000200000000000800030000000000080002000000000008000300000000000400"], 0x7c}}, 0x0)

1.613063001s ago: executing program 2 (id=1966):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x24, 0x1c, 0x65, 0x0, 0xa1, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x30}}, {0x4e24, 0x4e24, 0x8}}}}}, 0x0)

1.549174813s ago: executing program 6 (id=1967):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x30c, 0x4)
sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="659900c3f7c8e544e1abc41796cae4c9908368acb3abdb908ada84b1c98b91c34352f80ed64e4606a25bcbab94869ac816a7fb9c29a8c768fbffb21ad7f6013ff676da589c2e0865cfd321543070c3dd36bf94deb1d137c220d9c559dd61fb2c8732b6ce023b635b5901ebe508133aeadc8f8f93a2198784aab8ae715ee249968c0429cc80bc8c85c985f4f5f04e3acb0ef2a012f59c82dca7d69dcecf011b0a44b1889cfdfa123ccc8c0cb6469c806560c7681f0c3cae69aeabd2fc80d666e8dd7962495507461967b881a6a840a22962f95d55a722cb40221b16e6a6482bab54591aec3770e27a80974d3e41795c35f7300c2ba523e8486dbf6d7988e56396d13f0c079d856946c3ef2a3aaa0dd0bce7389bfd2c112bed2c5e1ae45ae2be5624016a96be54a1e876acd47e6f3ea1e11f919a12c0db1885930d03ce0d622b1e8ed1bbef406bab5f09a6066b2c1fbc9ba713bf76930cf84520fbd9e3f550b8ea4473b30de57de284951111b723ec7c55d5b9b57022411357766680c60cb193ab17c680e44ebc39a149aba5d5c5d26b021e8275523e832018584a067c1a49a3ea9937d90ce4f04bdcacbe1e3c2dbed7aeed1d85714c7d29c7cbe8fccc9cc9d3bfa4dc80954c69ec3e5abc686ce1735726ef792fe7ffe003fedd7b9a478162e5a33a40014f2dd3a97231df13aa79463896dc0754336e79bd98afad2a36e6efbb4803d543d347cd5b80e4c0fd5333724465f6eddbddb6a176c522347195d64238aa7c6b373d172161f97d267f90fab6a941ddc7670061da257fd46a29919668c492f991e1a16be25638e41c7453d1a40b92a75b07f330a6e07b4b0850989f343998022c5cdb7d7473de1f67ce2ec2ddf0ff6e945dab94bed1abdb959995098a4ad8ca467208febec562fe7c06a8cec88cbe6847b6b24212144da679aa521263aa8c152535a0fbc67dccc7116278f8da118147e9efeb799f37ecde26d9aa2e158bde1bb36bb67218fc9d29eb5ee1a4eb87adb0d9a2c8b6cd04e0d6b3b04f347022afd3ee96f6092dc74e2a09e42a1846afa48c65cd83d2718b95bb2df495da53f6ecafaf5149cfade2ac94517c4765a4522e81b58924bc6471d266541b0f6cf44f0ff636092cb6bd7d2a995b21df583630e4fdbbde7da4da19d6786b9ba3d9c1df5fe2618414940d25d82561fd9bf7b39f704355a51621a86b0bf39dbcc305bd87c4542ac3f852962fc5dee1da8fa4a6d1bf0149f04c06b81f81aedb4f07c9bf0a022a5cc0bcc57819b46931b99b00a0489e79b2bc1edc7d2d0404e09c9742e08867d7eedbc3b511207678c5087c0e01a41538742fdca667f39d8962b876386f6d1d798d09eac55c9587a4c86b4d5e3cfb08c0a0487cc7293ce91a7ec11896140ec8c0074f09497dd9b67382ca77d019bedfe97437429bdff299ba2d27669f6a8533c4a4be188a4e8cd439a6c72b6fe737e7388c5b10680bdba183433e99ccd6f0cf584980712088013aa625f9f78f0141b9fc3491c594229ef182c04a9b0e403511e8fb985918eb5c7bbc1ca5dca429efb209559363283f866c10bb3e05ef2a21182edc045341578e5ac63ba19206d804541fd40e84f5a6c9a20a44d8c76a815c7336c66c24bd9c8e61b95857ba3f06d72b6324d9e63c5672cf5dab0e8002000123c3f98626486e1396c897d92e79e34c6abd10d3f86a968c6b7ec95da7b04799a6419550ad511a45120457907a54296edbb1d7389da99608701c3e5e74d7a814c54e33a8473a8c8c3a6520268fe022d2771076ba921b5dca80301ed5ddda7aa5d3051e15330819abb9ab1da62041b1ebcd1cb38f37b7c13b6afa1351f541fac5539aa442ce2864a9048ce224e2855483a1a8fa12373f2568d7ee56752e67b2b115a7922a9af25c71c9fb67ea62e2bde4c176b57f6bcaa38117a9b0b2802f9b169e615a9e62100aeb1bbd8d03a3a94258a3ceb800c0b7b22af4afe24b0d8656e8fb8b2800c54173d063fd2c2330fe9b66592e144410ffd77207cd55fc317c1e66b98de7396ef3622f98305a460533a17145786910a7cfb3790734855adfeb01a8a0948108258e9a5b6a4d5958024d82079bf032e15666709cf4ed535f5a3a5f2b99377294fe16c24a72a1d6d95e151f478e770b5284c46890901b02b8696f688aa965ec3a70a33bd44346389ae3de7e8fdd4834fabc9afbb6341c6493de8faecf655a259e55944c48e0336660af313d0286f3e221092c0e4dc3834efabbf6931c44a8f8045bb418dbdc5ab9cd454726919a8aded5c679e5f62cf622ce8acd67f0a86634ce09b95677babe70dc216767824e2bbd6b066eebab6e5efc26d07a9a11b0ec4f2a2049b8edd01aa9dada0fc70fe52f1cee95e8df64532348c7317033ac4f54c76e5dfc5b532e237231a15b6bd0700f214a61ad7ace3f546e5f363055ba9f217cbc51ff5d0e4042d51761b8f055c775a305fdcb583c66ae2520c384aaf63d625c569ef2f4d2554d440e9e61118b8fbe1159d0558992a71db056dc5f16430b87fd329af2d7fe5928f430324dbbd247b938e4a4062fa7530da3e04a2b7824d17298e24bd7df0eba8caddfe808fe8a813c93c348eb9cbd651e92da3757450251ba9b2a5c96839fb3e3aadddbddc90a2dbb638b1fb87f990cfa2f96a8bfedf997b89f12dddf259fa1499c430f3cb8340c5cf66c85caf5c172cd0f651d1c2dba1cf26d8b936b17f0385183dfab24fd3bbaabfe866946b290dc278fd8418dc0ddb7785ab7e0f259a85fba0eabaaee55f52305d33339007e73fcded5f2613c710a32caad845b6c99958ccd5712097889f98858223d74042952bd238ee39eb7a1ebe0f0766946709cbb3a92d1551e5feb042452a76c557665fc9fab49768abcc7cb1977f7804d328421c30264b68a7ed05cbb7497a5014e6cdf32df82d41b33f55c67c9c15e723f629af4ac66a62ecc3214140354ef48bc73d3fb0eeb0719473498c2f3d192da0b360e5f3bf8f1ef579ed37a5d0c20eec42714bab59c134d4468736f19f5d32f5b8dc3df45941275264fca42ccb35cacd9965abb06dd7bd3bd0b1d8f32fb4b00d213d5f5d82ebf975b1fb4aeff137783f8b8da73864c3ed63f4142e4b3af5a3b82228eeb95f5d51f671f5b67964d2131c5e8869f8289997811dffe5b58d3dded907839316dbbf75ac8bebf35f036b4f2471808f389f3288ca48a3ae5d78343872df2fa6c67fd69f366c7861bfdde0b5126d5efdf825a03c6520b3a59ecc00469b0c9941f12ddead1f58d37da3ac1582ec701c47532629ae7e038707e3831e9a45f5cad2108f6e48c0c89bdd10bcebf29cb7cc84819cc292ad9c26f767159f2e13d8fc920401c8a682ad3c356d44ca1e7639ddd2c0f92d450069aaa5b778fa713c6c3813cafe6cf610916b02da8fd9ada5e02e0d08326df3dee4b203ddaaeff338be751e769e5c583d1488c5a22f644369d9079f387b36516dd5d706e4a29700d07986cbe1d64271ca0496ffd483fcf12ba1c2e891a2c9d940c61b61406a82a0157648acf3bc598d53046ec5a51c459a8e251ea0641d3d9148883dbb2a27cca1f0937505977689f4c89e045e6e45eec8939bece21fc3f3ff6b3437efe76b4bffdabcf34aaee2d04f21b482e3f2d20f904e723c572f5053e2642ffbf0287be1dc5c75c8e91cd446b1370d9c1c8a076a5eeceb11ad0b0ec959c2df769ae47751530c587b65b1a6feb8915dde7c11ddeaf6947392f746ab6a74630f5ec3a4d5499d46b8561e091c61c522063561ef31d91f680a5f660bf84020257657e79ef0670d93cf9f78c362954ac6f02602492c9f6bca75fe35fd371fe0db76a0a802bb5d04f6cacefb4ec79a3bdb5b0d7ce7b6b1734351b52225a31b16b8414b988f31c6e2aa07efc741e2ca1c3e4d7a382c863540497b12090acb69956e14ed51e569dc52bbbb747c335006a34333c32dac619ffc2d7e3abd7a5b53fde8eccc4f8963e996fabc8a96416d15fa7150faa154b97e685e6316fb73387a616d11aa486120a0d897c2055332eed5f07e50234b0383cb164ddd0501785f5d0109dabbf994be4fdd3e0c81e82cd19dffb63b312678d53c63c05b46739b61e363d944f36d48222476032db59415254879cd368d027fca68361d630fa93422badfc8b91e18e4fdcc2f0532dc7ff57a4100e8b15368a47af303c550542105860542d6fdf78d17e85ab334b7080237c5dd928e07ac0dfcdcd9c34ed4ad8ff47c0c9aa585f0c4f5d227eddf8b65802082a93bb82344162868df6cd2d804e7f9afd6a900f04157e30c796e0ece9998975723a6a9e6ea9f8159ad362bc35abcf779a174791a4aa7c043627075a44a1c93ccdd1df28fdc90d376551548bda51c390b4666c08cc23b1bd76993de97001aa7ccb5dd75dbd74f64b6bb2efdb672797060701e78bc1b5d72c025bba9c2d29c78024425af0e291a3f7386d3791aee91bc20d0f933ee2b2881c4c51720b3a5f5567ba105286c38f64f47b262f83f84e4f46907bca9c936b57e5196b4bbd64c1c8d7ae3e1ed64c598204f5cb90a26efd77ebec403e06f5c37eff5ddff5c30c615d8044e96a0b57a196af2deef36d7be5eada24a40a1eccb50e3466a208b94e2b69c66413ea0dae7eff6cef18fe83ee1717860b2cea2001ad3168f76733c6240c84a9eea9da926f29a74827843d40cf486dfb737ff1d4a9eed5ade6ea400eabea97481a58cdf8697225e71c6b5d22ad66fcfbee3955f3e186bc29a690f1d2874e70f032774a43ac4eec14117a31ef0a00ad6115223e2532dcca9310976ea7222a5c97703b3424bd9c7cf12bc5339d4705cf7dbf03d126b4da27e291a719ff3b1300ed21b425a2e8f7fd2002d137a47af192dd0dd1e26c2a49a16e0204a34fd92b7c3ca69861cdd143a494977e481b0e7c46bea8bedbc995e5a56702c9ab59c0f0cb90cae7a4f2185d50d1c699e4aa2a45177bb6827eb9422b23b8f78d20cec6bc373f62c07872eef3b1b4b7c77838b4e26e9573609f7bef3dcedc2fdf6c2c4aee6ebb9719b8ff578cf5e09933bc39083565e4fe1c18b90b40a72cf45bcfaec0f2c5cad49c606c9588bba24a1ad78be7ab315811c4b02c04b8d04866fa64147bb06f268ea9bc8a35440c4a1f73bd712107e86d5ac2864f592b7fb3aef2661a889475209c80c1adcf2bf165667253a452f1a2f7afb8cdd9ce3aa0b2193220773f11429d4e9f2bcef0c2128d34e632f351fea3b4538dbdf1c699b573b93fbba7a5256e5e3ae42e9fe120940d21f1e00b777031833e8d232283a86fa7ef511a7645d6fc6b0102aebe5b39ddddd4395a5a43dcb2d8a05d2587a4a1799d2239a51e097fadd28b09084148a6209edf2611181c1503c8bb2c5d0bde46d9cb200285ddfa7cb91cd49237ebd57241c3a7bf81da2ac1d95bfcd61faec3d58b52c08ef6c99a65b5a9ce6827705ba1f0d51ae7c84b93abcce96fdfbb2d21a3bc224552d326b65171956cfbd25faa0425bf61647d522b93367a5379c9bd3766ac03b15339e17ea5b0d7173455f6780073a637e8323563f58fe99f8d556a9ba4d8d84fa781ff8eea39bc4f7cb1364bf422bc1e7755cedd3c0c30d6a4930d54adebb81d26b9ba41c1eed62c9ed16a3fb2adc7eeeb2ec6a753878480790a617cacb3a5a590990236d308a2be73b1e1beff9a9b6c22ef627c1453bc6fd2296399821c6f85ed38966d43c9d48dc5000e7fa2c27b6e59dd20109c5cbba36d7532", 0xfdd}], 0x2}}], 0x1, 0x24044015)
recvmmsg(r0, &(0x7f0000004140)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/22, 0x16}, {0x0}], 0x2, &(0x7f0000000100)=""/36, 0x24}}], 0x1, 0x2002, 0x0)

1.464380886s ago: executing program 2 (id=1970):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000001c0), 0x4)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000001c0), 0x4)

1.385462128s ago: executing program 6 (id=1972):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14)
sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)

1.300794501s ago: executing program 2 (id=1975):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0)
write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc)
write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io'}, 0x3c)
close_range(r0, r0, 0x0)

1.153992345s ago: executing program 5 (id=1978):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0})

1.126587306s ago: executing program 2 (id=1979):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x58)
copy_file_range(r0, 0x0, r0, &(0x7f0000000140)=0x1000, 0x863, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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")

1.086780087s ago: executing program 1 (id=1981):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0xffffffffffffffff, 0x0, 0x1}}}]}]}]}}]}, 0x60}}, 0x4004)

997.95816ms ago: executing program 5 (id=1982):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000280)="f5", 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e04, 0x4000009, @empty, 0x10000}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)

861.322074ms ago: executing program 5 (id=1984):
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x8000000000000001}, {}, 0x2}, [@tmpl={0x104, 0x5, [{{@in6=@local, 0x4d5, 0x32}, 0x0, @in6=@local, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x2, 0x3, 0x2, 0x8000}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@private2, 0x3500, 0x0, 0x0, 0xfd, 0x204}]}]}, 0x1bc}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000680)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, '\b\x00', 0x30, 0x3a, 0xfe, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, '[\x00', 0x6, 0x33, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @empty}}}}}}}, 0x0)

861.161304ms ago: executing program 1 (id=1985):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4)
bind$can_raw(r0, &(0x7f0000000080), 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

756.835317ms ago: executing program 4 (id=1986):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x85a, 0x0, 0x4, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0)

756.215657ms ago: executing program 5 (id=1987):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x96282}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x0)

732.993468ms ago: executing program 1 (id=1988):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
unshare(0x6020400)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)

732.322908ms ago: executing program 6 (id=1989):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x200182, 0xb963baf323019a14)
ioctl$KDSETKEYCODE(r0, 0x4b4d, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

593.960402ms ago: executing program 4 (id=1990):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec0800000000600004e2100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0)

593.645482ms ago: executing program 6 (id=1991):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000001940)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

593.402342ms ago: executing program 1 (id=1992):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0)

