last executing test programs:

3m44.211764743s ago: executing program 2 (id=347):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
setuid(0xee01)
utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0)

3m43.279843362s ago: executing program 2 (id=352):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

3m42.87612733s ago: executing program 2 (id=356):
timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]})
syz_clone(0xb00040, 0x0, 0x0, 0x0, 0x0, 0x0)

3m41.892459529s ago: executing program 2 (id=362):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$eJzs3U9sXNd5N+D3XHHEofx9FRM7ipPGxaQtUlmxXP2LqViFO6pptgFkWQjF7AJwJFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjkhJpP49N/WbunHPnnHvH98qC3jkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAET83iuXz5xNj3sUAMCjdHX0q2fOuf8DwMfKdf//DwAAAAAAAAAAAAAAB12KIp6MFLNXV9N49byjfqVdu3tvbHhk624Dqep5pGpf/tTPnjt/4UsvDF3s5pX29Af032ufjddGr19uvDxzZ3Zucn5+cqIxNt2+OTMxueM97Lb/ZqeqA9C48/rdiVu35hvnnj+/4eV7g+/3P3Fi8NLQs6ef6bYdGx4ZGV1vUt/y4UParsLjaBRxOlI8972fplZEFLH7Y1F/tOd+s4FqEqeqSYwNj1QTmWq3phfKF691D0QR0ejp1Oweo63PRfTVHukctteMWCyHXw74VDm90dnWXOvG1GTjWmtuob3Qnpm+ljqjLefTiCIupoiliFjpf3B3tSiiL1J85/hquhERR7rH4YtVYfD24yj2cY47UI6zUYtYKg7BOTvA+qOIVyPFz945GTfLY5Z/4gsRr5b5g4i3ynwpIpUfjAsR723xOeJw6osi/rw8/5dW00R1PeheV658rfGV6VszPW2715Vf8v7wwJXiMd0fBjblo3HAr031KKJVXfFX08P/ZgcAAAAAAAAAAAAAAACAvTYQRXwmUrzyb39U1RVHVZd+/NLQ7w/+/96a8ac/ZD9l2+cjYrHYWU3u0VwYeC1dS2mntcTqTvdcPYr441z/963HPRgAAAAAAAAAAAAAAAAAAICPtSJ+EilefPdkWoreNcXb07cb11s3pjqrwnbX/u2umb62trbWSJ1s5hzPuZhzKedyzpWcUeT+OZs5xwc6O17Mz5dyLudcyRlHcv+czZzjORdzLuVczrmSM/py/5zNnOM5F3Mu5VzOuZIzDsjavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyVFFPGLSPHtb6ymSBHRjBiPTi73P+7RAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACl/lTE9yNF4w+a97f1RUSq/u04Wf5yIZpHy/xkNIfKfCmal3O2quxrfusxjJ/dqaUifhwp+utv3z/h+fzXOs/ufwzirW+uP/tsXyePdF8cfL//iRPHLw2N/NrT2z1OWw3g1JX29N17jbHhkZHRns19+d0/2bNtML9vsTdTJyLm33jz9dbU1OTcwz8oPwK76H6IHqS+gz/T2oEf4SF6EH0HYhiPZ+58DJT3//cixW+/++/dG37n/l+P/9d5dv8OHz//k/X7/4ubd7TD+3/f5n75/l/e07e6/z/Zs+3F/LuRWl9EfeHObO1ERH3+jTdPt++0bk/enpy+cObMl4eGvnz+TO1oRP1We2qy59GeHC4AAAAAAAAAAAAAAACARycV8buRovXj1dSIiHtVvdbgpaFnTz9zJI5U9VYb6rZfG71+ufHyzJ3Zucn5+cmJxth0++bMxORO365elXuNDY/sy2Q+1MA+j3+g/vLM7Btz7dt/uLDl68fql2/ML8y1bm79cgxEEdHs3XKqGvDY8Eg16Kl2a7rqem3LYvpfXi0V8R+R4uaFRvp83pbr/zdX+G+o/1/cvKN9qv//RM+28j1TKuLnkeK3/uLp+Hw1zmPxwDHL7f4mUpy6+LncLo6W7bpj6HyvQKcysGz7P5HiH36xsW23HvLJ9bZnd3xgD4ny/B+PFN//s+/Gr+dtG7//Yevzf2zzjvbp/D/Vs+3Yhu8r2PXUyef/dKR46cm34zfytg/6/o/ud2+czI3vfz/HPp3/T/VsG8zv+5t7M3UAAAAAAAAAAIBDrZaK+NtI8cORvvRC3raTv/83sXlH+/T3vz7ds21ib9Yr+tAHuz6oAAAAAHBA1FIRP4kUtxfevl9DvbH+u6f+83fW6z+H06ZXqz/n+5XqewP28s//eg3m9x3f/bQBAAAAAAAAAAAAAAAAAADgQEmpiBfyeurjVT3/xLbrqS9Hilf+67ncLp0o23XXgR+sfq1fnZk+fXlqauZma6F1Y2qyMTrbujlZ9n0qUqz+9edy36JaX7273nxnjff1tdjnIsXI33XbdtZi765N/tR627Nl209Eiv/8+41tu+tYf2q97bmy7V9Fiq//09ZtT6y3PV+2/W6k+NHXG922x8q23e9H/fR62+dvzhT7cFYAAAAAAAAAAAAAAAAAAAD4uKmlIv40Uvz3naX7tfx5/f9az9PKW9/sWe9/k3vVOv+D1fr/2z1+mPX/q+8VWNzuXQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KMpRRFvRorZq6tpub983lG/0p6+e29seGTrbgOp6nmkal/+1M+eO3/hSy8MXezmB/ffa5+J10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiLyPFc9/7afphf0QRuz8WH/LZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8V3jq+mf+6PONI9Dl+8OvrVM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/GOk+Nk7J+Nf+iP6ovMTX4h4tcwfRLwVnfOdyg/GhYj3tvgccTj1RRH/W57/S6vpnf7yetC9rlz5WuMr07dmetp2ryuH/v7wKB3wa1M9ivhRdcVfTf/qv2sAAAAAAAAAAAAAAACAA6SIX40UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgo6Wo/knx7W+sprX+zvrS49HJZeuBfuT9XwAAAP//M3/28g==")
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[])

