last executing test programs:

59.545104346s ago: executing program 2 (id=301):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x1a, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)

58.482017041s ago: executing program 2 (id=308):
mount$afs(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x181000, 0x0)
r0 = semget$private(0x0, 0x1, 0x2ce603839e1e2cd1)
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfffd}], 0x1, 0x0)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080))

58.230045744s ago: executing program 2 (id=310):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000d0e"], 0x20}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00", 0x20)

57.926849339s ago: executing program 2 (id=314):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
unlink(&(0x7f00000002c0)='./file1\x00')

57.736701919s ago: executing program 2 (id=317):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@deltaction={0xe8, 0x31, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4034da45}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x4f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x21e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

57.230496185s ago: executing program 2 (id=321):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x3c, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056)

56.707227612s ago: executing program 32 (id=321):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x3c, r0, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056)

20.111352649s ago: executing program 3 (id=508):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000006c0)={'gretap0\x00', r2, 0x40, 0x7800, 0x7, 0x937b, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x68, 0x0, 0x9, 0x0, 0x0, @empty, @empty}}}})

19.927193278s ago: executing program 3 (id=509):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x9b, 0x4)

19.532567309s ago: executing program 3 (id=511):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000100)={0x28})

19.344017368s ago: executing program 3 (id=512):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

18.664122673s ago: executing program 3 (id=516):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

17.904180582s ago: executing program 3 (id=521):
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xe)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800002, 0x14)

17.345696001s ago: executing program 33 (id=521):
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xe)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800002, 0x14)

8.110196154s ago: executing program 4 (id=572):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x842, 0x1ba)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000100)=0xf00, 0x4)

7.898319205s ago: executing program 4 (id=573):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd60014140001088"], 0x0)

7.752631603s ago: executing program 4 (id=574):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x8, 0x5, &(0x7f0000000040)={0x5, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}})

5.908135047s ago: executing program 4 (id=576):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)

3.084412022s ago: executing program 5 (id=522):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040))

2.93128904s ago: executing program 0 (id=585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r2, @ANYBLOB="08002600f8160000080035000600001e040028000a0006"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x44800)

2.784061367s ago: executing program 5 (id=586):
io_setup(0x7e, &(0x7f0000000040)=<r0=>0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x40)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @empty, @link_local, @local}}}}, 0x0)
io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000080)='!', 0x1, 0x3}])

2.72764754s ago: executing program 1 (id=587):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
keyctl$clear(0x7, r0)

2.643962465s ago: executing program 0 (id=588):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @none}, 0xe)

2.620536806s ago: executing program 4 (id=589):
chown(0x0, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000080)=ANY=[], 0x1, 0x556e, &(0x7f0000004000)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)

2.574433779s ago: executing program 1 (id=590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4800)

2.440540885s ago: executing program 5 (id=591):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10)
listen(r0, 0x0)
shutdown(r0, 0x1)

2.387437918s ago: executing program 0 (id=592):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x4)

2.35141008s ago: executing program 1 (id=593):
r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
fcntl$setsig(r0, 0xa, 0x11)
utime(&(0x7f00000024c0)='.\x00', 0x0)

2.180117368s ago: executing program 0 (id=594):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000500)=0xfffffffc, 0x4)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8)
bind$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10)

2.179937608s ago: executing program 5 (id=595):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)

2.105878442s ago: executing program 1 (id=596):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3801000018000100feffffff0051110000ea0000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000ad5fd5a1ac22c9e837df50fc18705b58d336f2ab766e392a09c54f"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1.928769811s ago: executing program 0 (id=597):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x6, "00000000000000000000000000061000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20004000)

1.732151911s ago: executing program 5 (id=598):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)

1.731668641s ago: executing program 0 (id=599):
syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x41, 0x5510, &(0x7f0000009680)="$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")
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

1.671618074s ago: executing program 1 (id=600):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000004a00)='./file0\x00', 0x4000, &(0x7f0000004a80)=ANY=[@ANYBLOB="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"], 0xff, 0x5e5c, &(0x7f0000005d80)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)

49.478497ms ago: executing program 1 (id=601):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @none}, 0xe)

0s ago: executing program 4 (id=602):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)

kernel console output (not intermixed with test programs):