496.303675ms ago: executing program 1 (id=1993):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)

425.581307ms ago: executing program 4 (id=1994):
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f000801}, 0x4040804)
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}})

353.024409ms ago: executing program 5 (id=1995):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000140)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)

279.723372ms ago: executing program 4 (id=1996):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@host, 0x3}, 0x0, 0x0, 0x8})

232.399774ms ago: executing program 5 (id=1997):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000d540)={0x0, 0x0, &(0x7f000000d500)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000103c010000000000000000000a00000a140000000e0a01"], 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x4000000)

113.924547ms ago: executing program 6 (id=1998):
mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000180)={'full', 0x20, 0x3, 0x20, 0x4}, 0x2f)

113.643027ms ago: executing program 4 (id=1999):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2, &(0x7f0000000000)=0x2, 0x3d, 0x0)
mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0)
mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000)

113.424547ms ago: executing program 1 (id=2000):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14)
sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)

0s ago: executing program 4 (id=2001):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000f10000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340"], 0x6c}}, 0x0)

kernel console output (not intermixed with test programs):

: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  152.404804][ T6680] XFS (loop5): Mounting V5 Filesystem
[  152.439564][ T6697] loop1: detected capacity change from 0 to 32768
[  152.454977][ T6687] JBD2: Ignoring recovery information on journal
[  152.607779][ T6687] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  152.735418][ T6680] XFS (loop5): Ending clean mount
[  152.987252][ T4505] XFS (loop5): Unmounting Filesystem
[  153.002706][ T1111] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0006/input/input10
[  153.160958][ T1111] uclogic 0003:28BD:0094.0006: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1
[  153.211553][ T6687] ocfs2: Unmounting device (7,4) on (node local)
[  153.230844][ T1111] usb 3-1: USB disconnect, device number 9
[  153.277398][ T6733] program syz.1.771 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  153.497653][ T6736] fido_id[6736]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  153.534781][ T6709] loop6: detected capacity change from 0 to 40427
[  153.569216][ T6709] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  153.604184][ T6709] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  153.604862][ T6737] loop1: detected capacity change from 0 to 4096
[  153.667982][ T6709] F2FS-fs (loop6): invalid crc value
[  153.748491][ T6737] EXT4-fs (loop1): Test dummy encryption mode enabled
[  153.756648][ T6709] F2FS-fs (loop6): Found nat_bits in checkpoint
[  153.773443][ T6737] EXT4-fs (loop1): Ignoring removed oldalloc option
[  153.842206][ T6737] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=b842c018, mo2=0003]
[  153.870362][ T6737] System zones: 0-5
[  153.877016][ T6737] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,grpjquota=,test_dummy_encryption,i_version,oldalloc,data_err=abort,barrier,,errors=continue. Quota mode: writeback.
[  153.979461][ T6754] netlink: 'syz.2.774': attribute type 11 has an invalid length.
[  153.987391][ T6754] netlink: 'syz.2.774': attribute type 11 has an invalid length.
[  153.996255][ T6754] netlink: 2704 bytes leftover after parsing attributes in process `syz.2.774'.
[  154.008737][ T6753] loop4: detected capacity change from 0 to 64
[  154.097404][ T6753] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  154.145816][ T6709] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  154.164170][ T6709] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  155.100050][ T6801] 8021q: adding VLAN 0 to HW filter on device bond1
[  155.162262][ T6801] bridge0: port 3(bond1) entered blocking state
[  155.181498][ T6801] bridge0: port 3(bond1) entered disabled state
[  155.229959][ T6801] device bond1 entered promiscuous mode
[  155.248687][ T6801] bridge0: port 3(bond1) entered blocking state
[  155.255537][ T6801] bridge0: port 3(bond1) entered forwarding state
[  155.330643][ T4218] bridge0: port 3(bond1) entered disabled state
[  155.462811][ T6776] loop2: detected capacity change from 0 to 32768
[  155.596117][ T6827] loop5: detected capacity change from 0 to 256
[  155.629613][ T6776] XFS (loop2): Mounting V5 Filesystem
[  155.704815][ T6827] exfat: Deprecated parameter 'utf8'
[  155.734104][ T6827] exfat: Deprecated parameter 'namecase'
[  155.744945][ T6827] exfat: Deprecated parameter 'namecase'
[  155.745441][ T6776] XFS (loop2): Ending clean mount
[  155.758106][ T6827] exfat: Deprecated parameter 'utf8'
[  155.820115][ T6776] XFS (loop2): Quotacheck needed: Please wait.
[  155.842923][ T6827] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  155.951239][ T6776] XFS (loop2): Quotacheck: Done.
[  156.017619][ T6838] loop6: detected capacity change from 0 to 2048
[  156.105701][ T4192] XFS (loop2): Unmounting Filesystem
[  156.157600][ T6838] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  156.198742][ T6838] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.228101][ T6838] fs-verity: sha512 using implementation "sha512-avx2"
[  156.241475][ T6838] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 5 vs 4156096517 free clusters
[  156.265364][ T6838] fs-verity (loop6, inode 13): ext4_end_enable_verity() failed with err -28
[  156.315867][ T6831] loop1: detected capacity change from 0 to 32768
[  156.529901][ T6831] XFS (loop1): Mounting V5 Filesystem
[  156.590119][ T6831] XFS (loop1): Ending clean mount
[  156.622282][ T6831] XFS (loop1): Quotacheck needed: Please wait.
[  156.668223][ T1111] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  156.782802][ T6831] XFS (loop1): Quotacheck: Done.
[  156.851096][ T6864] MPI: mpi too large (113216 bits)
[  156.908975][ T1111] usb 6-1: Using ep0 maxpacket: 16
[  156.933635][ T4191] XFS (loop1): Unmounting Filesystem
[  157.078855][ T6871] loop4: detected capacity change from 0 to 256
[  157.160238][ T6871] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  157.187984][ T6871] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  157.198169][ T1111] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  157.213181][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.220722][ T6871] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  157.233084][ T1111] usb 6-1: Product: syz
[  157.250424][ T1111] usb 6-1: Manufacturer: syz
[  157.261539][ T1111] usb 6-1: SerialNumber: syz
[  157.293811][ T1111] usb 6-1: config 0 descriptor??
[  157.350378][ T1111] gspca_main: spca508-2.14.0 probing 041e:4018
[  157.358014][ T1108] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  157.460378][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.580394][ T1111] gspca_spca508: reg_read err -32
[  157.629242][ T1108] usb 7-1: Using ep0 maxpacket: 32
[  157.733426][ T6884] netlink: 52 bytes leftover after parsing attributes in process `syz.1.822'.
[  157.758295][ T1108] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  157.776658][ T1108] usb 7-1: config 0 has no interface number 0
[  157.859200][ T1111] gspca_spca508: reg_read err -71
[  157.878014][ T1111] gspca_spca508: reg_read err -71
[  157.898232][ T1111] gspca_spca508: reg_read err -71
[  157.929301][ T1111] gspca_spca508: reg write: error -71
[  157.934781][ T1111] spca508: probe of 6-1:0.0 failed with error -71
[  157.960400][ T1111] usb 6-1: USB disconnect, device number 7
[  157.968459][ T1108] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  157.994109][ T1108] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.015090][ T1108] usb 7-1: Product: syz
[  158.048213][ T1108] usb 7-1: Manufacturer: syz
[  158.052871][ T1108] usb 7-1: SerialNumber: syz
[  158.078639][ T1108] usb 7-1: config 0 descriptor??
[  158.125042][ T1108] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  158.195891][ T6895] input: syz0 as /devices/virtual/input/input11
[  158.235051][ T6882] loop4: detected capacity change from 0 to 32768
[  158.304328][ T6882] JBD2: Ignoring recovery information on journal
[  158.336894][ T1108] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  158.359181][ T1108] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  158.573570][ T6882] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  158.748043][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  158.751506][ T1111] usb 7-1: USB disconnect, device number 4
[  158.788204][ T1111] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  158.825598][ T1111] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  158.850499][ T1111] quatech2 7-1:0.51: device disconnected
[  158.890105][ T4197] ocfs2: Unmounting device (7,4) on (node local)
[  158.927032][ T6893] loop2: detected capacity change from 0 to 32768
[  159.029410][ T6904] loop5: detected capacity change from 0 to 32768
[  159.053780][ T6893] XFS (loop2): Mounting V5 Filesystem
[  159.075081][ T6904] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.831 (6904)
[  159.133223][ T6893] XFS (loop2): Ending clean mount
[  159.194279][ T6904] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  159.256621][ T6904] BTRFS info (device loop5): setting nodatasum
[  159.315038][ T4192] XFS (loop2): Unmounting Filesystem
[  159.362261][ T6904] BTRFS info (device loop5): force zlib compression, level 3
[  159.385007][ T6904] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  159.429515][ T6904] BTRFS info (device loop5): use lzo compression, level 0
[  159.450627][ T6904] BTRFS info (device loop5): turning on flush-on-commit
[  159.458322][ T6904] BTRFS info (device loop5): enabling auto defrag
[  159.464822][ T6904] BTRFS info (device loop5): max_inline at 4096
[  159.472224][ T6904] BTRFS info (device loop5): using free space tree
[  159.531447][ T6904] BTRFS info (device loop5): has skinny extents
[  160.027099][ T6904] BTRFS info (device loop5): enabling ssd optimizations
[  160.323877][ T6970] netlink: 'syz.1.849': attribute type 12 has an invalid length.
[  160.380110][ T6970] netlink: 'syz.1.849': attribute type 29 has an invalid length.
[  160.416682][ T6970] netlink: 148 bytes leftover after parsing attributes in process `syz.1.849'.
[  160.446488][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'.
[  160.606815][ T6920] loop6: detected capacity change from 0 to 32768
[  161.009536][ T6920] XFS (loop6): Mounting V5 Filesystem
[  161.088959][ T6920] XFS (loop6): Ending clean mount
[  161.098374][   T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  161.106664][ T6920] XFS (loop6): Quotacheck needed: Please wait.
[  161.136854][ T7008] loop2: detected capacity change from 0 to 1024
[  161.186882][ T1108] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  161.221455][ T6920] XFS (loop6): Quotacheck: Done.
[  161.328913][ T4283] hfsplus: b-tree write err: -5, ino 25
[  161.335243][ T4283] hfsplus: b-tree write err: -5, ino 4
[  161.367414][ T4283] hfsplus: b-tree write err: -5, ino 2
[  161.398778][ T5722] XFS (loop6): Unmounting Filesystem
[  161.497875][ T1108] usb 2-1: Using ep0 maxpacket: 8
[  161.535529][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  161.557375][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.604141][   T23] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  161.634116][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.643582][ T7014] loop2: detected capacity change from 0 to 4096
[  161.671009][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.683630][   T23] usb 5-1: config 0 descriptor??
[  161.697903][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.727653][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  161.745531][ T1108] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  161.777217][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.817056][ T1108] usb 2-1: config 0 descriptor??
[  161.961656][ T7022] tap0: tun_chr_ioctl cmd 1074025677
[  161.969209][ T7022] tap0: linktype set to 805
[  162.120788][ T7029] netlink: 332 bytes leftover after parsing attributes in process `syz.5.869'.
[  162.163021][ T7029] netlink: 'syz.5.869': attribute type 1 has an invalid length.
[  162.176895][   T23] hid-alps 0003:044E:120C.0007: unknown main item tag 0x0
[  162.206323][   T23] hid-alps 0003:044E:120C.0007: unexpected long global item
[  162.218320][   T23] hid-alps 0003:044E:120C.0007: parse failed
[  162.224481][   T23] hid-alps: probe of 0003:044E:120C.0007 failed with error -22
[  162.310705][ T1108] elecom 0003:056E:00FE.0008: unknown main item tag 0x3
[  162.330518][ T1108] elecom 0003:056E:00FE.0008: unknown main item tag 0x0
[  162.337546][ T1108] elecom 0003:056E:00FE.0008: unknown main item tag 0x0
[  162.357969][ T1108] elecom 0003:056E:00FE.0008: unknown main item tag 0x0
[  162.419861][ T1108] elecom 0003:056E:00FE.0008: unknown main item tag 0x0
[  162.448678][ T1108] elecom 0003:056E:00FE.0008: unknown main item tag 0x0
[  162.486925][ T1108] elecom 0003:056E:00FE.0008: unknown main item tag 0x0
[  162.500719][ T1108] elecom 0003:056E:00FE.0008: collection stack underflow
[  162.517556][ T1108] elecom 0003:056E:00FE.0008: item 0 2 0 12 parsing failed
[  162.533260][ T1108] elecom: probe of 0003:056E:00FE.0008 failed with error -22
[  162.567736][ T1108] usb 2-1: USB disconnect, device number 7
[  162.605305][ T4238] usb 5-1: USB disconnect, device number 10
[  162.724565][ T7041] loop2: detected capacity change from 0 to 8192
[  162.734370][   T26] audit: type=1326 audit(1781878967.748:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.878" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee077f6e59 code=0x0
[  162.785142][ T7048] loop6: detected capacity change from 0 to 4096
[  162.811032][ T7041] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  162.821339][ T7041] REISERFS (device loop2): using ordered data mode
[  162.837974][ T7041] reiserfs: using flush barriers
[  162.846925][ T7041] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  162.869136][ T7041] REISERFS (device loop2): checking transaction log (loop2)
[  162.881840][ T7041] REISERFS (device loop2): Using rupasov hash to sort names
[  162.894994][ T7041] REISERFS (device loop2): using 3.5.x disk format
[  162.903454][ T7048] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  162.916396][ T7041] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  162.929759][ T7041] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  162.956160][ T7041] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  163.011997][ T7041] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  163.118463][ T7041] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  163.288021][ T6999] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  163.373646][ T7065] loop1: detected capacity change from 0 to 64
[  163.658211][ T6999] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  163.687715][ T6999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.719658][ T6999] usb 7-1: config 0 descriptor??
[  163.779793][ T6999] cp210x 7-1:0.0: cp210x converter detected
[  163.990269][ T6999] usb 7-1: cp210x converter now attached to ttyUSB0
[  164.196881][ T6999] usb 7-1: USB disconnect, device number 5
[  164.215622][ T6999] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  164.294263][ T6999] cp210x 7-1:0.0: device disconnected
[  164.603304][ T7078] loop5: detected capacity change from 0 to 131072
[  164.785795][ T7078] XFS (loop5): Mounting V5 Filesystem
[  164.825664][ T7074] loop2: detected capacity change from 0 to 32768
[  164.920412][ T7110] loop4: detected capacity change from 0 to 64
[  164.950250][ T7074] 
[  164.950250][ T7074]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  164.950250][ T7074] 
[  164.963872][ T7078] XFS (loop5): Torn write (CRC failure) detected at log block 0x80. Truncating head block from 0xc0.
[  165.031381][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.6.900'.
[  165.054779][ T7078] XFS (loop5): Corruption warning: Metadata has LSN (1:192) ahead of current LSN (1:128). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  165.071395][ T7078] XFS (loop5): log mount/recovery failed: error -22
[  165.169682][ T7078] XFS (loop5): log mount failed
[  165.235548][ T1267] ERROR: (device loop2): diWrite: ixpxd invalid
[  165.235548][ T1267] 
[  165.346724][ T1267] ERROR: (device loop2): txCommit: 
[  165.346724][ T1267] 
[  165.356334][ T1267] jfs_write_inode: jfs_commit_inode failed!
[  165.373186][ T4192] 
[  165.373186][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  165.373186][ T4192] 
[  165.412147][ T4192] 
[  165.412147][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  165.412147][ T4192] 
[  165.431661][ T7120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'.
[  165.459771][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.905'.
[  165.693503][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  165.771922][ T7134] netlink: 20 bytes leftover after parsing attributes in process `syz.2.903'.