3m41.557965756s ago: executing program 2 (id=366):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @private1={0xfc, 0x1, '\x00', 0x5}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0x8)

3m41.081098895s ago: executing program 2 (id=377):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @broadcast}}}, 0x108)

3m40.743031421s ago: executing program 32 (id=377):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @broadcast}}}, 0x108)

2m0.48803046s ago: executing program 4 (id=1336):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000019c0)="f20ffb4e5bce17f367ac90090d4f1997853dd1a62734cdf33be77e1406af238a84147f56ce3a8bd9078a38aca77ed0a295b42238962cfd28fe2bb21486c6a5de2c03a44fd62a1d44895ba970c083c9baa087bd9021179b81d8083df6063850a04cd58355b44549ba7f840a506d769a2b3bf7e4a66242dadeb939cb1dab24b76b", 0x80}, {&(0x7f0000000200)="5e397f7881da1c763bb0d51dbcd84b50d2fcef732bcef1d8771ef4b86b5ce1ba1fb2e2f6b90a82590af963599558eecec2d60f041ead518b32884dd89f11bebbc8a97435aecd74699782803784f717a2e428c47e3f9deb95f5795740372b22de4889e2a537e4a1cd13d988b1971cc0f8cba057d05bd13981b492e357ce715c0342", 0x81}], 0x2, 0x0, 0x0, 0x1c0c4}}], 0x1, 0x4)

2m0.293441094s ago: executing program 4 (id=1337):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)

1m59.829640043s ago: executing program 4 (id=1342):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400666f6f00040600666c61677300070200000000020000000002000000000802000000000200000000020000000002", 0x4d)

1m59.721345265s ago: executing program 4 (id=1344):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

1m59.010872209s ago: executing program 4 (id=1349):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="07cfe9ee3a74385e0bf2653029380275eef07f645b6be81ef3f2b9f68c228fd0ab08a82187348beab8496f1c276465f8bb3691f666a4442bc040f4823c7016146f2767247c435918d487c866", 0x4c}, {&(0x7f00000004c0)="d3e8f81d7047eb0e2d63905e9b736312e58d96a76943edbd7131480d8dc9a574d58312761e7c69b3fd0ba61a431a10857318da1d22553b7b6efe5a4abafc76ee662edfe41f732b7d3e53d949aa42ff61667661b8482b685ba7d0622aa98185e35004336a88092843b902f23556a5afb9f9ea859b", 0x74}], 0x2, 0x0, 0x0, 0x48005}, 0x40)

1m58.534414278s ago: executing program 4 (id=1354):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0, 0x0, 0x50}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc)

1m57.994061079s ago: executing program 33 (id=1354):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0, 0x0, 0x50}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0, 0xffffffffffffffff, 0x2000000}, 0xc)

3.611850105s ago: executing program 1 (id=2449):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3.339972851s ago: executing program 1 (id=2453):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x28f, 0x1001, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f00000001c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x1fc, 0xb, 0x1fd, 0x1})

2.948058391s ago: executing program 1 (id=2458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='+b', 0x2)

2.881690182s ago: executing program 0 (id=2461):
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000100)={0x0, 0x0, 0x0, @raw})
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000180)=0xd0)

