last executing test programs:

2m56.996140553s ago: executing program 0 (id=390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x6}]]}, 0x68}}, 0x0)

2m56.791257307s ago: executing program 0 (id=402):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
unshare(0x2040400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x7ff, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x3ff}, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

2m56.612960066s ago: executing program 0 (id=396):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000300)={0x1d, r1, 0x0, {0x0, 0x1, 0x2}, 0xff}, 0x18)

2m56.489233142s ago: executing program 0 (id=397):
syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@resgid}]}, 0x1, 0x5a4, &(0x7f0000000940)="$eJzs3T1sG3UbAPDnznHTj7xv+kovEqAOFSAVqaqT9AMKU7siKlXqgMQCkeNGVZy4ih1ookike4XogAB1KRsMjCAGhoqFkZWFjxmpohFITQcwcnxO09QpToljiH8/6ZL//+7s5/n7/Jx9pzs5gL51uPEnjXgqIs4nEcPrlg1EtvBwc72V5cXiveXFYhL1+oVfkkgi4u7yYrG1fpL9PxARSxHxZER8nY84mq495Z5Wozq/MDVeLpdms/5IbfrySHV+4dil6fHJ0mRp5sSLL506ffLU2PGx9eneq6/v5bc21ms/XH/32rev3Lz+6WeHlorvjydxJoayZevHsZ2ar0k+zmyYf7IbwXooud+81cs82JpcVueNUnoihiOXVX079fU7h8EdSQ/oovpgRH3NuibQBxJFD32q9T2gcfzbmnby+8fts80DkEbcleXF4jvRij/QPDcRe1ePTfb/mjxwZNI43jy4k4myKy1djYjRgYGH3/9J9v57fKPbkSBddetsc0M9vP3Ttf1PtNn/DLXOnf5Nrf3fSrb/W+kwfmP/d77DGL+//tNHm8a/OhhPt42frMVP2sRPI+LNDuPfeO3L05stq38ccSTax29JHn1+eOTipXJptPm3bYyvjhx6efPxR+zfJH7znO3e1UTWj39PllPa4fi/+ObzZ5YeEf/5Zx+9/du9/vsi4r0O4//v7ievbrbs9tXkTuNbwFa3fxL5uNlh/BfOHP4+azprCAAAAAAAAAAA2yhdvZYtSQtr7TQtFJr38P4/9qflSrV29GJlbmaiec3bwcinrSuthpv9pNEfy67HbfWPb+ifyGUBc/tW+4VipTzR47EDAAAAAAAAAAAAAAAAAADAP8WBDff//5Zbvf9/489VA7vV5j/5Dex26h/614P1n/QsD2Dn+fyHvlVX/9C/1D/0L/UP/Uv9Q/9qW//7dj4PYOf5/If+pf4BAAAAAAAAAAAAAAAAAAAAAAAAAKArzp8715jq95YXi43+xMD83FTlrWMTpepUYXquWChWZi8XJiuVyXKpUKxM/9XzJZXK5dGYmbsyUitVayPV+YU3pitzM63fFC3luz4iAAAAAAAAAAAAAAAAAAAA+PcZWp2StBCRb/bTtFCI+E9EHEwiuXipXBqNiP9GxHe5/GCjP9brpAEAAAAAAAAAAAAAAAAAAGCXqc4vTI2Xy6XZ7jUGslCdPerHWlfzGdjKyhGxtL1pNJ5xy4/KZy9gdzdTnzRyHb4P+77Rw50SAAAAAAAAAAAAAAAAAAD0qfs3/Xb6iD+6mxAAAAAAAAAAAAAAAAAAAAD0pfTnJCIa05Hh54Y2Lt2TrORW/0fE2zcufHBlvFabHWvMv7M2v/ZhNv94L/IHOtWq0zQiGnUMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3FedX5gaL5dLs4/ZGOxgnV6PEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBx/BkAAP//QkjPdw==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141104, 0x128)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)

2m55.931347941s ago: executing program 0 (id=400):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5, 0x0, 0x7}}], 0x4000000000000b7, 0x2, 0x0)
readv(r0, &(0x7f0000002a40)=[{&(0x7f00000027c0)=""/240, 0xf0}], 0x1)

2m54.350182231s ago: executing program 0 (id=412):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0xc, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x9}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffffc, 0x3c}, 0xa, @in=@empty, 0x6, 0x4, 0x3, 0x0, 0x401, 0xa6c}]}]}, 0xfc}}, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

2m54.009473324s ago: executing program 32 (id=412):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0xc, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x9}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x4, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffffc, 0x3c}, 0xa, @in=@empty, 0x6, 0x4, 0x3, 0x0, 0x401, 0xa6c}]}]}, 0xfc}}, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

2m39.323746413s ago: executing program 3 (id=536):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

2m39.078825296s ago: executing program 3 (id=539):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x780f, 0x3, 0x0, 0x81, 0x1ff, 0xfffffffe, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
bind$tipc(r0, 0x0, 0x0)

2m38.881110048s ago: executing program 3 (id=543):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='30', 0x2)

2m38.660375496s ago: executing program 3 (id=546):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$eJzs27tvHMUfAPDvrl/xL/lhE8IjD8AQEBYPO054pKCACCSKICFBQWvZThRyiVFsJBJFkCAUKkRDjyj5F6igQYgKiRZ6FClCaZJQHdq7XfvecS5nn5P7fKT1zezOeuZ7u3M3u3MbwMCayv4kEbsi4s+ImKhm6wtMVV9uXr+4cOv6xYUkyuX3/0kq5W5cv7hQFC3225lnptOI9Msk9reod+X8hdPzpdLSuTw/u3rm49mV8xdeOnVm/uTSyaWzh48effnI3GuvHn6lJ3Fmbbqx77PlA3vfSYbfPf51ti4t4m+Io0emOm18tlzucXX99f+adDLcx4ZwR4YiIjtcI5X+PxFDsX7wJuLtL/raOGBTlcvl8s72my+VgftYEvV5XR4GRfFFn13/FkvjIOCNzRt+9N21N6sXQFncN/OlumU40hivpEYarm97aSoiPrz073fZEptzHwIAoM5P2fjnxVbjvzQeqSn3QD43NBkRD0bE7oh4KCL2RMTDEZWyj0bEY3n58Q3W3zhJ0jz+Sa92HdwGZOO/1/O5rfrxX1oUmRyq5MYqY8DJGElOnCotHcrfk+kYGcvycx3q+PmtP75pt612/JctWf3FWDBvx9Xhsfp9FudX5+8m5lrXLkfsG24Vf7I2E5BExN6I2NdlHaee/+FAu223j7+DHswzlb+PeK56/C9FQ/yFpPP85OyOKC0dmi3Oima//X7lvXb131X8PZAd//+1PP/X4p9MaudrV+68jit/fdX2mqbb8380+aCSHs3XfTq/unpuLmI0OV5tdO36w+v7FvmifBb/9MHW/X93rL8T+yMiO4kfj4gnIuLJvO1PRcTTEXGwQ/y/Hnvmo+7j31xZ/It3dPzXE6PRuKZ1Yuj0Lz/WVTrZFP+tDsd/LTWdvzZ//g01xbWRdnV3NgMAAMC9J7u63hVJOrOWTtOZmerv5fdEpKXlldUXTix/cnax+ozAZERa3OmaqLkfOpdf1lfzlyOi+tOCYvuR/L7xt0PjlfzMwnJpsd/Bw4Db2ab/Z/5uvq0G3G88rwWDS/+HwXW7/v/5FrUD2Hrdf/8f2+jvPIFtqkX/169hIIy1/P435ofB0ND/TfvBAGno/zv61Q5g63V//2+0p+0Atp75fxhIK+Nx+4fkOyaK/9Tl7vdtIka2RTM2LRHptmjGtk2M3OP9on+fSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL30XwAAAP//cBbcWg==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

2m37.931367922s ago: executing program 3 (id=551):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}})
syz_emit_ethernet(0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001fe", @ANYRES32=r0], 0x0)

2m36.875837328s ago: executing program 3 (id=556):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000d0000000001000026a03a3a33ae6a6130000000002c000000030a01080000000000000000010000000900010073797a30000000000900030073797a320000000014000000060a010400000000000000000100000014000000110001"], 0x88}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

2m36.561012766s ago: executing program 33 (id=556):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000d0000000001000026a03a3a33ae6a6130000000002c000000030a01080000000000000000010000000900010073797a30000000000900030073797a320000000014000000060a010400000000000000000100000014000000110001"], 0x88}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

5.094258603s ago: executing program 6 (id=1789):
r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r1=>0xffffffffffffffff)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r1, 0x0, 0x0})

4.127102463s ago: executing program 6 (id=1796):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x28080c1, &(0x7f0000000600)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@fat=@check_strict}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/59, 0x5e)

4.07740609s ago: executing program 5 (id=1797):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

4.073916631s ago: executing program 1 (id=1798):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r0, 0x114, 0x5, &(0x7f0000032100)=""/102396, &(0x7f00000000c0)=0x18ffc)

3.84399193s ago: executing program 6 (id=1799):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x6b)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4)

3.376685689s ago: executing program 5 (id=1800):
mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write$binfmt_script(r0, &(0x7f00000007c0)={'#! ', '', [{0x20, '\':,M'}]}, 0x9)

3.091815246s ago: executing program 5 (id=1802):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)

2.93368449s ago: executing program 6 (id=1803):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, 0x0)
syz_emit_ethernet(0x27, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x19, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @private=0xa010100}, "3246936c1c"}}}}, 0x0)

2.906728449s ago: executing program 5 (id=1804):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.836726473s ago: executing program 2 (id=1805):
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x101)
connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

2.736334717s ago: executing program 6 (id=1806):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noinline_xattr,active_logs=4,discard,fault_injection=00000000000000041160,fault_type=00000000000000000770,mode=lfs,inline_data,fastboot,fsync_mode=strict,\x00iscard_unit=section,\x00'], 0x21, 0x5548, &(0x7f00000058c0)="$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")
r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
write$P9_RVERSION(r0, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0xbd, 0x8, '9P2000.u'}, 0x15)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)

2.72806834s ago: executing program 5 (id=1807):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0)

2.673167869s ago: executing program 1 (id=1808):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0)

2.533753466s ago: executing program 2 (id=1810):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x189800, 0x9e)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0))

2.327987196s ago: executing program 1 (id=1812):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110)

2.165414422s ago: executing program 1 (id=1813):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000480)='./proc_mnt\x00', &(0x7f00000004c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc_mnt/driver/rtc\x00', 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/1000, 0x3e8)

2.124764246s ago: executing program 4 (id=1814):
r0 = epoll_create1(0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000200)={0x40002019})

2.000274028s ago: executing program 1 (id=1815):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
r0 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0xd9)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000005880)={0x6, 0x70, 0x7, 0x6})

1.968395349s ago: executing program 4 (id=1816):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.897425833s ago: executing program 2 (id=1817):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000070000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

1.734839169s ago: executing program 4 (id=1818):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}})
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c08, 0x0)

1.327348778s ago: executing program 4 (id=1819):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x4010, &(0x7f0000000080)={[{}, {@errors_remount}, {@data_journal}, {@usrjquota}, {@init_itable_val={'init_itable', 0x3d, 0x22}}]}, 0x1, 0x453, &(0x7f0000000ac0)="$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")
open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000340)=@v1={0x0, @aes128, 0x3, @desc2})

1.270312557s ago: executing program 2 (id=1820):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c000180"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c00088008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

807.323555ms ago: executing program 2 (id=1821):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f0004060066", 0x27)

767.749328ms ago: executing program 5 (id=1822):
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r0, &(0x7f00000091c0)=""/16384, 0x4000)

598.724996ms ago: executing program 6 (id=1823):
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x7f00000, 0x4)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendto$unix(r0, 0x0, 0xfffffffffffffceb, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

580.340622ms ago: executing program 1 (id=1824):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='onf', 0x3)

444.764818ms ago: executing program 4 (id=1825):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

431.113203ms ago: executing program 2 (id=1826):
r0 = socket(0x10, 0x80003, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r1, &(0x7f0000000100), 0x12)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=1827):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000100)=""/174, 0xae}], 0x2, 0xa9, 0x2)

kernel console output (not intermixed with test programs):