vice team0
[   84.812859][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.820333][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.887981][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.895428][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.914396][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   84.943537][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.950951][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.984125][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.991736][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.152305][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.226950][ T5771] 8021q: adding VLAN 0 to HW filter on device team0
[   85.269141][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.276390][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.309536][ T5777] Bluetooth: hci0: command tx timeout
[   85.375272][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.382887][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.391175][ T5777] Bluetooth: hci3: command tx timeout
[   85.467871][ T5777] Bluetooth: hci1: command tx timeout
[   85.473634][ T5777] Bluetooth: hci2: command tx timeout
[   85.525525][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.595507][ T5778] veth0_vlan: entered promiscuous mode
[   85.611715][ T5778] veth1_vlan: entered promiscuous mode
[   85.730705][ T5778] veth0_macvtap: entered promiscuous mode
[   85.756336][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.770329][ T5778] veth1_macvtap: entered promiscuous mode
[   85.811139][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.835288][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.883669][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.923109][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.933176][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.942461][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.952870][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.016352][ T5766] veth0_vlan: entered promiscuous mode
[   86.079430][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.100578][ T5766] veth1_vlan: entered promiscuous mode
[   86.121732][ T5770] veth0_vlan: entered promiscuous mode
[   86.145011][ T5770] veth1_vlan: entered promiscuous mode
[   86.192359][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.209630][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.276668][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.296046][ T5766] veth0_macvtap: entered promiscuous mode
[   86.297375][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.308567][ T5766] veth1_macvtap: entered promiscuous mode
[   86.331164][ T5770] veth0_macvtap: entered promiscuous mode
[   86.367376][ T5771] veth0_vlan: entered promiscuous mode
[   86.382730][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.395260][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.414081][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.423716][ T5770] veth1_macvtap: entered promiscuous mode
[   86.451509][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.462472][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.474854][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.486489][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.496457][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.506383][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.524410][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.585224][ T5771] veth1_vlan: entered promiscuous mode
[   86.617639][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.632140][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.642934][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.662014][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.682826][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.732523][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.744982][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.756189][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.767565][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.785039][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.824972][ T5839] syz.3.6[5839]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   86.855918][ T5839] loop3: detected capacity change from 0 to 24
[   86.882992][ T5771] veth0_macvtap: entered promiscuous mode
[   86.903845][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.924373][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.933847][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.943640][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.975119][ T5771] veth1_macvtap: entered promiscuous mode
[   87.033431][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.052216][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.184748][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.211807][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.223814][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.234846][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.255483][  T788] cfg80211: failed to load regulatory.db
[   87.262906][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.275228][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.290345][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.326953][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.349988][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.374447][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.387547][ T5777] Bluetooth: hci0: command tx timeout
[   87.388731][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.410779][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.425093][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.437232][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.448032][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.459907][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.468826][ T5777] Bluetooth: hci3: command tx timeout
[   87.496749][ T5845] netlink: 'syz.3.9': attribute type 25 has an invalid length.
[   87.521383][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.548454][   T51] Bluetooth: hci1: command tx timeout
[   87.549123][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.553979][ T5777] Bluetooth: hci2: command tx timeout
[   87.567205][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.603807][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.627901][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.637098][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.785893][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   87.832968][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.878049][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.995255][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.030788][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.176737][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.198122][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.213227][ T5860] loop1: detected capacity change from 0 to 128
[   88.474296][ T5860] FAT-fs (loop1): error, corrupted directory (invalid i_start)
[   88.517357][ T5860] FAT-fs (loop1): Filesystem has been set read-only
[   88.839446][ T5870] loop2: detected capacity change from 0 to 512
[   88.856281][ T5870] EXT4-fs: Ignoring removed bh option
[   88.880602][ T5870] EXT4-fs: inline encryption not supported
[   88.915651][ T5870] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   89.012070][ T5870] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   89.071626][ T5870] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.18: bg 0: block 248: padding at end of block bitmap is not set
[   89.113573][ T5870] Quota error (device loop2): write_blk: dquota write failed
[   89.136909][ T5870] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   89.158426][ T5870] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.18: Failed to acquire dquot type 1
[   89.199357][ T5870] EXT4-fs (loop2): 1 truncate cleaned up
[   89.223469][ T5870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   89.386268][ T5858] loop3: detected capacity change from 0 to 40427
[   89.396689][ T5870] syz.2.18 (5870) used greatest stack depth: 20904 bytes left
[   89.411659][ T5858] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   89.437002][ T5858] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   89.470147][ T5777] Bluetooth: hci0: command tx timeout
[   89.507236][ T5858] F2FS-fs (loop3): invalid crc value
[   89.513193][ T5858] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[   89.520831][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   89.543759][ T3494] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[   89.548055][ T5858] F2FS-fs (loop3): Found nat_bits in checkpoint
[   89.553754][ T5777] Bluetooth: hci3: command tx timeout
[   89.601267][ T3494] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1
[   89.627713][   T51] Bluetooth: hci1: command tx timeout
[   89.633242][ T5777] Bluetooth: hci2: command tx timeout
[   89.660578][ T5858] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   89.683907][ T5858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   89.911630][ T5885] netlink: 'syz.1.23': attribute type 21 has an invalid length.
[   89.986671][ T5858] syz.3.14: attempt to access beyond end of device
[   89.986671][ T5858] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   90.031339][ T5858] syz.3.14: attempt to access beyond end of device
[   90.031339][ T5858] loop3: rw=2049, sector=53272, nr_sectors = 16 limit=40427
[   90.101041][ T5858] syz.3.14: attempt to access beyond end of device
[   90.101041][ T5858] loop3: rw=2049, sector=53296, nr_sectors = 24 limit=40427
[   90.154550][ T5858] syz.3.14: attempt to access beyond end of device
[   90.154550][ T5858] loop3: rw=2049, sector=53344, nr_sectors = 32 limit=40427
[   90.217550][ T5858] syz.3.14: attempt to access beyond end of device
[   90.217550][ T5858] loop3: rw=2049, sector=53392, nr_sectors = 16 limit=40427
[   90.361573][ T5778] syz-executor: attempt to access beyond end of device
[   90.361573][ T5778] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   90.386225][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   90.603582][    T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   90.829112][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.897779][    T8] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   90.956081][    T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   90.993909][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.034334][    T8] usb 2-1: Product: syz
[   91.053131][    T8] usb 2-1: Manufacturer: syz
[   91.095268][    T8] usb 2-1: SerialNumber: syz
[   91.190605][    T8] cdc_ncm 2-1:1.0: skipping garbage
[   91.196178][    T8] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[   91.257373][    T8] cdc_ncm 2-1:1.0: bind() failure
[   91.300814][    T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   91.345010][    T8] cdc_ncm 2-1:1.1: bind() failure
[   91.441131][    T8] usb 2-1: USB disconnect, device number 2
[   91.557137][    C1] sched: RT throttling activated
[   91.853235][ T5906] loop2: detected capacity change from 0 to 131072
[   91.873530][ T5906] F2FS-fs (loop2): invalid crc value
[   91.897012][ T5906] F2FS-fs (loop2): Found nat_bits in checkpoint
[   91.950321][ T5906] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   92.397983][ T5924] netlink: 'syz.1.38': attribute type 2 has an invalid length.
[   92.625032][ T5910] loop0: detected capacity change from 0 to 40427
[   92.649516][ T5910] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   92.659601][ T5910] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   92.702271][ T5910] F2FS-fs (loop0): invalid crc value
[   92.734250][ T5910] F2FS-fs (loop0): Found nat_bits in checkpoint
[   92.967597][ T5910] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   92.975551][ T5910] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   93.263707][ T5939] loop1: detected capacity change from 0 to 256
[   93.288312][ T5939] =======================================================
[   93.288312][ T5939] WARNING: The mand mount option has been deprecated and
[   93.288312][ T5939]          and is ignored by this kernel. Remove the mand
[   93.288312][ T5939]          option from the mount to silence this warning.
[   93.288312][ T5939] =======================================================
[   93.360058][ T5939] exfat: Deprecated parameter 'namecase'
[   93.366466][ T5939] exfat: Deprecated parameter 'namecase'
[   93.440237][ T5939] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   93.555388][ T5927] loop3: detected capacity change from 0 to 32768
[   93.620154][ T5927] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.41 (5927)
[   93.747470][ T5927] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   93.784054][ T5927] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   93.808295][ T5927] BTRFS info (device loop3): setting nodatasum
[   93.814636][ T5927] BTRFS info (device loop3): force zlib compression, level 3
[   93.826233][ T5927] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[   93.836590][ T5927] BTRFS info (device loop3): use lzo compression, level 0
[   93.844078][ T5927] BTRFS info (device loop3): turning on flush-on-commit
[   93.852390][ T5927] BTRFS info (device loop3): enabling auto defrag
[   93.884080][ T5927] BTRFS info (device loop3): max_inline at 4096
[   93.918014][ T5927] BTRFS info (device loop3): using free space tree
[   94.182421][ T5927] BTRFS info (device loop3): enabling ssd optimizations
[   94.285792][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'.
[   94.315391][ T5961] netlink: 52 bytes leftover after parsing attributes in process `syz.2.37'.
[   94.563811][ T5778] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   94.847467][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   94.993820][ T5971] loop1: detected capacity change from 0 to 8192
[   95.019306][ T5971] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   95.045107][ T5971] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[   95.056449][ T5971] REISERFS (device loop1): using ordered data mode
[   95.057373][ T5813] usb 3-1: Using ep0 maxpacket: 32
[   95.064251][ T5971] reiserfs: using flush barriers
[   95.076735][ T5973] loop0: detected capacity change from 0 to 8192
[   95.087616][ T5971] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   95.121576][ T5973] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   95.122153][ T5813] usb 3-1: config index 0 descriptor too short (expected 164, got 36)
[   95.176027][ T5971] REISERFS (device loop1): checking transaction log (loop1)
[   95.183731][ T5973] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   95.218137][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.222370][ T5971] REISERFS (device loop1): Using tea hash to sort names
[   95.240104][ T5971] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   95.257754][ T5973] REISERFS (device loop0): using ordered data mode
[   95.281982][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.305077][ T5973] reiserfs: using flush barriers
[   95.317761][ T5813] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[   95.341093][ T5973] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   95.347719][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.401864][ T5813] usb 3-1: config 0 descriptor??
[   95.411619][ T5973] REISERFS (device loop0): checking transaction log (loop0)
[   95.470225][ T5977] loop3: detected capacity change from 0 to 4096
[   95.682838][ T5973] REISERFS (device loop0): Using tea hash to sort names
[   95.693021][ T5973] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[   95.715227][ T5978] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   95.751807][ T5973] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   95.875180][ T5977] netlink: 256 bytes leftover after parsing attributes in process `syz.3.50'.