2.641904958s ago: executing program 0 (id=2473):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x627, &(0x7f0000000680)="$eJzs3c9rG1ceAPDvSJZjJ951sizLJuyyhj0ksMSxs2Gzu5dNsofNIbCB5lBKDzGNnZo4P4gdqN1AHOihhRZK6bWUXPoP9F5y760U2t56LqSluLSlLVGZ0ciRZclWbEtyPJ8PjDXvjTzvfWf0NG80epoACmss/VOKOBzx+HISMdqwbCRqC8fy5618e/eldEqiWn3umySSPK/+/CR/PJAnhiLik3MRvyuvL3d+cena1Fy15l7EiYXrt07MLy4dn70+dXX66vSNyZP/PHV64l+TpyZ3JM4D+eP5C///01uvvfyPmU/njidxJi5VXr0STXG01yKQDYzFWDzOQ2zMH4iI00+/ul1pD4RQaOX89ViJiD/EaJSzVM1ozL7Z18oBXVUtR1SBgkq0fyioej+gfm7f2XnwpS73Snrn0dnaCdD6+Adqn43EUHZutH8laTgzGsg+2zi4A+WnZfxy98h76RRrPof4YXXvDOxAOe0s34+IP7aKP8nqdjCLNI2/tKYeSURMRMRgXr//bqMOScN8Z6+/nbPV+EsRcSZ/TPPPbbH8saZ0r+MHoJgens0P5Mtp6snxL+171Ps/sa7/E/eixbFrK/p9/Gvf/6sf74eyz8hLTf2wtM9ysfUqK80ZX75x/p125Tf2/9IpLb/eF+yFR/cjjjTF/3oabN7/SeNP1u//bHtcPtNZGf/77Ovz7Zb1O/7qg4ijLc9/nvRK07nm65PD+bLJU5MnZmbnpidqf1uW8dHHL37Qrvx+x5/u//1t4m/Y/6Xm/0u3ya0Oy/jw4oPr7ZaNbBp/6avBpHa+OZjnvDK1sHB7MmIwuZA/pXYhK8s/uXFd6s+pryON/9hfW7f/Na//+2vXM1x/y+zAreevrbRbtpX933Ax+XG1wzq0k8Z/ZfP9v679p3lvr6bubVjG9y/c+XO7ZRvFP7zN2AAAAAAAAKBoStk12KQ0vjpfKo2P18bL/j72l+Zuzi/8bebmnRtXIo5l34eslOpXukdr6SRNT+bfh62nTzal/x4RhyLi3fJwlh4f6nfkAAAAAAAAAAAAAAAAAAAAsHscyMf/1+9T/V25Nv4fKIhu3mAO2N20fyiurP2vu8UTUASO/1Bc2j8Ul/YPxaX9Q3Fp/1Bc2j8Ul/YPxaX9AwAAAMCedOgvD79IImL538PZlBrMlxkRBHtbpd8VAPqm3O8KAH2zeulfZx8Kp6P+/0/5jwN2vzpAHyStMrPOQXXjxv+w5X8CAAAAAAAAAAAAAF1w9HDr8f+JscGw5xn2B8W1jfH/fjoAnnF++h+Kyzk+sNko/qF2C4z/BwAAAAAAAAAAAICeGcmmpDSejwUeiVJpfDziNxFxMCrJzOzc9ERE/DYiPi9X9qVp3/gFAAAAAAAAAAAAAAAAAACAnTW/uHRtam5u+nbjzM/rcnbDTHRvzfldUHsQxX86j6J+y7Xeb/DhtNR6TiWie1v+aWf25dtkO+sZmF9cSn6sZpKI5dg9AbaIK4b6VJ9N3zoGu/amBAAAAAAAAAAAAAAAAAAABdUw9ri1I+9nDys9rRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NaT+/93b6bfMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz6ZfAwAA//9SRjkN")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]})

2.588059809s ago: executing program 1 (id=2466):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="102a05f4ffffff000c001a8008c3028004000180300012800b0001006272696467650000200002"], 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)

1.994783433s ago: executing program 1 (id=2478):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8006, 0x8, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ustat(0xffff, 0x0)

1.954076784s ago: executing program 0 (id=2469):
r0 = getpgrp(0x0)
r1 = gettid()
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x26, 0x1, 0x10004})

1.572010603s ago: executing program 0 (id=2472):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x8c42, 0x10)
pipe2(&(0x7f0000000000)={0x0, <r1=>0x0}, 0x0)
splice(r0, &(0x7f0000000040), r1, 0x0, 0x808, 0x0)

1.489862305s ago: executing program 0 (id=2474):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x2000, 0x8000})

1.28618655s ago: executing program 3 (id=2479):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800714, &(0x7f0000000500), 0x1, 0x488, &(0x7f0000001640)="$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")
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1})

940.029628ms ago: executing program 5 (id=2481):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x321}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020)

939.886608ms ago: executing program 3 (id=2482):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4})
ioctl(r0, 0x8b1a, &(0x7f0000000040))

813.983151ms ago: executing program 3 (id=2483):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