[  165.834521][ T7136] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  165.856252][ T7136] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  166.288736][ T7148] loop1: detected capacity change from 0 to 4096
[  166.375464][ T7148] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  166.484589][ T7148] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  166.798616][ T7160] Context (ID=0x1) not attached to queue pair (handle=0x2:0x1)
[  167.014819][ T7164] netlink: 40 bytes leftover after parsing attributes in process `syz.1.923'.
[  167.064583][ T7166] netlink: 616 bytes leftover after parsing attributes in process `syz.2.924'.
[  167.295081][ T7154] loop4: detected capacity change from 0 to 32768
[  167.344663][ T7172] loop1: detected capacity change from 0 to 2048
[  167.471651][ T7158] loop6: detected capacity change from 0 to 32768
[  167.483633][ T7172] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,acl,mb_optimize_scan=0x0000000000000000,journal_dev=0x0000000000000801,quota,noblock_validity,,errors=continue. Quota mode: writeback.
[  167.598068][ T7172] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.611603][ T7158] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.920 (7158)
[  167.670077][ T7156] loop5: detected capacity change from 0 to 32768
[  167.690341][ T7158] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  167.724122][ T7158] BTRFS info (device loop6): setting nodatasum
[  167.777803][ T7172] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.927: bg 0: block 345: padding at end of block bitmap is not set
[  167.780675][ T7158] BTRFS info (device loop6): force zlib compression, level 3
[  167.826431][   T26] audit: type=1800 audit(1781878972.838:11): pid=7156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.930" name="file1" dev="loop5" ino=4 res=0 errno=0
[  167.888795][ T7172] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  167.917967][ T7158] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8)
[  167.987003][ T7158] BTRFS info (device loop6): use lzo compression, level 0
[  168.018002][ T7158] BTRFS info (device loop6): turning on flush-on-commit
[  168.025847][ T7158] BTRFS info (device loop6): enabling auto defrag
[  168.055933][ T7158] BTRFS info (device loop6): max_inline at 4096
[  168.076529][ T7158] BTRFS info (device loop6): using free space tree
[  168.086713][ T7158] BTRFS info (device loop6): has skinny extents
[  168.244135][ T7199] loop4: detected capacity change from 0 to 512
[  168.310994][ T7204] netlink: 260 bytes leftover after parsing attributes in process `syz.5.934'.
[  168.314627][ T7206] input: syz1 as /devices/virtual/input/input12
[  168.416571][ T7199] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.929: corrupted inode contents
[  168.491059][ T7158] BTRFS info (device loop6): enabling ssd optimizations
[  168.557937][ T7199] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  168.588303][ T7199] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.929: corrupted inode contents
[  168.608574][ T7199] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.929: mark_inode_dirty error
[  168.707228][ T7199] EXT4-fs (loop4): 1 orphan inode deleted
[  168.727947][ T7199] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  168.761524][ T7226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.940'.
[  169.050402][ T7237] netlink: 76 bytes leftover after parsing attributes in process `syz.1.945'.
[  169.624016][ T7259] binder: 7258:7259 ioctl c0306201 0 returned -14
[  169.635766][ T7263] loop2: detected capacity change from 0 to 16
[  169.718585][ T7263] erofs: (device loop2): mounted with root inode @ nid 36.
[  169.792872][ T7263] attempt to access beyond end of device
[  169.792872][ T7263] loop2: rw=524288, want=48, limit=16
[  169.888768][ T7263] attempt to access beyond end of device
[  169.888768][ T7263] loop2: rw=524288, want=40, limit=16
[  170.031158][ T7280] loop1: detected capacity change from 0 to 256
[  170.169100][ T7280] FAT-fs (loop1): Directory bread(block 64) failed
[  170.175727][ T7280] FAT-fs (loop1): Directory bread(block 65) failed
[  170.211913][ T7280] FAT-fs (loop1): Directory bread(block 66) failed
[  170.242728][ T7280] FAT-fs (loop1): Directory bread(block 67) failed
[  170.268059][ T7280] FAT-fs (loop1): Directory bread(block 68) failed
[  170.274689][ T7280] FAT-fs (loop1): Directory bread(block 69) failed
[  170.328057][ T7280] FAT-fs (loop1): Directory bread(block 70) failed
[  170.334676][ T7280] FAT-fs (loop1): Directory bread(block 71) failed
[  170.372141][ T7280] FAT-fs (loop1): Directory bread(block 72) failed
[  170.387223][ T7280] FAT-fs (loop1): Directory bread(block 73) failed
[  170.669235][ T4206] Bluetooth: hci1: link tx timeout
[  170.675011][ T4206] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  170.686565][ T4206] Bluetooth: hci1: link tx timeout
[  170.691790][ T4206] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  170.717389][ T4206] Bluetooth: hci1: link tx timeout
[  170.722640][ T4206] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  170.730481][ T4206] Bluetooth: hci1: link tx timeout
[  170.735628][ T4206] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  170.738374][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.6.962'.
[  170.867702][ T7300] netlink: 24 bytes leftover after parsing attributes in process `syz.6.962'.
[  170.935789][ T7309] netlink: 'syz.2.964': attribute type 11 has an invalid length.
[  171.034648][ T7270] loop5: detected capacity change from 0 to 32768
[  171.254115][ T7270] XFS (loop5): Mounting V5 Filesystem
[  171.498322][ T7270] XFS (loop5): Ending clean mount
[  171.574400][ T7337] device vlan2 entered promiscuous mode
[  171.604476][ T7319] loop2: detected capacity change from 0 to 32768
[  171.632921][ T7337] device team0 entered promiscuous mode
[  171.664039][ T7337] device team_slave_0 entered promiscuous mode
[  171.693421][ T7353] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  171.705982][ T7319] XFS (loop2): Mounting V5 Filesystem
[  171.721636][ T7337] device team_slave_1 entered promiscuous mode
[  171.739430][ T4505] XFS (loop5): Unmounting Filesystem
[  171.891286][ T7319] XFS (loop2): Ending clean mount
[  172.107101][ T4192] XFS (loop2): Unmounting Filesystem
[  172.248002][ T4234] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  172.658419][ T4234] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  172.666578][ T4234] usb 7-1: config 0 has no interface number 0
[  172.687897][ T4234] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  172.795834][ T1111] Bluetooth: hci1: command 0x0406 tx timeout
[  172.812360][ T7386] loop2: detected capacity change from 0 to 256
[  172.868831][ T4234] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  172.895102][ T4234] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.921315][ T4234] usb 7-1: Product: syz
[  172.946074][ T4234] usb 7-1: Manufacturer: syz
[  172.958289][ T4234] usb 7-1: SerialNumber: syz
[  172.969676][ T4234] usb 7-1: config 0 descriptor??
[  173.023832][ T4234] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[  173.108130][   T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  173.243655][ T7394] loop5: detected capacity change from 0 to 24
[  173.307311][ T7390] loop1: detected capacity change from 0 to 32768
[  173.328095][ T4239] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  173.366400][ T7390] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  173.378168][   T23] usb 5-1: Using ep0 maxpacket: 8
[  173.448331][    C0] usb 7-1: yurex_control_callback - control failed: -2
[  173.460938][ T1111] usb 7-1: USB disconnect, device number 6
[  173.472939][ T1111] yurex 7-1:0.50: USB YUREX #0 now disconnected
[  173.528179][   T23] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  173.563837][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.635576][ T4191] ocfs2: Unmounting device (7,1) on (node local)
[  173.674852][   T23] pvrusb2: Hardware description: Terratec Grabster AV400
[  173.689766][   T23] pvrusb2: **********
[  173.693802][   T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  173.721187][   T23] pvrusb2: Important functionality might not be entirely working.
[  173.744723][   T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  173.756924][ T4239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.791441][ T4239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.803853][   T23] pvrusb2: **********
[  173.817883][ T4239] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  173.828261][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.876148][ T4239] usb 3-1: config 0 descriptor??
[  173.886292][ T2426] pvrusb2: Invalid write control endpoint
[  174.060880][ T2426] pvrusb2: Invalid write control endpoint
[  174.078002][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  174.096984][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  174.110647][ T7406] loop6: detected capacity change from 0 to 512
[  174.117216][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  174.127659][ T2426] pvrusb2: Device being rendered inoperable
[  174.139708][ T7388] pvrusb2: Attempted to execute control transfer when device not ok
[  174.152742][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  174.168973][ T1108] usb 5-1: USB disconnect, device number 11
[  174.180569][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  174.222536][ T2426] pvrusb2: Attached sub-driver cx25840
[  174.238151][ T7406] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  174.295239][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  174.329057][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  174.373568][ T7401] loop5: detected capacity change from 0 to 32768
[  174.400755][ T7412] loop1: detected capacity change from 0 to 512
[  174.410002][ T4239] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x5
[  174.448098][ T4239] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  174.478833][ T7401] XFS (loop5): Mounting V5 Filesystem
[  174.500134][ T7412] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  174.557048][ T7412] ext4 filesystem being mounted at /252/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.615151][ T7401] XFS (loop5): Ending clean mount
[  174.628297][ T4239] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device
[  174.635875][ T4239] pyra 0003:1E7D:2CF6.0009: couldn't install mouse
[  174.651898][ T7401] XFS (loop5): Quotacheck needed: Please wait.
[  174.703030][ T4239] pyra: probe of 0003:1E7D:2CF6.0009 failed with error -71
[  174.735478][ T7412] Quota error (device loop1): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  174.758751][ T4239] usb 3-1: USB disconnect, device number 10
[  174.796359][ T7412] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  174.862374][ T7412] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.997: Failed to acquire dquot type 0
[  174.897293][ T7401] XFS (loop5): Quotacheck: Done.
[  175.035276][ T7435] loop4: detected capacity change from 0 to 1024
[  175.064651][ T7429] fido_id[7429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  175.160674][ T4505] XFS (loop5): Unmounting Filesystem
[  175.300522][ T7441] loop1: detected capacity change from 0 to 512
[  175.457922][    T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  175.513635][ T7441] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[  175.610402][ T7441] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.654774][ T7441] EXT4-fs error (device loop1): ext4_get_first_dir_block:3608: inode #12: comm syz.1.1008: directory missing '.'
[  175.697954][    T7] usb 7-1: Using ep0 maxpacket: 32
[  175.763699][ T7441] EXT4-fs (loop1): Remounting filesystem read-only
[  175.774484][ T7460] loop5: detected capacity change from 0 to 65
[  175.837858][ T7460] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  175.853945][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1014'.
[  175.965311][ T7459] loop4: detected capacity change from 0 to 8192
[  175.983677][    T7] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  175.995148][ T7465] loop1: detected capacity change from 0 to 64
[  176.001866][    T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.027661][    T7] usb 7-1: Product: syz
[  176.049671][    T7] usb 7-1: Manufacturer: syz
[  176.054461][    T7] usb 7-1: SerialNumber: syz
[  176.057621][ T7459] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  176.075942][    T7] usb 7-1: config 0 descriptor??
[  176.181285][ T7459] REISERFS (device loop4): using ordered data mode
[  176.188852][ T7459] reiserfs: using flush barriers
[  176.205412][ T7459] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  176.262152][ T7459] REISERFS (device loop4): checking transaction log (loop4)
[  176.370165][    T7] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 007
[  176.429304][ T7472] sch_tbf: burst 9 is lower than device lo mtu (18) !
[  176.564848][ T7437] i2c i2c-1: adapter quirk: no zero length (addr 0x0000, size 0, read)
[  176.604768][ T1111] usb 7-1: USB disconnect, device number 7
[  176.709915][ T7459] REISERFS (device loop4): Using tea hash to sort names
[  176.735710][ T7459] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  176.830146][ T7484] loop5: detected capacity change from 0 to 1024
[  176.895641][ T7480] loop2: detected capacity change from 0 to 32768
[  176.930195][ T7484] EXT4-fs (loop5): Ignoring removed oldalloc option
[  176.966105][ T7480] 
[  176.966105][ T7480]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  176.966105][ T7480] 
[  176.977731][ T7484] EXT4-fs (loop5): Ignoring removed oldalloc option
[  177.004208][ T7480] 
[  177.004208][ T7480]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.004208][ T7480] 
[  177.014940][ T7480] 
[  177.014940][ T7480]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.014940][ T7480] 
[  177.026009][ T7480] 
[  177.026009][ T7480]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.026009][ T7480] 
[  177.036618][ T7480] 
[  177.036618][ T7480]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.036618][ T7480] 
[  177.046577][ T7484] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  177.047778][ T7480] 
[  177.047778][ T7480]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.047778][ T7480] 
[  177.069721][ T7480] 
[  177.069721][ T7480]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.069721][ T7480] 
[  177.088597][  T276] 
[  177.088597][  T276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.088597][  T276] 
[  177.185882][ T7484] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,min_batch_time=0x0000000000000003,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[  177.224416][ T4192] 
[  177.224416][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.224416][ T4192] 
[  177.236096][ T4192] 
[  177.236096][ T4192]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.236096][ T4192] 
[  177.279027][ T7484] EXT4-fs (loop5): shut down requested (1)
[  177.653616][ T4218] tipc: Subscription rejected, illegal request
[  178.486600][ T7546] loop6: detected capacity change from 0 to 512
[  178.488259][   T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  178.548804][ T7546] EXT4-fs (loop6): Ignoring removed nobh option
[  178.555535][ T7546] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  178.662094][ T7546] EXT4-fs (loop6): 1 truncate cleaned up
[  178.678068][ T7546] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  178.880361][ T7561] mmap: syz.4.1058 (7561) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  178.962340][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[  179.098355][   T23] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  179.288188][   T23] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  179.313087][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.337518][   T23] usb 2-1: Product: âĢĄâˇžæŊ—芨í˜ĢėĄĢ깎ėš­ęŦገ丕킴洞톍ãƒģė’Šé§…įˆīˇ¸ę¨›îŸ§áŊë›˜ėžŊ
[  179.364456][   T23] usb 2-1: Manufacturer: ႀė’ģéļ´į“ â„ˇëĻŦīģŋ蟎龅菊čē跞čžģæēęŖˇë’‹ėž¤äļ¤áŦé›Ŗá°ŦáĢ—åˇœéœŽáŠ•áŧĸáĢē専噘韖ī„Ēį¯ĄįŠ›ä¸˜ãēšî°ˇãŸ´å‹á”ˇā¤ļā°“îž„āŖ´í“ŠáĻ–㟊įŽâ™ãž‡é¨îĨ‡į˛ĸã“˛äĄŦäšŊ貤ãŖĸę¯Ąîž–ã¨ėŒ†į˜žä¤‘ī Œã†€ãŠé¤éžæŗŠæ’ŧ䃴떉į¯ēዀ꾝įŽˆë”˜îˇģėŠŖė‚į›ščž‹ä ŠäˆēėĸŊé Ģé§Ĩ덗陴樀į§ŒæˇčŒîŖäŋžá™ƒč–í‰áŠ§č§™å–Ē냀čŦ‡į”’âĨŦ
[  179.457966][   T23] usb 2-1: SerialNumber: syz
[  179.490494][ T7559] loop2: detected capacity change from 0 to 40427
[  179.522312][ T7559] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  179.547909][ T7559] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  179.584007][ T7552] loop5: detected capacity change from 0 to 40427
[  179.591136][ T7559] F2FS-fs (loop2): invalid crc value
[  179.622497][ T7552] F2FS-fs (loop5): invalid crc value
[  179.650746][ T7559] F2FS-fs (loop2): Found nat_bits in checkpoint
[  179.700696][ T7570] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  179.721316][ T7552] F2FS-fs (loop5): Found nat_bits in checkpoint
[  179.777891][ T7562] XFS: attr2 mount option is deprecated.
[  179.784284][ T7562] XFS (loop4): sunit and swidth options incompatible with the noalign option
[  179.794099][ T7570] REISERFS (device loop6): using ordered data mode
[  179.801016][ T7570] reiserfs: using flush barriers