.164361][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  167.227100][    T7] usb 7-1: SerialNumber: syz
[  167.268317][    T7] usb 7-1: config 0 descriptor??
[  167.418048][ T6843] loop2: detected capacity change from 0 to 2048
[  167.531096][    T7] usb 7-1: USB disconnect, device number 2
[  167.555601][ T6843] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.622662][ T6852] ip_tables: iptables: counters copy to user failed while replacing table
[  167.649377][ T6853] loop1: detected capacity change from 0 to 764
[  167.714633][ T6853] rock: directory entry would overflow storage
[  167.773929][ T6853] rock: sig=0x4654, size=5, remaining=4
[  167.923124][ T6860] loop5: detected capacity change from 0 to 1024
[  168.005340][ T6860] hfsplus: invalid length 32517 has been corrected to 255
[  168.103176][ T6864] loop1: detected capacity change from 0 to 512
[  168.293176][   T32] hfsplus: b-tree write err: -5, ino 2
[  168.562133][ T6874] loop1: detected capacity change from 0 to 256
[  168.643532][ T6874] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  169.144181][ T6866] loop6: detected capacity change from 0 to 32768
[  169.495752][ T6892] sctp: [Deprecated]: syz.2.904 (pid 6892) Use of int in max_burst socket option deprecated.
[  169.495752][ T6892] Use struct sctp_assoc_value instead
[  169.563080][ T6896] sd 0:0:1:0: PR command failed: 1026
[  169.595869][ T6896] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  169.638557][ T6894] mkiss: ax0: crc mode is auto.
[  169.672155][ T6896] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  170.261791][ T6692] Set syz1 is full, maxelem 65536 reached
[  170.875002][    T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  171.003476][ T6933] netlink: 252 bytes leftover after parsing attributes in process `syz.6.917'.
[  171.057204][ T6933] netem: unknown loss type 5
[  171.079504][ T6912] loop5: detected capacity change from 0 to 32768
[  171.086273][    T7] usb 5-1: Using ep0 maxpacket: 16
[  171.117054][ T6933] netem: change failed
[  171.123572][    T7] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  171.160615][    T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.183364][ T6912] JBD2: Ignoring recovery information on journal
[  171.234505][    T7] usb 5-1: config 0 has no interface number 0
[  171.284383][    T7] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  171.328617][ T6912] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  171.381329][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.445777][    T7] usb 5-1: Product: syz
[  171.449993][    T7] usb 5-1: Manufacturer: syz
[  171.519085][    T7] usb 5-1: SerialNumber: syz
[  171.562277][    T7] usb 5-1: config 0 descriptor??
[  171.606605][    T7] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  171.613003][    T7] usb 5-1: No valid video chain found.
[  171.694711][ T5440] ocfs2: Unmounting device (7,5) on (node local)
[  171.804248][ T4648] usb 5-1: USB disconnect, device number 10
[  172.962750][ T6982] netlink: 'syz.2.931': attribute type 18 has an invalid length.
[  173.818908][ T7011] loop2: detected capacity change from 0 to 512
[  173.909375][ T6986] loop6: detected capacity change from 0 to 40427
[  173.940447][ T7011] EXT4-fs: Ignoring removed mblk_io_submit option
[  173.988748][ T6986] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  174.074920][ T6986] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  174.096740][ T7011] EXT4-fs (loop2): orphan cleanup on readonly fs
[  174.103145][ T7011] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  174.164644][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.944'.
[  174.197557][ T6986] F2FS-fs (loop6): Found nat_bits in checkpoint
[  174.378128][ T7011] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.939: attempt to clear invalid blocks 2 len 1
[  174.401122][ T6986] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  174.432027][ T6986] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  174.547559][ T7039] kAFS: bad VL server IP address
[  174.579352][ T7011] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  174.725166][   T26] audit: type=1804 audit(1790862774.033:13): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.933" name="/newroot/59/file0/bus" dev="loop6" ino=10 res=1 errno=0
[  174.859354][ T7011] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.939: invalid indirect mapped block 1819239214 (level 0)
[  175.032480][ T7011] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.939: invalid indirect mapped block 1819239214 (level 1)
[  175.155238][   T14] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  175.224014][ T7011] EXT4-fs (loop2): 1 truncate cleaned up
[  175.292067][ T7011] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  175.365124][   T14] usb 5-1: Using ep0 maxpacket: 8
[  175.392226][   T14] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  175.448372][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.521612][   T14] pvrusb2: Hardware description: Terratec Grabster AV400
[  175.536896][ T7068] loop1: detected capacity change from 0 to 512
[  175.568856][ T7011] CacheFiles: Failed to register: -30
[  175.578540][   T14] pvrusb2: **********
[  175.582566][   T14] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  175.642983][ T7068] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  175.687779][   T14] pvrusb2: Important functionality might not be entirely working.
[  175.701624][ T7068] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.739520][   T14] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  175.802385][   T14] pvrusb2: **********
[  175.826764][ T7078] loop6: detected capacity change from 0 to 764
[  175.838664][   T26] audit: type=1800 audit(1790862775.143:14): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.960" name="file1" dev="loop1" ino=15 res=0 errno=0
[  175.858931][    C0] vkms_vblank_simulate: vblank timer overrun
[  175.878384][ T2312] pvrusb2: Invalid write control endpoint
[  175.935598][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  175.961383][ T7078] rock: directory entry would overflow storage
[  176.021296][ T7078] rock: sig=0x4654, size=5, remaining=4
[  176.166906][    T7] usb 5-1: USB disconnect, device number 11
[  176.188574][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  176.332103][ T2312] pvrusb2: Invalid write control endpoint
[  176.379917][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  176.448638][ T7089] loop1: detected capacity change from 0 to 512
[  176.455638][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  176.463235][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  176.526032][ T7089] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  176.590647][ T2312] pvrusb2: Device being rendered inoperable
[  176.631693][ T7089] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  176.661424][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  176.716378][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  176.781279][ T7089] Quota error (device loop1): write_blk: dquota write failed
[  176.849188][ T2312] pvrusb2: Attached sub-driver cx25840
[  176.857785][ T7089] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  176.908007][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  176.972772][ T7089] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.964: Failed to acquire dquot type 0
[  177.038075][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  177.094568][ T7089] EXT4-fs (loop1): 1 truncate cleaned up
[  177.168482][ T7089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  177.543273][ T7115] Quota error (device loop1): write_blk: dquota write failed
[  177.698910][ T7115] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  177.819714][ T7115] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.964: Failed to acquire dquot type 0
[  178.081469][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  178.552384][ T7139] loop1: detected capacity change from 0 to 1024
[  178.589103][ T7112] loop2: detected capacity change from 0 to 32768
[  178.708399][ T7139] hfsplus: invalid length 1280 has been corrected to 255
[  178.782360][ T7112] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  179.226966][ T7112] (syz.2.968,7112,0):ocfs2_double_lock:1195 ERROR: status = -2
[  179.306376][ T7112] (syz.2.968,7112,0):ocfs2_rename:1304 ERROR: status = -2
[  179.360753][ T7137] loop4: detected capacity change from 0 to 32768
[  179.376671][ T7112] (syz.2.968,7112,0):ocfs2_rename:1694 ERROR: status = -2
[  179.482662][ T7137] XFS (loop4): Mounting V5 Filesystem
[  179.573705][ T7137] XFS (loop4): Ending clean mount
[  179.717384][ T4283] ocfs2: Unmounting device (7,2) on (node local)
[  179.810051][ T4271] XFS (loop4): Unmounting Filesystem
[  180.105998][ T4358] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  180.308877][ T4358] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.350391][ T4358] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.375957][ T7175] netlink: 32 bytes leftover after parsing attributes in process `syz.5.995'.
[  180.427149][ T4358] usb 2-1: config 0 interface 0 has no altsetting 0
[  180.433788][ T4358] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  180.507324][ T4358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.553603][ T4358] usb 2-1: config 0 descriptor??
[  181.000820][ T4358] hid (null): bogus close delimiter
[  181.022920][ T4358] hid-multitouch 0003:0EEF:72C4.0006: bogus close delimiter
[  181.061452][ T4358] hid-multitouch 0003:0EEF:72C4.0006: item 0 4 2 10 parsing failed
[  181.104441][ T4358] hid-multitouch: probe of 0003:0EEF:72C4.0006 failed with error -22
[  181.222194][ T4358] usb 2-1: USB disconnect, device number 5
[  181.431155][ T7200] loop4: detected capacity change from 0 to 512
[  181.485323][ T7200] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  181.624578][ T7200] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1004: bg 0: block 104: invalid block bitmap
[  181.703150][ T7200] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  181.746376][ T7200] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1004: invalid indirect mapped block 1 (level 1)
[  181.847010][ T7200] EXT4-fs (loop4): 1 truncate cleaned up
[  181.878678][ T7200] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  181.952903][ T7200] EXT4-fs (loop4): shut down requested (2)
[  182.045492][ T7090] Set syz1 is full, maxelem 65536 reached
[  182.079818][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  182.330013][ T7221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1013'.
[  182.417967][ T7223] futex_wake_op: syz.2.1014 tries to shift op by 144; fix this program
[  182.488670][ T7228] loop2: detected capacity change from 0 to 256
[  182.580342][ T7232] loop4: detected capacity change from 0 to 256
[  182.620989][ T7232] exfat: Deprecated parameter 'namecase'
[  182.667828][ T7232] exfat: Deprecated parameter 'namecase'
[  182.724430][ T7234] netlink: 'syz.6.1019': attribute type 9 has an invalid length.
[  182.733031][ T7232] exfat: Deprecated parameter 'utf8'
[  182.780937][ T7234] netlink: 379 bytes leftover after parsing attributes in process `syz.6.1019'.
[  182.804541][ T7232] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  183.325089][    T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  183.541642][    T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.582360][    T7] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  183.632964][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.644158][ T7244] loop6: detected capacity change from 0 to 32768
[  183.664157][    T7] usb 2-1: Product: syz
[  183.681543][    T7] usb 2-1: Manufacturer: syz
[  183.701742][    T7] usb 2-1: SerialNumber: syz
[  183.745652][    T7] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  183.955203][ T7236] syz.5.1020 (7236): drop_caches: 2
[  183.971760][ T7244] XFS (loop6): Mounting V5 Filesystem
[  184.044045][ T7244] XFS (loop6): Ending clean mount
[  184.191623][ T5811] XFS (loop6): Unmounting Filesystem
[  184.204276][    T7] gspca_mr97310a: reg write [21] error -71
[  184.223232][    T7] mr97310a: probe of 2-1:1.0 failed with error -71
[  184.273415][    T7] usb 2-1: USB disconnect, device number 6
[  184.719811][ T7251] loop2: detected capacity change from 0 to 32768
[  184.863299][ T7251] XFS (loop2): Mounting V5 Filesystem
[  185.023900][ T7251] XFS (loop2): Ending clean mount
[  185.116112][ T7289] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  185.172986][ T7291] loop5: detected capacity change from 0 to 512
[  185.224493][ T7291] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  185.312419][ T7291] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  185.362712][ T7251] XFS (loop2): User initiated shutdown received.
[  185.378532][ T7291] Quota error (device loop5): write_blk: dquota write failed
[  185.393849][ T7291] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  185.414698][ T7251] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489).  Shutting down filesystem.
[  185.442674][ T7299] loop4: detected capacity change from 0 to 2048
[  185.456723][ T7291] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1037: Failed to acquire dquot type 0
[  185.479586][ T7299] EXT4-fs: Ignoring removed nomblk_io_submit option
[  185.513616][ T7291] EXT4-fs (loop5): 1 truncate cleaned up
[  185.536307][ T7299] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  185.555095][ T7291] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  185.564115][ T7251] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  185.592098][ T7299] EXT4-fs (loop4): shut down requested (2)
[  185.663213][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  185.682798][ T7306] Quota error (device loop5): write_blk: dquota write failed
[  185.723345][ T4283] XFS (loop2): Unmounting Filesystem
[  185.773873][ T7306] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  185.881543][ T7306] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1037: Failed to acquire dquot type 0
[  186.143783][ T5440] EXT4-fs (loop5): unmounting filesystem.
[  186.157190][ T4279] Bluetooth: hci2: command 0x0406 tx timeout
[  186.163281][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[  186.171519][ T4289] Bluetooth: hci0: command 0x0406 tx timeout
[  186.338188][ T7324] netlink: 'syz.4.1051': attribute type 29 has an invalid length.
[  186.413343][ T7324] netlink: 'syz.4.1051': attribute type 29 has an invalid length.
[  186.451165][ T7325] netlink: 'syz.4.1051': attribute type 29 has an invalid length.
[  186.503164][ T7329] netlink: 'syz.4.1051': attribute type 29 has an invalid length.
[  186.705865][ T7332] loop5: detected capacity change from 0 to 1024
[  187.109088][ T7345] loop5: detected capacity change from 0 to 128
[  187.186329][   T26] audit: type=1800 audit(1790862786.493:15): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1059" name="bus" dev="loop5" ino=1048636 res=0 errno=0
[  187.239669][ T7345] syz.5.1059: attempt to access beyond end of device
[  187.239669][ T7345] loop5: rw=2049, sector=153, nr_sectors = 48 limit=128
[  187.323663][ T7345] syz.5.1059: attempt to access beyond end of device
[  187.323663][ T7345] loop5: rw=2049, sector=209, nr_sectors = 5 limit=128
[  187.594979][ T4279] Bluetooth: hci1: command 0x0405 tx timeout
[  187.610557][ T7352] loop6: detected capacity change from 0 to 256
[  187.641398][ T7352] exfat: Deprecated parameter 'namecase'
[  187.677996][ T7352] exfat: Deprecated parameter 'utf8'
[  187.701357][ T7352] exfat: Deprecated parameter 'namecase'
[  187.721092][ T7352] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  187.754759][ T7352] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7cbd4b0d, utbl_chksum : 0xe619d30d)
[  188.659273][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.878165][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.933579][ T7363] loop1: detected capacity change from 0 to 32768
[  189.062382][ T7363] XFS (loop1): Mounting V5 Filesystem
[  189.109084][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.217265][ T7363] XFS (loop1): Ending clean mount
[  189.353794][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.422373][ T4276] XFS (loop1): Unmounting Filesystem
[  189.448007][    T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  189.687450][    T7] usb 3-1: Using ep0 maxpacket: 8