800.686341ms ago: executing program 5 (id=2484):
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000002d00)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES16, @ANYBLOB="16dc45777b4d2781b4978de5409d8c10d17c5cf74334f9969ee50ffb6833602ce44e7f6b54cc19fdefe0a22e7326578689a68ed690c09e2e72595b1e2285279afda7b8bc99fa10af2291e4e7e805959f036474f522aecaec064f3fafc6490925cc0fb5a56da36099f35717a5afb31fa66c021311ae0bc9f29f66c9d4a6a46fa70c62a0fba469ebc800fa22f3f42e1c95187f95fe350c0bebfd29f60c18b41dfa993e61ed783c3345824da61689621508cf85e777cb92f64ff35295f3580af9b0241d2019f4f68f022f3649db0b800b351fc3eb311d24f005117407b688f400f1fc278c89497720655f52fe62d40158596c3bdcba1991968431b692d3f3b8ccd261b1fb2fb6684829048206587044595ce5c7184d2043a215623524658dd8bd451799ebf2b14efdd400c422cd83b4084aee7bc558e63a868e35c780c5e3b8da971178451de93700e7ae3ce7dae2cc8fade7c0c02b82a5ce39d9ff0c0fc3eb109bf2fff3a0435ebb8c35cd16d525a443403de3b9997cb06c5bf1a3085060669b22cbda4c85b46ddb10c7890df72d1f7340ba1e3768e208c0b26f45b1c259d3ee307cc40f7782b05ff2d22f27b67cfd79b0b00644d7a8b27faafc3e473c57d768162035e8dc19b1815952d4c9eb04e1bd9b5aa569c816c1c390435e8dc835a83da0a2de19ad78e82db2dc45e8f1d0b88467554380b75a3f0a9ca98f893c404b0bce25b8a4a0e7dd85fcd878ba5c500e656669d2637e985d37068594b103e914e3eb9a92dd2f280c82cfac8e0f3cbc718b816e55cd887a17863f3bcc53a9d2b1c3dd07f5e0e8ff3a8a5e4b4f8126cde098fe7e911fb859b8c15e8842dae75b29eaa68a2c383c79a92683d066e54cac4ffce1174ff737d43cf4597244c97e0985d0288ebd4e0d6696ae5c3c93d17b77b7ec25c859b1dd45529c4e6922a7307d55b971e773dbd062f2b7e244532c9ac8ee73f295f1b932264d9d654211dfedff852346bf66abb17b094c720214e3f6ef777dd519334697e7e2a320c01ca870907389cafefaa00d32028ac38b655181f6523e562038dc4eb984d42bdcd35101a6eeb21ea6b731f8f38d858cea50a5129f5653da540c2f7033de2d794f6d6b13664abf89838aeb5875285f673ccf70bd83f44a02ae86c3fb5318129343b3459731bd6288a9fadf17ff9b7de5913a2e27aa2a0a2f19e4b0f97995bfbc15de2274de99b2f9af79c0d520a1e1c5e18f9a4a2bb485cf6da27a587f1cbf88b9f5cc72256a95147b0341a985d111f41e94124d3312d0bfa353153548ec24e423bc59b534514efd9d0e769a14453a4a8a50fd8afc0d03a132a89f5d76312b91e25062ef86d98966f28891fd90e1d9d33358e7049243c6602a79002862e7643d160a65435c8b9948b065b9fb04c3f36ba9cd14d69003b343e935628315f2b5f9083d28ab55e583bb1a2fb05fff1876a65a0489cefe209e6324ea8edaab733882ca318cfde9086d73103ce94821b4387f4d19596ff424e5192eed52021938b9a2c5c997a565c195ede1c7333ce481cbeed82ba5154fb624b7cb2ab139560a3727741a776f72b5f930e8bd8598d7fe929834d03a738343001ccb12f8593358a7665a9393845f0e9f20624bd2a36501eb6b17c83189e4b0ec0369488bbcc10b114cc1713de4fef6efd7b4843b1470d24b7033a5e22795cc4fcc8ebcc6d052d5a4c38c643858b4e6b48ece6ae418069cb4fcf7c79c0f3f82bba0b6e9c06639853b4c18fcd6f08a636b551e788666be1144a1d1e785dcfb49b062a26142fe4ea0115c8d51fd922c4a759bb7c406c575cdd5f94c34d7f099c9d718acd462d7ac9d7db9b83af2885421665ec9cf9c09e3f7e53a96ae277c7467dd86a757d3d12bc5d4f89cf68ae9e27eeee413cffa8504a3fb4408174b8ef8a417b526bd16edc0b8aca8c12a2d4b0402d4ca6efd22a5c7dc9621771a2d17c5c6904d3c172db8760478e106a0e3a1be42cd84a6b76a6e8192bfe436ca501778aa114ea6254626bb77952f1e5c606346463896fd485f8b573ef0a387f098e70f092508bc657db5aa2f8f604e5619c1c148c6ff464f92e671339b855327af640d39b5213149c26434c5256ef1c339c279d59736a3f79245384a7a59e02a490a025a220fa933aece52e2f5675d2b9db92e4a464e7019fb574388eb9cad8bdbf99f30eba74356217df6a15eb749ae245ec9222fc9a13dd1f2b98670b111a03e84cb1a8291d7c9f8fef14735fb45fcf284070eb08eec6052d8941e307ec6b0cd1aed96c2d81a76521078ba9c048230c2a0737b5f32e5d61d1505375f07ac4bf82b6ca265f9b5fdd7ce18ff5e61530417171f323aa08a26604f6daf84c6fb600fd8c6a45cfc71f9b984a63b3585aecd70b6d80e97f316da622aa787656d5bc372b0196afe04c0af82b6958f6665bdfe5f0b9d08390dc641fd55b33cc8c43188c99c05c16491123fa9c53f199af519e6ab0e73ad5a176d03ec276520313d37234d1d7266d8007e2eb454514a973bca1e0f4800f232d793e5481ea19e52290c405233867e17d50a36e94d2ce74b7701e6e390e054beba12276e2819ab9d567ee6be64e184c3e5b361a40b77f4d288ade890c8e83770a0095e30b61035e807e3cbd9eecdb87152ef2f5fa178a67bbecfc342f9646331799c203bc8de4db3e9385a215c694b940c0747aec9b283f018419ed34c4cd3012ec95106bac5fd3af50f7b818c7efdb9e2f75ef78c1442a820bc8549f256b48870cb6c7ebe27a2803d9df95c685bf0c3bdb12dc723e3542f2797880f76b2ee356d01e25449922bb1de7feb1625d22d567625f4f974592c1ece64142a87dfd2450b497cad2b57fffed0c069fd24b884fb013db