[  179.831221][ T7570] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  179.885036][ T7559] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  179.902455][ T7559] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  179.958414][   T23] usb 2-1: unit 4 not found!
[  179.966028][ T7552] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  180.018600][ T7570] REISERFS (device loop6): checking transaction log (loop6)
[  180.042002][ T7552] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  180.092412][ T7583] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1064'.
[  180.095630][   T23] usb 2-1: USB disconnect, device number 8
[  180.401041][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.430397][ T7570] REISERFS (device loop6): Using tea hash to sort names
[  180.437742][ T7570] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  181.188129][    T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  181.278169][ T1111] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  181.448093][    T7] usb 2-1: Using ep0 maxpacket: 16
[  181.527996][ T1111] usb 6-1: Using ep0 maxpacket: 8
[  181.559668][ T7619] set_capacity_and_notify: 2 callbacks suppressed
[  181.559683][ T7619] loop2: detected capacity change from 0 to 736
[  181.578450][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.607616][    T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  181.658471][ T1111] usb 6-1: config 0 interface 0 altsetting 29 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.691121][ T1111] usb 6-1: config 0 interface 0 altsetting 29 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  181.745139][ T1111] usb 6-1: config 0 interface 0 has no altsetting 0
[  181.775526][ T1111] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  181.788478][    T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  181.797567][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.824621][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.843019][    T7] usb 2-1: Product: syz
[  181.847238][    T7] usb 2-1: Manufacturer: syz
[  181.871972][ T1111] usb 6-1: config 0 descriptor??
[  181.881542][    T7] usb 2-1: SerialNumber: syz
[  182.228121][    T7] usb 2-1: 0:2 : does not exist
[  182.278046][    T7] usb 2-1: USB disconnect, device number 9
[  182.316881][ T7629] loop6: detected capacity change from 0 to 32768
[  182.318893][ T4371] udevd[4371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.378515][ T1111] hid (null): unknown global tag 0xe
[  182.385716][ T1111] redragon 0003:0C45:760B.000A: unknown main item tag 0x2
[  182.407915][ T1111] redragon 0003:0C45:760B.000A: unknown main item tag 0x0
[  182.415090][ T1111] redragon 0003:0C45:760B.000A: unknown main item tag 0x0
[  182.423946][ T7627] loop4: detected capacity change from 0 to 32768
[  182.441798][ T1111] redragon 0003:0C45:760B.000A: unknown main item tag 0x0
[  182.453231][ T1111] redragon 0003:0C45:760B.000A: unknown main item tag 0x0
[  182.481205][ T1111] redragon 0003:0C45:760B.000A: unknown global tag 0xe
[  182.519153][ T7629] XFS (loop6): Mounting V5 Filesystem
[  182.556095][ T1111] redragon 0003:0C45:760B.000A: item 0 0 1 14 parsing failed
[  182.599124][ T7629] XFS (loop6): Ending clean mount
[  182.607074][ T1111] redragon: probe of 0003:0C45:760B.000A failed with error -22
[  182.714429][ T1111] usb 6-1: USB disconnect, device number 8
[  182.805537][ T7633] loop2: detected capacity change from 0 to 32768
[  182.871004][ T5722] XFS (loop6): Unmounting Filesystem
[  182.946225][ T7633] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1087 (7633)
[  183.061506][ T7633] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  183.087922][ T7633] BTRFS info (device loop2): setting nodatasum
[  183.116213][ T7633] BTRFS info (device loop2): disabling tree log
[  183.148104][ T7633] BTRFS info (device loop2): max_inline at 0
[  183.154157][ T7633] BTRFS info (device loop2): turning on sync discard
[  183.204229][ T7633] BTRFS info (device loop2): using free space tree
[  183.218099][ T7633] BTRFS info (device loop2): has skinny extents
[  183.550155][ T7664] loop4: detected capacity change from 0 to 512
[  183.593716][ T7664] EXT4-fs (loop4): Ignoring removed orlov option
[  183.662645][ T7676] netlink: 'syz.6.1096': attribute type 1 has an invalid length.
[  183.671686][ T7676] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1096'.
[  183.682880][ T7633] BTRFS info (device loop2): enabling ssd optimizations
[  183.689621][ T7664] EXT4-fs (loop4): Test dummy encryption mode enabled
[  183.718072][ T7664] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  183.779044][ T7664] EXT4-fs (loop4): 1 truncate cleaned up
[  183.789013][ T7681] program syz.5.1097 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  183.801209][ T7664] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,data_err=ignore,nogrpid,,errors=continue. Quota mode: writeback.
[  183.884964][ T7687] loop6: detected capacity change from 0 to 256
[  184.295068][ T4371] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4371)
[  184.393905][ T7664] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  184.959288][ T7727] syz.1.1112 uses obsolete (PF_INET,SOCK_PACKET)
[  185.488869][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1124'.
[  185.502266][ T7756] loop1: detected capacity change from 0 to 128
[  185.584415][ T7756] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  185.677554][ T7756] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.706117][ T7762] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  185.804143][ T7762] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  186.401460][ T1108] kernel write not supported for file /snd/seq (pid: 1108 comm: kworker/1:2)
[  186.635908][ T7806] device veth1_macvtap left promiscuous mode
[  186.658204][ T1111] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  186.669102][ T7806] device macsec0 entered promiscuous mode
[  186.736067][ T7810] device veth1_macvtap entered promiscuous mode
[  186.779945][ T7810] device macsec0 left promiscuous mode
[  186.809093][  T494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  186.918323][ T1111] usb 3-1: Using ep0 maxpacket: 8
[  187.040655][ T1111] usb 3-1: unable to get BOS descriptor or descriptor too short
[  187.061858][ T1111] usb 3-1: no configurations
[  187.066653][ T1111] usb 3-1: can't read configurations, error -22
[  187.423855][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1165'.
[  187.535004][ T7843] process 'syz.4.1166' launched './file1' with NULL argv: empty string added
[  187.646814][ T7817] loop6: detected capacity change from 0 to 32768
[  187.810484][ T7817] XFS (loop6): Mounting V5 Filesystem
[  187.928655][ T7866] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  188.025178][ T7817] XFS (loop6): Ending clean mount
[  188.051516][ T7817] XFS (loop6): Quotacheck needed: Please wait.
[  188.171245][ T7817] XFS (loop6): Quotacheck: Done.
[  188.456730][ T1108] hid-generic 0000:FFFFFFFE:0800.000B: unknown main item tag 0x0
[  188.470006][ T5722] XFS (loop6): Unmounting Filesystem
[  188.517298][ T1108] hid-generic 0000:FFFFFFFE:0800.000B: unknown main item tag 0x0
[  188.570466][ T1108] hid-generic 0000:FFFFFFFE:0800.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  188.746592][ T7859] loop1: detected capacity change from 0 to 32768
[  188.804874][ T7880] fido_id[7880]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  188.967396][ T7868] loop2: detected capacity change from 0 to 32768
[  189.288910][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'.
[  189.306291][ T7868] XFS (loop2): Mounting V5 Filesystem
[  189.434617][ T7868] XFS (loop2): Ending clean mount
[  189.508168][ T5961] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  189.609046][ T4192] XFS (loop2): Unmounting Filesystem
[  189.768507][ T5961] usb 7-1: Using ep0 maxpacket: 16
[  189.777764][ T7905] loop4: detected capacity change from 0 to 256
[  189.888909][ T5961] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  189.896969][ T5961] usb 7-1: config 0 has no interface number 0
[  189.933861][   T26] audit: type=1800 audit(1781878994.948:12): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1187" name="file1" dev="loop4" ino=1048617 res=0 errno=0
[  189.956204][ T7905] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  190.002743][ T7905] FAT-fs (loop4): Filesystem has been set read-only
[  190.088249][ T5961] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  190.118522][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.126783][ T5961] usb 7-1: Product: syz
[  190.158226][ T5961] usb 7-1: Manufacturer: syz
[  190.169401][ T5961] usb 7-1: SerialNumber: syz
[  190.187570][ T5961] usb 7-1: config 0 descriptor??
[  190.234417][ T7883] loop5: detected capacity change from 0 to 32768
[  190.275392][ T7883] XFS: attr2 mount option is deprecated.
[  190.295875][ T7883] XFS (loop5): sunit and swidth options incompatible with the noalign option
[  190.478114][ T5961] usb 7-1: selecting invalid altsetting 1
[  190.488220][ T5961] speedtch 7-1:0.1: speedtch_bind: setting interface to  1 failed (-22)!
[  190.514782][ T5961] speedtch 7-1:0.1: usbatm_usb_probe: bind failed: -22!
[  190.533187][ T5961] speedtch: probe of 7-1:0.1 failed with error -22
[  190.550894][ T5961] usb 7-1: USB disconnect, device number 8
[  190.790358][ T7931] program syz.2.1196 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.097341][ T7942] program syz.6.1202 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.106813][   T23] Bluetooth: hci2: command 0x0406 tx timeout
[  191.107640][ T1111] Bluetooth: hci3: command 0x0406 tx timeout
[  191.150813][ T1111] Bluetooth: hci4: command 0x0406 tx timeout
[  191.538530][ T4234] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  191.904418][ T4234] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  191.914913][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.008141][ T4234] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  192.026477][ T4234] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  192.045765][ T4234] usb 6-1: Manufacturer: syz
[  192.056961][ T4234] usb 6-1: config 0 descriptor??
[  192.191606][ T7985] loop4: detected capacity change from 0 to 512
[  192.198484][ T4234] rc_core: IR keymap rc-hauppauge not found
[  192.204437][ T4234] Registered IR keymap rc-empty
[  192.226255][ T7974] loop2: detected capacity change from 0 to 32768
[  192.235640][ T4234] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  192.269759][ T4234] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13
[  192.380175][ T7988] loop6: detected capacity change from 0 to 128
[  192.403590][ T7985] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  192.469557][ T7988] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  192.498818][ T7988] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  192.597930][    C0] igorplugusb 6-1:0.0: receive overflow invalid: 122
[  192.629190][ T7988] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[  192.653523][ T7988] FAT-fs (loop6): Filesystem has been set read-only
[  192.711670][ T5722] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  192.815377][ T1111] usb 6-1: USB disconnect, device number 9
[  193.008254][ T1108] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  193.015990][   T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  193.080136][ T7998] loop2: detected capacity change from 0 to 4096
[  193.120442][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1228'.
[  193.279495][ T1108] usb 2-1: Using ep0 maxpacket: 32
[  193.398508][ T1108] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  193.417872][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.441999][ T1108] usb 2-1: config 0 descriptor??
[  193.488604][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.502663][ T8007] device bond_slave_0 entered promiscuous mode
[  193.509895][ T8007] device bond_slave_1 entered promiscuous mode
[  193.520505][ T1108] gspca_main: nw80x-2.14.0 probing 055f:d001
[  193.528148][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.563104][ T8007] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  193.594354][ T8007] device bond_slave_0 left promiscuous mode
[  193.600412][ T8007] device bond_slave_1 left promiscuous mode
[  193.640234][ T8011] loop5: detected capacity change from 0 to 512
[  193.648254][   T23] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  193.657336][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  193.686387][   T23] usb 5-1: SerialNumber: syz
[  193.704358][ T8011] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  193.792048][ T8013] loop2: detected capacity change from 0 to 2048
[  193.812554][ T8011] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.1233: Invalid block bitmap block 0 in block_group 0
[  193.828552][ T8013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.905645][ T8011] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  193.928010][ T8011] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.1233: attempt to clear invalid blocks 983261 len 1
[  193.979670][ T8011] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1233: Invalid inode table block 0 in block_group 0
[  193.997171][   T23] usb 5-1: 0:2 : does not exist
[  194.018035][ T8011] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  194.030204][   T23] usb 5-1: USB disconnect, device number 12
[  194.066860][ T8011] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  194.084084][ T8011] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1233: Invalid inode table block 0 in block_group 0
[  194.146247][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.152641][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.197909][ T1108] gspca_nw80x: reg_w err -71
[  194.202735][ T1108] nw80x: probe of 2-1:0.0 failed with error -71
[  194.217288][ T8011] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  194.235623][ T1108] usb 2-1: USB disconnect, device number 10
[  194.261247][ T8011] EXT4-fs error (device loop5): ext4_truncate:4286: inode #11: comm syz.5.1233: mark_inode_dirty error
[  194.318758][ T8011] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  194.339035][ T8011] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1233: Invalid inode table block 0 in block_group 0
[  194.353508][ T4371] udevd[4371]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.386701][ T8011] EXT4-fs (loop5): 1 truncate cleaned up
[  194.392712][ T8011] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,max_dir_size_kb=0x0000000000000009,nodioread_nolock,jqfmt=vfsold,,errors=continue. Quota mode: none.
[  194.396952][ T8026] loop2: detected capacity change from 0 to 8192
[  194.457169][ T8011] EXT4-fs (loop5): Ignoring removed bh option
[  194.474778][ T8026] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  194.484856][ T8011] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring
[  194.508958][ T8026] REISERFS (device loop2): using ordered data mode
[  194.529541][ T8026] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  194.546480][ T8026] REISERFS (device loop2): checking transaction log (loop2)
[  194.555103][ T8026] REISERFS (device loop2): Using r5 hash to sort names
[  194.563016][ T8026] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  194.576902][ T8026] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  194.586080][ T4239] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  194.741570][ T8031] loop1: detected capacity change from 0 to 256
[  194.920318][ T8031] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  194.968234][ T4239] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  194.995313][ T8031] FAT-fs (loop1): Filesystem has been set read-only
[  195.013199][ T4239] usb 7-1: config 0 interface 0 has no altsetting 0
[  195.030520][ T8039] bridge0: port 2(bridge_slave_1) entered listening state
[  195.050767][ T8031] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  195.061804][ T4239] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  195.087940][ T4239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.098215][ T8031] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  195.129928][ T4239] usb 7-1: config 0 descriptor??
[  195.157159][   T26] audit: type=1800 audit(1781879000.168:13): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1243" name="file1" dev="loop1" ino=1048623 res=0 errno=0
[  195.189750][ T8039] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.208451][ T8024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  195.220022][ T8031] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001)
[  195.352705][ T5961] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  195.597892][ T5961] usb 3-1: Using ep0 maxpacket: 8
[  195.666796][ T4239] prodikeys 0003:041E:2801.000C: unknown main item tag 0x2
[  195.681892][ T4239] prodikeys 0003:041E:2801.000C: unknown main item tag 0x6
[  195.697663][ T4239] prodikeys 0003:041E:2801.000C: ignoring exceeding usage max
[  195.720120][ T4239] prodikeys 0003:041E:2801.000C: hidraw0: USB HID v0.c1 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input0
[  195.725670][ T5961] usb 3-1: config 0 has no interfaces?
[  195.768317][ T5961] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  195.777413][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.814788][ T8063] loop1: detected capacity change from 0 to 2048
[  195.837747][ T5961] usb 3-1: config 0 descriptor??
[  195.912342][ T4239] usb 7-1: USB disconnect, device number 9