[  189.720478][    T7] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[  189.768474][    T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  189.845539][ T4358] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  189.873497][    T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  189.924369][    T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  189.945879][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  189.959067][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  189.968725][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  189.978132][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  189.985689][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  189.992900][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  190.061082][    T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  190.071570][ T4358] usb 5-1: Using ep0 maxpacket: 32
[  190.100834][ T4358] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  190.128020][    T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  190.161573][ T4358] usb 5-1: config 0 has no interface number 0
[  190.191911][ T4358] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  190.216200][    T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  190.260597][ T4358] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  190.278351][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.325104][ T4358] usb 5-1: config 0 interface 85 has no altsetting 0
[  190.399639][ T4358] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  190.422174][ T7395] loop5: detected capacity change from 0 to 256
[  190.452600][ T4358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.515070][ T4358] usb 5-1: Product: syz
[  190.519289][ T4358] usb 5-1: Manufacturer: syz
[  190.537821][ T7387] chnl_net:caif_netlink_parms(): no params data found
[  190.555442][    T7] usb 3-1: GET_CAPABILITIES returned 0
[  190.571207][    T7] usbtmc 3-1:16.0: can't read capabilities
[  190.581340][ T4358] usb 5-1: SerialNumber: syz
[  190.652247][ T4358] usb 5-1: config 0 descriptor??
[  190.788000][ T7382] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -71
[  190.999185][ T4648] usb 3-1: USB disconnect, device number 6
[  191.121272][ T4358] appletouch 5-1:0.85: Geyser mode initialized.
[  191.143051][ T4358] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input8
[  191.250586][ T7387] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.297826][ T7408] program syz.1.1076 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.337800][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.370245][ T4358] usb 5-1: USB disconnect, device number 12
[  191.405634][ T7387] device bridge_slave_0 entered promiscuous mode
[  191.461290][ T4358] appletouch 5-1:0.85: input: appletouch disconnected
[  191.605050][ T7387] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.612170][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.679346][ T7387] device bridge_slave_1 entered promiscuous mode
[  192.039544][ T7387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.075087][ T4289] Bluetooth: hci1: command 0x0409 tx timeout
[  192.102049][ T7406] loop5: detected capacity change from 0 to 32768
[  192.341294][ T7387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.401438][ T7406] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  192.587194][ T7387] team0: Port device team_slave_0 added
[  192.722222][ T7387] team0: Port device team_slave_1 added
[  192.801206][ T7406] JBD2: Ignoring recovery information on journal
[  192.816936][ T7413] syz.1.1080 (7413): drop_caches: 2
[  192.936659][ T7406] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  193.022926][ T7421] loop4: detected capacity change from 0 to 32768
[  193.055437][ T7387] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.076690][ T7387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.151075][ T7421] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  193.260093][ T7421] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  193.291651][ T5440] ocfs2: Unmounting device (7,5) on (node local)
[  193.307105][ T7387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.488953][ T7421] (syz.4.1082,7421,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  193.520033][ T7387] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.574987][ T7387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.770267][ T4271] ocfs2: Unmounting device (7,4) on (node local)
[  193.799638][ T7387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.155080][ T4289] Bluetooth: hci1: command 0x041b tx timeout
[  194.326003][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  194.332323][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  194.463412][ T7387] device hsr_slave_0 entered promiscuous mode
[  194.501661][ T7387] device hsr_slave_1 entered promiscuous mode
[  194.544661][ T7387] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.588612][ T7387] Cannot create hsr debugfs directory
[  194.674062][ T7445] loop1: detected capacity change from 0 to 32768
[  194.820915][ T7445] read_mapping_page failed!
[  194.863848][ T7445] ERROR: (device loop1): txCommit: 
[  194.863848][ T7445] 
[  194.947036][ T7445] ERROR: (device loop1): remounting filesystem as read-only
[  195.067899][   T11] device hsr_slave_0 left promiscuous mode
[  195.116566][   T11] device hsr_slave_1 left promiscuous mode
[  195.163380][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.230795][ T7474] loop2: detected capacity change from 0 to 512
[  195.248328][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.292528][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.327349][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.389363][ T4265] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  195.407435][   T11] device bridge_slave_1 left promiscuous mode
[  195.413680][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.523867][   T11] device bridge_slave_0 left promiscuous mode
[  195.575087][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.723425][   T11] device veth1_macvtap left promiscuous mode
[  195.754974][   T11] device veth0_macvtap left promiscuous mode
[  195.761072][   T11] device veth1_vlan left promiscuous mode
[  195.815490][   T11] device veth0_vlan left promiscuous mode
[  196.104218][ T7478] loop5: detected capacity change from 0 to 32768
[  196.235302][ T4289] Bluetooth: hci1: command 0x040f tx timeout
[  196.407055][ T4358] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  196.615830][ T4358] usb 5-1: Using ep0 maxpacket: 16
[  196.629896][ T4358] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  196.651270][ T4358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.673050][ T4358] usb 5-1: Product: syz
[  196.682171][ T4358] usb 5-1: Manufacturer: syz
[  196.691041][ T4358] usb 5-1: SerialNumber: syz
[  196.933734][ T4358] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  196.969738][ T4358] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  196.983074][ T4358] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  196.994253][ T4358] usb 5-1: media controller created
[  197.011112][ T4358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  197.264566][ T4358] zl10353_read_register: readreg error (reg=127, ret==-110)
[  197.300595][ T4358] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5
[  197.318484][ T4358] usb 5-1: USB disconnect, device number 13
[  197.370716][   T11] team0 (unregistering): Port device team_slave_1 removed
[  197.451664][   T11] team0 (unregistering): Port device team_slave_0 removed
[  197.513372][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.574567][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.252123][   T11] bond0 (unregistering): Released all slaves
[  198.314965][ T4289] Bluetooth: hci1: command 0x0419 tx timeout
[  198.521262][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1108'.
[  198.559931][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1108'.
[  198.597737][ T7504] netlink: 'syz.5.1108': attribute type 18 has an invalid length.
[  198.982335][ T7517] loop1: detected capacity change from 0 to 512
[  199.099369][ T7517] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  199.174318][ T7517] ext4 filesystem being mounted at /255/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.185205][   T14] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  199.320537][ T7527] loop2: detected capacity change from 0 to 512
[  199.398376][   T14] usb 6-1: not running at top speed; connect to a high speed hub
[  199.464506][   T14] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  199.516133][   T14] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  199.569413][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.628664][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  199.641183][   T14] usb 6-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  199.913926][ T7527] EXT4-fs (loop2): Test dummy encryption mode enabled
[  200.043370][ T7527] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  200.108760][ T7547] loop1: detected capacity change from 0 to 1024
[  200.189976][ T7527] EXT4-fs (loop2): SIPHASH is not a valid default hash value
[  200.208386][ T7547] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  200.225225][   T14] uvcvideo 6-1:1.1: Failed to set UVC probe control : -71 (exp. 26).
[  200.268474][   T14] uvcvideo 6-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  200.280582][ T7547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  200.341315][   T14] uvcvideo 6-1:1.1: Failed to initialize the device (-5).
[  200.349871][ T7547] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.425766][   T14] usb 6-1: USB disconnect, device number 4
[  200.509284][   T26] audit: type=1800 audit(1790862799.813:16): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1119" name="file1" dev="loop1" ino=15 res=0 errno=0
[  200.624229][ T7387] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  200.649983][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  200.683019][ T7387] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  200.807105][ T7387] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  200.870940][ T7387] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  200.927912][ T7557] loop5: detected capacity change from 0 to 164
[  201.222044][ T7387] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.294068][ T7567] loop1: detected capacity change from 0 to 256
[  201.317506][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  201.343424][ T7570] loop4: detected capacity change from 0 to 1024
[  201.354478][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  201.369217][ T7567] exfat: Deprecated parameter 'utf8'
[  201.374647][ T7567] exfat: Deprecated parameter 'namecase'
[  201.424200][ T7387] 8021q: adding VLAN 0 to HW filter on device team0
[  201.476949][ T7567] exfat: Deprecated parameter 'namecase'
[  201.536362][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  201.551756][ T7567] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d)
[  201.590620][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.609481][ T7573] hfsplus: can't free extent
[  201.645245][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.652390][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.687345][   T26] audit: type=1800 audit(1790862800.993:17): pid=7570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1128" name="file1" dev="loop4" ino=20 res=0 errno=0
[  201.767696][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.836439][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.908713][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.915856][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.027226][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  202.077411][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  202.120235][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  202.196645][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  202.262783][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  202.286965][ T7564] loop5: detected capacity change from 0 to 32768
[  202.314757][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  202.376790][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  202.393692][ T7564] XFS (loop5): Mounting V5 Filesystem
[  202.458106][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  202.470438][ T7564] XFS (loop5): Ending clean mount
[  202.516985][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  202.577440][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  202.641057][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  202.672745][ T5440] XFS (loop5): Unmounting Filesystem
[  202.700815][ T7387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  202.788251][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.640767][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  203.685443][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  203.723005][ T7387] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.809962][ T7643] loop4: detected capacity change from 0 to 512
[  203.871567][ T7643] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  203.983180][ T7643] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.1144: bad orphan inode 131083
[  204.060224][ T7643] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  204.299375][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  204.540994][ T7672] ima: Unable to open file: /e (-2)
[  204.542052][ T7670] ima: policy update failed
[  204.638546][   T26] audit: type=1802 audit(1790862803.943:18): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1152" res=0 errno=0
[  204.906316][ T7686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  205.163762][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  205.218583][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  205.240463][ T7692] loop1: detected capacity change from 0 to 256
[  205.264413][ T7387] device veth0_vlan entered promiscuous mode
[  205.293494][ T7692] exfat: Deprecated parameter 'utf8'
[  205.315083][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  205.368548][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  205.388314][ T7692] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  205.480983][ T7387] device veth1_vlan entered promiscuous mode
[  205.527681][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  205.565444][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  205.598651][ T7698] loop4: detected capacity change from 0 to 1024
[  205.628298][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  205.680821][ T7698] EXT4-fs: inline encryption not supported
[  205.766641][ T7698] EXT4-fs: Ignoring removed bh option
[  205.777556][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  205.823845][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  205.852933][ T7698] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  205.908816][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  205.965923][ T7387] device veth0_macvtap entered promiscuous mode
[  206.011899][ T7711] loop1: detected capacity change from 0 to 24
[  206.027182][ T7387] device veth1_macvtap entered promiscuous mode
[  206.082807][ T7711] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  206.109336][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  206.145028][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.182069][ T7711] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  206.230026][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.294163][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.337579][ T7720] loop4: detected capacity change from 0 to 512
[  206.354014][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.383084][ T7720] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  206.419943][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.453439][ T7720] EXT4-fs (loop4): 1 truncate cleaned up
[  206.462319][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.484563][ T7720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  206.503841][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.540284][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.593548][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.639531][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  206.651399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  206.677784][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  206.718758][ T7634] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd
[  206.742935][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  206.793622][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  206.834004][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.878053][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.920677][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.961661][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.994152][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.019758][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.044682][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.066980][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.099340][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.133068][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  207.162257][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  207.202955][ T7387] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.248614][ T7387] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.296420][ T7387] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.323789][ T7387] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.337183][ T7743] loop2: detected capacity change from 0 to 1024