[   95.897299][ T5813] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[   95.915178][ T5813] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[   95.937482][ T5813] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[   95.944807][ T5813] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[   95.974516][ T5813] logitech 0003:046D:C29C.0001: unknown main item tag 0x0
[   96.021598][ T5813] logitech 0003:046D:C29C.0001: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0
[   96.282604][ T5813] logitech 0003:046D:C29C.0001: no inputs found
[   96.329627][ T5813] usb 3-1: USB disconnect, device number 2
[   96.602334][ T5777] block nbd3: Receive control failed (result -107)
[   96.621212][ T5987] block nbd3: shutting down sockets
[   96.659135][ T5980] loop1: detected capacity change from 0 to 32768
[   96.727417][   T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   96.770508][ T5980] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   96.842039][ T5980] XFS (loop1): Ending clean mount
[   96.929367][   T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   96.944358][   T23] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   96.974714][   T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   96.999751][ T6000] capability: warning: `syz.3.59' uses 32-bit capabilities (legacy support in use)
[   97.018393][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.026948][ T6000] program syz.3.59 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.034663][ T5986] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   97.060935][   T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[   97.226361][ T5980] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[   97.392299][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   97.784617][ T6014] tun0: tun_chr_ioctl cmd 1074025675
[   97.794890][ T6014] tun0: persist disabled
[   97.803675][ T5813] usb 1-1: USB disconnect, device number 2
[   98.261291][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   98.537414][ T5772] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   98.757082][ T5772] usb 4-1: Using ep0 maxpacket: 32
[   98.788387][ T5772] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[   98.807202][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.837053][ T5772] usb 4-1: config 0 descriptor??
[   98.861766][ T5772] gspca_main: sunplus-2.14.0 probing 041e:400b
[   99.246219][ T6033] loop2: detected capacity change from 0 to 32768
[   99.294176][ T6033] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.366074][ T6033] XFS (loop2): Ending clean mount
[   99.484441][ T6037] loop0: detected capacity change from 0 to 40427
[   99.530519][ T6037] F2FS-fs (loop0): Invalid log blocks per segment (4278190089)
[   99.554119][ T6037] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   99.591390][ T6037] F2FS-fs (loop0): invalid crc value
[   99.636587][ T6037] F2FS-fs (loop0): Found nat_bits in checkpoint
[   99.677193][ T5772] gspca_sunplus: reg_w_riv err -71
[   99.683386][ T5770] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.697316][ T5772] sunplus: probe of 4-1:0.0 failed with error -71
[   99.737673][ T5772] usb 4-1: USB disconnect, device number 2
[   99.841558][ T6037] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[   99.867498][ T6037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   99.870634][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'.
[  100.025902][ T6037] F2FS-fs (loop0): Corrupted max_depth of 3: 255
[  100.097014][ T6037] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  100.382294][ T6068] vxcan1: tx address claim with dest, not broadcast
[  100.681294][ T6079] loop3: detected capacity change from 0 to 128
[  100.867389][ T5813] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  100.933012][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  101.071107][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  101.107389][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  101.137531][   T23] usb 2-1: Using ep0 maxpacket: 16
[  101.137553][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  101.148484][   T23] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  101.167199][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  101.188912][   T23] usb 2-1: config 0 has no interface number 0
[  101.204034][ T5813] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  101.209011][   T23] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  101.217226][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.247986][   T23] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  101.267362][ T5813] usb 3-1: Product: syz
[  101.273630][   T23] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  101.275596][ T5813] usb 3-1: Manufacturer: syz
[  101.283354][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.308013][ T5813] usb 3-1: SerialNumber: syz
[  101.316114][   T23] usb 2-1: Product: syz
[  101.327926][   T23] usb 2-1: Manufacturer: syz
[  101.338546][   T23] usb 2-1: SerialNumber: syz
[  101.340785][ T5813] usb 3-1: config 0 descriptor??
[  101.363954][   T23] usb 2-1: config 0 descriptor??
[  101.383666][ T6077] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  101.393690][ T6077] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  101.625771][ T5813] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  101.663440][ T6077] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  101.673477][ T6077] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  101.736839][ T6083] loop3: detected capacity change from 0 to 40427
[  101.766212][ T6083] F2FS-fs (loop3): invalid crc value
[  101.781210][ T6083] F2FS-fs (loop3): Found nat_bits in checkpoint
[  101.992162][ T6083] F2FS-fs (loop3): Start checkpoint disabled!
[  101.994563][ T5833] usb 3-1: USB disconnect, device number 3
[  102.020951][ T6083] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  102.113381][   T23] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  102.134488][   T28] audit: type=1800 audit(1776754278.507:2): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="file1" dev="loop3" ino=10 res=0 errno=0
[  102.163401][   T23] asix: probe of 2-1:0.251 failed with error -524
[  102.216453][   T28] audit: type=1804 audit(1776754278.537:3): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.91" name="/newroot/25/file1/file1" dev="loop3" ino=10 res=1 errno=0
[  102.286337][ T6102] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  102.321354][   T13] kworker/u4:1: attempt to access beyond end of device
[  102.321354][   T13] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  102.348619][   T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  102.356008][   T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  102.425896][ T5833] usb 2-1: USB disconnect, device number 3
[  102.762096][ T6107] loop2: detected capacity change from 0 to 1024
[  102.780998][ T6107] EXT4-fs: Ignoring removed orlov option
[  102.825900][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.873453][ T6107] EXT4-fs (loop2): shut down requested (2)
[  102.932169][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.138515][ T6122] loop2: detected capacity change from 0 to 512
[  103.160641][ T6122] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  103.195701][ T6122] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  103.236362][ T6122] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.103: inode has both inline data and extents flags
[  103.261673][ T6122] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.103: couldn't read orphan inode 15 (err -117)
[  103.300220][ T6122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.537218][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.762142][ T6133] Zero length message leads to an empty skb
[  104.405342][ T6143] IPv6: addrconf: prefix option has invalid lifetime
[  104.443068][ T6132] loop2: detected capacity change from 0 to 32768
[  104.524954][ T6132] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  104.633310][ T6132] XFS (loop2): Ending clean mount
[  104.678515][ T5772] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  104.886478][ T6132] syz.2.109 (6132) used greatest stack depth: 20712 bytes left
[  104.901471][ T5772] usb 4-1: Using ep0 maxpacket: 16
[  104.914456][ T5772] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  104.928077][ T5772] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  104.946885][ T5770] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  104.955997][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.974501][ T5772] usb 4-1: config 0 descriptor??
[  105.088797][ T6164] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  105.116746][ T6166] loop0: detected capacity change from 0 to 4096
[  105.123962][ T6164] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  105.181628][ T6166] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  105.243699][ T6164] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  105.323796][ T6164] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  105.367717][ T6164] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  105.402527][ T6164] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  105.433014][ T5772] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[  105.457671][ T5772] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[  105.465089][ T5772] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[  105.479355][ T6164] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  105.535605][ T5772] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[  105.557633][ T5772] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[  105.557660][ T6164] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  105.565030][ T5772] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x0
[  105.607704][ T5772] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x4
[  105.647474][ T5772] zeroplus 0003:0C12:0030.0002: unknown main item tag 0x6
[  105.660660][ T6164] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  105.694720][ T5772] zeroplus 0003:0C12:0030.0002: unknown main item tag 0xd
[  105.722288][ T6164] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  105.739642][ T5772] zeroplus 0003:0C12:0030.0002: unknown main item tag 0xd
[  105.764582][ T6164] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  105.783619][ T5772] zeroplus 0003:0C12:0030.0002: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0
[  105.819590][ T5772] zeroplus 0003:0C12:0030.0002: no inputs found
[  105.883500][ T6164] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  105.908753][ T5772] usb 4-1: USB disconnect, device number 3
[  106.084708][ T6170] fido_id[6170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  106.718635][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.132'.
[  107.067950][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout
[  107.359210][ T5833] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  107.387298][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout
[  107.418788][ T6213] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  107.547337][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout
[  107.557218][ T5833] usb 4-1: Using ep0 maxpacket: 32
[  107.574549][ T5833] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  107.588017][ T5833] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  107.603386][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  107.612830][ T5833] usb 4-1: config 1 has no interface number 0
[  107.619871][ T5833] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  107.631408][ T5833] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  107.659703][ T5833] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  107.679614][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.722995][ T5833] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  107.787332][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout
[  107.929673][ T5833] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  108.069484][ T6226] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  108.129286][ T6211] loop0: detected capacity change from 0 to 32768
[  108.304205][ T6211] JBD2: Ignoring recovery information on journal
[  108.316797][ T6230] random: crng reseeded on system resumption
[  108.440086][ T5813] usb 4-1: USB disconnect, device number 4
[  108.470332][ T5813] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  108.531239][ T6211] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  108.717233][ T6211] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  108.760469][ T6211] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  108.786354][ T6211] OCFS2: File system is now read-only.
[  108.799579][ T6211] (syz.0.141,6211,1):ocfs2_search_chain:1761 ERROR: status = -30
[  108.817294][ T6211] (syz.0.141,6211,1):ocfs2_search_chain:1871 ERROR: status = -30
[  108.826384][ T6211] (syz.0.141,6211,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  108.860641][ T6211] (syz.0.141,6211,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  108.890487][ T6211] (syz.0.141,6211,1):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  108.922493][ T6211] (syz.0.141,6211,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  108.941078][ T6211] (syz.0.141,6211,1):ocfs2_mknod_locked:639 ERROR: status = -30
[  108.961328][ T6211] (syz.0.141,6211,1):ocfs2_mknod:385 ERROR: status = -30
[  108.976416][ T6211] (syz.0.141,6211,1):ocfs2_mknod:502 ERROR: status = -30
[  108.997277][ T6211] (syz.0.141,6211,1):ocfs2_create:676 ERROR: status = -30
[  109.138803][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[  109.161841][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout
[  109.277597][ T5813] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  109.454255][ T6247] mmap: syz.0.154 (6247) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  109.467668][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout
[  109.477221][ T5813] usb 3-1: Using ep0 maxpacket: 16
[  109.491364][ T5813] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.517541][ T5813] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  109.567727][ T5813] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  109.610787][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.626742][ T5813] usb 3-1: config 0 descriptor??
[  109.637360][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout
[  109.877450][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout
[  110.056324][ T6265] loop0: detected capacity change from 0 to 512
[  110.075670][ T6265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  110.115377][ T5813] samsung 0003:0419:0600.0003: unknown main item tag 0x0
[  110.131465][ T6265] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.163: bad orphan inode 131083
[  110.137899][ T5813] samsung 0003:0419:0600.0003: unknown main item tag 0x0
[  110.149043][ T6265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.163102][ T5813] samsung 0003:0419:0600.0003: unknown main item tag 0x0
[  110.171332][ T5813] samsung 0003:0419:0600.0003: unknown main item tag 0x0
[  110.178571][ T5813] samsung 0003:0419:0600.0003: unknown main item tag 0x0
[  110.185799][ T5813] samsung 0003:0419:0600.0003: unknown global tag 0xe
[  110.203733][ T5813] samsung 0003:0419:0600.0003: item 0 0 1 14 parsing failed
[  110.228104][ T5813] samsung 0003:0419:0600.0003: parse failed
[  110.234566][ T5813] samsung: probe of 0003:0419:0600.0003 failed with error -22
[  110.288180][ T6265] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.0.163: path /35/bus/file0: bad entry in directory: rec_len % 4 != 0 - offset=65555, inode=1560281102, rec_len=65535, size=60 fake=0
[  110.365085][ T5833] usb 3-1: USB disconnect, device number 4
[  110.441019][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.885226][   T28] audit: type=1326 audit(1776754287.257:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289499c819 code=0x7ffc0000
[  110.895527][ T6282] loop3: detected capacity change from 0 to 128
[  110.931839][ T6282] ADFS-fs (loop3): unrecognised mount option "gid=0x0000000000000000ÿÿÿÿÿÿ" or missing value