32aa79efb4f4f9a97869364abfcd649deb90c9242ed1e2c63061e5226faee3c119af34d31ffa17f2601137b4c7d5d259d1d5b81c86d9e9fb04af0c99676f003d58ba2ee3f1a8f19b8a8383978bb67dd46a7dd55f24eb3b2f7f293220a4719d4b72d8399059d4632808507381406e16ceb86a22a63422949abbde229500b75cfbe9e326a3c05fd975db8ea7f9915354ad83a6750233402b87f229f67cf64d8f8c150f802fbf97ff102ff889b2e8ca5434a368caa45c06ed1899f3789188ca2e61e7cf679c4a6026d5f9acfe3bb23a894ce42cd5a425bdb7290b37b1917e7eb6ad8b16c49f08d04e2960235570dcee19c86436724def21a2e74edf02c3bceb604030154668d84ac9e3020d632507812dba0ded12e0468aa130c479ffd63afbc86cc944e9bf9a7ab1d8b6fa3268b34c12f3a664e3016f5302a49c307d4e0de8f9dce625d741cbe87854bbfbd9e24aee3f4effcf1c2207c51b266d61b9e12793995919af827ed2d18d1c140f38554e1dafe1dd6cf21ec2faa8785b30b864fe911185539b38a75db430f2d3b9d36e80a1d9c3ee7b7de079283e456c1996f427fc897eee3b25c23abe2eb49480bd7d76f6e362978602eeb02dd4acaf0cd410c817bd5a2ebaf32260490311483039bbb9229c322e75b442caddf5c8ebb031a77c72af04398f5514b5a9d7946dc004f1a46b03d7193776a83e69d7f6323813311efc63f941258a9ccffae9f786743a5b4ab9a2282c228f6e6ca21a5fa997bc7f50e293fa3c3c1255e2c00332383fa8d33d0b09fda16277a4cd7269633b141d17d0259b529afc07a4ee45a4454d1a2d91aeb270c4af9ba5c72ec7ef0836f78429925ec971e979bec126f16e939fa3ac69be9c3174f9e2d3a150c5a7cd7e0921980421eec98102300208daed089982f5704ad0fae36b0bb7cf8147af4591e0533acd90ef228e1d5f7f897ac3c8d8efb112aa95c0f3fcb39a4aad65edadddc6a151ef0432664ac1166cb31345ed0d228e147eded675c451612744f4d3ceff6ad53a63061e761545197492a453d15793a9d2fad11032aaae919864e131d9ce643cfb3f23f728e6a95726403d79f7fecbeafbfb633117620bd9d693ad1383eb0f05c325692b99f793bed9de8388140c97c36a8188cf4702de6bd81399f91e79e9c11751e3b8950465f180751b9bd9969084fa05e9fe0f890d39f6c6813cf3144fddea7d0f02a0d9f5f47e01f8baf115aa1c8baac008c75efc6a055bd832331d9f89d76586f8fac9e3926e2c029e6eb7b061e4d41725853e6403af650b7f793906d1036934add119325d73a7f9ac5b316bc29e290cdfdef1aa3f6734a4a1312a82c0e8b643feeaa37f327d2c3a8201bd062bff7f9ef60fc33cefd9575b8b912db5878cb590643a10fcf8beeb85e7a778d2d965ec4cd9fcf1933592acc0f9bffafe97d1cf845ffe7dd070cc469395c65a7bd1b3f212968eaee988074414ea1904c2ecb303b8bd6fd2553e3a1fa6ce5bc424bacef5b19b4a0fabd689a7d45c73d44e4f4fd158ee69078c26a5e1fb3e66de7edb758265cac1dc7b1e3fea5d11de01a9c193f669e33f351399f9e1b088b3675e9b18a42f372ed3695451202c585488d2197d6e3eba44f361524cd56f0a6a62b662b6e27f749a6d31886fe08575d972d4c8421a7f69b0813618f1e51950bc8366987fb5ea095d6ccef98c4b8701d352b59564fce27eb958b07b6658a33830d4d6fc8f74e7b8e8dd87208332c408000adeae20215e588712034ee8a4446415241335c25da083cf45c8cc7a068acb8997dc0da6f6cb7f681a4102cf1d6089c29fac11427790884cb2181b2e323431738d0bddc0c83478e14fc5563b2a99f1e74b82e75b91ea2e71b1338c833ef365bdc6996f1dc50437b09f2920692e0ba5b4178e114a20e18b991799148b8713c50ccb1b7a1aa9798ea17b23a15e7d544500a9fca5bd072771454b1eea3da6f54473b27d21c071cfb93ec2823332e4b83054fc4c30c3679db6d156e3a975e6ce7d745433ddc4aa9b0489005eb20d8b7c6f1c6a07dece3c087ef2bdbb3cdf83220c750c5141158ec89ad343614d0b74f678177d7f313024f5a9cdb5b2c5d73e8ad645c05ebe52066dd282dc6fe55c95c122bfb07cc3724746e396fb15a2a3f423bdad2c05169f070b71acf1934c6463b2e60cf55a7a36a3c6aa710259a83763bea1b4556094c786668b3bbbf4854758b435ee89a90b4d5fbe343c1e2faebd96b63b1facd31f9cfbf6144f7eb9f2680916aaee809fff4b6aaf012943c4cbcd3a17bba0a2af5fe0de70e0097988555b1f2cea2f78acdf7c2d4ff83d8af33ae573577d49d386afb965c48743aa895909d4655108986d3c17721d09c8ea990beb07412c04934b9c121c55f6be5d7d899b6115255bf33fa9502a656ce1042e9eac6a9d5a60c63babc5281f47b40657a51e900bd563d3a779e534b5f76e4ca7c26d27dd5af0e996ecaf6edf4aad3f180f9b3648f538fc331590d17b083fb464dfc5d21baa959478bedde1a0f764cd041797bd54e04103b484dc790068ee6bfb2f87fb758638b28abf6719228003218db000da9bff768b41f009af4f5f58b2ec87b80b60b430cd27d92cabb845463f5d1852f20adb6f32d2957d4d7fb55a083b33f8f2d4a032ba9e46f616da071b7a4693d93dc3ea5b4cb3f1c78156bda21194a6879f50a0773b566d97a0962147f2e13e558f754ec8dcbae2319394464877370c880d4a2317a2078b012bb9cda8f20b0239e6bcf54382a485cd03a7ff0e47720910bf3611e0777d4a42c9b906d804a58d0bf0bf9df46d6be8a2eca96492c2f0955c13d47f97e0f567fbb4fdf4b9e07feaa7255822574d2a5a443d25b09180d88de659b3cd496cca07b03be604189e76725b423128049d6346ead660a", @ANYRES32, @ANYRES64, @ANYRES64], 0x3, 0x306, &(0x7f0000000400)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)