[  207.369086][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1171'.
[  207.427267][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.671953][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.718948][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.783706][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  207.831882][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.882395][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.937189][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  208.397891][ T7778] loop4: detected capacity change from 0 to 256
[  208.440184][ T7778] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  208.513914][ T7780] PM: suspend entry (deep)
[  208.604780][ T7782] loop2: detected capacity change from 0 to 512
[  208.677166][ T7782] EXT4-fs (loop2): 1 truncate cleaned up
[  208.719995][ T7782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  208.789799][   T32] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 465: padding at end of block bitmap is not set
[  208.887913][   T32] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  208.950998][   T32] EXT4-fs (loop2): This should not happen!! Data will be lost
[  208.950998][   T32] 
[  209.012114][   T32] EXT4-fs (loop2): Total free blocks count 0
[  209.047109][   T32] EXT4-fs (loop2): Free/Dirty block details
[  209.079742][   T32] EXT4-fs (loop2): free_blocks=0
[  209.100511][   T32] EXT4-fs (loop2): dirty_blocks=6
[  209.121218][   T32] EXT4-fs (loop2): Block reservation details
[  209.143037][   T32] EXT4-fs (loop2): i_reserved_data_blocks=6
[  209.163271][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1189'.
[  209.181881][ T7782] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 4 with error 28
[  209.330246][ T7780] Filesystems sync: 0.796 seconds
[  209.545778][ T7808] program syz.1.1194 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  209.568078][ T7780] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  209.588015][ T7780] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  209.669433][ T7780] Bluetooth: hci0: Suspend notifier action (3) failed: -4
[  209.714581][ T7780] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  209.740049][   T26] audit: type=1400 audit(1790862809.043:19): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=7811 comm="syz.2.1193" name="p" offset=69
[  209.767123][ T7780] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  209.817463][ T7780] Bluetooth: hci2: Suspend notifier action (3) failed: -4
[  209.848854][ T7780] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  209.874457][ T7780] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  209.910059][ T7780] Bluetooth: hci3: Suspend notifier action (3) failed: -4
[  209.944740][ T7780] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  209.976691][ T7780] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  210.008854][ T7780] Bluetooth: hci4: Suspend notifier action (3) failed: -4
[  210.038416][ T7780] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  210.068775][ T7780] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  210.084722][ T7824] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1199'.
[  210.105915][ T7780] Bluetooth: hci1: Suspend notifier action (3) failed: -4
[  210.164995][   T14] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  210.182976][ T7780] Freezing user space processes
[  210.227443][ T7780] Freezing user space processes completed (elapsed 0.021 seconds)
[  210.240181][ T7780] OOM killer disabled.
[  210.244281][ T7780] Freezing remaining freezable tasks
[  211.595300][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout
[  211.755154][ T4289] Bluetooth: hci2: command 0x0c1a tx timeout
[  211.915216][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout
[  211.995069][ T4289] Bluetooth: hci4: command 0x0c1a tx timeout
[  212.075171][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout
[  213.675064][ T4289] Bluetooth: hci0: command 0x0406 tx timeout
[  213.835022][ T4289] Bluetooth: hci2: command 0x0406 tx timeout
[  213.995269][ T4289] Bluetooth: hci3: command 0x0406 tx timeout
[  214.074990][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  214.155268][ T4289] Bluetooth: hci1: command 0x0406 tx timeout
[  215.436015][   T14] usb 2-1: device descriptor read/all, error -110
[  215.595028][   T14] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  215.745028][   T14] usb 2-1: device descriptor read/64, error -32
[  215.866431][   T14] usb usb2-port1: attempt power cycle
[  216.284976][   T14] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  216.326769][   T14] usb 2-1: device descriptor read/8, error -32
[  216.595044][   T14] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  216.637430][   T14] usb 2-1: device descriptor read/8, error -32
[  216.755873][   T14] usb usb2-port1: unable to enumerate USB device
[  216.771240][ T7780] Freezing remaining freezable tasks completed (elapsed 6.521 seconds)
[  216.782219][ T7780] printk: Suspending console(s) (use no_console_suspend to debug)
[  216.916575][ T7780] vhci_hcd vhci_hcd.14: suspend vhci_hcd
[  216.958208][ T7780] vhci_hcd vhci_hcd.13: suspend vhci_hcd
[  216.997270][ T7780] vhci_hcd vhci_hcd.12: suspend vhci_hcd
[  217.036952][ T7780] vhci_hcd vhci_hcd.11: suspend vhci_hcd
[  217.076107][ T7780] vhci_hcd vhci_hcd.10: suspend vhci_hcd
[  217.117220][ T7780] vhci_hcd vhci_hcd.9: suspend vhci_hcd
[  217.156183][ T7780] vhci_hcd vhci_hcd.8: suspend vhci_hcd
[  217.196151][ T7780] vhci_hcd vhci_hcd.7: suspend vhci_hcd
[  217.236419][ T7780] vhci_hcd vhci_hcd.6: suspend vhci_hcd
[  217.278511][ T7780] vhci_hcd vhci_hcd.5: suspend vhci_hcd
[  217.316536][ T7780] vhci_hcd vhci_hcd.4: suspend vhci_hcd
[  217.356796][ T7780] vhci_hcd vhci_hcd.3: suspend vhci_hcd
[  217.396153][ T7780] vhci_hcd vhci_hcd.2: suspend vhci_hcd
[  217.437387][ T7780] vhci_hcd vhci_hcd.1: suspend vhci_hcd
[  217.476399][ T7780] vhci_hcd vhci_hcd.0: suspend vhci_hcd
[  217.517973][ T4334] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  217.773279][ T7780] ACPI: PM: Preparing to enter system sleep state S3
[  217.773814][ T7780] ACPI: PM: Saving platform NVS memory
[  217.777343][ T7780] Disabling non-boot CPUs ...
[  217.780338][ T7780] ACPI: PM: Low-level resume complete
[  217.780388][ T7780] ACPI: PM: Restoring platform NVS memory
[  217.797936][ T7780] ACPI: PM: Waking up from system sleep state S3
[  218.205207][ T7780] OOM killer enabled.
[  218.205820][ T7780] Restarting tasks ... done.
[  218.300928][ T7780] random: crng reseeded on system resumption
[  218.330243][ T7780] PM: suspend exit
[  218.462193][   T26] audit: type=1326 audit(1790862817.767:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.4.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e459e159 code=0x7ffc0000
[  218.476038][   T26] audit: type=1326 audit(1790862817.767:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.4.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e459e159 code=0x7ffc0000
[  218.479277][   T26] audit: type=1326 audit(1790862817.767:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.4.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e459e159 code=0x7ffc0000
[  218.504629][   T26] audit: type=1326 audit(1790862817.767:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.4.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff9e459e159 code=0x7ffc0000
[  218.508267][   T26] audit: type=1326 audit(1790862817.807:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.4.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e459e159 code=0x7ffc0000
[  218.566085][   T26] audit: type=1326 audit(1790862817.867:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.4.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e459e159 code=0x7ffc0000
[  218.580560][   T26] audit: type=1326 audit(1790862817.867:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.4.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9e455e98e code=0x7ffc0000
[  218.597354][   T26] audit: type=1326 audit(1790862817.897:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.4.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e459e159 code=0x7ffc0000
[  218.625038][   T26] audit: type=1326 audit(1790862817.917:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.4.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7ff9e459e159 code=0x7ffc0000
[  218.628337][   T26] audit: type=1326 audit(1790862817.917:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7953 comm="syz.4.1206" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e459e159 code=0x7ffc0000
[  218.774621][   T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  218.837985][ T7971] loop4: detected capacity change from 0 to 512
[  218.847151][ T7971] EXT4-fs: inline encryption not supported
[  218.869753][ T7971] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  218.882486][ T7971] EXT4-fs (loop4): 1 truncate cleaned up
[  218.883365][ T7971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  218.960333][   T14] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.961991][   T14] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.963347][   T14] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.965043][   T14] usb 3-1: config 0 interface 0 has no altsetting 0
[  218.966030][   T14] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  218.967297][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.984954][ T7971] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #12: comm syz.4.1213: bad extra_isize 62 (inode size 256)
[  219.006544][   T14] usb 3-1: config 0 descriptor??
[  219.055942][ T7971] EXT4-fs (loop4): Remounting filesystem read-only
[  219.061924][ T7971] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #12: comm syz.4.1213: bad extra_isize 62 (inode size 256)
[  219.075201][ T7971] EXT4-fs (loop4): Remounting filesystem read-only
[  219.099034][ T7979] loop5: detected capacity change from 0 to 2048
[  219.204549][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  219.493826][   T14] hid-multitouch 0003:0EEF:72D0.0007: No inputs registered, leaving
[  219.497442][   T14] hid-multitouch 0003:0EEF:72D0.0007: hidraw0: USB HID v0.00 Joystick [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0
[  219.677223][ T7999] netlink: 'syz.6.1223': attribute type 1 has an invalid length.
[  219.747125][   T14] usb 3-1: USB disconnect, device number 7
[  219.813415][ T7994] fido_id[7994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  220.184934][ T8015] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  220.218614][ T8017] loop5: detected capacity change from 0 to 128
[  220.247217][ T8017] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  220.255568][ T8017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  220.398151][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1234'.
[  220.399472][ T8021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1234'.
[  220.651016][ T8028] loop4: detected capacity change from 0 to 8
[  220.770827][ T8028] SQUASHFS error: Failed to read block 0x6e6: -5
[  220.785283][ T8028] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  220.794083][ T8028] SQUASHFS error: Unable to read directory block [6e4:0]
[  221.093956][ T8043] loop5: detected capacity change from 0 to 512
[  221.138386][ T8043] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  221.139995][ T8043] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  221.148006][ T8043] System zones: 0-1, 15-15, 18-18, 34-34
[  221.164638][ T8043] EXT4-fs (loop5): orphan cleanup on readonly fs
[  221.170005][ T8043] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  221.179028][ T8043] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  221.196820][ T8043] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1245: bg 0: block 40: padding at end of block bitmap is not set
[  221.208204][ T8043] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  221.218626][ T8043] EXT4-fs (loop5): 1 truncate cleaned up
[  221.219504][ T8043] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  221.250800][ T8043] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.1245: bad symlink.
[  221.319449][ T5440] EXT4-fs (loop5): unmounting filesystem.
[  221.412837][ T7947] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  221.425366][ T8051] loop1: detected capacity change from 0 to 4096
[  221.460806][ T8051] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  221.594447][ T7947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.595992][ T7947] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  221.604753][ T7947] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  221.606046][ T7947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  221.607207][ T7947] usb 3-1: SerialNumber: syz
[  221.650767][ T7947] usb 3-1: 0:2 : does not exist
[  221.840426][ T8065] loop5: detected capacity change from 0 to 4096
[  222.169111][ T7947] usb 3-1: USB disconnect, device number 8
[  222.239986][ T8074] loop7: detected capacity change from 0 to 7
[  222.247161][ T5529] Dev loop7: unable to read RDB block 7
[  222.248049][ T5529]  loop7: unable to read partition table
[  222.248999][ T5529] loop7: partition table beyond EOD, truncated
[  222.266884][ T8074] Dev loop7: unable to read RDB block 7
[  222.267806][ T8074]  loop7: unable to read partition table
[  222.268720][ T8074] loop7: partition table beyond EOD, truncated
[  222.289906][ T8074] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CîjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`µ4FLQkÝŠ5) failed (rc=-5)
[  222.313123][   T47] loop: Write error at byte offset 2, length 3584.
[  222.317553][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  222.318920][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  222.328826][ T3638] Dev loop7: unable to read RDB block 7
[  222.329689][ T3638]  loop7: unable to read partition table
[  222.330710][ T3638] loop7: partition table beyond EOD, truncated
[  222.873462][ T8072] loop4: detected capacity change from 0 to 32768
[  222.919083][ T8072] JBD2: Ignoring recovery information on journal
[  223.032166][ T8072] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  223.327467][ T8087] loop5: detected capacity change from 0 to 40427
[  223.337626][ T8087] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  223.346393][ T8087] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  223.354819][ T8087] F2FS-fs (loop5): invalid crc value
[  223.368685][ T8087] F2FS-fs (loop5): Found nat_bits in checkpoint
[  223.458670][ T8087] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  223.459805][ T8087] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  223.590170][ T8114] xt_CT: You must specify a L4 protocol and not use inversions on it
[  223.595993][   T26] kauditd_printk_skb: 12 callbacks suppressed
[  223.596005][   T26] audit: type=1804 audit(1790862822.897:41): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1262" name="/newroot/168/file0/bus" dev="loop5" ino=10 res=1 errno=0
[  223.776960][ T4271] ocfs2: Unmounting device (7,4) on (node local)
[  224.297392][ T8130] netlink: 4476 bytes leftover after parsing attributes in process `syz.6.1281'.
[  224.298914][ T8130] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1281'.
[  225.267313][ T8173] loop4: detected capacity change from 0 to 128
[  225.337828][ T8173] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  225.354167][ T8173] hpfs: filesystem error: improperly stopped
[  225.355167][ T8173] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  225.366347][ T8173] hpfs: You really don't want any checks? You are crazy...
[  225.378512][ T8173] hpfs: Code page index out of array
[  225.381809][ T8173] hpfs: code page support is disabled
[  225.390578][ T8173] hpfs: hpfs_map_4sectors(): unaligned read
[  225.399374][ T8173] hpfs: hpfs_map_4sectors(): unaligned read
[  225.406816][ T8173] hpfs: filesystem error: unable to find root dir
[  225.407885][ T8175] loop6: detected capacity change from 0 to 128
[  225.442198][ T8175] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  225.457074][ T8175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.185186][ T8193] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1308'.
[  226.559275][ T8211] loop4: detected capacity change from 0 to 256