[  195.934327][ T8063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.950640][ T8066] fido_id[8066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  196.242707][ T8049] loop4: detected capacity change from 0 to 32768
[  196.481778][ T8085] Â: renamed from pim6reg1
[  196.603935][   T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  196.752142][ T8098] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1272'.
[  196.792982][ T8100] loop6: detected capacity change from 0 to 512
[  196.858122][   T23] usb 2-1: Using ep0 maxpacket: 32
[  196.864648][ T8100] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  196.896365][ T8100] EXT4-fs (loop6): 1 truncate cleaned up
[  196.905780][ T8100] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  196.998084][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  197.005975][   T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[  197.020552][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.069410][   T23] usb 2-1: config 0 descriptor??
[  197.570114][   T23] logitech 0003:046D:C287.000D: unknown main item tag 0xe
[  197.581938][   T23] logitech 0003:046D:C287.000D: unknown main item tag 0xd
[  197.597227][   T23] logitech 0003:046D:C287.000D: unknown main item tag 0x1
[  197.628500][   T23] logitech 0003:046D:C287.000D: hidraw0: USB HID v0.04 Device [HID 046d:c287] on usb-dummy_hcd.1-1/input0
[  197.653628][   T23] logitech 0003:046D:C287.000D: no inputs found
[  197.771876][   T23] usb 2-1: USB disconnect, device number 11
[  197.784458][ T8116] loop5: detected capacity change from 0 to 4096
[  197.795600][ T8110] loop6: detected capacity change from 0 to 32768
[  197.813484][ T8117] fido_id[8117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  197.914837][ T8118] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.032643][ T4234] usb 3-1: USB disconnect, device number 13
[  198.088421][   T26] audit: type=1800 audit(1781879003.108:14): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1279" name="file1" dev="loop5" ino=15 res=0 errno=0
[  198.157229][ T8114] add_index: next_index = 0.  Resetting!
[  198.173289][ T8114] find_entry called with index >= next_index
[  198.183867][ T8114] find_entry called with index >= next_index
[  198.190641][ T8114] find_entry called with index >= next_index
[  198.196943][ T8114] find_entry called with index >= next_index
[  198.232042][ T8114] non-latin1 character 0x3ff found in JFS file name
[  198.275237][ T8114] mount with iocharset=utf8 to access
[  198.698187][ T1108] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  198.833847][ T8154] Cannot find add_set index 4 as target
[  198.977978][ T1108] usb 3-1: Using ep0 maxpacket: 8
[  199.103489][ T1108] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  199.123955][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  199.150235][ T1108] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  199.173047][ T1108] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  199.230499][ T1108] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  199.253902][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.427476][ T8146] set_capacity_and_notify: 1 callbacks suppressed
[  199.427492][ T8146] loop5: detected capacity change from 0 to 32768
[  199.488583][ T1111] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  199.548346][ T1108] usb 3-1: GET_CAPABILITIES returned 0
[  199.562274][ T1108] usbtmc 3-1:16.0: can't read capabilities
[  199.808262][ T8133] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32
[  199.829635][ T4685] usb 3-1: USB disconnect, device number 14
[  199.868119][ T1111] usb 5-1: config 0 has an invalid interface number: 70 but max is 0
[  199.876297][ T1111] usb 5-1: config 0 has no interface number 0
[  199.906729][ T1111] usb 5-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[  199.938515][ T1111] usb 5-1: config 0 interface 70 altsetting 5 has an invalid endpoint with address 0xE3, skipping
[  199.952026][ T8173] loop6: detected capacity change from 0 to 2048
[  199.974351][ T1111] usb 5-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  199.995394][ T1111] usb 5-1: config 0 interface 70 has no altsetting 0
[  200.097251][ T8173] EXT4-fs (loop6): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  200.127639][ T8173] EXT4-fs (loop6): shut down requested (1)
[  200.158543][ T1111] usb 5-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e
[  200.178540][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.186715][ T1111] usb 5-1: Product: syz
[  200.192166][ T1111] usb 5-1: Manufacturer: syz
[  200.196805][ T1111] usb 5-1: SerialNumber: syz
[  200.214754][ T1111] usb 5-1: config 0 descriptor??
[  200.239059][ T8158] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  200.579436][ T1111] ti_usb_3410_5052 5-1:0.70: TI USB 3410 1 port adapter converter detected
[  200.597190][ T8200] loop2: detected capacity change from 0 to 16
[  200.603915][ T1111] ti_usb_3410_5052 5-1:0.70: missing endpoints
[  200.635514][ T8203] loop5: detected capacity change from 0 to 64
[  200.656441][ T1111] usb 5-1: USB disconnect, device number 13
[  200.696449][ T8200] erofs: (device loop2): mounted with root inode @ nid 36.
[  200.819033][ T8200] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89
[  200.840720][ T8200] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89
[  200.896235][ T8200] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89
[  200.935091][   T26] audit: type=1800 audit(1781879005.948:15): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1313" name="file2" dev="loop2" ino=89 res=0 errno=0
[  201.064209][ T8215] loop6: detected capacity change from 0 to 1024
[  201.201436][ T8223] netlink: 'syz.5.1325': attribute type 3 has an invalid length.
[  201.248228][ T8223] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1325'.
[  201.301160][ T8222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.448460][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'.
[  201.461122][ T8234] loop1: detected capacity change from 0 to 256
[  201.548568][   T26] audit: type=1800 audit(1781879006.568:16): pid=8234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1330" name="file1" dev="loop1" ino=1048624 res=0 errno=0
[  201.679430][ T8246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1335'.
[  201.773284][ T8246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1335'.
[  202.165091][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  202.190257][ T8266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  202.360508][ T8276] loop2: detected capacity change from 0 to 64
[  202.495700][ T8282] loop5: detected capacity change from 0 to 1024
[  202.639095][ T8282] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  202.667222][ T8289] loop2: detected capacity change from 0 to 2048
[  202.685480][ T8282] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.723463][ T8289] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=301129, location=301129
[  202.761425][ T8289] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.800557][   T26] audit: type=1800 audit(1781879007.818:17): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1353" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  202.826976][ T8282] EXT4-fs (loop5): shut down requested (2)
[  203.095681][ T8306] loop5: detected capacity change from 0 to 1024
[  203.533188][ T8312] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  203.547331][ T8312] REISERFS (device loop5): using ordered data mode
[  203.554932][ T8312] reiserfs: using flush barriers
[  203.570826][ T8312] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  203.588782][ T8312] REISERFS (device loop5): checking transaction log (loop5)
[  203.599569][ T8312] REISERFS (device loop5): Using r5 hash to sort names
[  203.606971][ T8312] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  203.621492][ T8312] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  203.998352][ T8332] syzkaller1: tun_chr_ioctl cmd 1074025677
[  204.021050][ T8332] syzkaller1: linktype set to 773
[  204.343031][ T8346] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  204.706920][ T8370] netlink: 'syz.5.1389': attribute type 1 has an invalid length.
[  204.998197][   T23] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  205.039413][ T8385] set_capacity_and_notify: 4 callbacks suppressed
[  205.039430][ T8385] loop4: detected capacity change from 0 to 64
[  205.057758][ T8383] netlink: 'syz.5.1395': attribute type 1 has an invalid length.
[  205.294144][ T8369] loop2: detected capacity change from 0 to 32768
[  205.369268][ T8369] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  205.396110][ T8369] BTRFS info (device loop2): setting nodatasum
[  205.410963][ T8369] BTRFS info (device loop2): force zlib compression, level 3
[  205.422922][ T8369] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  205.436965][ T8369] BTRFS info (device loop2): use lzo compression, level 0
[  205.444621][   T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  205.463874][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  205.485821][ T8369] BTRFS info (device loop2): turning on flush-on-commit
[  205.518520][   T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  205.533041][ T8369] BTRFS info (device loop2): enabling auto defrag
[  205.562739][ T8369] BTRFS info (device loop2): max_inline at 4096
[  205.575818][   T23] usb 2-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00
[  205.585485][ T8369] BTRFS info (device loop2): using free space tree
[  205.601235][ T8369] BTRFS info (device loop2): has skinny extents
[  205.607755][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.628706][   T23] usb 2-1: config 0 descriptor??
[  205.658321][ T8365] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  205.729145][ T8369] BTRFS info (device loop2): enabling ssd optimizations
[  206.143539][   T23] wacom 0003:056A:00E5.000E: ignoring exceeding usage max
[  206.166959][   T23] wacom 0003:056A:00E5.000E: unknown main item tag 0x0
[  206.199460][   T23] wacom 0003:056A:00E5.000E: unknown main item tag 0x2
[  206.258521][   T23] wacom 0003:056A:00E5.000E: hidraw0: USB HID v0.05 Device [HID 056a:00e5] on usb-dummy_hcd.1-1/input0
[  206.328795][ T4179] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4179)
[  206.664814][ T4235] usb 2-1: USB disconnect, device number 12
[  206.673053][ T8443] Bluetooth: hci0: command 0x0406 tx timeout
[  207.162062][ T8460] loop2: detected capacity change from 0 to 512
[  207.294364][ T8460] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  207.360448][ T8441] loop4: detected capacity change from 0 to 32768
[  207.492828][ T8441] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt
[  207.492828][ T8441] 
[  207.581919][ T8441] ERROR: (device loop4): remounting filesystem as read-only
[  207.840295][ T8441] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  207.840295][ T8441] 
[  207.949922][ T8441] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt
[  207.949922][ T8441] 
[  208.295475][ T8469] loop5: detected capacity change from 0 to 131072
[  208.364169][ T8458] loop1: detected capacity change from 0 to 32768
[  208.414099][ T8469] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[  208.421068][ T8469] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  208.434133][ T8469] F2FS-fs (loop5): invalid crc value
[  208.446891][ T8469] F2FS-fs (loop5): Found nat_bits in checkpoint
[  208.499281][ T8469] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  208.506412][ T8469] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  208.591769][ T8469] F2FS-fs (loop5): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix
[  208.618198][ T8443] Bluetooth: hci5: command 0x1003 tx timeout
[  208.638207][ T4201] Bluetooth: hci5: sending frame failed (-49)
[  209.162749][ T8498] sp0: Synchronizing with TNC
[  209.202603][ T8498] sp0: Found TNC
[  209.448191][   T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  209.728056][   T23] usb 5-1: Using ep0 maxpacket: 16
[  209.875834][ T8492] loop5: detected capacity change from 0 to 32768
[  209.908165][   T23] usb 5-1: unable to get BOS descriptor or descriptor too short
[  209.956241][ T8512] loop1: detected capacity change from 0 to 256
[  210.012058][ T8492] XFS (loop5): Mounting V5 Filesystem
[  210.028157][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.039631][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  210.100761][ T8492] XFS (loop5): Ending clean mount
[  210.114597][ T8512] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246dc941, utbl_chksum : 0xe619d30d)
[  210.238181][   T23] usb 5-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40
[  210.250333][ T8492] XFS (loop5): Quotacheck needed: Please wait.
[  210.257054][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.281483][   T23] usb 5-1: Product: syz
[  210.286078][   T23] usb 5-1: Manufacturer: syz
[  210.301239][   T23] usb 5-1: SerialNumber: syz
[  210.370276][ T8526] loop2: detected capacity change from 0 to 256
[  210.425575][ T8528] loop1: detected capacity change from 0 to 16
[  210.475499][ T8526] FAT-fs (loop2): Directory bread(block 64) failed
[  210.499827][ T8526] FAT-fs (loop2): Directory bread(block 65) failed
[  210.513369][ T8492] XFS (loop5): Quotacheck: Done.
[  210.518812][ T8528] erofs: (device loop1): mounted with root inode @ nid 36.
[  210.548453][ T8526] FAT-fs (loop2): Directory bread(block 66) failed
[  210.555602][ T8526] FAT-fs (loop2): Directory bread(block 67) failed
[  210.583552][ T8528] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  210.589334][ T8526] FAT-fs (loop2): Directory bread(block 68) failed
[  210.610237][ T8526] FAT-fs (loop2): Directory bread(block 69) failed
[  210.624649][ T8528] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851]
[  210.678259][   T23] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[  210.687158][ T8526] FAT-fs (loop2): Directory bread(block 70) failed
[  210.694312][ T8528] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117]
[  210.703808][ T8526] FAT-fs (loop2): Directory bread(block 71) failed
[  210.711979][ T4234] Bluetooth: hci5: command 0x1001 tx timeout
[  210.723558][   T23] usb 5-1: USB disconnect, device number 14
[  210.729530][ T8526] FAT-fs (loop2): Directory bread(block 72) failed
[  210.729571][ T8526] FAT-fs (loop2): Directory bread(block 73) failed
[  210.740036][ T4201] Bluetooth: hci5: sending frame failed (-49)
[  210.844319][ T4505] XFS (loop5): Unmounting Filesystem
[  211.435186][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'.
[  211.487541][ T8549] IPv6: ADDRCONF(NETDEV_CHANGE): nr16: link becomes ready
[  211.529657][ T8553] loop2: detected capacity change from 0 to 256
[  211.595699][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1460'.
[  211.667075][ T8563] loop1: detected capacity change from 0 to 64
[  212.090430][ T8581] netlink: 'syz.5.1470': attribute type 1 has an invalid length.
[  212.214805][ T8585] block nbd0: server does not support multiple connections per device.
[  212.258848][ T8585] block nbd0: shutting down sockets
[  212.317087][ T8589] mkiss: ax0: crc mode is auto.
[  212.587496][ T8604] loop4: detected capacity change from 0 to 512
[  212.605131][ T8605] ieee802154 phy0 wpan0: encryption failed: -22
[  212.661381][ T8604] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  212.688350][ T8604] EXT4-fs (loop4): invalid journal inode
[  212.694325][ T8604] EXT4-fs (loop4): can't get journal size
[  212.753864][ T8604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002]
[  212.778286][ T4234] Bluetooth: hci5: command 0x1009 tx timeout
[  212.793861][ T8604] System zones: 1-12, 13-13
[  212.804547][ T8604] EXT4-fs (loop4): 1 truncate cleaned up
[  212.837918][ T8604] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,grpquota,debug,discard,,errors=continue. Quota mode: writeback.
[  212.898414][   T26] audit: type=1800 audit(1781879535.915:18): pid=8604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1481" name="file1" dev="loop4" ino=15 res=0 errno=0
[  213.350083][ T8625] loop4: detected capacity change from 0 to 1024
[  213.428747][ T4283] hfsplus: b-tree write err: -5, ino 25
[  213.448053][ T4283] hfsplus: b-tree write err: -5, ino 4
[  213.454162][ T4283] hfsplus: b-tree write err: -5, ino 2
[  213.765194][ T8615] loop1: detected capacity change from 0 to 32768
[  213.892689][ T8647] loop2: detected capacity change from 0 to 128
[  213.908477][ T8615] XFS (loop1): Mounting V5 Filesystem
[  214.008235][ T8647] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x00000000000000da,,errors=continue. Quota mode: none.
[  214.027249][ T8647] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  214.032474][ T8615] XFS (loop1): Ending clean mount
[  214.068111][ T4234] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  214.081483][ T8615] XFS (loop1): Quotacheck needed: Please wait.
[  214.119227][ T8654] loop5: detected capacity change from 0 to 1764
[  214.191394][ T8615] XFS (loop1): Quotacheck: Done.
[  214.308017][ T4234] usb 5-1: Using ep0 maxpacket: 32
[  214.351524][ T4191] XFS (loop1): Unmounting Filesystem
[  214.508172][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.541966][ T4234] usb 5-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  214.564106][ T4234] usb 5-1: config 1 interface 0 has no altsetting 0