676.895534ms ago: executing program 3 (id=2485):
syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x2b8, &(0x7f0000000440)="$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")
truncate(&(0x7f0000000300)='./file1\x00', 0x591)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5f)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0)

576.019816ms ago: executing program 5 (id=2486):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x34, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20)

358.148452ms ago: executing program 5 (id=2487):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
readv(r1, &(0x7f0000001680)=[{&(0x7f0000000380)=""/29, 0x1d}], 0x1)

293.696643ms ago: executing program 3 (id=2488):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/tty/ttyS1/rx_trig_bytes\x00', 0x2, 0x0)
pread64(r0, &(0x7f0000000040)=""/121, 0x79, 0x5)

176.824606ms ago: executing program 5 (id=2489):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c)
getpeername$packet(r0, 0x0, &(0x7f0000000080))

116.026157ms ago: executing program 1 (id=2490):
capset(&(0x7f0000000540)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x89, 0x8010001, 0x8001})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x10d, 0x0, &(0x7f0000000140)="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", 0x0, 0xa7ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x11a}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000100), 0x6f5e, 0x1)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

65.355149ms ago: executing program 0 (id=2491):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r1, 0x7f}, 0xc)

61.377789ms ago: executing program 3 (id=2492):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

0s ago: executing program 5 (id=2493):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x5}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x10)

kernel console output (not intermixed with test programs):