[  226.707704][   T26] audit: type=1807 audit(1790862826.007:42): UNKNOWN=m™`easuÈìeø^Ïzh
VÜ”öre res=0
[  226.725902][   T26] audit: type=1802 audit(1790862826.027:43): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.1318" res=0 errno=0
[  226.733675][ T8213] ima: policy update failed
[  226.737311][   T26] audit: type=1802 audit(1790862826.037:44): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1318" res=0 errno=0
[  226.868323][ T8217] loop4: detected capacity change from 0 to 512
[  226.908295][ T8217] EXT4-fs (loop4): 1 truncate cleaned up
[  226.909219][ T8217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  226.955895][ T8217] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1319: bg 0: block 465: padding at end of block bitmap is not set
[  226.999442][ T8217] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  227.018168][ T8217] EXT4-fs (loop4): This should not happen!! Data will be lost
[  227.018168][ T8217] 
[  227.026288][ T8217] EXT4-fs (loop4): Total free blocks count 0
[  227.033984][ T8217] EXT4-fs (loop4): Free/Dirty block details
[  227.034981][ T8217] EXT4-fs (loop4): free_blocks=0
[  227.055475][ T8217] EXT4-fs (loop4): dirty_blocks=62
[  227.056282][ T8217] EXT4-fs (loop4): Block reservation details
[  227.071782][ T8217] EXT4-fs (loop4): i_reserved_data_blocks=62
[  227.158762][   T57] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 60 with error 28
[  227.348388][ T8234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1324'.
[  227.540615][ T8241] loop5: detected capacity change from 0 to 16
[  227.565058][ T8241] erofs: (device loop5): mounted with root inode @ nid 36.
[  227.624684][ T8241] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  227.654266][ T8241] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851]
[  227.696205][ T8241] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  227.717143][ T8246] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  227.718527][ T8246] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -59 in[61, 4035] out[1851]
[  227.720048][ T8246] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  227.912971][ T8251] netlink: 'syz.4.1330': attribute type 8 has an invalid length.
[  227.914575][ T8251] sch_fq: defrate 0 ignored.
[  227.927501][ T8254] loop6: detected capacity change from 0 to 256
[  228.025126][ T8256] netlink: 'syz.2.1331': attribute type 5 has an invalid length.
[  228.067392][ T8259] loop1: detected capacity change from 0 to 512
[  228.116891][ T8259] EXT4-fs: Ignoring removed nobh option
[  228.117751][ T8259] EXT4-fs: Ignoring removed oldalloc option
[  228.128044][ T8259] EXT4-fs: old and new quota format mixing
[  228.489346][ T8266] loop6: detected capacity change from 0 to 8192
[  228.512972][ T8266]  loop6: p1 < > p2 < > p3 p4 < >
[  228.513809][ T8266] loop6: partition table partially beyond EOD, truncated
[  228.524738][ T4318] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  228.532912][ T8266] loop6: p1 start 67108864 is beyond EOD, truncated
[  228.547202][ T8266] loop6: p3 start 100859904 is beyond EOD, truncated
[  228.618337][ T8272] loop1: detected capacity change from 0 to 2048
[  228.662536][ T8275] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.708445][ T4318] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.710106][ T4318] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  228.724097][ T4318] usb 6-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00
[  228.725534][ T4318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.750102][ T4318] usb 6-1: config 0 descriptor??
[  228.782387][ T4318] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  228.842145][ T7947] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  228.993445][ T8275] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  228.995269][ T8275] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  229.027545][ T7947] usb 7-1: config 1 has an invalid descriptor of length 77, skipping remainder of the config
[  229.029364][ T7947] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 194, using maximum allowed: 30
[  229.039488][ T7947] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 194
[  229.041420][ T8275] Remounting filesystem read-only
[  229.051392][ T7947] usb 7-1: config 1 interface 1 has no altsetting 0
[  229.054418][ T4276] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  229.061408][ T7947] usb 7-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00
[  229.080661][ T7947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.097355][ T4318] usb 6-1: USB disconnect, device number 5
[  229.304388][ T7947] usb 7-1: selecting invalid altsetting 0
[  229.517867][ T7947] usb 7-1: string descriptor 0 read error: -71
[  229.530272][ T7947] usb 7-1: USB disconnect, device number 3
[  229.558918][ T8276] loop4: detected capacity change from 0 to 40427
[  229.600203][ T8276] F2FS-fs (loop4): invalid crc value
[  229.628778][ T8276] F2FS-fs (loop4): Found nat_bits in checkpoint
[  229.736303][ T8276] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  229.776106][ T8276] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  229.845836][ T8276] syz.4.1341: attempt to access beyond end of device
[  229.845836][ T8276] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  230.006313][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'.
[  230.466801][ T8311] set_capacity_and_notify: 1 callbacks suppressed
[  230.466812][ T8311] loop4: detected capacity change from 0 to 4096
[  230.492191][ T7947] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  230.674439][ T7947] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  230.676084][ T7947] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  230.677503][ T7947] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  230.686495][ T7947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.699065][ T8308] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  230.894790][ T4271] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  230.896254][ T4271] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  231.016364][ T4318] usb 7-1: USB disconnect, device number 4
[  231.370718][ T8315] loop5: detected capacity change from 0 to 32768
[  231.422968][ T8315] JBD2: Ignoring recovery information on journal
[  231.507360][ T8315] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  232.003604][ T8321] loop4: detected capacity change from 0 to 40427
[  232.037632][ T8321] F2FS-fs (loop4): invalid crc value
[  232.059417][ T8321] F2FS-fs (loop4): Found nat_bits in checkpoint
[  232.117972][ T5440] ocfs2: Unmounting device (7,5) on (node local)
[  232.208233][ T8347] loop1: detected capacity change from 0 to 512
[  232.301830][ T8321] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  232.310160][ T8347] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  232.335025][ T8347] FAT-fs (loop1): Filesystem has been set read-only
[  232.496958][ T4271] syz-executor: attempt to access beyond end of device
[  232.496958][ T4271] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  232.578323][ T8356] loop1: detected capacity change from 0 to 128
[  232.629348][ T8356] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  232.691004][ T8356] hpfs: filesystem error: improperly stopped
[  232.729548][ T8356] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  232.760514][ T8356] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  232.811382][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'.
[  232.996190][ T8364] netlink: 'syz.1.1376': attribute type 1 has an invalid length.
[  233.038410][ T8364] device gretap0 entered promiscuous mode
[  233.049649][ T8366] loop5: detected capacity change from 0 to 1024
[  233.070138][ T8367] netlink: 'syz.1.1376': attribute type 1 has an invalid length.
[  233.108285][ T8366] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  233.253853][ T5440] EXT4-fs (loop5): unmounting filesystem.
[  233.309498][ T8374] loop2: detected capacity change from 0 to 4096
[  233.318983][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1379'.
[  233.380082][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1379'.
[  233.555877][ T8383] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.644225][   T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  233.695468][ T8374] NILFS error (device loop2): nilfs_readdir: zero-length directory entry
[  233.738972][ T8387] tipc: Started in network mode
[  233.768052][ T8387] tipc: Node identity ac14140f, cluster identity 4711
[  233.820169][ T8387] tipc: New replicast peer: 255.255.255.255
[  233.828857][ T8374] Remounting filesystem read-only
[  233.875543][   T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.887423][ T8387] tipc: Enabled bearer <udp:syz2>, priority 10
[  233.940809][   T14] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  233.957008][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1383'.
[  234.047379][   T14] usb 2-1: New USB device found, idVendor=076d, idProduct=c262, bcdDevice= 0.00
[  234.114097][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.161038][   T14] usb 2-1: config 0 descriptor??
[  234.210285][   T14] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  234.265147][ T8373] loop4: detected capacity change from 0 to 40427
[  234.307050][ T8373] F2FS-fs (loop4): invalid crc value
[  234.349995][ T8373] F2FS-fs (loop4): Found nat_bits in checkpoint
[  234.435688][ T4656] usb 2-1: USB disconnect, device number 11
[  234.538604][ T8373] F2FS-fs (loop4): Start checkpoint disabled!
[  234.622705][ T8373] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  234.774290][ T8407] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1392'.
[  234.874390][ T4300] kworker/u4:5: attempt to access beyond end of device
[  234.874390][ T4300] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  234.949031][ T4300] kworker/u4:5: attempt to access beyond end of device
[  234.949031][ T4300] loop4: rw=2049, sector=41000, nr_sectors = 8 limit=40427
[  234.992765][ T4656] tipc: Node number set to 2886997007
[  235.177696][ T8404] loop6: detected capacity change from 0 to 32768
[  235.349296][ T8420] loop5: detected capacity change from 0 to 256
[  235.381783][   T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  235.408900][ T8420] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  235.491183][ T8423] program syz.2.1400 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  235.509538][   T26] audit: type=1326 audit(1790862834.807:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.6.1401" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe661b9e159 code=0x7ffc0000
[  235.546969][ T8420] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008)
[  235.568058][ T8424] loop6: detected capacity change from 0 to 512
[  235.594816][ T8420] FAT-fs (loop5): Filesystem has been set read-only
[  235.627196][ T8424] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  235.636529][   T14] usb 2-1: Using ep0 maxpacket: 32
[  235.658062][   T26] audit: type=1326 audit(1790862834.847:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.6.1401" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe661b9e159 code=0x7ffc0000
[  235.685435][   T14] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  235.712051][ T8424] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.736853][   T14] usb 2-1: config 0 has no interface number 0
[  235.759842][   T14] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.833058][   T26] audit: type=1326 audit(1790862834.847:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.6.1401" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe661b9dec2 code=0x7ffc0000
[  235.861513][   T14] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.914348][   T14] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  235.964430][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.995371][   T26] audit: type=1800 audit(1790862834.847:48): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1399" name="file1" dev="loop5" ino=1048671 res=0 errno=0
[  236.030792][ T8434] loop4: detected capacity change from 0 to 512
[  236.047923][   T14] usb 2-1: config 0 descriptor??
[  236.109948][ T7387] EXT4-fs (loop6): unmounting filesystem.
[  236.133656][ T8434] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[  236.205949][   T26] audit: type=1326 audit(1790862834.867:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.6.1401" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe661b5e98e code=0x7ffc0000
[  236.248175][ T8434] System zones: 1-12
[  236.283889][ T8434] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1404: Directory hole found for htree index block 0
[  236.368758][   T26] audit: type=1326 audit(1790862834.867:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.6.1401" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe661b9df87 code=0x7ffc0000
[  236.408262][ T8434] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  236.456007][ T8444] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1407'.
[  236.465314][ T8434] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.1404: Directory hole found for htree index block 0
[  236.507048][   T26] audit: type=1326 audit(1790862834.867:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.6.1401" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe661b5e98e code=0x7ffc0000
[  236.554520][ T8434] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  236.579189][ T8434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  236.616073][   T26] audit: type=1326 audit(1790862834.867:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.6.1401" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe661b9ddeb code=0x7ffc0000
[  236.669705][ T8448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1409'.
[  236.680524][ T8434] EXT4-fs (loop4): shut down requested (2)
[  236.689182][   T14] uclogic 0003:28BD:0094.0008: pen parameters not found
[  236.699667][   T14] uclogic 0003:28BD:0094.0008: interface is invalid, ignoring
[  236.745101][   T26] audit: type=1326 audit(1790862834.907:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.6.1401" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe661b5e98e code=0x7ffc0000
[  236.795987][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  236.866824][   T26] audit: type=1326 audit(1790862834.907:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8422 comm="syz.6.1401" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe661b5e98e code=0x7ffc0000
[  236.927121][   T14] usb 2-1: USB disconnect, device number 12
[  237.327823][ T8471] loop5: detected capacity change from 0 to 2048
[  237.364780][ T8471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.373939][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  237.614908][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'.
[  237.885822][ T8487] loop6: detected capacity change from 0 to 256
[  237.939843][ T8487] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  238.134116][   T14] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  238.288678][ T8500] loop1: detected capacity change from 0 to 256
[  238.340595][   T14] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  238.396828][   T14] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  238.461022][   T14] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  238.490692][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.529316][ T8486] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  238.630335][ T8509] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1437'.
[  238.706647][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'.
[  238.860906][   T14] usb 6-1: USB disconnect, device number 6
[  239.270478][ T8526] loop2: detected capacity change from 0 to 2048
[  239.286708][ T8528] loop1: detected capacity change from 0 to 512
[  239.424704][ T8528] FAT-fs (loop1): error, corrupted file size (i_pos 51, 9216)
[  239.437912][ T8526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  239.495660][ T8528] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960)
[  239.541638][ T8528] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960)
[  239.806546][ T8519] loop4: detected capacity change from 0 to 32768
[  239.924595][ T8519] JBD2: Ignoring recovery information on journal
[  239.994053][   T14] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  240.060768][ T8519] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  240.215170][   T14] usb 6-1: config 127 has an invalid interface number: 57 but max is 0
[  240.261982][   T14] usb 6-1: config 127 has no interface number 0
[  240.308800][   T14] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  240.368766][   T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.417483][   T14] usb 6-1: Product: syz