[  110.935462][   T28] audit: type=1326 audit(1776754287.257:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f289499c819 code=0x7ffc0000
[  110.970978][   T28] audit: type=1326 audit(1776754287.257:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f289499c819 code=0x7ffc0000
[  111.048800][   T28] audit: type=1326 audit(1776754287.257:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f289499c582 code=0x7ffc0000
[  111.084496][   T28] audit: type=1326 audit(1776754287.257:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f289495d04e code=0x7ffc0000
[  111.168272][   T28] audit: type=1326 audit(1776754287.257:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f289499c647 code=0x7ffc0000
[  111.176959][ T6282] loop3: detected capacity change from 0 to 256
[  111.191352][   T28] audit: type=1326 audit(1776754287.257:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f289495d04e code=0x7ffc0000
[  111.224428][   T28] audit: type=1326 audit(1776754287.257:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f289499c4ab code=0x7ffc0000
[  111.247631][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout
[  111.324014][ T6282] FAT-fs (loop3): Directory bread(block 64) failed
[  111.337493][ T6282] FAT-fs (loop3): Directory bread(block 65) failed
[  111.365796][ T6282] FAT-fs (loop3): Directory bread(block 66) failed
[  111.370008][ T5807] kernel read not supported for file /dsp1 (pid: 5807 comm: kworker/0:4)
[  111.407386][   T28] audit: type=1326 audit(1776754287.307:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f289495d04e code=0x7ffc0000
[  111.429726][ T6282] FAT-fs (loop3): Directory bread(block 67) failed
[  111.436819][ T6282] FAT-fs (loop3): Directory bread(block 68) failed
[  111.478114][ T6282] FAT-fs (loop3): Directory bread(block 69) failed
[  111.485058][ T6282] FAT-fs (loop3): Directory bread(block 70) failed
[  111.496762][   T28] audit: type=1326 audit(1776754287.307:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.3.169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f289495d04e code=0x7ffc0000
[  111.525685][ T6282] FAT-fs (loop3): Directory bread(block 71) failed
[  111.548050][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout
[  111.554582][ T6282] FAT-fs (loop3): Directory bread(block 72) failed
[  111.574793][ T6282] FAT-fs (loop3): Directory bread(block 73) failed
[  111.707731][ T5777] Bluetooth: hci2: command 0x0c1a tx timeout
[  111.947597][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout
[  111.965931][ T6300] vcan0: tx address claim with different name
[  112.112969][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.177'.
[  112.218837][ T6308] loop3: detected capacity change from 0 to 1024
[  112.297420][   T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  112.341191][ T4311] hfsplus: b-tree write err: -5, ino 8
[  112.427467][ T5833] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  112.487423][   T23] usb 2-1: Using ep0 maxpacket: 32
[  112.496396][   T23] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  112.505298][   T23] usb 2-1: config 0 has no interface number 0
[  112.512434][   T23] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  112.526819][   T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  112.536941][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.549999][   T23] usb 2-1: Product: syz
[  112.554226][   T23] usb 2-1: Manufacturer: syz
[  112.559025][   T23] usb 2-1: SerialNumber: syz
[  112.573677][   T23] usb 2-1: config 0 descriptor??
[  112.579932][ T6302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  112.585438][ T6314] program syz.3.182 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  112.640539][ T5833] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  112.657427][ T5833] usb 3-1: config 0 has no interface number 0
[  112.680591][ T5833] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  112.701839][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.740329][ T5833] usb 3-1: Product: syz
[  112.772739][ T5833] usb 3-1: Manufacturer: syz
[  112.784159][ T5833] usb 3-1: SerialNumber: syz
[  112.858237][ T6302] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  112.861519][ T5833] usb 3-1: config 0 descriptor??
[  113.030262][ T6320] Bluetooth: MGMT ver 1.22
[  113.249668][ T5833] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  113.321978][ T5833] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  113.341558][   T23] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  113.403294][ T5833] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  113.461053][   T23] asix: probe of 2-1:0.188 failed with error -71
[  113.495123][   T23] usb 2-1: USB disconnect, device number 4
[  113.537597][ T5833] usb 3-1: media controller created
[  113.538922][ T6328] loop3: detected capacity change from 0 to 256
[  113.606651][ T6328] exfat: Deprecated parameter 'namecase'
[  113.632829][ T6330] misc userio: Can't change port type on an already running userio instance
[  113.664056][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  113.711931][ T6328] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd8f5bb5e, utbl_chksum : 0xe619d30d)
[  113.752073][ T5833] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  113.885805][ T5833] usb 3-1: USB disconnect, device number 5
[  114.155524][ T6338] loop0: detected capacity change from 0 to 512
[  114.231507][ T6338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.257347][ T6338] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.417439][ T6338] capability: warning: `syz.0.192' uses deprecated v2 capabilities in a way that may be insecure
[  114.591014][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.826952][ T6355] loop1: detected capacity change from 0 to 512
[  114.857418][ T6355] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  114.875691][ T6357] loop2: detected capacity change from 0 to 16
[  114.886566][ T6357] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  114.904227][ T6355] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  114.926514][ T6355] EXT4-fs (loop1): 1 truncate cleaned up
[  114.935557][ T6355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.026534][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.799451][ T6361] loop3: detected capacity change from 0 to 32768
[  115.861153][ T6361] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.990730][ T6361] XFS (loop3): Ending clean mount
[  116.055713][ T6361] XFS (loop3): Quotacheck needed: Please wait.
[  116.165821][ T6361] XFS (loop3): Quotacheck: Done.
[  116.315884][   T28] kauditd_printk_skb: 37 callbacks suppressed
[  116.315982][   T28] audit: type=1800 audit(1776754292.687:51): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.203" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  116.485747][ T5778] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  116.895668][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'.
[  117.187454][ T6407] pim6reg1: tun_chr_ioctl cmd 1074025677
[  117.193546][ T6407] pim6reg1: linktype set to 6
[  117.354757][ T6413] program syz.1.220 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  117.413768][ T6415] netlink: 52 bytes leftover after parsing attributes in process `syz.0.221'.
[  117.423271][ T5807] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  117.569081][ T6393] loop2: detected capacity change from 0 to 32768
[  117.622105][ T5807] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  117.631929][ T6393] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.637192][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.667957][ T5807] usb 4-1: Product: syz
[  117.672224][ T5807] usb 4-1: Manufacturer: syz
[  117.677021][ T5807] usb 4-1: SerialNumber: syz
[  117.715084][ T5807] usb 4-1: config 0 descriptor??
[  117.821657][ T6393] XFS (loop2): Ending clean mount
[  117.856545][ T6393] XFS (loop2): Quotacheck needed: Please wait.
[  117.963433][ T6393] XFS (loop2): Quotacheck: Done.
[  118.131577][ T5813] usb 4-1: USB disconnect, device number 5
[  118.229125][ T5770] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.504323][ T6419] loop0: detected capacity change from 0 to 32768
[  118.578333][ T6417] loop1: detected capacity change from 0 to 32768
[  118.648564][ T6417] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.784476][ T6438] find_entry called with index = 0
[  118.789779][ T6417] XFS (loop1): Ending clean mount
[  118.801733][ T6438] find_entry called with index = 0
[  118.913022][ T5766] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  119.590603][ T6437] loop2: detected capacity change from 0 to 32768
[  119.672975][ T6437] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  119.859137][ T6440] loop3: detected capacity change from 0 to 32768
[  119.884078][ T6437] XFS (loop2): Ending clean mount
[  119.898528][ T6437] XFS (loop2): Quotacheck needed: Please wait.
[  119.938904][ T6440] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.007973][ T6437] XFS (loop2): Quotacheck: Done.
[  120.078907][ T6440] XFS (loop3): Ending clean mount
[  120.156433][ T6440] XFS (loop3): Quotacheck needed: Please wait.
[  120.270466][ T6440] XFS (loop3): Quotacheck: Done.
[  120.458876][ T5778] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.468295][ T5770] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.244662][ T6486] loop1: detected capacity change from 0 to 512
[  121.315645][ T6486] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.239: inode has both inline data and extents flags
[  121.384913][ T6488] pimreg: tun_chr_ioctl cmd 1074025676
[  121.403971][ T6488] pimreg: owner set to 270
[  121.437598][ T6486] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.239: couldn't read orphan inode 15 (err -117)
[  121.492561][ T6486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.674367][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.797307][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  121.984804][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.008628][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.047253][   T27] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  122.068372][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.102082][   T27] usb 4-1: config 0 descriptor??
[  122.343274][ T6513] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  122.408977][ T6494] loop0: detected capacity change from 0 to 32768
[  122.450692][ T6494] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  122.468389][ T6516] loop2: detected capacity change from 0 to 256
[  122.489890][ T6494] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  122.554131][ T6494] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  122.559379][   T27] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  122.576708][ T5807] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  122.585582][ T5807] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  122.633612][   T27] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  122.677302][   T27] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  122.685101][   T27] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  122.691591][ T5807] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms
[  122.731388][   T27] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  122.737021][ T5807] gfs2: fsid=syz:syz.0: jid=0: Done
[  122.787549][   T27] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  122.805580][ T6494] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  122.929975][   T27] playstation 0003:054C:0DF2.0004: Invalid byte count transferred, expected 20 got 0
[  122.948595][   T27] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -22
[  122.959311][   T27] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense
[  122.968690][   T27] playstation 0003:054C:0DF2.0004: Failed to create dualsense.
[  122.979814][   T27] playstation: probe of 0003:054C:0DF2.0004 failed with error -22
[  123.232945][ T5833] usb 4-1: USB disconnect, device number 6
[  123.284887][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'.
[  123.591762][ T6494] gfs2: fsid=syz:syz.0: found 1 quota changes
[  123.868267][ T6494] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  123.913370][ T6494] CPU: 1 PID: 6494 Comm: syz.0.243 Not tainted syzkaller #0
[  123.920856][ T6494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  123.931141][ T6494] Call Trace:
[  123.934477][ T6494]  <TASK>
[  123.937550][ T6494]  dump_stack_lvl+0x18c/0x250
[  123.942321][ T6494]  ? show_regs_print_info+0x20/0x20
[  123.947761][ T6494]  ? load_image+0x420/0x420
[  123.952445][ T6494]  ? do_raw_spin_unlock+0x121/0x230
[  123.958159][ T6494]  gfs2_assert_warn_i+0x193/0x2c0
[  123.963264][ T6494]  gfs2_qd_dispose+0x4aa/0x5b0
[  123.968130][ T6494]  gfs2_quota_cleanup+0x410/0x720
[  123.973227][ T6494]  ? spin_lock_bucket+0x150/0x150
[  123.978477][ T6494]  ? __might_sleep+0xe0/0xe0
[  123.983302][ T6494]  ? gfs2_ail_empty_tr+0x2f0/0x2f0
[  123.988477][ T6494]  ? gfs2_quota_sync+0x591/0x5a0
[  123.993616][ T6494]  gfs2_make_fs_ro+0x2aa/0x320
[  123.998881][ T6494]  ? gfs2_reconfigure+0x1f2/0xb10
[  124.004063][ T6494]  ? gfs2_dinode_out+0xb10/0xb10
[  124.009228][ T6494]  ? do_raw_spin_lock+0x11f/0x2c0
[  124.014594][ T6494]  ? __rwlock_init+0x150/0x150
[  124.019435][ T6494]  ? do_raw_spin_unlock+0x121/0x230
[  124.024747][ T6494]  gfs2_reconfigure+0x6a0/0xb10
[  124.029874][ T6494]  reconfigure_super+0x21e/0x8a0
[  124.036386][ T6494]  path_mount+0xd2f/0xff0
[  124.041414][ T6494]  __se_sys_mount+0x2e7/0x3d0
[  124.046711][ T6494]  ? __x64_sys_mount+0xc0/0xc0
[  124.052440][ T6494]  ? lockdep_hardirqs_on+0x98/0x150
[  124.058152][ T6494]  ? __x64_sys_mount+0x20/0xc0
[  124.063517][ T6494]  do_syscall_64+0x55/0xa0
[  124.068383][ T6494]  ? clear_bhb_loop+0x40/0x90
[  124.073478][ T6494]  ? clear_bhb_loop+0x40/0x90
[  124.078340][ T6494]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  124.084671][ T6494] RIP: 0033:0x7f082319da8a
[  124.089241][ T6494] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.104655][ T6529] loop2: detected capacity change from 0 to 32768
[  124.109582][ T6494] RSP: 002b:00007f0824147e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  124.109644][ T6494] RAX: ffffffffffffffda RBX: 00007f0824147ee0 RCX: 00007f082319da8a
[  124.109661][ T6494] RDX: 00002000000003c0 RSI: 0000200000000340 RDI: 0000000000000000
[  124.109674][ T6494] RBP: 00002000000003c0 R08: 00007f0824147ee0 R09: 000000000126a4b5
[  124.109690][ T6494] R10: 000000000126a4b5 R11: 0000000000000246 R12: 0000200000000340
[  124.143095][ T6529] XFS: attr2 mount option is deprecated.
[  124.150657][ T6494] R13: 00007f0824147ea0 R14: 0000000000000000 R15: 0000200000004140
[  124.150699][ T6494]  </TASK>
[  124.204611][ T6529] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  124.364325][ T6529] XFS (loop2): Ending clean mount
[  124.391161][ T6529] XFS (loop2): Quotacheck needed: Please wait.
[  124.560727][ T6529] XFS (loop2): Quotacheck: Done.
[  124.933938][ T5770] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.165233][ T6568] loop1: detected capacity change from 0 to 128
[  125.463640][ T6568] EXT4-fs (loop1): Test dummy encryption mode enabled
[  125.538595][ T6568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  125.572244][ T6568] System zones: 1-3, 19-19, 35-36
[  125.600307][ T6568] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  125.635891][ T6568] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.833278][ T6585] loop3: detected capacity change from 0 to 128
[  125.883427][ T6585] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  125.962622][ T6585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.044223][ T6568] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  126.207816][ T6578] loop2: detected capacity change from 0 to 32768
[  126.220677][ T5766] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  126.247297][ T5833] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[  126.277628][ T6578] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.424866][ T6578] XFS (loop2): Ending clean mount