fter parsing attributes in process `syz.0.1404'.
[  229.214542][ T9774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.391939][ T8249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.461871][ T9913] loop1: detected capacity change from 0 to 4096
[  229.508358][ T9917] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1406'.
[  229.559467][ T9913] EXT4-fs: inline encryption not supported
[  229.579783][ T9917] netlink: 528 bytes leftover after parsing attributes in process `syz.0.1406'.
[  229.679035][ T9921] kAFS: bad VL server IP address
[  229.706269][ T9913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  229.807603][ T9913] EXT4-fs (loop1): Test dummy encryption mode enabled
[  229.880536][ T9774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.893163][ T9913] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[  229.912450][   T51] Bluetooth: hci1: command tx timeout
[  229.964322][ T9913] System zones: 0-5
[  230.001141][ T9913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.156065][ T9913] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  230.349098][ T8365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.412137][ T9774] veth0_vlan: entered promiscuous mode
[  230.486650][ T9774] veth1_vlan: entered promiscuous mode
[  230.565881][ T9774] veth0_macvtap: entered promiscuous mode
[  230.639676][ T9774] veth1_macvtap: entered promiscuous mode
[  230.717198][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.763947][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.803089][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.839328][ T9960] loop0: detected capacity change from 0 to 64
[  230.846444][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.900913][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.919124][   T28] audit: type=1800 audit(1791446749.332:104): pid=9960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1403" name="file1" dev="loop0" ino=21 res=0 errno=0
[  230.939554][    C0] vkms_vblank_simulate: vblank timer overrun
[  230.973736][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.017104][ T9774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.096884][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.141364][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.177485][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.211518][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.239047][ T9774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.267298][ T9774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.305481][ T9774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.332581][ T9962] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1407'.
[  231.380499][ T9774] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.420716][ T9774] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.465327][ T9774] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.489163][ T9774] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.769968][ T9964] loop0: detected capacity change from 0 to 32768
[  231.834478][ T9964] (syz.0.1416,9964,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  231.902657][  T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.921110][ T9964] (syz.0.1416,9964,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  231.962613][  T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.996028][ T9964] JBD2: Ignoring recovery information on journal
[  232.064637][  T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.120895][ T9964] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  232.131687][  T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.526742][ T8210] ocfs2: Unmounting device (7,0) on (node local)
[  232.677335][ T9993] loop5: detected capacity change from 0 to 256
[  232.893252][ T9994] netlink: 'syz.1.1423': attribute type 1 has an invalid length.
[  232.999533][ T9994] netlink: 'syz.1.1423': attribute type 2 has an invalid length.
[  233.683840][T10028] program syz.3.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  233.881778][T10037] loop3: detected capacity change from 0 to 164
[  233.918993][T10037] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  234.000850][T10037] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  234.049213][T10037] iso9660: Corrupted directory entry in block 4 of inode 1792
[  234.604428][T10068] loop5: detected capacity change from 0 to 128
[  234.666267][T10068] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  234.725366][T10068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.863744][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1442'.
[  234.873142][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  234.942354][T10073] kAFS: Invalid Command on /proc/fs/afs/cells file
[  235.068042][    T9] usb 1-1: Using ep0 maxpacket: 8
[  235.088927][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  235.120533][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.175328][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  235.210675][    T9] pvrusb2: **********
[  235.224652][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  235.245307][    T9] pvrusb2: Important functionality might not be entirely working.
[  235.270940][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  235.299193][    T9] pvrusb2: **********
[  235.384236][ T2321] pvrusb2: Invalid write control endpoint
[  235.407854][ T5774] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  235.491303][ T2321] pvrusb2: Invalid write control endpoint
[  235.497085][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  235.520588][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  235.537894][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  235.566061][ T2321] pvrusb2: Device being rendered inoperable
[  235.586227][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  235.624143][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  235.632894][ T5774] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.645117][ T5872] usb 1-1: USB disconnect, device number 8
[  235.665751][ T2321] pvrusb2: Attached sub-driver cx25840
[  235.691455][ T5774] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  235.706365][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  235.723318][ T5774] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  235.749087][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  235.761133][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.803825][ T5774] usb 6-1: config 0 descriptor??
[  235.831251][ T5774] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  235.850575][ T5774] dvb-usb: bulk message failed: -22 (3/0)
[  235.874335][ T5774] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  235.900161][ T5774] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  235.918361][ T5774] usb 6-1: media controller created
[  235.924552][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  235.965591][ T5774] dvb-usb: bulk message failed: -22 (6/0)
[  235.987012][ T5774] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  236.021608][ T5774] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17
[  236.044691][T10083] dibusb: i2c wr: len=61 is too big!
[  236.044691][T10083] 
[  236.099993][ T5774] dvb-usb: schedule remote query interval to 150 msecs.
[  236.127929][ T5774] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  236.156307][ T5774] usb 6-1: USB disconnect, device number 2
[  236.328898][ T5774] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  236.345448][T10104] loop0: detected capacity change from 0 to 512
[  236.559050][T10107] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check.
[  236.871091][T10115] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1448'.
[  237.115495][T10102] loop3: detected capacity change from 0 to 32768
[  237.205042][T10102] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  237.256009][T10102] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  237.298721][T10133] loop5: detected capacity change from 0 to 2048
[  237.368468][T10102] XFS (loop3): Ending clean mount
[  237.434368][T10133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.552146][T10133] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  237.628999][T10133] EXT4-fs error (device loop5) in ext4_setattr:5695: error 28
[  237.672560][T10148] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  237.737610][T10148] EXT4-fs (loop5): This should not happen!! Data will be lost
[  237.737610][T10148] 
[  237.780119][T10148] EXT4-fs (loop5): Total free blocks count 0
[  237.809544][T10148] EXT4-fs (loop5): Free/Dirty block details
[  237.833387][T10148] EXT4-fs (loop5): free_blocks=66060288
[  237.868913][T10148] EXT4-fs (loop5): dirty_blocks=16
[  237.886242][T10148] EXT4-fs (loop5): Block reservation details
[  237.910673][T10148] EXT4-fs (loop5): i_reserved_data_blocks=1
[  238.015014][   T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  238.054756][T10153] loop1: detected capacity change from 0 to 4096
[  238.173058][T10153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.223940][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1465'.
[  238.282550][T10161] ipvlan2: entered allmulticast mode
[  238.317489][T10161] syz_tun: entered allmulticast mode
[  238.359250][ T8249] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  238.644111][ T8365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.741830][T10167] ACPI: EC: Assuming SCI_EVT clearing on event reads
[  239.711317][T10182] loop5: detected capacity change from 0 to 32768
[  240.000409][T10212] rnbd_client L127: Can't parse path iýt­-$�ζàÇÌwõ‘bAa¿<
[  240.000409][T10212] yÍ…×\¨ƒ@: -22
[  240.126289][T10215] loop0: detected capacity change from 0 to 512
[  240.140324][T10217] loop3: detected capacity change from 0 to 256