[  240.440776][   T14] usb 6-1: Manufacturer: syz
[  240.468394][   T14] usb 6-1: SerialNumber: syz
[  240.516215][ T4271] ocfs2: Unmounting device (7,4) on (node local)
[  240.714968][   T14] asix: probe of 6-1:127.57 failed with error -22
[  240.944795][   T14] usb 6-1: USB disconnect, device number 7
[  241.097620][ T8577] loop2: detected capacity change from 0 to 256
[  241.197312][ T8577] exfat: Unknown parameter 'zero_size_dir'
[  241.440128][ T8586] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  241.504619][ T8591] loop6: detected capacity change from 0 to 512
[  241.617803][ T8591] EXT4-fs (loop6): orphan cleanup on readonly fs
[  241.680041][ T8591] EXT4-fs error (device loop6): ext4_quota_enable:7045: comm syz.6.1459: Bad quota inum: 5, type: 1
[  241.724869][ T8599] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1461'.
[  241.741539][ T8591] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix.
[  241.861997][ T8591] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  241.868740][ T8591] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  241.981887][ T8611] device bridge0 entered promiscuous mode
[  242.000520][ T8613] loop2: detected capacity change from 0 to 512
[  242.039197][ T8610] device bridge0 left promiscuous mode
[  242.062106][ T7387] EXT4-fs (loop6): unmounting filesystem.
[  242.121091][ T8613] EXT4-fs: Ignoring removed orlov option
[  242.127008][ T8613] EXT4-fs: Ignoring removed mblk_io_submit option
[  242.341056][ T8613] EXT4-fs: Ignoring removed mblk_io_submit option
[  242.451284][ T8613] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1464: corrupted in-inode xattr
[  242.580346][ T8639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'.
[  242.605662][ T8613] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1464: couldn't read orphan inode 15 (err -117)
[  242.763755][ T8613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  242.950131][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  243.186384][ T8664] loop4: detected capacity change from 0 to 2048
[  243.229208][ T8664] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  243.309579][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  243.369109][ T8670] WARNING! power/level is deprecated; use power/control instead
[  243.464358][   T14] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  243.572968][ T8678] loop4: detected capacity change from 0 to 512
[  243.612160][ T8678] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  243.664721][   T14] usb 6-1: unable to get BOS descriptor or descriptor too short
[  243.705629][ T8678] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.1490: bad orphan inode 13
[  243.717282][   T14] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.738285][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1491'.
[  243.756755][ T8678] ext4_test_bit(bit=12, block=18) = 1
[  243.764792][   T14] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  243.777672][ T8678] is_bad_inode(inode)=0
[  243.795473][   T14] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  243.811841][ T8678] NEXT_ORPHAN(inode)=0
[  243.826149][ T8678] max_ino=32
[  243.829397][ T8678] i_nlink=1
[  243.836237][   T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.866638][ T8678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  243.888818][   T14] usb 6-1: Product: syz
[  243.906092][   T14] usb 6-1: Manufacturer: syz
[  243.932602][   T14] usb 6-1: SerialNumber: syz
[  243.959545][ T8678] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  243.988334][   T14] usb 6-1: selecting invalid altsetting 1
[  244.007809][   T14] usb 6-1: unit 6 not found!
[  244.023803][ T8693] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  244.124934][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  244.209261][ T8700] loop1: detected capacity change from 0 to 64
[  244.326260][ T8702] loop4: detected capacity change from 0 to 256
[  244.685603][ T8708] loop4: detected capacity change from 0 to 2048
[  244.728352][ T8708] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  244.798423][   T14] usb 6-1: 2:0: failed to get current value for ch 0 (-71)
[  244.855106][   T14] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  244.883270][   T14] usb 6-1: USB disconnect, device number 8
[  244.935119][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  245.115279][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  245.129623][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  245.139680][ T4265] udevd[4265]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  245.159102][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  245.166947][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  245.177846][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  245.185247][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  245.323926][ T8712] chnl_net:caif_netlink_parms(): no params data found
[  245.467677][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1506'.
[  245.665419][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.690897][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.732882][ T8712] device bridge_slave_0 entered promiscuous mode
[  245.775976][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.809443][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.844391][ T8712] device bridge_slave_1 entered promiscuous mode
[  245.917569][ T8712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.973760][ T8712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.146635][ T7830] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.217888][ T8731] loop4: detected capacity change from 0 to 32768
[  246.283592][ T8712] team0: Port device team_slave_0 added
[  246.319275][ T8731] JBD2: Ignoring recovery information on journal
[  246.563815][ T7830] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.607434][ T8731] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  246.697749][ T8712] team0: Port device team_slave_1 added
[  246.846507][ T7830] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.909977][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.977234][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.048293][ T4271] ocfs2: Unmounting device (7,4) on (node local)
[  247.129105][ T8712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.210821][ T4289] Bluetooth: hci1: command 0x0409 tx timeout
[  247.254164][ T7830] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.387543][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.414834][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.440763][    C0] vkms_vblank_simulate: vblank timer overrun
[  247.556717][ T8712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.606747][ T8754] zswap: compressor z not available
[  247.634790][ T8758] netlink: 'syz.2.1520': attribute type 10 has an invalid length.
[  247.798130][ T8774] loop5: detected capacity change from 0 to 256
[  247.829087][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.871267][ T8758] team0: Device bond0 failed to register rx_handler
[  248.057938][ T8712] device hsr_slave_0 entered promiscuous mode
[  248.089407][ T8712] device hsr_slave_1 entered promiscuous mode
[  248.124095][ T8712] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.158628][ T8712] Cannot create hsr debugfs directory
[  248.290839][ T8783] loop5: detected capacity change from 0 to 2048
[  248.409086][ T8783] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  248.651165][ T5440] EXT4-fs (loop5): unmounting filesystem.
[  249.053474][ T8781] loop1: detected capacity change from 0 to 32768
[  249.116770][ T8781] JBD2: Ignoring recovery information on journal
[  249.265962][ T8781] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  249.290424][ T4289] Bluetooth: hci1: command 0x041b tx timeout
[  249.797846][ T4276] ocfs2: Unmounting device (7,1) on (node local)
[  250.194172][ T8712] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  250.326327][ T8712] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  250.454163][ T8712] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  250.563222][ T8712] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  250.905862][ T8838] syzkaller0: tun_chr_ioctl cmd 1074025672
[  250.936990][ T8838] syzkaller0: ignored: set checksum disabled
[  251.378004][ T4289] Bluetooth: hci1: command 0x040f tx timeout
[  251.427987][ T7830] device hsr_slave_0 left promiscuous mode
[  251.465839][ T7830] device hsr_slave_1 left promiscuous mode
[  251.489129][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.559177][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.584403][ T8856] ip_tables: iptables: counters copy to user failed while replacing table
[  251.613513][ T7830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.670160][ T7830] batman_adv: batadv0: Removing interface: batadv_slave_1
[  251.723736][ T7830] device bridge_slave_1 left promiscuous mode
[  251.729991][ T7830] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.809387][ T7830] device bridge_slave_0 left promiscuous mode
[  251.856393][ T7830] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.978787][ T7830] device veth1_macvtap left promiscuous mode
[  252.004205][ T7830] device veth0_macvtap left promiscuous mode
[  252.028688][ T7830] device veth1_vlan left promiscuous mode
[  252.063011][   T14] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  252.075178][ T7830] device veth0_vlan left promiscuous mode
[  252.264421][   T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.306612][   T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.355372][   T14] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  252.385935][ T8872] loop5: detected capacity change from 0 to 4096
[  252.394622][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  252.416504][ T8872] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  252.445665][   T14] usb 2-1: SerialNumber: syz
[  252.510944][ T8872] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  252.681300][   T14] usb 2-1: 0:2 : does not exist
[  252.738514][   T14] usb 2-1: USB disconnect, device number 13
[  252.911165][   T47] ntfs3: loop5: ntfs3_write_inode r=1a failed, -22.
[  252.928481][ T5440] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22.
[  252.964919][ T5440] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22.
[  253.137018][ T8862] loop2: detected capacity change from 0 to 32768
[  253.196785][ T8862] JBD2: Ignoring recovery information on journal
[  253.349285][ T8878] loop1: detected capacity change from 0 to 1024
[  253.395331][ T8862] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  253.453399][ T4289] Bluetooth: hci1: command 0x0419 tx timeout
[  253.502056][ T4300] hfsplus: b-tree write err: -5, ino 20
[  253.516153][ T4300] hfsplus: b-tree write err: -5, ino 4
[  253.545312][ T4300] hfsplus: b-tree write err: -5, ino 2
[  253.885346][ T4283] ocfs2: Unmounting device (7,2) on (node local)
[  254.063880][ T8885] input: syz1 as /devices/virtual/input/input10
[  254.664143][ T8898] loop1: detected capacity change from 0 to 64
[  254.727207][ T8898] hfs: request for non-existent node 131072 in B*Tree
[  254.751131][ T8898] hfs: request for non-existent node 131072 in B*Tree
[  254.766688][ T7830] team0 (unregistering): Port device team_slave_1 removed
[  254.928728][ T7830] team0 (unregistering): Port device team_slave_0 removed
[  255.057522][ T7830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.187824][ T7830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.258390][ T8900] loop1: detected capacity change from 0 to 40427
[  255.288324][ T8900] F2FS-fs (loop1): invalid crc value
[  255.323369][ T8900] F2FS-fs (loop1): Found nat_bits in checkpoint
[  255.386786][ T8900] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  255.427408][ T8900] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  255.539359][ T4276] syz-executor: attempt to access beyond end of device
[  255.539359][ T4276] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  255.773320][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  255.780529][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  256.281793][ T7830] bond0 (unregistering): Released all slaves
[  256.519763][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.592108][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  256.657731][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  256.696665][ T8712] 8021q: adding VLAN 0 to HW filter on device team0
[  256.764617][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  256.825102][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  256.838811][ T8933] loop2: detected capacity change from 0 to 64
[  256.887691][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.894942][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.988652][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  257.037265][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  257.084490][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.091658][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.190281][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  257.263094][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  257.312490][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  257.387400][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  257.454024][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  257.489078][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  257.537653][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  257.595293][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  257.641332][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  257.700820][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  257.735489][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  257.792369][ T8712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  257.823444][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  258.236423][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  258.245556][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  258.263471][ T8712] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.483293][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  258.494835][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  258.515232][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  258.525066][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  258.537049][ T8712] device veth0_vlan entered promiscuous mode
[  258.545180][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  258.556503][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  258.568959][ T8712] device veth1_vlan entered promiscuous mode
[  258.593658][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  258.603770][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  258.613759][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  258.625223][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  258.637131][ T8712] device veth0_macvtap entered promiscuous mode
[  258.647950][ T8712] device veth1_macvtap entered promiscuous mode
[  258.666288][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.680500][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.692190][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.703893][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.715451][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.727052][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.742375][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.753069][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.766560][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.776589][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  258.788308][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  258.796525][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  258.807908][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  258.820036][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.833938][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.845648][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.859182][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.872342][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.885122][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.899154][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.912457][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.923436][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.937012][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  258.946498][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  258.962357][ T8712] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  258.976359][ T8712] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.985332][ T8712] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.998896][ T8712] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.084421][   T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.103153][   T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.122053][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  259.140880][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.152357][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.161024][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  259.527648][ T8982] loop2: detected capacity change from 0 to 512