[  126.440581][ T5833] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  126.461005][ T5833] usb 1-1: config 0 has no interface number 0
[  126.483992][ T5833] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  126.512163][ T5833] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  126.538010][ T5813] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  126.548815][ T5833] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  126.576321][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.598758][   T28] audit: type=1800 audit(1776754302.957:52): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.273" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  126.599809][ T5833] usb 1-1: config 0 descriptor??
[  126.649327][ T6588] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  126.666230][ T5833] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  126.722075][ T5770] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.738961][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.759634][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.771064][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  126.811113][ T5813] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  126.828071][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.869578][ T5813] usb 4-1: config 0 descriptor??
[  127.034168][ T6601] loop1: detected capacity change from 0 to 32768
[  127.093387][ T5833] usb 1-1: USB disconnect, device number 3
[  127.093427][    C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  127.187198][   T28] audit: type=1800 audit(1776754303.547:53): pid=6601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.281" name="file1" dev="loop1" ino=7 res=0 errno=0
[  127.312824][ T6604] netlink: 'syz.2.282': attribute type 1 has an invalid length.
[  127.321415][ T6604] netlink: 'syz.2.282': attribute type 2 has an invalid length.
[  127.335608][ T5813] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x4
[  127.346998][ T5813] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  127.347293][ T6604] netlink: 244 bytes leftover after parsing attributes in process `syz.2.282'.
[  127.394401][ T5813] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  127.699839][ T5833] usb 4-1: USB disconnect, device number 7
[  128.013389][ T6613] binder: 6612:6613 ioctl c0306201 0 returned -14
[  128.160942][ T6607] loop2: detected capacity change from 0 to 32768
[  128.187606][ T6607] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.284 (6607)
[  128.253938][ T6607] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  128.298400][ T6607] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  128.340111][ T6607] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  128.381105][ T6607] BTRFS info (device loop2): use zstd compression, level 3
[  128.397268][ T6607] BTRFS info (device loop2): using free space tree
[  128.608699][ T6607] BTRFS info (device loop2): enabling ssd optimizations
[  128.615835][ T6607] BTRFS info (device loop2): auto enabling async discard
[  128.730070][ T6611] loop1: detected capacity change from 0 to 32768
[  128.767590][ T6611] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.285 (6611)
[  128.817161][ T6611] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.837698][ T6611] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  128.846737][ T6611] BTRFS info (device loop1): using free space tree
[  129.076146][ T6611] BTRFS info (device loop1): enabling ssd optimizations
[  129.085785][ T6611] BTRFS info (device loop1): auto enabling async discard
[  129.248605][ T5770] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  129.361686][ T6662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'.
[  129.581595][ T6627] loop3: detected capacity change from 0 to 32768
[  129.651708][ T6627] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.289 (6627)
[  130.047049][ T6004] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (6004)
[  130.143882][ T5766] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.477056][ T6675] loop3: detected capacity change from 0 to 8192
[  130.523504][ T6675] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  130.561659][ T6675] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  130.571785][ T6675] REISERFS (device loop3): using ordered data mode
[  130.580002][ T6675] reiserfs: using flush barriers
[  130.667291][ T6675] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  130.721618][ T6675] REISERFS (device loop3): checking transaction log (loop3)
[  130.817660][ T6675] REISERFS (device loop3): Using r5 hash to sort names
[  130.843530][ T6675] REISERFS (device loop3): using 3.5.x disk format
[  131.021505][ T6689] loop0: detected capacity change from 0 to 2048
[  131.113252][ T6689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.184387][   T28] audit: type=1800 audit(1776754307.557:54): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.306" name="file1" dev="loop0" ino=15 res=0 errno=0
[  131.209429][ T6689] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  131.231390][ T6689] EXT4-fs error (device loop0) in ext4_setattr:5682: error 28
[  131.325383][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.464948][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'.
[  131.578589][ T6708] netlink: 72 bytes leftover after parsing attributes in process `syz.0.311'.
[  131.971190][ T6720] loop1: detected capacity change from 0 to 164
[  132.111002][ T6720] rock: directory entry would overflow storage
[  132.135170][ T6720] rock: sig=0x4d4e, size=5, remaining=4
[  132.166296][ T6720] isofs: isofs_export_get_parent(): child directory not normalized!
[  132.223005][ T6723] isofs: isofs_export_get_parent(): child directory not normalized!
[  132.528178][   T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.701806][   T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.818611][   T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.914084][   T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.933962][ T6735] loop1: detected capacity change from 0 to 256
[  133.314155][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  133.322363][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  133.395231][ T6742] loop1: detected capacity change from 0 to 512
[  133.408391][ T6742] EXT4-fs: Ignoring removed bh option
[  133.425743][ T6742] EXT4-fs: inline encryption not supported
[  133.530019][ T6742] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  133.554579][ T6746] loop0: detected capacity change from 0 to 64
[  133.637053][ T6742] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  133.729469][ T6742] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.327: bg 0: block 248: padding at end of block bitmap is not set
[  133.745962][ T6746] Trying to free block not in datazone
[  133.754668][ T6742] Quota error (device loop1): write_blk: dquota write failed
[  133.795197][ T6742] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  133.830926][ T6752] Trying to free block not in datazone
[  133.851173][ T6742] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.327: Failed to acquire dquot type 1
[  133.855274][ T6752] minix_free_inode: bit 5 already cleared
[  133.895460][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  133.895845][ T6742] EXT4-fs (loop1): 1 truncate cleaned up
[  133.916235][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  133.927043][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  133.936459][ T6742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  133.956791][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  133.971121][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  133.983923][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.288387][ T3494] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  134.292110][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  134.318034][ T3494] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:9: Failed to release dquot type 1
[  135.115608][ T6779] loop1: detected capacity change from 0 to 128
[  135.153937][ T6753] chnl_net:caif_netlink_parms(): no params data found
[  135.162835][ T6779] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  135.204341][ T6779] hpfs: filesystem error: improperly stopped
[  135.221012][ T6779] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  135.230303][ T5772] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  135.240055][ T6779] hpfs: You really don't want any checks? You are crazy...
[  135.280874][ T6779] hpfs: Code page index out of array
[  135.286277][ T6779] hpfs: code page support is disabled
[  135.344151][ T6779] hpfs: hpfs_map_4sectors(): unaligned read
[  135.398940][ T6779] hpfs: hpfs_map_4sectors(): unaligned read
[  135.419259][ T6779] hpfs: filesystem error: unable to find root dir
[  135.427195][ T5772] usb 1-1: Using ep0 maxpacket: 16
[  135.456439][ T5772] usb 1-1: unable to get BOS descriptor or descriptor too short
[  135.478243][ T5772] usb 1-1: unable to read config index 0 descriptor/start: -71
[  135.486041][ T5772] usb 1-1: can't read configurations, error -71
[  135.553244][ T6779] hpfs: hpfs_map_sector(): read error
[  135.577277][ T6779] hpfs: hpfs_map_sector(): read error
[  135.850546][ T6798] loop1: detected capacity change from 0 to 256
[  135.923529][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.945569][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.954730][ T6753] bridge_slave_0: entered allmulticast mode
[  135.989498][ T6753] bridge_slave_0: entered promiscuous mode
[  136.016978][ T6798] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  136.044380][   T51] Bluetooth: hci1: command tx timeout
[  136.087198][   T34] hsr_slave_0: left promiscuous mode
[  136.128422][   T28] audit: type=1800 audit(1776754312.507:55): pid=6798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.337" name="file1" dev="loop1" ino=1048615 res=0 errno=0
[  136.151709][   T34] hsr_slave_1: left promiscuous mode
[  136.162408][ T6798] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  136.198874][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.218880][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.226313][ T6798] exFAT-fs (loop1): Filesystem has been set read-only
[  136.235085][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.257411][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.272155][ T6804] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  136.278340][   T34] bridge_slave_1: left allmulticast mode
[  136.297982][   T34] bridge_slave_1: left promiscuous mode
[  136.303876][ T6804] exFAT-fs (loop1): error, failed to bmap (inode : ffff88805e2914e0 iblock : 8, err : -5)
[  136.306187][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.331838][ T6804] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  136.348424][ T6804] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000008)
[  136.382644][   T34] bridge_slave_0: left allmulticast mode
[  136.389992][   T34] bridge_slave_0: left promiscuous mode
[  136.395926][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.452038][   T34] veth1_macvtap: left promiscuous mode
[  136.460131][   T34] veth0_macvtap: left promiscuous mode
[  136.465841][   T34] veth1_vlan: left promiscuous mode
[  136.481899][   T34] veth0_vlan: left promiscuous mode
[  136.526394][ T6788] loop3: detected capacity change from 0 to 32768
[  136.562121][ T6788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.336 (6788)
[  136.622676][ T6788] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.657475][ T6788] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  136.666260][ T6788] BTRFS info (device loop3): using free space tree
[  136.810364][ T6788] BTRFS info (device loop3): enabling ssd optimizations
[  136.818128][ T6788] BTRFS info (device loop3): auto enabling async discard
[  136.898787][ T5813] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  137.097180][ T5813] usb 2-1: Using ep0 maxpacket: 32
[  137.120601][ T5813] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  137.145699][ T5813] usb 2-1: config 0 has no interface number 0
[  137.177335][ T5813] usb 2-1: config 0 interface 12 has no altsetting 0
[  137.187060][ T5813] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  137.209835][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.222833][ T5813] usb 2-1: Product: syz
[  137.227655][ T5813] usb 2-1: Manufacturer: syz
[  137.234055][ T5813] usb 2-1: SerialNumber: syz
[  137.249564][ T5813] usb 2-1: config 0 descriptor??
[  137.313243][ T5778] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.115924][   T51] Bluetooth: hci1: command tx timeout
[  138.146331][ T5813] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  138.146747][   T34] team0 (unregistering): Port device team_slave_1 removed
[  138.162642][ T5813] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  138.162783][ T5813] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  138.193844][ T5813] f81534: probe of 2-1:0.12 failed with error -71
[  138.218557][ T5813] usb 2-1: USB disconnect, device number 5
[  138.265489][   T34] team0 (unregistering): Port device team_slave_0 removed
[  138.331492][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.385604][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.835344][   T34] bond0 (unregistering): Released all slaves
[  139.026799][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.035120][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.043433][ T6753] bridge_slave_1: entered allmulticast mode
[  139.051307][ T6753] bridge_slave_1: entered promiscuous mode
[  139.238732][ T6753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.299077][ T6753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.388274][ T6753] team0: Port device team_slave_0 added
[  139.441043][ T6753] team0: Port device team_slave_1 added
[  139.528115][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.554819][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.648252][ T6753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.690696][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.712276][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.737644][ T6844] loop0: detected capacity change from 0 to 8192
[  139.769470][ T6844] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  139.787371][ T6753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.877153][   T28] audit: type=1800 audit(1776754316.247:56): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.347" name="file2" dev="loop0" ino=1048616 res=0 errno=0
[  139.894972][ T6844] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  139.942703][ T6844] FAT-fs (loop0): Filesystem has been set read-only
[  139.995195][ T6753] hsr_slave_0: entered promiscuous mode
[  140.002497][ T6844] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  140.047278][ T6844] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  140.056595][ T6844] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  140.084608][ T6753] hsr_slave_1: entered promiscuous mode
[  140.117267][ T6753] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.125120][ T6753] Cannot create hsr debugfs directory
[  140.136340][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'.
[  140.137158][ T6844] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  140.187690][   T51] Bluetooth: hci1: command tx timeout
[  140.197504][ T6844] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  140.242053][ T6844] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  140.284705][ T6844] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  140.348630][ T6844] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  140.387597][ T6844] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  140.501982][ T6839] loop3: detected capacity change from 0 to 32768
[  140.591971][   T28] audit: type=1800 audit(1776754316.967:57): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.346" name="file1" dev="loop3" ino=7 res=0 errno=0
[  141.035395][ T6867] loop0: detected capacity change from 0 to 2048