[  214.701134][ T8669] netlink: 984 bytes leftover after parsing attributes in process `syz.2.1506'.
[  214.739308][ T4234] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  214.786367][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.822671][ T4234] usb 5-1: Product: syz
[  214.826990][ T4234] usb 5-1: Manufacturer: syz
[  214.849415][ T4234] usb 5-1: SerialNumber: syz
[  215.035586][ T8684] loop1: detected capacity change from 0 to 16
[  215.103584][ T8684] erofs: (device loop1): mounted with root inode @ nid 36.
[  215.144230][ T8684] attempt to access beyond end of device
[  215.144230][ T8684] loop1: rw=0, want=40, limit=16
[  215.171589][ T8684] attempt to access beyond end of device
[  215.171589][ T8684] loop1: rw=0, want=40, limit=16
[  215.190782][ T4234] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input17
[  215.197045][ T8684] attempt to access beyond end of device
[  215.197045][ T8684] loop1: rw=524288, want=48, limit=16
[  215.205338][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1514'.
[  215.228313][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1514'.
[  215.238490][ T8684] attempt to access beyond end of device
[  215.238490][ T8684] loop1: rw=524288, want=40, limit=16
[  215.250923][ T3546] bcm5974 5-1:1.0: could not read from device
[  215.283620][ T4234] usb 5-1: USB disconnect, device number 15
[  215.292591][ T3546] bcm5974 5-1:1.0: could not read from device
[  215.578247][   T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  215.600779][ T8705] loop5: detected capacity change from 0 to 256
[  215.993719][   T23] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  216.008197][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.108160][   T23] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  216.122997][   T23] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  216.132710][   T23] usb 3-1: Manufacturer: syz
[  216.142303][   T23] usb 3-1: config 0 descriptor??
[  216.265085][ T8720] loop4: detected capacity change from 0 to 32768
[  216.334583][ T8720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1530 (8720)
[  216.340187][   T23] rc_core: IR keymap rc-hauppauge not found
[  216.376605][   T23] Registered IR keymap rc-empty
[  216.402109][   T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  216.426805][   T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18
[  216.486097][ T8720] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  216.494998][ T8720] BTRFS info (device loop4): using free space tree
[  216.502108][ T8720] BTRFS info (device loop4): has skinny extents
[  216.744269][ T8720] BTRFS info (device loop4): enabling ssd optimizations
[  216.757909][    C1] igorplugusb 3-1:0.0: receive overflow, at least 11 lost
[  217.213822][ T4371] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4371)
[  217.350741][ T8778] loop1: detected capacity change from 0 to 4096
[  217.447476][   T23] usb 3-1: USB disconnect, device number 15
[  217.533582][ T8778] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  217.590442][ T8778] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  217.655108][ T8778] ntfs3: loop1: Failed to load $Extend.
[  218.021990][ T8807] loop4: detected capacity change from 0 to 512
[  218.109764][ T8807] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  218.237939][ T8807] EXT4-fs (loop4): Remounting filesystem read-only
[  218.268964][ T8807] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1555: invalid indirect mapped block 4278190080 (level 0)
[  218.395681][ T8807] EXT4-fs (loop4): Remounting filesystem read-only
[  218.430409][ T8807] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1555: invalid indirect mapped block 1 (level 1)
[  218.474436][ T8807] EXT4-fs (loop4): Remounting filesystem read-only
[  218.488677][ T8807] EXT4-fs (loop4): 1 truncate cleaned up
[  218.497900][ T8807] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none.
[  218.854081][ T8831] loop4: detected capacity change from 0 to 64
[  218.967239][ T8831] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  219.063581][ T8823] loop2: detected capacity change from 0 to 32768
[  219.165623][ T8823] XFS (loop2): Mounting V5 Filesystem
[  219.273830][ T8844] loop5: detected capacity change from 0 to 4096
[  219.288091][   T23] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  219.348544][ T8823] XFS (loop2): Ending clean mount
[  219.355637][ T8823] XFS (loop2): Quotacheck needed: Please wait.
[  219.435896][ T8851] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.551456][ T8823] XFS (loop2): Quotacheck: Done.
[  219.587301][ T8854] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  219.687298][ T8819] loop1: detected capacity change from 0 to 32768
[  219.711379][ T4192] XFS (loop2): Unmounting Filesystem
[  219.731114][   T23] usb 7-1: unable to get BOS descriptor or descriptor too short
[  219.802661][ T8819] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  219.821092][ T8819] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  219.832116][   T23] usb 7-1: not running at top speed; connect to a high speed hub
[  219.940208][   T23] usb 7-1: config 66 has an invalid interface number: 119 but max is 0
[  219.964348][ T8819] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  219.978503][   T23] usb 7-1: config 66 has no interface number 0
[  219.984747][   T23] usb 7-1: config 66 interface 119 altsetting 12 has an invalid endpoint with address 0x80, skipping
[  220.033579][ T1111] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  220.037293][   T23] usb 7-1: config 66 interface 119 has no altsetting 0
[  220.052402][ T1111] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  220.281968][ T1111] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 229ms
[  220.306350][ T1111] gfs2: fsid=syz:syz.0: jid=0: Done
[  220.309396][   T23] usb 7-1: New USB device found, idVendor=d1f5, idProduct=e958, bcdDevice=cf.28
[  220.320654][ T8819] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  220.376932][   T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.394602][   T23] usb 7-1: Product: syz
[  220.399839][   T23] usb 7-1: Manufacturer: syz
[  220.404900][   T23] usb 7-1: SerialNumber: syz
[  220.764472][ T8886] loop2: detected capacity change from 0 to 512
[  220.773440][   T23] usb 7-1: bad CDC descriptors
[  220.794509][   T23] usb 7-1: bad CDC descriptors
[  220.838896][   T23] usb 7-1: USB disconnect, device number 10
[  220.854208][ T8886] EXT4-fs (loop2): 1 orphan inode deleted
[  220.900760][ T8886] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  220.928105][ T4238] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  220.956335][ T8819] gfs2: fsid=syz:syz.0: found 1 quota changes
[  220.976838][ T8886] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.988172][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'.
[  220.997935][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'.
[  221.180959][ T8893] loop4: detected capacity change from 0 to 512
[  221.276463][ T4191] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  221.297548][ T8893] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  221.352011][ T8893] EXT4-fs (loop4): orphan cleanup on readonly fs
[  221.376157][ T4191] CPU: 0 PID: 4191 Comm: syz-executor Not tainted syzkaller #0
[  221.383762][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  221.393850][ T4191] Call Trace:
[  221.397241][ T4191]  <TASK>
[  221.400205][ T4191]  dump_stack_lvl+0x188/0x250
[  221.404929][ T4191]  ? show_regs_print_info+0x20/0x20
[  221.410175][ T4191]  ? load_image+0x410/0x410
[  221.414727][ T4191]  ? do_raw_spin_unlock+0x11d/0x230
[  221.419955][ T4191]  gfs2_assert_warn_i+0x187/0x2c0
[  221.425017][ T4191]  gfs2_quota_cleanup+0x48c/0x670
[  221.430117][ T4191]  gfs2_make_fs_ro+0x523/0x620
[  221.431233][ T4238] usb 6-1: unable to get BOS descriptor or descriptor too short
[  221.434912][ T4191]  ? do_raw_spin_unlock+0x11d/0x230
[  221.447762][ T4191]  ? gfs2_dinode_out+0xb00/0xb00
[  221.452732][ T4191]  ? __lock_acquire+0x7b50/0x7b50
[  221.457797][ T4191]  ? do_raw_spin_lock+0x128/0x2f0
[  221.462850][ T4191]  ? __rwlock_init+0x140/0x140
[  221.467620][ T4191]  ? do_raw_spin_unlock+0x11d/0x230
[  221.472820][ T4191]  gfs2_put_super+0x1d2/0x7c0
[  221.477600][ T4191]  ? gfs2_evict_inode+0x1340/0x1340
[  221.483432][ T4191]  generic_shutdown_super+0x130/0x300
[  221.486677][ T8893] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1586: invalid indirect mapped block 4294967295 (level 1)
[  221.488880][ T4191]  kill_block_super+0x7c/0xe0
[  221.488911][ T4191]  deactivate_locked_super+0x93/0xf0
[  221.488935][ T4191]  cleanup_mnt+0x426/0x4d0
[  221.517262][ T4191]  task_work_run+0x125/0x1a0
[  221.520127][ T8893] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1586: invalid indirect mapped block 4294967295 (level 1)
[  221.521915][ T4191]  exit_to_user_mode_loop+0x10f/0x130
[  221.541225][ T4191]  exit_to_user_mode_prepare+0xee/0x180
[  221.546161][ T8893] EXT4-fs (loop4): 2 truncates cleaned up
[  221.546810][ T4191]  syscall_exit_to_user_mode+0x16/0x40
[  221.554893][ T8893] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,min_batch_time=0x0000000000000007,jqfmt=vfsv0,delalloc,,errors=continue. Quota mode: writeback.
[  221.558055][ T4191]  do_syscall_64+0x58/0xa0
[  221.558083][ T4191]  ? clear_bhb_loop+0x30/0x80
[  221.558106][ T4191]  ? clear_bhb_loop+0x30/0x80
[  221.588570][ T4191]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  221.594527][ T4191] RIP: 0033:0x7f79dad32097
[  221.599089][ T4191] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  221.618746][ T4191] RSP: 002b:00007fff7dab8df8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  221.627207][ T4191] RAX: 0000000000000000 RBX: 00007f79dadc62ca RCX: 00007f79dad32097
[  221.635219][ T4191] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7dab8eb0
[  221.643238][ T4191] RBP: 00007fff7dab8eb0 R08: 00007fff7dab9eb0 R09: 00000000ffffffff
[  221.651253][ T4191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff7dab9f40
[  221.659258][ T4191] R13: 00007f79dadc62ca R14: 0000000000035fb4 R15: 00007fff7dab9f80
[  221.667279][ T4191]  </TASK>
[  221.670348][    C0] vkms_vblank_simulate: vblank timer overrun
[  221.823588][ T4238] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40
[  221.851558][ T4238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.860764][ T4238] usb 6-1: Product: syz
[  221.864987][ T4238] usb 6-1: Manufacturer: syz
[  221.870478][ T4238] usb 6-1: SerialNumber: syz
[  221.937473][   T26] audit: type=1326 audit(1781879544.945:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8911 comm="syz.4.1594" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4fddf9e59 code=0x0
[  221.960988][    C0] vkms_vblank_simulate: vblank timer overrun
[  221.990848][ T8913] loop4: detected capacity change from 0 to 16
[  222.082853][ T8913] erofs: (device loop4): EXPERIMENTAL big pcluster feature in use. Use at your own risk!
[  222.115759][ T8913] erofs: (device loop4): mounted with root inode @ nid 36.
[  222.128052][ T1111] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  222.370015][   T26] audit: type=1326 audit(1781879545.385:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8921 comm="syz.1.1597" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79dad30e59 code=0x0
[  222.394917][ T1111] usb 3-1: Using ep0 maxpacket: 16
[  222.517986][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.545114][ T1111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.555263][ T1111] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  222.568683][ T1111] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  222.578119][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.582572][ T8932] [U] 
[  222.589532][ T8932] [U] 
[  222.592270][ T8932] [U] 
[  222.595000][ T8932] [U] 
[  222.599394][ T8932] [U] 
[  222.602139][ T8932] [U] 
[  222.604866][ T8932] [U] 
[  222.607597][ T8932] [U] 
[  222.613221][ T8932] [U] 
[  222.615977][ T8932] [U] 
[  222.618721][ T8932] [U] 
[  222.621451][ T8932] [U] 
[  222.623826][ T1111] usb 3-1: config 0 descriptor??
[  222.628489][ T8932] [U] 
[  222.631926][ T8932] [U] 
[  222.634657][ T8932] [U] 
[  222.637389][ T8932] [U] 
[  222.644378][ T4238] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  222.652667][ T8932] [U] 
[  222.655420][ T8932] [U] 
[  222.658138][ T8932] [U] 
[  222.660890][ T8932] [U] 
[  222.664585][ T8932] [U] 
[  222.667319][ T8932] [U] 
[  222.670046][ T8932] [U] 
[  222.672774][ T8932] [U] 
[  222.687563][ T4238] usb 6-1: USB disconnect, device number 10
[  222.693951][ T8932] [U] 
[  222.725850][ T4371] udevd[4371]: setting mode of /dev/bus/usb/006/010 to 020664 failed: No such file or directory
[  222.752562][ T4371] udevd[4371]: setting owner of /dev/bus/usb/006/010 to uid=0, gid=0 failed: No such file or directory
[  222.939659][ T4371] udevd[4371]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  223.119942][ T1111] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0
[  223.145607][ T1111] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000F/input/input20
[  223.185895][ T1111] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  223.283290][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1611'.
[  223.347019][ T4238] usb 3-1: USB disconnect, device number 16
[  223.414155][ T8950] loop4: detected capacity change from 0 to 4096
[  223.496741][ T8950] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  223.536394][ T8957] fido_id[8957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  223.588365][ T8963] vivid-000: disconnect
[  223.637643][ T8960] vivid-000: reconnect
[  223.699952][ T8965] loop6: detected capacity change from 0 to 64
[  223.815929][ T8967] input: syz0 as /devices/virtual/input/input21
[  224.207171][ T8956] loop1: detected capacity change from 0 to 32768
[  224.250863][ T8976] openvswitch: netlink: Actions may not be safe on all matching packets
[  224.751695][ T8969] loop5: detected capacity change from 0 to 32768
[  224.802326][ T8974] loop4: detected capacity change from 0 to 32768
[  224.925498][ T8969] XFS (loop5): Mounting V5 Filesystem
[  224.978131][ T8974] XFS (loop4): Mounting V5 Filesystem
[  225.031578][ T8995] loop1: detected capacity change from 0 to 1024
[  225.079851][ T8974] XFS (loop4): Ending clean mount
[  225.147279][ T8969] XFS (loop5): Ending clean mount
[  225.242426][ T4505] XFS (loop5): Unmounting Filesystem
[  225.255041][ T4197] XFS (loop4): Unmounting Filesystem
[  225.627941][ T4238] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  225.793694][ T9017] loop2: detected capacity change from 0 to 256
[  225.996406][ T9017] FAT-fs (loop2): Directory bread(block 64) failed
[  226.024722][ T9017] FAT-fs (loop2): Directory bread(block 65) failed
[  226.057980][ T9017] FAT-fs (loop2): Directory bread(block 66) failed
[  226.068955][ T4238] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  226.087959][ T9017] FAT-fs (loop2): Directory bread(block 67) failed
[  226.105017][ T9017] FAT-fs (loop2): Directory bread(block 68) failed
[  226.108001][ T4238] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  226.144825][ T9017] FAT-fs (loop2): Directory bread(block 69) failed
[  226.167952][ T9017] FAT-fs (loop2): Directory bread(block 70) failed
[  226.184210][ T9012] loop6: detected capacity change from 0 to 32768
[  226.185919][ T9017] FAT-fs (loop2): Directory bread(block 71) failed
[  226.228209][ T4238] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  226.238076][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  226.247042][ T9017] FAT-fs (loop2): Directory bread(block 72) failed
[  226.264233][ T4238] usb 2-1: SerialNumber: syz
[  226.273187][ T9012] JBD2: Ignoring recovery information on journal
[  226.291151][ T9017] FAT-fs (loop2): Directory bread(block 73) failed
[  226.340897][ T4238] usb 2-1: 0:2 : does not exist
[  226.345854][ T4238] usb 2-1: unit 102 not found!
[  226.484040][ T9012] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  226.549559][ T4238] usb 2-1: USB disconnect, device number 13
[  226.567363][ T9012] (syz.6.1632,9012,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  226.662148][ T5722] ocfs2: Unmounting device (7,6) on (node local)
[  226.729465][ T9019] loop5: detected capacity change from 0 to 32768
[  227.295463][ T9048] loop6: detected capacity change from 0 to 1024
[  227.439988][ T9048] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  227.502614][ T9062] netlink: 'syz.5.1639': attribute type 4 has an invalid length.
[  227.610297][ T9060] loop4: detected capacity change from 0 to 4096
[  227.650117][ T9063] loop1: detected capacity change from 0 to 4096
[  227.852909][ T9060] ntfs3: loop4: MFT: r=1b, expect seq=1 instead of 0!
[  227.995120][ T4191] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  228.021204][ T9072] loop5: detected capacity change from 0 to 8192
[  228.051217][ T4191] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  228.068915][ T9072] FAT-fs (loop5): Unrecognized mount option "dīts" or missing value
[  228.295483][ T9084] IPVS: sh: FWM 4 0x00000004 - no destination available
[  228.611190][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'.
[  228.779936][ T9107] 9pnet: Insufficient options for proto=fd