[  259.625414][ T8982] EXT4-fs: Ignoring removed orlov option
[  259.740089][ T8982] EXT4-fs error (device loop2): __ext4_iget:5102: inode #11: block 1: comm syz.2.1598: invalid block
[  259.785945][ T8992] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1602'.
[  259.833643][ T8992] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1602'.
[  259.867619][ T8982] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1598: couldn't read orphan inode 11 (err -117)
[  259.890141][ T8996] program syz.4.1604 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  259.995692][ T8982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  260.133222][ T8980] loop6: detected capacity change from 0 to 32768
[  260.149583][ T8982] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.1598: Directory hole found for htree leaf block 0
[  260.204814][ T8980] JBD2: Ignoring recovery information on journal
[  260.223580][ T9002] loop5: detected capacity change from 0 to 512
[  260.306087][ T9002] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  260.336063][ T8980] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  260.378664][ T9002] ext4 filesystem being mounted at /243/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  260.389654][    T7] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  260.489447][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  260.489459][   T26] audit: type=1800 audit(1790863371.787:66): pid=9002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1608" name="file1" dev="loop5" ino=15 res=0 errno=0
[  260.525784][ T9002] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1608: bg 0: block 217: padding at end of block bitmap is not set
[  260.555712][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  260.613212][    T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  260.627458][ T9002] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  260.661286][    T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  260.711552][    T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  260.739808][    T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  260.767871][    T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  260.802284][    T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  260.829867][    T7] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  260.888121][ T8712] ocfs2: Unmounting device (7,6) on (node local)
[  260.900971][    T7] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[  260.939895][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.987284][    T7] usb 5-1: Product: syz
[  260.997386][    T7] usb 5-1: Manufacturer: syz
[  261.007482][    T7] usb 5-1: SerialNumber: syz
[  261.036872][ T9000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  261.060979][ T9015] batman_adv: Routing algorithm 'B' is not supported
[  261.069697][ T5440] EXT4-fs (loop5): unmounting filesystem.
[  261.088231][ T9000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  261.177925][ T9000] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  261.230047][    T7] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected
[  261.261645][    T7] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  261.293431][ T9021] loop6: detected capacity change from 0 to 128
[  261.310748][    T7] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82
[  261.347659][    T7] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  261.358129][ T9021] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  261.385306][    T7] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  261.401844][ T9021] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  261.510190][ T9021] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes
[  261.537409][ T9026] loop5: detected capacity change from 0 to 256
[  261.642900][ T9029] xt_hashlimit: size too large, truncated to 1048576
[  261.724129][ T8712] EXT4-fs (loop6): unmounting filesystem.
[  262.154433][ T9042] loop6: detected capacity change from 0 to 256
[  262.197152][ T9042] exfat: Bad value for 'uid'
[  262.269138][ T4358] usb 5-1: USB disconnect, device number 14
[  262.344313][ T4358] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  262.397009][ T4358] keyspan 5-1:1.0: device disconnected
[  262.470658][ T9048] loop6: detected capacity change from 0 to 256
[  262.525792][ T9048] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  262.945168][ T9058] loop4: detected capacity change from 0 to 8
[  263.102334][ T9058] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  263.318087][ T9052] loop5: detected capacity change from 0 to 32768
[  263.386120][ T9052] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1626 (9052)
[  263.483505][ T9052] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.561912][ T9052] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  263.621978][ T9052] BTRFS info (device loop5): force clearing of disk cache
[  263.629129][ T9052] BTRFS info (device loop5): use zlib compression, level 3
[  263.722427][ T9052] BTRFS info (device loop5): enabling ssd optimizations
[  263.771167][ T9052] BTRFS info (device loop5): using spread ssd allocation scheme
[  263.810657][ T9052] BTRFS info (device loop5): using free space tree
[  263.817605][ T9074] ALSA: mixer_oss: invalid OSS volume ''
[  263.966832][ T9052] BTRFS info (device loop5): rebuilding free space tree
[  264.045505][ T9096] loop4: detected capacity change from 0 to 512
[  264.122241][ T9096] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  264.190287][ T9052] BTRFS info (device loop5): checking UUID tree
[  264.245665][ T9096] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  264.358527][ T9096] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1637: bg 0: block 248: padding at end of block bitmap is not set
[  264.453587][ T5440] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  264.465148][ T9096] Quota error (device loop4): write_blk: dquota write failed
[  264.507895][ T9096] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  264.602465][ T9096] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1637: Failed to acquire dquot type 1
[  264.657558][ T9096] EXT4-fs (loop4): 1 truncate cleaned up
[  264.692509][ T9096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  265.044701][ T9107] IPv6: addrconf: prefix option has invalid lifetime
[  265.177602][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  265.191389][ T4300] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5
[  265.229072][ T4300] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1
[  265.472697][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1645'.
[  265.505920][ T9116] loop5: detected capacity change from 0 to 8
[  265.748833][ T9123] loop6: detected capacity change from 0 to 256
[  265.832160][ T9123] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  266.551721][ T9152] loop6: detected capacity change from 0 to 256
[  266.630578][ T9152] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  266.774180][ T9128] loop4: detected capacity change from 0 to 32768
[  266.816059][ T9158] loop2: detected capacity change from 0 to 512
[  267.010477][ T9164] ea_get: invalid extended attribute
[  267.016488][ T9164] ffff888071f23170: 04 00 00 00                                      ....
[  267.098904][ T9158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  267.284724][ T9158] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.614013][ T9180] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  267.641293][ T9179] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  267.648648][ T9179] team0: Device ipvlan2 is already an upper device of the team interface
[  267.799518][ T9180] EXT4-fs (loop2): Remounting filesystem read-only
[  267.974930][ T9171] loop5: detected capacity change from 0 to 32768
[  268.000320][ T4283] EXT4-fs (loop2): unmounting filesystem.
[  268.036329][ T9171] JBD2: Ignoring recovery information on journal
[  268.152842][ T9171] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  268.162049][ T4358] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  268.380834][ T4358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.423584][ T4358] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  268.465649][ T4358] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  268.505392][ T4358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.553887][ T4358] usb 5-1: config 0 descriptor??
[  268.582865][ T4358] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  268.598584][ T5440] ocfs2: Unmounting device (7,5) on (node local)
[  268.635853][ T4358] dvb-usb: bulk message failed: -22 (3/0)
[  268.693827][ T4358] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  268.744749][ T4358] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  268.771844][ T4358] usb 5-1: media controller created
[  268.784762][ T9188] dvb-usb: bulk message failed: -22 (4/0)
[  268.805879][ T4358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  268.853812][ T4358] dvb-usb: bulk message failed: -22 (6/0)
[  268.882286][ T4358] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  268.919585][ T4358] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  268.962602][ T4358] dvb-usb: schedule remote query interval to 150 msecs.
[  268.998022][ T4358] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  269.022148][ T9209] loop6: detected capacity change from 0 to 256
[  269.047782][ T4358] usb 5-1: USB disconnect, device number 15
[  269.147325][ T4358] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  269.192240][ T9211] loop5: detected capacity change from 0 to 256
[  269.229435][ T4648] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  269.248649][ T9211] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  269.434086][ T9216] loop6: detected capacity change from 0 to 256
[  269.465593][ T4648] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  269.544607][ T4648] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  269.605730][ T4648] usb 3-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  269.663074][ T4648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.710597][ T4648] usb 3-1: Product: syz
[  269.722370][ T4648] usb 3-1: Manufacturer: syz
[  269.737203][ T4648] usb 3-1: SerialNumber: syz
[  269.996275][ T4648] kaweth 3-1:1.0: Firmware present in device.
[  270.028598][ T9233] loop1: detected capacity change from 0 to 4096
[  270.171741][ T4648] kaweth 3-1:1.0: Statistics collection: 0
[  270.201867][ T4648] kaweth 3-1:1.0: Multicast filter limit: 0
[  270.207802][ T4648] kaweth 3-1:1.0: MTU: 0
[  270.276517][ T4648] kaweth 3-1:1.0: Read MAC address 00:00:00:00:00:00
[  270.293877][ T9244] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.334670][ T4276] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  270.377946][ T4276] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  270.583952][ T4648] kaweth 3-1:1.0: Error setting SOFS wait
[  270.612459][ T4648] kaweth: probe of 3-1:1.0 failed with error -5
[  270.664854][ T4648] usb 3-1: USB disconnect, device number 9
[  270.860774][ T4358] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  271.069562][ T4358] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.107769][ T4358] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  271.165905][ T4358] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  271.207246][ T9255] set_capacity_and_notify: 1 callbacks suppressed
[  271.207256][ T9255] loop5: detected capacity change from 0 to 512
[  271.230919][ T4358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.269959][ T4358] usb 2-1: config 0 descriptor??
[  271.315464][ T4358] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  271.349964][ T9255] EXT4-fs error (device loop5): __ext4_iget:5102: inode #11: block 1: comm syz.5.1703: invalid block
[  271.375559][ T4358] dvb-usb: bulk message failed: -22 (3/0)
[  271.406680][ T9255] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1703: couldn't read orphan inode 11 (err -117)
[  271.435451][ T4358] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  271.484004][ T9255] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  271.502786][ T9249] dvb-usb: bulk message failed: -22 (4/0)
[  271.518914][ T4358] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  271.556080][ T4358] usb 2-1: media controller created
[  271.577677][ T9255] EXT4-fs error (device loop5): ext4_add_entry:2488: inode #2: comm syz.5.1703: Directory hole found for htree leaf block 0
[  271.597150][ T4358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  271.644503][ T4358] dvb-usb: bulk message failed: -22 (6/0)
[  271.681367][ T4358] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  271.744709][ T4358] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  271.801522][ T4358] dvb-usb: schedule remote query interval to 150 msecs.
[  271.828809][ T4358] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  271.887184][ T9257] syz.4.1704 (9257): drop_caches: 2
[  271.906013][ T4358] usb 2-1: USB disconnect, device number 14
[  271.941896][ T5440] EXT4-fs (loop5): unmounting filesystem.
[  271.979158][ T4358] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  272.001197][ T9257] syz.4.1704 (9257): drop_caches: 2
[  272.294834][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'.
[  273.051968][ T4316] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  273.168297][ T9304] loop1: detected capacity change from 0 to 32768
[  273.222063][   T14] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  273.242887][ T9305] loop4: detected capacity change from 0 to 32768
[  273.260818][ T4316] usb 6-1: Using ep0 maxpacket: 16
[  273.285521][ T9305] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1724 (9305)
[  273.307362][ T4316] usb 6-1: too many endpoints for config 0 interface 0 altsetting 69: 68, using maximum allowed: 30
[  273.368329][ T4316] usb 6-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.413061][ T4316] usb 6-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 68
[  273.441537][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.466654][   T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  273.484750][ T4316] usb 6-1: config 0 interface 0 has no altsetting 0
[  273.498926][   T14] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  273.512546][ T4316] usb 6-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00
[  273.522336][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.535268][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.551874][   T14] usb 3-1: config 0 descriptor??
[  273.564779][ T4316] usb 6-1: config 0 descriptor??
[  273.584023][   T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  273.643621][   T14] dvb-usb: bulk message failed: -22 (3/0)
[  273.682367][   T14] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  273.723111][ T9305] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  273.736484][   T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  273.784471][   T14] usb 3-1: media controller created
[  273.806704][ T9305] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  273.832067][ T9307] dvb-usb: bulk message failed: -22 (4/0)
[  273.838617][   T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  273.880172][ T9305] BTRFS info (device loop4): using free space tree
[  273.942674][   T14] dvb-usb: bulk message failed: -22 (6/0)
[  273.977513][   T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  273.991893][ T4316] wacom 0003:056A:0304.0009: unknown main item tag 0x0
[  274.031496][ T4316] wacom 0003:056A:0304.0009: unknown main item tag 0x0
[  274.038406][ T4316] wacom 0003:056A:0304.0009: unknown main item tag 0x0
[  274.056254][   T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[  274.082857][ T9305] BTRFS info (device loop4): enabling ssd optimizations
[  274.142254][ T4316] wacom 0003:056A:0304.0009: unknown main item tag 0x0
[  274.161280][   T14] dvb-usb: schedule remote query interval to 150 msecs.
[  274.185509][ T4316] wacom 0003:056A:0304.0009: unknown main item tag 0x0
[  274.205001][   T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  274.239323][ T4316] wacom 0003:056A:0304.0009: unknown main item tag 0x0
[  274.271991][   T14] usb 3-1: USB disconnect, device number 10
[  274.293452][ T4316] wacom 0003:056A:0304.0009: unknown main item tag 0x0