[  141.096138][ T6753] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  141.146857][ T6753] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  141.173714][ T6867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.192312][ T6753] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  141.241072][ T6753] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  141.482423][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.502809][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.573964][ T6753] 8021q: adding VLAN 0 to HW filter on device team0
[  141.644248][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.651690][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.720540][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.728012][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.956745][ T6753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.026018][ T6883] loop3: detected capacity change from 0 to 4096
[  142.055195][ T6883] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  142.128622][ T6883] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  142.276451][   T51] Bluetooth: hci1: command tx timeout
[  142.398306][ T6895] ntfs3: loop3: ino=1e, "file1" The size of extended attributes must not exceed 64KiB
[  142.621805][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.729209][ T5772] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  142.838197][ T6904] tap0: tun_chr_ioctl cmd 1074025677
[  142.846591][ T6904] tap0: linktype set to 768
[  142.952275][ T5772] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.987294][ T5772] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  143.034817][ T5772] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.062498][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.092066][ T5772] usb 1-1: Product: syz
[  143.096605][ T5772] usb 1-1: Manufacturer: syz
[  143.116943][ T5772] usb 1-1: SerialNumber: syz
[  143.168171][ T5772] cdc_ncm 1-1:1.0: skipping garbage
[  143.173494][ T5772] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  143.234343][ T5772] cdc_ncm 1-1:1.0: bind() failure
[  143.279244][ T5772] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  143.306467][ T5772] cdc_ncm 1-1:1.1: bind() failure
[  143.432829][ T6921] tap0: tun_chr_ioctl cmd 2148553947
[  143.453098][ T5772] usb 1-1: USB disconnect, device number 6
[  143.605035][ T6753] veth0_vlan: entered promiscuous mode
[  143.646933][ T6753] veth1_vlan: entered promiscuous mode
[  143.740216][ T6753] veth0_macvtap: entered promiscuous mode
[  143.760430][ T6753] veth1_macvtap: entered promiscuous mode
[  143.800077][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.832162][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.862228][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.876874][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.899150][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.910145][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.933122][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.988400][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.037165][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.071229][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.103060][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.123194][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.136382][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.197862][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.226585][ T6753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.285531][ T6753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.295434][ T6753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.298552][ T6942] loop0: detected capacity change from 0 to 128
[  144.321418][ T6753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.371604][ T6942] EXT4-fs (loop0): Test dummy encryption mode enabled
[  144.525981][ T6942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  144.587802][ T6942] System zones: 1-3, 19-19, 35-36
[  144.617864][ T6942] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  144.659175][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.671397][ T6942] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.699224][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.795939][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.838438][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.920540][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  145.485762][ T6965] loop1: detected capacity change from 0 to 2048
[  145.587738][ T6969] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.606462][ T6958] loop4: detected capacity change from 0 to 8192
[  145.862802][ T6958] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  145.957303][ T6958] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  146.036871][ T6958] REISERFS (device loop4): using ordered data mode
[  146.095720][ T6958] reiserfs: using flush barriers
[  146.177044][ T6958] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  146.352299][ T6958] REISERFS (device loop4): checking transaction log (loop4)
[  146.897273][ T5813] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  146.898513][ T6968] loop3: detected capacity change from 0 to 131072
[  146.919460][ T6968] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  146.927775][ T6968] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  146.939713][ T6958] REISERFS (device loop4): Using tea hash to sort names
[  146.949346][ T6968] F2FS-fs (loop3): invalid crc value
[  146.987981][ T6958] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  147.004475][ T6968] F2FS-fs (loop3): Found nat_bits in checkpoint
[  147.043184][ T6958] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  147.066528][ T6968] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  147.074538][ T6968] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  147.107274][ T5813] usb 2-1: Using ep0 maxpacket: 8
[  147.136192][ T5813] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  147.164619][ T5813] usb 2-1: config 179 has no interface number 0
[  147.194628][ T5813] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  147.241626][ T5813] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  147.277957][ T5813] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  147.325699][ T5813] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  147.350933][ T5813] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  147.384787][ T5813] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  147.470636][ T5813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.521387][ T6979] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  147.614185][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'.
[  148.079844][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'.
[  148.289468][   T51] block nbd0: Receive control failed (result -107)
[  148.309582][ T7004] block nbd0: shutting down sockets
[  148.636760][   T23] usb 2-1: USB disconnect, device number 6
[  148.636873][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  148.651304][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  148.754500][    T8] hid-generic 0004:0004:FFFF0001.0006: unknown main item tag 0x0
[  148.797214][    T8] hid-generic 0004:0004:FFFF0001.0006: unknown main item tag 0x0
[  148.805382][    T8] hid-generic 0004:0004:FFFF0001.0006: unknown main item tag 0x0
[  148.844255][    T8] hid-generic 0004:0004:FFFF0001.0006: hidraw0: <UNKNOWN> HID v0.b3 Device [syz0] on syz1
[  149.012619][ T7019] fido_id[7019]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  150.136838][ T7027] loop0: detected capacity change from 0 to 32768
[  150.188048][ T7027] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.389 (7027)
[  150.277729][ T7027] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.304895][ T7027] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  150.358430][ T7027] BTRFS info (device loop0): force clearing of disk cache
[  150.365829][ T7027] BTRFS info (device loop0): metadata ratio 0
[  150.392986][ T7027] BTRFS info (device loop0): enabling ssd optimizations
[  150.411692][ T7027] BTRFS info (device loop0): using spread ssd allocation scheme
[  150.437872][ T7027] BTRFS info (device loop0): using free space tree
[  150.600500][ T7034] loop1: detected capacity change from 0 to 32768
[  150.619428][ T7027] BTRFS info (device loop0): auto enabling async discard
[  150.628424][ T7034] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.391 (7034)
[  150.643581][ T7027] BTRFS info (device loop0): rebuilding free space tree
[  150.710342][ T7034] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  150.737786][ T7034] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  150.774289][ T7034] BTRFS info (device loop1): enabling auto defrag
[  150.797434][ T7034] BTRFS info (device loop1): enabling ssd optimizations
[  150.817043][ T7034] BTRFS info (device loop1): use no compression
[  150.823699][ T7034] BTRFS info (device loop1): max_inline at 4096
[  150.847391][ T7034] BTRFS info (device loop1): using free space tree
[  151.074627][ T7034] BTRFS info (device loop1): auto enabling async discard
[  151.102769][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.220193][   T51] block nbd4: Receive control failed (result -107)
[  151.322146][ T6004] block nbd4: shutting down sockets
[  151.522969][ T5766] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  151.892096][ T5911] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop1 scanned by udevd (5911)
[  151.937751][ T7109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.399'.
[  152.037340][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  152.254926][    T8] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  152.296338][    T8] usb 1-1: config 0 has no interfaces?
[  152.304151][    T8] usb 1-1: config 0 has no interfaces?
[  152.319079][    T8] usb 1-1: config 0 has no interfaces?
[  152.345877][    T8] usb 1-1: config 0 has no interfaces?
[  152.353192][    T8] usb 1-1: config 0 has no interfaces?
[  152.377856][    T8] usb 1-1: config 0 has no interfaces?
[  152.404234][    T8] usb 1-1: config 0 has no interfaces?
[  152.418683][    T8] usb 1-1: config 0 has no interfaces?
[  152.440445][    T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  152.477878][    T8] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  152.528552][    T8] usb 1-1: Product: syz
[  152.532891][    T8] usb 1-1: Manufacturer: syz
[  152.567584][    T8] usb 1-1: SerialNumber: syz
[  152.587823][    T8] usb 1-1: config 0 descriptor??
[  152.851349][    T8] usb 1-1: USB disconnect, device number 7
[  153.141164][ T7099] loop4: detected capacity change from 0 to 40427
[  153.161182][ T7106] loop3: detected capacity change from 0 to 40427
[  153.183961][ T7099] F2FS-fs (loop4): invalid crc value
[  153.200091][ T7106] F2FS-fs (loop3): Invalid log_blocksize (64), supports only 12
[  153.233821][ T7099] F2FS-fs (loop4): Found nat_bits in checkpoint
[  153.233882][ T7106] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  153.300649][ T7106] F2FS-fs (loop3): invalid crc value
[  153.428564][ T7099] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  153.605714][ T7099] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  153.612478][ T7106] F2FS-fs (loop3): Start checkpoint disabled!
[  153.716295][ T7106] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  153.767373][ T7106] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  153.862790][ T7114] loop1: detected capacity change from 0 to 40427
[  153.909708][ T7106] syz.3.400: attempt to access beyond end of device
[  153.909708][ T7106] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  153.924443][ T7114] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  153.948045][ T7106] syz.3.400: attempt to access beyond end of device
[  153.948045][ T7106] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  153.957155][ T7114] F2FS-fs (loop1): Image doesn't support compression
[  154.013978][ T7114] F2FS-fs (loop1): Image doesn't support compression
[  154.049099][ T7135] syz.3.400: attempt to access beyond end of device
[  154.049099][ T7135] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  154.087299][ T7114] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4
[  154.117286][ T7114] F2FS-fs (loop1): invalid crc value
[  154.127797][ T7135] syz.3.400: attempt to access beyond end of device
[  154.127797][ T7135] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  154.173354][ T7114] F2FS-fs (loop1): Found nat_bits in checkpoint
[  154.310277][ T1083] kworker/u4:6: attempt to access beyond end of device
[  154.310277][ T1083] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  154.342348][ T7114] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  154.345725][ T1083] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  154.585020][ T5766] syz-executor: attempt to access beyond end of device
[  154.585020][ T5766] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  154.651362][ T5766] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  155.105494][ T7142] loop4: detected capacity change from 0 to 4096
[  155.229158][ T7138] loop0: detected capacity change from 0 to 32768
[  155.260300][ T7145] vxcan1: tx address claim with dest, not broadcast
[  155.324823][ T7138] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  155.513779][ T7138] XFS (loop0): Ending clean mount
[  155.762105][ T7138] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  155.880288][   T51] block nbd1: Receive control failed (result -107)
[  155.902050][ T7160] block nbd1: shutting down sockets
[  155.987944][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  156.024578][ T7165] loop3: detected capacity change from 0 to 512
[  156.054631][ T7165] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  156.276366][ T7169] loop1: detected capacity change from 0 to 256
[  156.730444][ T7178] loop0: detected capacity change from 0 to 64
[  156.905755][   T28] audit: type=1800 audit(1776754333.277:58): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.412" name="file1" dev="loop0" ino=22 res=0 errno=0
[  156.975430][ T7163] loop4: detected capacity change from 0 to 32768
[  157.018320][ T7163] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.201956][ T7163] XFS (loop4): Ending clean mount
[  157.479235][ T6753] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.807463][ T5813] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  157.907025][ T7211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.425'.
[  157.925421][ T7211] ipvlan2: entered allmulticast mode
[  157.931140][ T7211] syz_tun: entered allmulticast mode
[  158.037332][ T5813] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  158.053414][ T7215] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.428'.
[  158.063323][ T7215] openvswitch: netlink: Flow key attribute not present in set flow.
[  158.066360][ T5813] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  158.096966][ T5813] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  158.127228][ T5813] usb 2-1: config 220 has no interface number 2
[  158.151678][ T5813] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  158.187222][ T5813] usb 2-1: config 220 interface 0 has no altsetting 0
[  158.194180][ T5813] usb 2-1: config 220 interface 76 has no altsetting 0
[  158.217216][ T5813] usb 2-1: config 220 interface 1 has no altsetting 0
[  158.240358][ T5813] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  158.250127][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.260292][ T5813] usb 2-1: Product: syz
[  158.280339][ T5813] usb 2-1: Manufacturer: syz
[  158.285076][ T5813] usb 2-1: SerialNumber: syz
[  158.592626][ T5813] usb 2-1: selecting invalid altsetting 0
[  158.619625][ T5813] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  158.626114][ T5813] usb 2-1: No valid video chain found.
[  158.663587][ T5813] usb 2-1: selecting invalid altsetting 0
[  158.682065][ T5813] usbtest: probe of 2-1:220.1 failed with error -22
[  158.709110][ T5813] usb 2-1: USB disconnect, device number 7
[  159.872430][ T7239] loop3: detected capacity change from 0 to 32768