[  228.817066][ T9109] loop5: detected capacity change from 0 to 7
[  228.829086][ T4371] Dev loop5: unable to read RDB block 7
[  228.835350][ T4371]  loop5: AHDI p1 p2 p3
[  228.840789][ T4371] loop5: partition table partially beyond EOD, truncated
[  228.848947][ T4371] loop5: p1 start 1601398130 is beyond EOD, truncated
[  228.855978][ T4371] loop5: p2 start 1702059890 is beyond EOD, truncated
[  228.868655][ T9109] Dev loop5: unable to read RDB block 7
[  228.881361][ T9109]  loop5: AHDI p1 p2 p3
[  228.889419][ T9109] loop5: partition table partially beyond EOD, truncated
[  228.906661][ T9109] loop5: p1 start 1601398130 is beyond EOD, truncated
[  228.936220][ T9109] loop5: p2 start 1702059890 is beyond EOD, truncated
[  229.122771][ T9115] loop6: detected capacity change from 0 to 256
[  229.243176][ T9115] FAT-fs (loop6): Directory bread(block 64) failed
[  229.310337][ T9126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.318489][ T9115] FAT-fs (loop6): Directory bread(block 65) failed
[  229.325147][ T9115] FAT-fs (loop6): Directory bread(block 66) failed
[  229.356549][ T9115] FAT-fs (loop6): Directory bread(block 67) failed
[  229.364346][ T9126] device bridge_slave_0 left promiscuous mode
[  229.373756][ T9115] FAT-fs (loop6): Directory bread(block 68) failed
[  229.382795][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.398528][ T9115] FAT-fs (loop6): Directory bread(block 69) failed
[  229.440539][ T9115] FAT-fs (loop6): Directory bread(block 70) failed
[  229.523599][ T9115] FAT-fs (loop6): Directory bread(block 71) failed
[  229.577960][ T9115] FAT-fs (loop6): Directory bread(block 72) failed
[  229.627995][ T9115] FAT-fs (loop6): Directory bread(block 73) failed
[  229.819503][ T9135] loop5: detected capacity change from 0 to 1024
[  230.312581][ T9144] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  230.347482][ T9123] F2FS-fs (loop1): Found nat_bits in checkpoint
[  230.435388][ T9123] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  230.455517][ T9123] F2FS-fs (loop1): sanity_check_inode: corrupted inode footer i_ino=7, ino,nid: [117440519, 7] run fsck to fix.
[  230.761651][ T9156] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  230.840768][ T9170] set_capacity_and_notify: 3 callbacks suppressed
[  230.840786][ T9170] loop6: detected capacity change from 0 to 512
[  230.942899][ T9170] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  230.970187][ T4234] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  231.053185][ T9170] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.1695: corrupted in-inode xattr
[  231.080714][ T9170] EXT4-fs (loop6): get orphan inode failed
[  231.140445][ T9170] EXT4-fs (loop6): mount failed
[  231.408236][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  231.447617][ T4234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  231.504524][ T4234] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  231.565889][ T4234] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  231.605600][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.636288][ T9195] loop6: detected capacity change from 0 to 256
[  231.653625][ T4234] usb 5-1: config 0 descriptor??
[  231.681121][ T9165] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  231.890766][ T9201] netlink: 'syz.2.1707': attribute type 25 has an invalid length.
[  231.933701][ T9201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1707'.
[  232.159860][ T4234] logitech 0003:046D:C295.0010: unknown main item tag 0x7
[  232.167609][ T4234] logitech 0003:046D:C295.0010: unknown main item tag 0x3
[  232.183275][ T4234] logitech 0003:046D:C295.0010: unexpected long global item
[  232.196920][ T4234] logitech 0003:046D:C295.0010: parse failed
[  232.252827][ T4234] logitech: probe of 0003:046D:C295.0010 failed with error -22
[  232.363689][ T4234] usb 5-1: USB disconnect, device number 16
[  232.759031][ T9238] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1722'.
[  232.806077][ T9238] x_tables: unsorted underflow at hook 2
[  232.936355][ T9242] sg_write: process 845 (syz.1.1724) changed security contexts after opening file descriptor, this is not allowed.
[  233.308016][ T9230] loop2: detected capacity change from 0 to 32768
[  233.391623][ T9230] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  233.551232][ T4192] XFS (loop2): Unmounting Filesystem
[  233.570692][ T9240] loop5: detected capacity change from 0 to 32768
[  233.624615][ T9240] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1723 (9240)
[  233.674754][ T9240] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  233.705820][ T9240] BTRFS info (device loop5): force zlib compression, level 3
[  233.792717][ T9240] BTRFS info (device loop5): force clearing of disk cache
[  233.825107][ T9240] BTRFS info (device loop5): setting nodatasum
[  233.856547][ T9240] BTRFS info (device loop5): use zlib compression, level 3
[  233.880117][ T9240] BTRFS info (device loop5): allowing degraded mounts
[  233.905673][ T9240] BTRFS info (device loop5): enabling disk space caching
[  233.941539][ T9240] BTRFS info (device loop5): disk space caching is enabled
[  233.974103][ T9240] BTRFS info (device loop5): has skinny extents
[  234.012096][ T9249] loop6: detected capacity change from 0 to 32768
[  234.268229][ T9249] XFS (loop6): Mounting V5 Filesystem
[  234.396073][ T9240] BTRFS info (device loop5): enabling ssd optimizations
[  234.414891][ T9240] BTRFS info (device loop5): clearing free space tree
[  234.504145][ T9240] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  234.518889][ T9240] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  234.527211][ T9249] XFS (loop6): Ending clean mount
[  234.583218][ T9249] XFS (loop6): Quotacheck needed: Please wait.
[  234.738955][ T9249] XFS (loop6): Quotacheck: Done.
[  235.249265][ T5722] XFS (loop6): Unmounting Filesystem
[  235.374294][ T9332] loop2: detected capacity change from 0 to 1024
[  235.380915][ T9324] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  235.609945][ T9336] program syz.2.1745 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  235.628316][ T9326] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  235.753392][ T9340] loop2: detected capacity change from 0 to 256
[  235.810796][ T9340] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  235.902251][ T9326] usb 6-1: Using ep0 maxpacket: 16
[  235.978303][ T9324] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  235.990281][ T9324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.006798][ T9324] usb 5-1: Product: syz
[  236.011449][ T9324] usb 5-1: Manufacturer: syz
[  236.016158][ T9324] usb 5-1: SerialNumber: syz
[  236.258509][ T9326] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  236.267587][ T9326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.288253][ T9326] usb 6-1: Product: syz
[  236.292466][ T9326] usb 6-1: Manufacturer: syz
[  236.297084][ T9326] usb 6-1: SerialNumber: syz
[  236.522772][ T9356] loop2: detected capacity change from 0 to 32768
[  236.595668][ T9356] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.1754 (9356)
[  236.655668][ T9356] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  236.673074][ T9356] BTRFS info (device loop2): using free space tree
[  236.693052][ T9356] BTRFS info (device loop2): has skinny extents
[  236.836241][ T9356] BTRFS info (device loop2): enabling ssd optimizations
[  236.928147][ T9326] snd-usb-audio: probe of 6-1:1.0 failed with error -71
[  236.940057][ T9326] usb 6-1: USB disconnect, device number 11
[  237.370921][ T9398] input: syz1 as /devices/virtual/input/input22
[  237.968854][ T9414] loop2: detected capacity change from 0 to 8
[  238.236773][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.303649][ T9402] loop5: detected capacity change from 0 to 32768
[  238.326652][ T9402] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1766 (9402)
[  238.404199][ T9402] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  238.419609][ T9402] BTRFS info (device loop5): setting nodatacow, compression disabled
[  238.428712][ T9402] BTRFS info (device loop5): force clearing of disk cache
[  238.435977][ T9402] BTRFS info (device loop5): disabling tree log
[  238.450066][ T9402] BTRFS info (device loop5): max_inline at 0
[  238.457613][ T9402] BTRFS info (device loop5): using free space tree
[  238.459169][ T9424] loop1: detected capacity change from 0 to 1024
[  238.492257][ T9402] BTRFS info (device loop5): has skinny extents
[  238.566049][ T9424] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.1774: lblock 2 mapped to illegal pblock 2 (length 1)
[  238.583521][ T9409] loop4: detected capacity change from 0 to 32768
[  238.623170][ T9424] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  238.631660][ T9324] rtl8150 5-1:1.0: couldn't reset the device
[  238.648092][ T9324] rtl8150: probe of 5-1:1.0 failed with error -5
[  238.677978][ T9424] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.1774: lblock 0 mapped to illegal pblock 48 (length 1)
[  238.680527][ T9409] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.1765 (9409)
[  238.718404][ T9424] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  238.748534][ T9324] usb 5-1: USB disconnect, device number 17
[  238.788431][ T9424] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.1774: Failed to acquire dquot type 0
[  238.808582][ T9424] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  238.855968][ T9402] BTRFS info (device loop5): clearing free space tree
[  238.863318][ T9402] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  238.874419][ T9402] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  238.900165][ T9409] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  238.901646][ T9402] BTRFS info (device loop5): creating free space tree
[  238.917196][ T9424] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.1774: mark_inode_dirty error
[  238.917205][ T9409] BTRFS info (device loop4): force zlib compression, level 3
[  238.930697][ T9409] BTRFS info (device loop4): turning on flush-on-commit
[  238.944707][ T9409] BTRFS info (device loop4): max_inline at 4096
[  238.951051][ T9409] BTRFS info (device loop4): using free space tree
[  238.957892][ T9409] BTRFS info (device loop4): has skinny extents
[  238.987109][ T9402] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  238.998530][ T9424] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  239.013492][ T9424] EXT4-fs (loop1): 1 orphan inode deleted
[  239.022040][ T9402] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  239.034063][ T4218] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  239.053951][ T9424] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[  239.198296][ T4218] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  239.206815][ T4218] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0
[  239.327937][ T9409] BTRFS info (device loop4): enabling ssd optimizations
[  239.364497][ T4191] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  239.467083][ T4191] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  239.522466][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1781'.
[  239.546689][ T4191] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  239.783275][ T9486] loop2: detected capacity change from 0 to 256
[  239.807353][ T9484] loop1: detected capacity change from 0 to 256
[  239.862854][   T26] audit: type=1800 audit(1781879562.875:21): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1779" name="file1" dev="loop1" ino=1048657 res=0 errno=0
[  239.916542][ T9484] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  240.004724][ T9484] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  240.058966][ T9486] FAT-fs (loop2): Directory bread(block 64) failed
[  240.086805][ T9486] FAT-fs (loop2): Directory bread(block 65) failed
[  240.126496][ T9486] FAT-fs (loop2): Directory bread(block 66) failed
[  240.167160][ T9486] FAT-fs (loop2): Directory bread(block 67) failed
[  240.174241][ T9486] FAT-fs (loop2): Directory bread(block 68) failed
[  240.186946][ T9486] FAT-fs (loop2): Directory bread(block 69) failed
[  240.187914][ T9488] loop6: detected capacity change from 0 to 8192
[  240.230776][ T9486] FAT-fs (loop2): Directory bread(block 70) failed
[  240.237553][ T9486] FAT-fs (loop2): Directory bread(block 71) failed
[  240.246726][ T9486] FAT-fs (loop2): Directory bread(block 72) failed
[  240.253594][ T9486] FAT-fs (loop2): Directory bread(block 73) failed
[  240.623429][ T9486] attempt to access beyond end of device
[  240.623429][ T9486] loop2: rw=2049, want=1344, limit=256
[  240.967619][ T9500] loop2: detected capacity change from 0 to 512
[  241.003974][ T9506] loop6: detected capacity change from 0 to 164
[  241.073264][ T9500] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  241.106170][ T9500] EXT4-fs (loop2): 1 truncate cleaned up
[  241.132372][ T9500] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noload,noinit_itable,noload,resgid=0x0000000000000000,auto_da_alloc,,errors=continue. Quota mode: none.
[  241.526901][ T9518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.724622][ T9505] set_capacity_and_notify: 1 callbacks suppressed
[  241.724638][ T9505] loop5: detected capacity change from 0 to 32768
[  241.908843][ T9505] UFO tlock:0xffffc900027f2240
[  241.925268][ T9522] team0: No ports can be present during mode change
[  241.973975][ T9516] loop2: detected capacity change from 0 to 32768
[  242.322220][ T9538] loop1: detected capacity change from 0 to 512
[  242.441435][ T9538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  242.515601][ T9538] EXT4-fs (loop1): 1 truncate cleaned up
[  242.540600][ T9538] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none.
[  243.215815][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1826'.
[  243.255532][ T9575] loop6: detected capacity change from 0 to 4096
[  243.282449][ T9584] sp0: Synchronizing with TNC
[  243.302702][ T9584] sp0: Found TNC
[  243.441957][ T4234] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  243.461344][ T9575] ntfs3: loop6: failed to convert "0080" to maciceland
[  243.544744][ T9594] futex_wake_op: syz.4.1830 tries to shift op by -1; fix this program
[  243.582388][ T9595] sp0: Synchronizing with TNC
[  243.593331][ T9595] sp0: Found TNC
[  243.621185][ T9596] fuse: Unexpected value for 'default_permissions'
[  243.980697][ T4234] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  244.004807][ T9616] loop5: detected capacity change from 0 to 256
[  244.011261][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.026065][ T4234] usb 2-1: Product: syz
[  244.035949][ T4234] usb 2-1: Manufacturer: syz
[  244.046070][ T4234] usb 2-1: SerialNumber: syz
[  244.060067][ T9616] FAT-fs (loop5): Unrecognized mount option "0xffffffffffffffff" or missing value
[  244.071064][ T4234] usb 2-1: config 0 descriptor??
[  244.109920][ T4234] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 014
[  244.167952][ T9612] loop6: detected capacity change from 0 to 8192
[  244.758157][ T4234] i2c i2c-1: failure reading functionality
[  244.774799][ T4234] i2c i2c-1: connected i2c-tiny-usb device
[  244.812228][ T4234] usb 2-1: USB disconnect, device number 14
[  244.911818][ T9649] loop4: detected capacity change from 0 to 1024
[  244.988191][ T9317] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  245.124632][ T9635] loop6: detected capacity change from 0 to 32768
[  245.173078][ T9635] JBD2: Ignoring recovery information on journal
[  245.234162][ T9635] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  245.268102][ T9317] usb 6-1: Using ep0 maxpacket: 32
[  245.428186][ T9317] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.461458][ T9317] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.500883][ T9667] loop2: detected capacity change from 0 to 256
[  245.619964][ T9635] (syz.6.1850,9635,0):ocfs2_read_blocks:239 ERROR: status = -12
[  245.670082][ T9317] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  245.686966][ T9635] (syz.6.1850,9635,0):ocfs2_trim_mainbm:7603 ERROR: status = -12
[  245.688355][ T9317] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  245.705783][ T9667] FAT-fs (loop2): Directory bread(block 64) failed
[  245.722914][ T9667] FAT-fs (loop2): Directory bread(block 65) failed
[  245.745103][ T9667] FAT-fs (loop2): Directory bread(block 66) failed
[  245.785952][ T9317] usb 6-1: Product: syz
[  245.795360][ T9667] FAT-fs (loop2): Directory bread(block 67) failed
[  245.795832][ T9317] usb 6-1: Manufacturer: syz
[  245.819363][ T9667] FAT-fs (loop2): Directory bread(block 68) failed
[  245.825958][ T9667] FAT-fs (loop2): Directory bread(block 69) failed
[  245.852194][ T9667] FAT-fs (loop2): Directory bread(block 70) failed
[  245.860439][ T9667] FAT-fs (loop2): Directory bread(block 71) failed
[  245.871134][ T5722] ocfs2: Unmounting device (7,6) on (node local)
[  245.879808][ T9667] FAT-fs (loop2): Directory bread(block 72) failed
[  245.886963][ T9317] hub 6-1:4.0: USB hub found
[  245.892285][ T9667] FAT-fs (loop2): Directory bread(block 73) failed
[  246.218333][ T9317] hub 6-1:4.0: 7 ports detected
[  246.248144][ T9317] hub 6-1:4.0: insufficient power available to use all downstream ports
[  246.394769][ T9665] loop1: detected capacity change from 0 to 32768
[  246.428079][ T9317] hub 6-1:4.0: hub_hub_status failed (err = -71)