[  274.321548][ T4316] wacom 0003:056A:0304.0009: unknown main item tag 0x0
[  274.358665][ T4316] wacom 0003:056A:0304.0009: unknown main item tag 0x0
[  274.373016][ T9341] loop6: detected capacity change from 0 to 1024
[  274.380414][ T9342] loop1: detected capacity change from 0 to 512
[  274.394053][ T4316] wacom 0003:056A:0304.0009: hidraw0: USB HID v0.00 Device [HID 056a:0304] on usb-dummy_hcd.5-1/input0
[  274.425336][ T9342] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  274.498210][ T4316] usb 6-1: USB disconnect, device number 9
[  274.538822][ T9342] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  274.567968][ T9344] hfsplus: request for non-existent node 211 in B*Tree
[  274.603868][   T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  274.633863][ T9344] hfsplus: request for non-existent node 211 in B*Tree
[  274.667374][ T9342] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1731: bg 0: block 248: padding at end of block bitmap is not set
[  274.725992][ T9343] fido_id[9343]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  274.788674][ T9342] Quota error (device loop1): write_blk: dquota write failed
[  274.812474][   T57] hfsplus: b-tree write err: -5, ino 8
[  274.848661][ T9342] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  274.962874][ T9342] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1731: Failed to acquire dquot type 1
[  275.041018][ T4271] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  275.053979][ T9342] EXT4-fs (loop1): 1 truncate cleaned up
[  275.070971][ T9342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  275.414273][ T9355] bonding: no command found in bonding_masters - use +ifname or -ifname
[  275.703833][ T9349] loop5: detected capacity change from 0 to 40427
[  275.742260][ T9349] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  275.791409][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  275.821999][ T9349] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  275.847090][ T7829] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  275.875940][ T7829] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1
[  275.911915][ T9349] F2FS-fs (loop5): Found nat_bits in checkpoint
[  276.094938][ T9362] loop1: detected capacity change from 0 to 164
[  276.104748][ T9349] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  276.130049][ T9349] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  276.386883][ T9369] loop1: detected capacity change from 0 to 1024
[  276.445388][ T9369] EXT4-fs: Ignoring removed orlov option
[  276.523962][ T9369] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  276.675387][ T9381] loop6: detected capacity change from 0 to 512
[  276.712929][ T9379] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  276.761563][ T9381] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data
[  276.848555][ T9383] loop2: detected capacity change from 0 to 512
[  277.012382][ T9383] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  277.124055][ T9365] loop4: detected capacity change from 0 to 32768
[  277.142417][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  277.239721][ T9365] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  277.593150][ T9383] EXT4-fs (loop2): failed to open journal device unknown-block(0,8) -6
[  277.632527][ T4265] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  277.825204][   T26] audit: type=1400 audit(1790863389.127:67): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=9402 comm="syz.4.1755" name="p" offset=79
[  278.140649][ T4358] kernel write not supported for file net/rpc/auth.unix.gid/channel (pid: 4358 comm: kworker/0:9)
[  278.248563][ T9420] loop2: detected capacity change from 0 to 8
[  278.472160][ T9420] SQUASHFS error: Unable to read directory block [631:4a]
[  278.937375][ T9419] loop1: detected capacity change from 0 to 32768
[  278.988569][ T9419] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  279.184842][ T9443] loop5: detected capacity change from 0 to 4096
[  279.229105][ T4265] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  279.291698][ T9443] NILFS (loop5): invalid segment: Checksum error in segment payload
[  279.344731][ T9443] NILFS (loop5): trying rollback from an earlier position
[  279.434229][ T9443] NILFS (loop5): recovery complete
[  279.497672][ T9454] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.601956][ T9457] scsi_dev_info_list_add_str: bad dev info string 'vendor;model' 'f' '(null)'
[  279.877016][ T9465] loop6: detected capacity change from 0 to 512
[  280.000793][ T9465] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[  280.008907][ T9465] System zones: 0-2, 18-18, 34-34
[  280.063780][ T9465] EXT4-fs (loop6): 1 orphan inode deleted
[  280.099324][ T9465] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  280.149075][ T9465] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.231096][ T9449] loop4: detected capacity change from 0 to 32768
[  280.326100][ T9449] XFS (loop4): Mounting V5 Filesystem
[  280.407140][ T9449] XFS (loop4): Ending clean mount
[  280.889144][ T9491] program syz.5.1792 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  281.029081][ T8712] EXT4-fs (loop6): unmounting filesystem.
[  281.163038][ T4271] XFS (loop4): Unmounting Filesystem
[  281.364425][ T9501] loop6: detected capacity change from 0 to 256
[  281.428897][ T9505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1797'.
[  281.517661][ T9486] loop2: detected capacity change from 0 to 32768
[  281.527596][ T9505] device vlan2 entered promiscuous mode
[  281.551464][ T9505] device dummy0 entered promiscuous mode
[  281.726807][ T9486] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  282.092953][ T4265] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  282.170284][ T9511] block2mtd: illegal erase size
[  283.033189][ T9534] loop2: detected capacity change from 0 to 128
[  283.115592][ T9534] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  283.383543][ T9527] loop5: detected capacity change from 0 to 32768
[  283.440470][ T9527] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1807 (9527)
[  283.558662][ T9525] loop6: detected capacity change from 0 to 40427
[  283.580124][ T9527] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.625556][ T9525] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  283.651522][ T9527] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  283.693684][ T9525] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  283.714595][ T9527] BTRFS info (device loop5): setting nodatasum
[  283.748257][ T9525] F2FS-fs (loop6): build fault injection attr: rate: 17008, type: 0x3ffff
[  283.766477][ T9527] BTRFS info (device loop5): force zlib compression, level 3
[  283.782515][ T9550] loop9: detected capacity change from 0 to 524287936
[  283.833499][ T9525] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x1f8
[  283.843020][ T9527] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  283.900308][ T9527] BTRFS info (device loop5): use lzo compression, level 0
[  283.907667][ T9525] F2FS-fs (loop6): invalid crc value
[  283.956556][ T9527] BTRFS info (device loop5): turning on flush-on-commit
[  283.992234][ T9525] F2FS-fs (loop6): Found nat_bits in checkpoint
[  284.042288][ T9527] BTRFS info (device loop5): enabling auto defrag
[  284.099449][ T9527] BTRFS info (device loop5): max_inline at 4096
[  284.105739][ T9527] BTRFS info (device loop5): using free space tree
[  284.212878][ T9558] loop4: detected capacity change from 0 to 512
[  284.231545][ T9525] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  284.272664][ T9525] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  284.312964][ T9558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  284.373304][ T9527] BTRFS info (device loop5): enabling ssd optimizations
[  284.443207][ T9558] EXT4-fs (loop4): 1 truncate cleaned up
[  284.466742][ T9545] loop1: detected capacity change from 0 to 32768
[  284.491768][ T9558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  284.512998][ T9525] syz.6.1806: attempt to access beyond end of device
[  284.512998][ T9525] loop6: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  284.575298][ T9545] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  284.597542][ T9558] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.1819: Logical block already allocated
[  284.621650][ T5440] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  284.734567][ T9558] EXT4-fs (loop4): Remounting filesystem read-only
[  284.779937][ T9583] EXT4-fs error (device loop4): ext4_empty_dir:3138: inode #2: comm syz.4.1819: invalid size
[  284.856332][ T9583] EXT4-fs (loop4): Remounting filesystem read-only
[  284.864543][   T26] audit: type=1400 audit(1790863396.177:68): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=9584 comm="syz.2.1821" name="//o" offset=35
[  285.116162][ T8712] syz-executor: attempt to access beyond end of device
[  285.116162][ T8712] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  285.140704][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  285.152284][ T4276] ocfs2: Unmounting device (7,1) on (node local)
[  285.483167][ T9593] ------------[ cut here ]------------
[  285.489202][ T9593] WARNING: CPU: 0 PID: 9593 at kernel/trace/ring_buffer.c:4571 rb_get_reader_page+0xabf/0xcd0
[  285.499464][ T9593] Modules linked in:
[  285.503371][ T9593] CPU: 0 PID: 9593 Comm: syz.5.1822 Not tainted syzkaller #0
[  285.510722][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  285.520776][ T9593] RIP: 0010:rb_get_reader_page+0xabf/0xcd0
[  285.526599][ T9593] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 58 4b 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 e6 4c 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18
[  285.546204][ T9593] RSP: 0018:ffffc90005f77820 EFLAGS: 00010002
[  285.552266][ T9593] RAX: 1ffff11002e8f101 RBX: 1ffff11002e8e876 RCX: ffffffff81852c5a
[  285.560230][ T9593] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017470408
[  285.568214][ T9593] RBP: ffffc90005f779b0 R08: ffff88801747040b R09: 1ffff11002e8e081
[  285.576178][ T9593] R10: dffffc0000000000 R11: ffffed1002e8e082 R12: ffff888017478810
[  285.584143][ T9593] R13: 0000000000000038 R14: 1ffff11002e8e873 R15: ffff888017470400
[  285.592106][ T9593] FS:  00007fce1b84c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  285.601045][ T9593] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  285.607614][ T9593] CR2: 0000001b2fe20ff8 CR3: 000000005dbd2000 CR4: 00000000003506f0
[  285.615581][ T9593] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  285.623541][ T9593] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  285.631501][ T9593] Call Trace:
[  285.634766][ T9593]  <TASK>
[  285.637699][ T9593]  ? ring_buffer_read_page+0x1370/0x1370
[  285.643325][ T9593]  ? mark_lock+0x94/0x320
[  285.647649][ T9593]  ? do_raw_spin_lock+0x128/0x2f0
[  285.652664][ T9593]  rb_buffer_peek+0x5e/0x940
[  285.657265][ T9593]  ring_buffer_peek+0x1f8/0x440
[  285.662110][ T9593]  ? ring_buffer_iter_empty+0x340/0x340
[  285.667667][ T9593]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  285.673667][ T9593]  ? lock_chain_count+0x20/0x20
[  285.678518][ T9593]  ? _find_next_bit+0x87/0x130
[  285.683280][ T9593]  __find_next_entry+0x33f/0x6c0
[  285.688215][ T9593]  ? trace_find_next_entry+0x3a0/0x3a0
[  285.693705][ T9593]  tracing_read_pipe+0x3bd/0xb10
[  285.698644][ T9593]  ? s_show+0x300/0x300
[  285.702803][ T9593]  vfs_read+0x2db/0x960
[  285.706962][ T9593]  ? kernel_read+0x1e0/0x1e0
[  285.711564][ T9593]  ? __fget_files+0x28/0x460
[  285.716153][ T9593]  ? __fget_files+0x3fc/0x460
[  285.720833][ T9593]  ? __fdget_pos+0x2ae/0x360
[  285.725415][ T9593]  ? ksys_read+0x70/0x260
[  285.729786][ T9593]  ksys_read+0x14d/0x260
[  285.734025][ T9593]  ? vfs_write+0x9a0/0x9a0
[  285.738447][ T9593]  ? lockdep_hardirqs_on+0x94/0x140
[  285.743640][ T9593]  do_syscall_64+0x4c/0xa0
[  285.748065][ T9593]  ? clear_bhb_loop+0x60/0xb0
[  285.752734][ T9593]  ? clear_bhb_loop+0x60/0xb0
[  285.757410][ T9593]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  285.763313][ T9593] RIP: 0033:0x7fce1a99e159
[  285.767739][ T9593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.787340][ T9593] RSP: 002b:00007fce1b84c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  285.795746][ T9593] RAX: ffffffffffffffda RBX: 00007fce1ac25fa0 RCX: 00007fce1a99e159
[  285.803712][ T9593] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003
[  285.811677][ T9593] RBP: 00007fce1aa3506b R08: 0000000000000000 R09: 0000000000000000
[  285.819637][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  285.827604][ T9593] R13: 00007fce1ac26038 R14: 00007fce1ac25fa0 R15: 00007ffc2d2d6768
[  285.835583][ T9593]  </TASK>
[  285.838607][ T9593] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  285.845876][ T9593] CPU: 0 PID: 9593 Comm: syz.5.1822 Not tainted syzkaller #0
[  285.853232][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  285.863279][ T9593] Call Trace:
[  285.866547][ T9593]  <TASK>
[  285.869465][ T9593]  dump_stack_lvl+0x188/0x24e
[  285.874134][ T9593]  ? memcpy+0x3c/0x60
[  285.878106][ T9593]  ? show_regs_print_info+0x12/0x12
[  285.883294][ T9593]  ? load_image+0x410/0x410
[  285.887798][ T9593]  panic+0x2d3/0x710
[  285.891690][ T9593]  ? bpf_jit_dump+0xd0/0xd0
[  285.896203][ T9593]  __warn+0x2f8/0x4f0
[  285.900194][ T9593]  ? rb_get_reader_page+0xabf/0xcd0
[  285.905390][ T9593]  ? rb_get_reader_page+0xabf/0xcd0
[  285.910593][ T9593]  report_bug+0x2ba/0x4f0
[  285.914912][ T9593]  ? rb_get_reader_page+0xabf/0xcd0
[  285.920126][ T9593]  handle_bug+0x3a/0x70
[  285.924271][ T9593]  exc_invalid_op+0x16/0x40
[  285.928762][ T9593]  asm_exc_invalid_op+0x16/0x20
[  285.933615][ T9593] RIP: 0010:rb_get_reader_page+0xabf/0xcd0
[  285.939429][ T9593] Code: 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 58 4b 4e 00 4d 8b 3c 24 49 8d 7f 08 be 04 00 00 00 e8 e6 4c 4e 00 f0 41 ff 47 08 <0f> 0b 49 bf 00 00 00 00 00 fc ff df 4c 8b 6c 24 30 48 83 7c 24 18
[  285.959036][ T9593] RSP: 0018:ffffc90005f77820 EFLAGS: 00010002
[  285.965108][ T9593] RAX: 1ffff11002e8f101 RBX: 1ffff11002e8e876 RCX: ffffffff81852c5a
[  285.973071][ T9593] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888017470408
[  285.981036][ T9593] RBP: ffffc90005f779b0 R08: ffff88801747040b R09: 1ffff11002e8e081
[  285.989018][ T9593] R10: dffffc0000000000 R11: ffffed1002e8e082 R12: ffff888017478810
[  285.996980][ T9593] R13: 0000000000000038 R14: 1ffff11002e8e873 R15: ffff888017470400
[  286.004967][ T9593]  ? rb_get_reader_page+0xaba/0xcd0
[  286.010195][ T9593]  ? ring_buffer_read_page+0x1370/0x1370
[  286.015849][ T9593]  ? mark_lock+0x94/0x320
[  286.020178][ T9593]  ? do_raw_spin_lock+0x128/0x2f0
[  286.025217][ T9593]  rb_buffer_peek+0x5e/0x940
[  286.029811][ T9593]  ring_buffer_peek+0x1f8/0x440
[  286.034677][ T9593]  ? ring_buffer_iter_empty+0x340/0x340
[  286.040214][ T9593]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  286.046194][ T9593]  ? lock_chain_count+0x20/0x20
[  286.051054][ T9593]  ? _find_next_bit+0x87/0x130
[  286.055831][ T9593]  __find_next_entry+0x33f/0x6c0
[  286.060771][ T9593]  ? trace_find_next_entry+0x3a0/0x3a0
[  286.066244][ T9593]  tracing_read_pipe+0x3bd/0xb10
[  286.071176][ T9593]  ? s_show+0x300/0x300
[  286.075344][ T9593]  vfs_read+0x2db/0x960
[  286.079495][ T9593]  ? kernel_read+0x1e0/0x1e0
[  286.084076][ T9593]  ? __fget_files+0x28/0x460
[  286.088656][ T9593]  ? __fget_files+0x3fc/0x460
[  286.093329][ T9593]  ? __fdget_pos+0x2ae/0x360
[  286.097907][ T9593]  ? ksys_read+0x70/0x260
[  286.102248][ T9593]  ksys_read+0x14d/0x260
[  286.106507][ T9593]  ? vfs_write+0x9a0/0x9a0
[  286.110926][ T9593]  ? lockdep_hardirqs_on+0x94/0x140
[  286.116117][ T9593]  do_syscall_64+0x4c/0xa0
[  286.120518][ T9593]  ? clear_bhb_loop+0x60/0xb0
[  286.125188][ T9593]  ? clear_bhb_loop+0x60/0xb0
[  286.129888][ T9593]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  286.135784][ T9593] RIP: 0033:0x7fce1a99e159
[  286.140209][ T9593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  286.159826][ T9593] RSP: 002b:00007fce1b84c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  286.168233][ T9593] RAX: ffffffffffffffda RBX: 00007fce1ac25fa0 RCX: 00007fce1a99e159
[  286.176203][ T9593] RDX: 0000000000004000 RSI: 00002000000091c0 RDI: 0000000000000003
[  286.184175][ T9593] RBP: 00007fce1aa3506b R08: 0000000000000000 R09: 0000000000000000
[  286.192137][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.200095][ T9593] R13: 00007fce1ac26038 R14: 00007fce1ac25fa0 R15: 00007ffc2d2d6768
[  286.208091][ T9593]  </TASK>
[  286.211165][ T9593] Kernel Offset: disabled
[  286.215688][ T9593] Rebooting in 86400 seconds..