[  159.907477][ T7239] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.198835][ T7239] XFS (loop3): Ending clean mount
[  160.304418][ T7266] loop4: detected capacity change from 0 to 512
[  160.338310][ T7266] EXT4-fs: Ignoring removed nobh option
[  160.428913][ T7266] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.443: invalid indirect mapped block 256 (level 2)
[  160.466936][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.542146][ T7266] EXT4-fs (loop4): Remounting filesystem read-only
[  160.567914][ T7266] EXT4-fs (loop4): 2 truncates cleaned up
[  160.575382][ T7266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.826435][ T6753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.886227][ T7254] loop1: detected capacity change from 0 to 32768
[  161.019780][ T7254] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.313416][ T7254] XFS (loop1): Ending clean mount
[  161.452547][ T7286] loop3: detected capacity change from 0 to 4096
[  161.483587][ T7286] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  161.744349][ T5766] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  162.044605][ T7295] netlink: 'syz.0.451': attribute type 4 has an invalid length.
[  163.113262][ T7330] loop1: detected capacity change from 0 to 256
[  163.155978][ T7330] exfat: Deprecated parameter 'utf8'
[  163.174533][ T7330] exfat: Deprecated parameter 'namecase'
[  163.230441][ T7330] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  163.608619][ T7340] sctp: [Deprecated]: syz.1.466 (pid 7340) Use of int in max_burst socket option deprecated.
[  163.608619][ T7340] Use struct sctp_assoc_value instead
[  163.786423][ T7346] netlink: 'syz.0.467': attribute type 1 has an invalid length.
[  163.826127][ T7346] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.467'.
[  164.595273][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.4.473'.
[  165.111593][ T7351] loop1: detected capacity change from 0 to 32768
[  165.256818][ T7351] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  165.448983][ T7351] XFS (loop1): Ending clean mount
[  165.896716][ T5766] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  167.657919][ T7435] program syz.0.492 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  168.085127][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.489'.
[  168.492416][ T7469] loop3: detected capacity change from 0 to 128
[  168.603946][ T7469] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  168.652434][ T7469] FAT-fs (loop3): Filesystem has been set read-only
[  168.737378][ T5813] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  168.947397][ T5813] usb 1-1: Using ep0 maxpacket: 16
[  168.955046][ T5813] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  168.964986][ T5813] usb 1-1: config 1 has no interface number 0
[  168.977394][ T5813] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  169.008773][ T5813] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  169.022614][ T5813] usb 1-1: config 1 interface 105 has no altsetting 0
[  169.047715][ T5813] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  169.057597][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  169.073667][ T5813] usb 1-1: Product: syz
[  169.091132][ T5813] usb 1-1: Manufacturer: syz
[  169.095820][ T5813] usb 1-1: SerialNumber: syz
[  169.143638][ T7466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  169.163440][ T7466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  169.503805][ T7499] loop4: detected capacity change from 0 to 2048
[  169.522895][ T7499] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  169.545241][ T7499] NILFS (loop4): mounting unchecked fs
[  169.596072][ T7499] NILFS (loop4): recovery complete
[  169.617306][ T5772] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  169.629479][ T7466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  169.644653][ T7503] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.670494][ T7466] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  169.857844][ T5772] usb 2-1: Using ep0 maxpacket: 32
[  169.879524][ T5772] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  169.898818][ T5772] usb 2-1: config 0 has no interface number 0
[  169.906010][ T5772] usb 2-1: config 0 interface 12 has no altsetting 0
[  169.930096][ T5813] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  169.945397][ T7511] program syz.4.510 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  169.953491][ T5772] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  169.977318][ T5813] aqc111: probe of 1-1:1.105 failed with error -71
[  169.988106][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.012608][ T5813] usb 1-1: USB disconnect, device number 8
[  170.019063][ T5772] usb 2-1: Product: syz
[  170.023486][ T5772] usb 2-1: Manufacturer: syz
[  170.057251][ T5772] usb 2-1: SerialNumber: syz
[  170.075987][ T5772] usb 2-1: config 0 descriptor??
[  170.253911][ T7520] loop3: detected capacity change from 0 to 512
[  170.352165][ T7520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.377752][ T7520] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.513793][ T5772] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  170.547527][ T5772] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  170.555004][ T5772] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  170.592149][ T5772] f81534: probe of 2-1:0.12 failed with error -71
[  170.641057][ T5772] usb 2-1: USB disconnect, device number 8
[  170.695219][ T7530] overlayfs: invalid origin (0000)
[  170.773336][ T7533] loop0: detected capacity change from 0 to 4096
[  170.795117][ T7533] EXT4-fs: inline encryption not supported
[  170.833419][ T7533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  170.857406][ T7533] EXT4-fs (loop0): Test dummy encryption mode enabled
[  170.876167][ T7533] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0003]
[  170.885854][ T7533] System zones: 0-5
[  170.900259][ T7533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.944383][ T5778] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size
[  171.027742][ T5778] EXT4-fs (loop3): Remounting filesystem read-only
[  171.300246][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.458336][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.578715][ T5778] syz-executor (5778) used greatest stack depth: 20424 bytes left
[  171.676427][   T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.867370][ T5772] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  171.894808][   T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.022088][ T7540] loop4: detected capacity change from 0 to 40427
[  172.041539][ T7540] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12
[  172.052477][   T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.067309][ T5772] usb 1-1: Using ep0 maxpacket: 16
[  172.079638][ T7540] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  172.095404][ T5772] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.114346][ T5772] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25
[  172.139176][ T5772] usb 1-1: config 0 interface 0 has no altsetting 0
[  172.146241][ T5772] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00
[  172.155925][ T7540] F2FS-fs (loop4): invalid crc value
[  172.163354][ T5772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.176790][ T5772] usb 1-1: config 0 descriptor??
[  172.275358][   T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.539267][ T7540] F2FS-fs (loop4): Start checkpoint disabled!
[  172.572247][ T7540] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  172.600874][ T7540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  172.673205][ T5772] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0
[  172.703507][ T5772] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0
[  172.737190][ T5772] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0
[  172.744858][ T5772] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0
[  172.777997][ T5772] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0
[  172.785609][ T5772] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x0
[  172.817639][ T7540] syz.4.517: attempt to access beyond end of device
[  172.817639][ T7540] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  172.845740][ T5772] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x4
[  172.864494][ T5772] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0x6
[  172.873945][ T7540] syz.4.517: attempt to access beyond end of device
[  172.873945][ T7540] loop4: rw=2049, sector=45136, nr_sectors = 8 limit=40427
[  172.914545][ T5772] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0xd
[  172.952572][ T5772] smartjoyplus 0003:6666:8801.0007: unknown main item tag 0xd
[  172.961182][ T7567] syz.4.517: attempt to access beyond end of device
[  172.961182][ T7567] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  172.988780][ T7567] syz.4.517: attempt to access beyond end of device
[  172.988780][ T7567] loop4: rw=2049, sector=45136, nr_sectors = 8 limit=40427
[  172.991555][ T5772] smartjoyplus 0003:6666:8801.0007: hidraw0: USB HID v0.08 Device [HID 6666:8801] on usb-dummy_hcd.0-1/input0
[  173.020367][ T5772] smartjoyplus 0003:6666:8801.0007: Force feedback for SmartJoy PLUS PS2/USB adapter
[  173.037460][ T5772] usb 1-1: USB disconnect, device number 9
[  173.195775][ T3494] kworker/u4:9: attempt to access beyond end of device
[  173.195775][ T3494] loop4: rw=2049, sector=45144, nr_sectors = 8 limit=40427
[  173.258002][ T3494] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  173.265980][ T7569] fido_id[7569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  173.349280][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  173.361955][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  173.391925][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  173.411530][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  173.427377][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  173.435044][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  174.369695][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'.
[  174.483431][ T7601] loop4: detected capacity change from 0 to 128
[  174.532373][ T7601] EXT4-fs: Ignoring removed nomblk_io_submit option
[  174.543207][ T7603] loop0: detected capacity change from 0 to 2048
[  174.551513][ T7603] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576
[  174.562226][ T7601] EXT4-fs: Ignoring removed nomblk_io_submit option
[  174.594294][ T7603] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.616636][ T7601] EXT4-fs (loop4): Test dummy encryption mode enabled
[  174.644349][ T7607] loop1: detected capacity change from 0 to 1024
[  174.723716][ T7601] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  174.726816][ T7607] hfsplus: bad catalog entry type
[  174.778708][ T7601] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.975966][ T7613] Driver unsupported XDP return value 0 on prog  (id 36) dev N/A, expect packet loss!
[  175.024332][ T1083] hfsplus: b-tree write err: -5, ino 25
[  175.040817][ T6753] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.056171][ T1083] hfsplus: b-tree write err: -5, ino 4
[  175.091924][ T1083] hfsplus: b-tree write err: -5, ino 2
[  175.111764][ T1083] hfsplus: b-tree write err: -5, ino 26
[  175.284217][ T7616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'.
[  175.306362][ T7572] chnl_net:caif_netlink_parms(): no params data found
[  175.548696][ T5777] Bluetooth: hci3: command tx timeout
[  175.626058][ T7631] loop1: detected capacity change from 0 to 256
[  175.775955][ T7634] loop4: detected capacity change from 0 to 2048
[  175.929770][   T34] hsr_slave_0: left promiscuous mode
[  175.929814][ T7634] NILFS (loop4): invalid segment: Magic number mismatch
[  175.956563][ T7634] NILFS (loop4): trying rollback from an earlier position
[  175.956803][   T34] hsr_slave_1: left promiscuous mode
[  175.988947][   T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  176.000302][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.008198][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.015372][ T7634] NILFS (loop4): recovery complete
[  176.022240][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.031615][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.040710][ T7640] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.047640][   T34] bridge_slave_1: left allmulticast mode
[  176.067394][   T34] bridge_slave_1: left promiscuous mode
[  176.073627][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.143732][   T34] bridge_slave_0: left allmulticast mode
[  176.155877][   T34] bridge_slave_0: left promiscuous mode
[  176.168794][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.187655][   T23] usb 2-1: Using ep0 maxpacket: 32
[  176.198423][   T23] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.230008][   T23] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  176.253047][   T34] veth1_macvtap: left promiscuous mode
[  176.254367][   T23] usb 2-1: config 0 interface 0 has no altsetting 0
[  176.259535][   T34] veth0_macvtap: left promiscuous mode
[  176.273039][   T34] veth1_vlan: left promiscuous mode
[  176.275295][   T23] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[  176.279040][   T34] veth0_vlan: left promiscuous mode
[  176.290821][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.314136][   T23] usb 2-1: config 0 descriptor??
[  176.750908][   T23] wacom 0003:056A:00C6.0008: unknown main item tag 0x0
[  176.782082][   T23] wacom 0003:056A:00C6.0008: unknown main item tag 0x0
[  176.802787][   T23] wacom 0003:056A:00C6.0008: unknown main item tag 0x0
[  176.812357][   T23] wacom 0003:056A:00C6.0008: unknown main item tag 0x0
[  176.820072][   T23] wacom 0003:056A:00C6.0008: unknown main item tag 0x0
[  176.846416][   T23] wacom 0003:056A:00C6.0008: unknown main item tag 0x0
[  176.857733][   T23] wacom 0003:056A:00C6.0008: unknown main item tag 0x6
[  176.879119][   T23] wacom 0003:056A:00C6.0008: unknown main item tag 0x3
[  176.886445][   T23] wacom 0003:056A:00C6.0008: unknown main item tag 0x7
[  176.921316][   T23] wacom 0003:056A:00C6.0008: hidraw0: USB HID v0.81 Device [HID 056a:00c6] on usb-dummy_hcd.1-1/input0
[  176.988764][   T23] usb 2-1: USB disconnect, device number 9
[  177.101511][ T7645] loop4: detected capacity change from 0 to 40427
[  177.131032][ T7646] fido_id[7646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  177.162622][ T7645] F2FS-fs (loop4): invalid crc value
[  177.230833][ T7645] F2FS-fs (loop4): Found nat_bits in checkpoint
[  177.287438][ T7648] loop0: detected capacity change from 0 to 4096
[  177.389846][ T7645] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  177.402033][ T7648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.595261][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.605425][ T6753] syz-executor: attempt to access beyond end of device
[  177.605425][ T6753] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  177.634182][ T5777] Bluetooth: hci3: command tx timeout
[  177.654277][ T6753] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  178.446716][ T7665] program syz.1.552 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  178.475646][   T34] team0 (unregistering): Port device team_slave_1 removed
[  178.648149][   T34] team0 (unregistering): Port device team_slave_0 removed
[  178.773236][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'.
[  178.788982][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.948625][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.364677][ T7669] loop4: detected capacity change from 0 to 40427
[  179.389560][ T7669] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x7ffff
[  179.409060][ T7669] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  179.436098][ T7669] F2FS-fs (loop4): Image doesn't support compression
[  179.452042][ T7679] loop1: detected capacity change from 0 to 2048
[  179.472518][ T7669] F2FS-fs (loop4): invalid crc value
[  179.507703][ T7679] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  179.518859][ T7679] NILFS (loop1): mounting unchecked fs