[  246.433970][ T9685] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1872'.
[  246.447913][ T9317] hub 6-1:4.0: config failed, can't get hub status (err -71)
[  246.514329][ T9317] usb 6-1: USB disconnect, device number 12
[  246.786165][ T9689] set_capacity_and_notify: 1 callbacks suppressed
[  246.786181][ T9689] loop2: detected capacity change from 0 to 32768
[  246.818835][ T9680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  246.888104][ T9689] XFS (loop2): Mounting V5 Filesystem
[  246.997650][ T9665] XFS (loop1): Mounting V5 Filesystem
[  247.036869][ T9689] XFS (loop2): Ending clean mount
[  247.126219][ T9665] XFS (loop1): Ending clean mount
[  247.174023][ T4191] XFS (loop1): Unmounting Filesystem
[  247.432127][ T9317] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  247.445639][ T9718] netlink: 'syz.5.1882': attribute type 3 has an invalid length.
[  247.497835][ T9718] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1882'.
[  247.543217][ T4192] XFS (loop2): Unmounting Filesystem
[  247.718019][ T9317] usb 5-1: Using ep0 maxpacket: 32
[  247.881874][ T9317] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  247.896191][ T9317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.924992][ T9317] usb 5-1: config 0 descriptor??
[  248.074366][ T9732] loop5: detected capacity change from 0 to 512
[  248.106497][ T9736] loop1: detected capacity change from 0 to 512
[  248.169634][ T9732] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  248.187106][ T9732] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  248.189446][ T9317] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  248.245700][ T9732] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  248.268465][ T9736] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  248.279636][ T9317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  248.291822][ T9732] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  248.314601][ T9732] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=8802c198, mo2=0000]
[  248.321490][ T9736] EXT4-fs (loop1): orphan cleanup on readonly fs
[  248.330269][ T9732] EXT4-fs (loop5): orphan cleanup on readonly fs
[  248.336679][ T9732] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #4: comm syz.5.1887: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  248.355991][ T9736] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  248.390374][ T9736] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  248.405461][ T9736] EXT4-fs (loop1): Cannot turn on quotas: error -5
[  248.423147][ T9732] EXT4-fs error (device loop5): ext4_quota_enable:6447: comm syz.5.1887: Bad quota inode: 4, type: 1
[  248.431564][ T9317] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  248.449136][ T9736] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1878: bg 0: block 64: padding at end of block bitmap is not set
[  248.471950][ T9736] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  248.486760][ T9317] usb 5-1: media controller created
[  248.513072][ T9732] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  248.539340][ T9736] EXT4-fs (loop1): 1 truncate cleaned up
[  248.544388][ T9732] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  248.545035][ T9736] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  248.576327][ T9317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  248.601362][ T9732] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,bsddf,nodioread_nolock,acl,debug,noblock_validity,usrjquota=,minixdf,min_batch_time=0x0000000000000008,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback.
[  248.670177][ T9732] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1887: bg 0: block 34: padding at end of block bitmap is not set
[  248.689209][ T9749] netlink: 'syz.6.1892': attribute type 1 has an invalid length.
[  248.750727][ T9317] az6027: usb out operation failed. (-71)
[  248.821579][ T9317] az6027: usb out operation failed. (-71)
[  248.833638][ T9317] stb0899_attach: Driver disabled by Kconfig
[  248.843215][ T9317] az6027: no front-end attached
[  248.843215][ T9317] 
[  248.888426][ T9317] az6027: usb out operation failed. (-71)
[  248.898047][ T9317] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  248.923936][ T9317] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23
[  248.978153][ T9317] dvb-usb: schedule remote query interval to 400 msecs.
[  249.002970][ T9755] loop6: detected capacity change from 0 to 256
[  249.025712][ T9757] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem
[  249.049077][ T9317] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  249.094466][ T9317] usb 5-1: USB disconnect, device number 18
[  249.108523][ T9755] exfat: Deprecated parameter 'utf8'
[  249.135001][ T9755] exfat: Deprecated parameter 'utf8'
[  249.178063][ T9755] exfat: Deprecated parameter 'utf8'
[  249.225682][ T9317] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  249.250282][ T9755] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  249.612078][ T9773] loop6: detected capacity change from 0 to 2048
[  249.662883][ T9773] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  250.065530][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1912'.
[  250.280442][ T9801] loop6: detected capacity change from 0 to 1024
[  250.307332][ T9767] loop2: detected capacity change from 0 to 40427
[  250.407808][ T9767] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  250.425767][ T9767] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  250.487582][ T9767] F2FS-fs (loop2): invalid crc value
[  250.548840][ T9767] F2FS-fs (loop2): Found nat_bits in checkpoint
[  250.638770][ T9767] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  250.646365][ T9767] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  250.676610][ T9805] attempt to access beyond end of device
[  250.676610][ T9805] loop2: rw=2049, want=45104, limit=40427
[  250.856712][ T9818] loop1: detected capacity change from 0 to 128
[  250.964635][ T9818] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  250.978601][ T9818] ext4 filesystem being mounted at /431/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  251.135630][ T9818] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 3391 (only 1 groups)
[  251.196008][ T9833] loop4: detected capacity change from 0 to 4096
[  251.282439][ T9837] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  251.461441][ T9839] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  251.695749][ T9816] loop6: detected capacity change from 0 to 32768
[  251.978934][ T9856] loop1: detected capacity change from 0 to 512
[  252.036416][ T9860] Bluetooth: hci1: too big key_count value 37575
[  252.116566][ T9856] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1936: missing EA_INODE flag
[  252.129206][ T9856] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1936: error while reading EA inode 12 err=-117
[  252.142693][ T9856] EXT4-fs (loop1): 1 orphan inode deleted
[  252.151477][ T9856] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000001,nogrpid,,errors=continue. Quota mode: writeback.
[  252.187693][ T9861] loop6: detected capacity change from 0 to 1024
[  252.416010][ T9861] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  252.579777][ T9875] loop1: detected capacity change from 0 to 1024
[  252.634832][ T9875] EXT4-fs (loop1): Ignoring removed bh option
[  252.696701][ T9324] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  252.706815][ T9875] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,nolazytime,quota,stripe=0x0000000000000010,abort,lazytime,errors=remount-ro,init_itable,bh,dioread_lock,. Quota mode: writeback.
[  252.773188][ T9875] EXT4-fs (loop1): shut down requested (2)
[  252.896838][ T9865] loop4: detected capacity change from 0 to 40427
[  252.953062][ T9865] F2FS-fs (loop4): invalid crc value
[  252.968020][ T9324] usb 6-1: Using ep0 maxpacket: 32
[  252.974186][ T9865] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  253.068614][ T9865] F2FS-fs (loop4): Start checkpoint disabled!
[  253.092342][ T9865] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  253.111140][ T9324] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.134515][ T9324] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.149155][ T9324] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  253.221323][ T4283] attempt to access beyond end of device
[  253.221323][ T4283] loop4: rw=1, want=45104, limit=40427
[  253.244933][ T4283] attempt to access beyond end of device
[  253.244933][ T4283] loop4: rw=2049, want=45112, limit=40427
[  253.282928][ T9900] device dummy0 entered promiscuous mode
[  253.307382][ T9898] device dummy0 left promiscuous mode
[  253.344313][ T9324] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  253.359153][ T9324] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  253.383219][ T9324] usb 6-1: Product: syz
[  253.397139][ T9324] usb 6-1: Manufacturer: syz
[  253.410861][ T9324] usb 6-1: SerialNumber: syz
[  253.472259][ T9324] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input26
[  253.681086][ T8443] usb 6-1: USB disconnect, device number 13
[  253.731240][ T8443] appletouch 6-1:1.0: input: appletouch disconnected
[  253.967685][ T9916] program syz.6.1960 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  255.108284][ T9974] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  255.217135][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.256297][ T9979] loop6: detected capacity change from 0 to 2048
[  255.347508][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'.
[  255.380209][ T9979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  255.535036][ T9954] loop2: detected capacity change from 0 to 32768
[  255.580491][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.586878][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.618323][ T9954] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1979 (9954)
[  255.746289][ T9954] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  255.756045][    T9] wlan1: Trigger new scan to find an IBSS to join
[  255.791921][ T9954] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  255.830527][    T9] ------------[ cut here ]------------
[  255.836686][    T9] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40
[  255.847699][    T9] WARNING: CPU: 1 PID: 9 at net/mac80211/rate.c:376 __rate_control_send_low+0x62c/0x880
[  255.857568][    T9] Modules linked in:
[  255.861533][    T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  255.868908][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  255.879047][    T9] Workqueue: phy9 ieee80211_scan_work
[  255.884566][    T9] RIP: 0010:__rate_control_send_low+0x62c/0x880
[  255.890938][    T9] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 60 1a 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 64 aa 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff
[  255.910630][    T9] RSP: 0018:ffffc90000ce7508 EFLAGS: 00010246
[  255.916741][    T9] RAX: 9b4b9ad86dd4c800 RBX: 000000000000000c RCX: ffff88813fe90000
[  255.924803][    T9] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[  255.932851][    T9] RBP: 0000000000000084 R08: ffffc90000ce7027 R09: 1ffff9200019ce04
[  255.940920][    T9] R10: dffffc0000000000 R11: fffff5200019ce05 R12: ffff88802a568668
[  255.948973][    T9] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040
[  255.949304][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'.
[  255.956982][    T9] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  255.974931][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  255.981610][    T9] CR2: 000000110c37e467 CR3: 0000000062739000 CR4: 00000000003506e0
[  255.989705][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  255.997724][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  256.005796][    T9] Call Trace:
[  256.009164][    T9]  <TASK>
[  256.012145][    T9]  rate_control_send_low+0x194/0x790
[  256.017478][    T9]  ? ieee80211_scan_work+0x41f/0x1aa0
[  256.022943][    T9]  rate_control_get_rate+0x207/0x5c0
[  256.028309][    T9]  ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0
[  256.034010][    T9]  ? ieee80211_tx_h_select_key+0x1710/0x1710
[  256.040097][    T9]  ? sta_info_hash_lookup+0x53e/0x580
[  256.045519][    T9]  ? ieee80211_queue_skb+0xbd/0x20e0
[  256.050934][    T9]  invoke_tx_handlers_late+0xae/0x1720
[  256.056439][    T9]  ? ieee80211_tx_h_select_key+0x11fb/0x1710
[  256.062514][    T9]  ? sta_info_get+0x220/0x230
[  256.067239][    T9]  ? invoke_tx_handlers_early+0xa26/0x1ca0
[  256.073203][    T9]  ieee80211_tx+0x2d4/0x460
[  256.077784][    T9]  ? ieee80211_skb_resize+0x610/0x610
[  256.083219][    T9]  ? ieee80211_xmit+0x309/0x420
[  256.088159][    T9]  __ieee80211_tx_skb_tid_band+0x165/0x200
[  256.094028][    T9]  ieee80211_scan_state_send_probe+0x556/0x8e0
[  256.100294][    T9]  ieee80211_scan_work+0x41f/0x1aa0
[  256.105532][    T9]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  256.111522][    T9]  ? _raw_spin_unlock_irq+0x1f/0x40
[  256.116763][    T9]  process_one_work+0x867/0xff0
[  256.121725][    T9]  ? worker_detach_from_pool+0x240/0x240
[  256.127402][    T9]  ? lockdep_hardirqs_off+0x70/0x100
[  256.132791][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  256.137881][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  256.143478][    T9]  ? wq_worker_running+0x97/0x170
[  256.148601][    T9]  worker_thread+0xad7/0x12a0
[  256.153364][    T9]  kthread+0x42e/0x520
[  256.157481][    T9]  ? rcu_lock_release+0x20/0x20
[  256.162419][    T9]  ? kthread_blkcg+0xd0/0xd0
[  256.167047][    T9]  ret_from_fork+0x1f/0x30
[  256.171547][    T9]  </TASK>
[  256.174647][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  256.181951][    T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  256.189261][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  256.199353][    T9] Workqueue: phy9 ieee80211_scan_work
[  256.204767][    T9] Call Trace:
[  256.208073][    T9]  <TASK>
[  256.211055][    T9]  dump_stack_lvl+0x188/0x250
[  256.215770][    T9]  ? show_regs_print_info+0x20/0x20
[  256.221009][    T9]  ? load_image+0x410/0x410
[  256.225561][    T9]  panic+0x2f8/0x850
[  256.229529][    T9]  ? bpf_jit_dump+0xd0/0xd0
[  256.234073][    T9]  ? ret_from_fork+0x1f/0x30
[  256.238698][    T9]  ? __rate_control_send_low+0x62c/0x880
[  256.244371][    T9]  __warn+0x248/0x2b0
[  256.248389][    T9]  ? __rate_control_send_low+0x62c/0x880
[  256.254062][    T9]  report_bug+0x1b9/0x2e0
[  256.258444][    T9]  handle_bug+0x3a/0x70
[  256.262639][    T9]  exc_invalid_op+0x16/0x40
[  256.267185][    T9]  asm_exc_invalid_op+0x16/0x20
[  256.272104][    T9] RIP: 0010:__rate_control_send_low+0x62c/0x880
[  256.278390][    T9] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 60 1a 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 64 aa 69 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff
[  256.298023][    T9] RSP: 0018:ffffc90000ce7508 EFLAGS: 00010246
[  256.304115][    T9] RAX: 9b4b9ad86dd4c800 RBX: 000000000000000c RCX: ffff88813fe90000
[  256.312104][    T9] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000
[  256.320094][    T9] RBP: 0000000000000084 R08: ffffc90000ce7027 R09: 1ffff9200019ce04
[  256.328091][    T9] R10: dffffc0000000000 R11: fffff5200019ce05 R12: ffff88802a568668
[  256.336087][    T9] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040
[  256.344091][    T9]  ? __rate_control_send_low+0x62c/0x880
[  256.349760][    T9]  rate_control_send_low+0x194/0x790
[  256.355064][    T9]  ? ieee80211_scan_work+0x41f/0x1aa0
[  256.360458][    T9]  rate_control_get_rate+0x207/0x5c0
[  256.365767][    T9]  ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0
[  256.371451][    T9]  ? ieee80211_tx_h_select_key+0x1710/0x1710
[  256.377456][    T9]  ? sta_info_hash_lookup+0x53e/0x580
[  256.383018][    T9]  ? ieee80211_queue_skb+0xbd/0x20e0
[  256.388322][    T9]  invoke_tx_handlers_late+0xae/0x1720
[  256.393816][    T9]  ? ieee80211_tx_h_select_key+0x11fb/0x1710
[  256.399839][    T9]  ? sta_info_get+0x220/0x230
[  256.404566][    T9]  ? invoke_tx_handlers_early+0xa26/0x1ca0
[  256.410405][    T9]  ieee80211_tx+0x2d4/0x460
[  256.414933][    T9]  ? ieee80211_skb_resize+0x610/0x610
[  256.420372][    T9]  ? ieee80211_xmit+0x309/0x420
[  256.425247][    T9]  __ieee80211_tx_skb_tid_band+0x165/0x200
[  256.431075][    T9]  ieee80211_scan_state_send_probe+0x556/0x8e0
[  256.437264][    T9]  ieee80211_scan_work+0x41f/0x1aa0
[  256.442475][    T9]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  256.448389][    T9]  ? _raw_spin_unlock_irq+0x1f/0x40
[  256.453613][    T9]  process_one_work+0x867/0xff0
[  256.458501][    T9]  ? worker_detach_from_pool+0x240/0x240
[  256.464163][    T9]  ? lockdep_hardirqs_off+0x70/0x100
[  256.469476][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  256.474528][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  256.480108][    T9]  ? wq_worker_running+0x97/0x170
[  256.485154][    T9]  worker_thread+0xad7/0x12a0
[  256.489883][    T9]  kthread+0x42e/0x520
[  256.493971][    T9]  ? rcu_lock_release+0x20/0x20
[  256.498835][    T9]  ? kthread_blkcg+0xd0/0xd0
[  256.503441][    T9]  ret_from_fork+0x1f/0x30
[  256.507887][    T9]  </TASK>
[  256.511251][    T9] Kernel Offset: disabled
[  256.516053][    T9] Rebooting in 86400 seconds..