[  179.529701][ T7669] F2FS-fs (loop4): Found nat_bits in checkpoint
[  179.569974][ T7679] NILFS (loop1): recovery complete
[  179.594109][ T7681] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.696051][ T7669] F2FS-fs (loop4): Start checkpoint disabled!
[  179.714942][ T5777] Bluetooth: hci3: command tx timeout
[  179.723046][ T7669] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  179.982710][ T7684] ax25_connect(): syz.1.560 uses autobind, please contact jreuter@yaina.de
[  180.007752][   T13] kworker/u4:1: attempt to access beyond end of device
[  180.007752][   T13] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  180.028350][   T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  180.048514][   T13] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  180.150158][   T34] bond0 (unregistering): Released all slaves
[  180.166962][ T7686] program syz.1.562 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  180.475625][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.484260][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.492590][ T7572] bridge_slave_0: entered allmulticast mode
[  180.501135][ T7572] bridge_slave_0: entered promiscuous mode
[  180.518324][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.525826][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.572186][ T7572] bridge_slave_1: entered allmulticast mode
[  180.589972][ T7572] bridge_slave_1: entered promiscuous mode
[  180.729794][ T7572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.799229][ T7572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  180.926535][ T7572] team0: Port device team_slave_0 added
[  180.935216][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'.
[  180.936567][ T7702] loop0: detected capacity change from 0 to 2048
[  180.973248][ T7572] team0: Port device team_slave_1 added
[  181.002024][ T7702] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  181.052270][ T7702] NILFS (loop0): mounting unchecked fs
[  181.123890][ T7702] NILFS (loop0): recovery complete
[  181.170646][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.189201][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.217425][ T7707] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.282574][ T7572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.370165][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.387346][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.468436][ T7572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.787327][ T5777] Bluetooth: hci3: command tx timeout
[  181.790494][ T7572] hsr_slave_0: entered promiscuous mode
[  181.834502][ T7572] hsr_slave_1: entered promiscuous mode
[  181.909284][    T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  182.107613][    T8] usb 1-1: Using ep0 maxpacket: 32
[  182.117692][ T5813] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  182.137637][    T8] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  182.167292][    T8] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  182.176249][    T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  182.227734][    T8] usb 1-1: config 1 has no interface number 0
[  182.233984][    T8] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  182.277188][    T8] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  182.293635][ T7712] loop1: detected capacity change from 0 to 40427
[  182.306923][    T8] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  182.322898][ T7712] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  182.336008][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.357734][ T5813] usb 5-1: Using ep0 maxpacket: 32
[  182.367388][ T5813] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  182.381171][    T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  182.386956][ T7712] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  182.396500][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.423835][ T7712] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  182.433477][ T5813] usb 5-1: config 0 descriptor??
[  182.463554][ T7712] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  182.472926][ T7712] F2FS-fs (loop1): Image doesn't support compression
[  182.501791][ T7712] F2FS-fs (loop1): invalid crc value
[  182.522394][ T7712] F2FS-fs (loop1): Found nat_bits in checkpoint
[  182.529394][ T7572] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  182.589393][ T7572] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  182.635232][    T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  182.660097][ T7572] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  182.695643][ T5813] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  182.745918][ T7712] F2FS-fs (loop1): Start checkpoint disabled!
[  182.748373][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  182.778323][ T5813] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  182.792298][ T7572] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  182.796040][ T5813] usb 5-1: media controller created
[  182.800579][ T7712] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  182.834290][ T7712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  182.934165][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.978890][ T7572] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.048142][ T7572] 8021q: adding VLAN 0 to HW filter on device team0
[  183.070321][ T5813] az6027: usb out operation failed. (-71)
[  183.078871][ T5813] az6027: usb out operation failed. (-71)
[  183.084744][ T5813] stb0899_attach: Driver disabled by Kconfig
[  183.094184][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.101451][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.117612][ T5813] az6027: no front-end attached
[  183.117612][ T5813] 
[  183.130398][ T5813] az6027: usb out operation failed. (-71)
[  183.138065][ T5813] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  183.156529][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.164284][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.180806][ T5813] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  183.254870][ T5772] usb 1-1: USB disconnect, device number 10
[  183.271917][ T5813] dvb-usb: schedule remote query interval to 400 msecs.
[  183.292818][ T5772] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  183.305887][ T5813] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  183.362016][ T5813] usb 5-1: USB disconnect, device number 2
[  183.364477][ T7572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  183.413157][   T34] F2FS-fs (loop1): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xbe0/0x1a40
[  183.492154][   T34] kworker/u4:2: attempt to access beyond end of device
[  183.492154][   T34] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  183.540725][   T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  183.552642][ T5813] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  183.579127][   T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  183.597820][   T34] F2FS-fs (loop1): Stopped filesystem due to reason: 1
[  184.168516][ T7572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.573182][    T8] IPVS: starting estimator thread 0...
[  184.707326][ T7768] IPVS: using max 17 ests per chain, 40800 per kthread
[  185.049653][ T7572] veth0_vlan: entered promiscuous mode
[  185.083317][ T7572] veth1_vlan: entered promiscuous mode
[  185.112873][ T7758] loop0: detected capacity change from 0 to 32768
[  185.135683][ T7572] veth0_macvtap: entered promiscuous mode
[  185.180876][ T7572] veth1_macvtap: entered promiscuous mode
[  185.203856][ T7758] 
[  185.203856][ T7758]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  185.203856][ T7758] 
[  185.254165][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.290894][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.317187][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.340499][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.365497][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.386366][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.425873][ T5771] 
[  185.425873][ T5771]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  185.425873][ T5771] 
[  185.439383][ T7572] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.475437][ T5771] 
[  185.475437][ T5771]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  185.475437][ T5771] 
[  185.494130][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.527587][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.553489][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.611015][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.667185][ T7572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.687277][ T7572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.719559][ T7572] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.774026][ T7572] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.799053][ T7572] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.842101][ T7572] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.878031][ T7572] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.144186][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.170028][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.245957][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.276636][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.475543][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'.
[  186.762120][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[  187.670101][ T7836] netlink: 64 bytes leftover after parsing attributes in process `syz.1.596'.
[  188.564132][ T7818] loop4: detected capacity change from 0 to 40427
[  188.602049][ T7818] F2FS-fs (loop4): Invalid log blocks per segment (4278190089)
[  188.630235][ T7818] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  188.672706][ T7818] F2FS-fs (loop4): invalid crc value
[  188.747332][ T7818] F2FS-fs (loop4): Found nat_bits in checkpoint
[  188.968467][ T7818] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  188.975624][ T7818] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  189.064812][ T7847] loop1: detected capacity change from 0 to 32768
[  189.154466][   T28] audit: type=1800 audit(1776754365.527:59): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.600" name="file1" dev="loop1" ino=7 res=0 errno=0
[  189.199068][ T7857] F2FS-fs (loop4): Corrupted max_depth of 3: 255
[  189.250489][ T7857] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  189.490827][ T7845] loop0: detected capacity change from 0 to 40427
[  189.540544][ T6753] ------------[ cut here ]------------
[  189.546105][ T6753] kernel BUG at fs/f2fs/inode.c:948!
[  189.573301][ T6753] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  189.579709][ T6753] CPU: 0 PID: 6753 Comm: syz-executor Not tainted syzkaller #0
[  189.587560][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  189.587570][ T7845] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7
[  189.597728][ T6753] RIP: 0010:f2fs_evict_inode+0x1871/0x1890
[  189.597770][ T6753] Code: c6 bf 02 00 00 00 e8 8e 5e d1 fd 40 84 ed 75 28 e8 f4 5b d1 fd 4c 8b 2c 24 e9 6a e9 ff ff e8 e6 5b d1 fd 0f 0b e8 df 5b d1 fd <0f> 0b e8 d8 5b d1 fd 0f 0b e9 0e ff ff ff e8 cc 5b d1 fd e8 47 d7
[  189.597785][ T6753] RSP: 0018:ffffc900032a7940 EFLAGS: 00010293
[  189.597803][ T6753] RAX: ffffffff83b5c621 RBX: ffff88805c044800 RCX: ffff8880227f9e00
[  189.597817][ T6753] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[  189.654468][ T6753] RBP: ffff88805c044850 R08: ffff88805c044caf R09: 1ffff1100b808995
[  189.662690][ T6753] R10: dffffc0000000000 R11: ffffed100b808996 R12: dffffc0000000000
[  189.667894][ T7845] F2FS-fs (loop0): invalid crc value
[  189.670694][ T6753] R13: ffff88807e3ec000 R14: 0000000000000002 R15: ffff88805c044ca8
[  189.670715][ T6753] FS:  000055558d25b500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  189.670732][ T6753] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  189.670745][ T6753] CR2: 00007fa1f6a194e8 CR3: 000000006b8d8000 CR4: 00000000003506f0
[  189.670764][ T6753] Call Trace:
[  189.670772][ T6753]  <TASK>
[  189.670782][ T6753]  ? bit_waitqueue+0x30/0x30
[  189.670811][ T6753]  ? do_raw_spin_unlock+0x121/0x230
[  189.670836][ T6753]  ? f2fs_remove_donate_inode+0x1e0/0x1e0
[  189.670858][ T6753]  evict+0x4ca/0x8d0
[  189.670884][ T6753]  ? proc_nr_inodes+0x230/0x230
[  189.670905][ T6753]  ? do_raw_spin_unlock+0x121/0x230
[  189.670932][ T6753]  ? do_raw_spin_unlock+0x121/0x230
[  189.670958][ T6753]  evict_inodes+0x606/0x6a0
[  189.670977][ T6753]  ? __dentry_kill+0x530/0x650
[  189.671005][ T6753]  ? clear_inode+0x150/0x150
[  189.671024][ T6753]  ? dput+0x3b/0x1e0
[  189.671052][ T6753]  generic_shutdown_super+0x97/0x2b0
[  189.671073][ T6753]  kill_block_super+0x44/0x90
[  189.671092][ T6753]  kill_f2fs_super+0x326/0x3d0
[  189.671113][ T6753]  ? f2fs_mount+0x40/0x40
[  189.671131][ T6753]  ? unregister_shrinker+0x24b/0x300
[  189.671157][ T6753]  ? kfree+0x31/0x190
[  189.671180][ T6753]  ? unregister_shrinker+0x24b/0x300
[  189.671204][ T6753]  deactivate_locked_super+0x97/0x100
[  189.671224][ T6753]  cleanup_mnt+0x43b/0x4d0
[  189.671246][ T6753]  task_work_run+0x1d4/0x260
[  189.815695][ T6753]  ? task_work_cancel+0x220/0x220
[  189.820862][ T6753]  ? exit_to_user_mode_loop+0x3b/0x110
[  189.826374][ T6753]  exit_to_user_mode_loop+0xe6/0x110
[  189.831807][ T6753]  exit_to_user_mode_prepare+0xee/0x180
[  189.837387][ T6753]  syscall_exit_to_user_mode+0x1a/0x50
[  189.842952][ T6753]  do_syscall_64+0x61/0xa0
[  189.847377][ T6753]  ? clear_bhb_loop+0x40/0x90
[  189.852067][ T6753]  ? clear_bhb_loop+0x40/0x90
[  189.856902][ T6753]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  189.863090][ T6753] RIP: 0033:0x7f1732d9da57
[  189.867694][ T6753] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  189.888122][ T6753] RSP: 002b:00007ffffad14528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  189.896551][ T6753] RAX: 0000000000000000 RBX: 00007f1732e32048 RCX: 00007f1732d9da57
[  189.904694][ T6753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffad145e0
[  189.912844][ T6753] RBP: 00007ffffad145e0 R08: 00007ffffad155e0 R09: 00000000ffffffff
[  189.920862][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffad15670
[  189.928957][ T6753] R13: 00007f1732e32048 R14: 000000000002e3a1 R15: 00007ffffad156b0
[  189.937058][ T6753]  </TASK>
[  189.940289][ T6753] Modules linked in:
[  190.035133][ T7845] F2FS-fs (loop0): Found nat_bits in checkpoint
[  190.105202][ T7845] F2FS-fs (loop0): Start checkpoint disabled!
[  190.131260][ T7845] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  190.197202][ T6753] ---[ end trace 0000000000000000 ]---
[  190.202745][ T6753] RIP: 0010:f2fs_evict_inode+0x1871/0x1890
[  190.241890][ T6753] Code: c6 bf 02 00 00 00 e8 8e 5e d1 fd 40 84 ed 75 28 e8 f4 5b d1 fd 4c 8b 2c 24 e9 6a e9 ff ff e8 e6 5b d1 fd 0f 0b e8 df 5b d1 fd <0f> 0b e8 d8 5b d1 fd 0f 0b e9 0e ff ff ff e8 cc 5b d1 fd e8 47 d7
[  190.306782][ T6753] RSP: 0018:ffffc900032a7940 EFLAGS: 00010293
[  190.314361][ T6753] RAX: ffffffff83b5c621 RBX: ffff88805c044800 RCX: ffff8880227f9e00
[  190.321808][ T7845] syz.0.599: attempt to access beyond end of device
[  190.321808][ T7845] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  190.339906][ T6753] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[  190.355218][ T6753] RBP: ffff88805c044850 R08: ffff88805c044caf R09: 1ffff1100b808995
[  190.377136][ T6753] R10: dffffc0000000000 R11: ffffed100b808996 R12: dffffc0000000000
[  190.385919][ T6753] R13: ffff88807e3ec000 R14: 0000000000000002 R15: ffff88805c044ca8
[  190.398356][ T6753] FS:  000055558d25b500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  190.413029][ T6753] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  190.421024][ T6753] CR2: 00007ffcb36eec90 CR3: 000000006b8d8000 CR4: 00000000003506e0
[  190.439404][ T6753] Kernel panic - not syncing: Fatal exception
[  190.446428][ T6753] Kernel Offset: disabled
[  190.450762][ T6753] Rebooting in 86400 seconds..