[  240.248408][T10215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.380454][T10224] loop1: detected capacity change from 0 to 2048
[  240.516933][T10224] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #2: comm syz.1.1490: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  240.573532][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.711638][T10224] EXT4-fs (loop1): get root inode failed
[  240.717346][T10224] EXT4-fs (loop1): mount failed
[  240.745877][T10238] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1498'.
[  240.756993][    T9] IPVS: starting estimator thread 0...
[  240.857564][T10239] IPVS: using max 34 ests per chain, 81600 per kthread
[  240.917539][    T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  241.071407][T10247] bridge_slave_0: left allmulticast mode
[  241.097359][T10247] bridge_slave_0: left promiscuous mode
[  241.113506][T10247] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.124655][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  241.151726][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.173207][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  241.214780][T10247] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  241.238938][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  241.263772][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.279163][    T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  241.289003][T10252] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.311901][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.321217][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.351625][T10252] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.378609][    T9] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected
[  241.414620][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84
[  241.479941][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2
[  241.521332][    T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  241.570177][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88
[  241.622998][    T9] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6
[  241.673485][    T9] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  242.132498][    T9] usb 4-1: USB disconnect, device number 13
[  242.161360][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  242.189215][T10273] loop5: detected capacity change from 0 to 2048
[  242.220251][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  242.256757][T10274] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  242.270657][    T9] keyspan 4-1:1.0: device disconnected
[  242.400861][T10274] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  242.444732][T10274] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  242.475911][T10274] Remounting filesystem read-only
[  242.489357][ T3486] NILFS (loop5): discard dirty page: offset=196608, ino=3
[  242.511001][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.529577][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.545931][ T3486] NILFS (loop5): discard dirty block: blocknr=49, size=1024
[  242.556244][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.587288][ T3486] NILFS (loop5): discard dirty page: offset=0, ino=6
[  242.601112][ T3486] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  242.619497][ T3486] NILFS (loop5): discard dirty block: blocknr=36, size=1024
[  242.635596][ T3486] NILFS (loop5): discard dirty block: blocknr=37, size=1024
[  242.645592][ T3486] NILFS (loop5): discard dirty block: blocknr=38, size=1024
[  242.659147][ T3486] NILFS (loop5): discard dirty page: offset=4096, ino=6
[  242.676409][ T3486] NILFS (loop5): discard dirty block: blocknr=39, size=1024
[  242.685521][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.706251][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.760087][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.792163][ T3486] NILFS (loop5): discard dirty page: offset=0, ino=2
[  242.811591][T10283] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1512'.
[  242.826810][ T3486] NILFS (loop5): discard dirty block: blocknr=18, size=1024
[  242.857273][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.889877][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.909408][T10254] loop1: detected capacity change from 0 to 40427
[  242.932502][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  242.973144][ T3486] NILFS (loop5): discard dirty page: offset=0, ino=5
[  242.982295][T10254] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[  243.018363][ T3486] NILFS (loop5): discard dirty block: blocknr=41, size=1024
[  243.064401][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  243.077779][T10254] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  243.120246][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  243.166257][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  243.186195][T10254] F2FS-fs (loop1): invalid crc value
[  243.194755][ T3486] NILFS (loop5): discard dirty page: offset=0, ino=4
[  243.227916][ T3486] NILFS (loop5): discard dirty block: blocknr=40, size=1024
[  243.235260][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  243.255966][T10254] F2FS-fs (loop1): Found nat_bits in checkpoint
[  243.305683][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  243.347926][ T3486] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  243.378467][ T9774] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  243.421045][ T9774] NILFS (loop5): discard dirty page: offset=0, ino=3
[  243.449637][ T9774] NILFS (loop5): discard dirty block: blocknr=42, size=1024
[  243.478260][ T9774] NILFS (loop5): discard dirty block: blocknr=43, size=1024
[  243.507315][T10303] loop0: detected capacity change from 0 to 16
[  243.521954][ T9774] NILFS (loop5): discard dirty block: blocknr=44, size=1024
[  243.540056][T10303] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  243.553098][ T9774] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  243.580058][T10254] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  243.587335][T10254] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  244.030605][ T8365] syz-executor: attempt to access beyond end of device
[  244.030605][ T8365] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  244.073502][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'.
[  244.200070][T10327] loop0: detected capacity change from 0 to 128
[  244.208181][ T8365] F2FS-fs (loop1): Remounting filesystem read-only
[  244.243464][T10327] VFS: Found a Xenix FS (block size = 1024) on device loop0
[  244.341997][ T8210] sysv_free_block: flc_count > flc_size
[  244.370260][ T8210] sysv_free_block: flc_count > flc_size
[  244.378107][ T5774] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  244.417089][ T8210] sysv_free_block: flc_count > flc_size
[  244.426075][ T8210] sysv_free_block: flc_count > flc_size
[  244.446260][ T8210] sysv_free_block: flc_count > flc_size
[  244.464598][ T8210] sysv_free_block: flc_count > flc_size
[  244.482969][ T8210] sysv_free_block: flc_count > flc_size
[  244.493045][ T8210] sysv_free_block: flc_count > flc_size
[  244.512349][ T8210] sysv_free_block: flc_count > flc_size
[  244.528505][ T8210] sysv_free_block: flc_count > flc_size
[  244.545824][ T8210] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  244.588351][ T5774] usb 6-1: Using ep0 maxpacket: 16
[  244.611488][ T5774] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.648219][ T5774] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.689211][ T5774] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  244.742928][ T5774] usb 6-1: config 0 interface 0 has no altsetting 0
[  244.769736][ T5774] usb 6-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00
[  244.817468][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.855067][ T5774] usb 6-1: config 0 descriptor??
[  245.289579][ T5774] hid (null): bogus close delimiter
[  245.310456][ T5774] wacom 0003:056A:5200.0007: ignoring exceeding usage max
[  245.317784][  T172] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  245.338765][ T5774] wacom 0003:056A:5200.0007: unknown main item tag 0x0
[  245.358626][ T5774] wacom 0003:056A:5200.0007: unknown main item tag 0x0
[  245.365545][ T5774] wacom 0003:056A:5200.0007: unknown main item tag 0x0
[  245.403584][ T5774] wacom 0003:056A:5200.0007: unknown main item tag 0x1
[  245.420905][ T5774] wacom 0003:056A:5200.0007: bogus close delimiter
[  245.443499][ T5774] wacom 0003:056A:5200.0007: item 0 0 2 10 parsing failed
[  245.461101][ T5774] wacom 0003:056A:5200.0007: parse failed
[  245.466965][ T5774] wacom: probe of 0003:056A:5200.0007 failed with error -22
[  245.508708][  T172] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  245.529501][ T5774] usb 6-1: USB disconnect, device number 3
[  245.547486][  T172] usb 4-1: config 0 has no interface number 0
[  245.564968][  T172] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  245.597285][  T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.626519][  T172] usb 4-1: Product: syz
[  245.643306][  T172] usb 4-1: Manufacturer: syz
[  245.669412][  T172] usb 4-1: SerialNumber: syz
[  245.678281][  T172] usb 4-1: config 0 descriptor??
[  245.803710][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1544'.
[  245.889549][  T172] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  245.919664][  T172] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  245.950986][  T172] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  245.975660][  T172] usb 4-1: media controller created
[  246.042520][  T172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  246.147034][  T172] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  246.266535][  T172] usb 4-1: USB disconnect, device number 14
[  246.819253][T10387] mt6360: probe of 0-0034 failed with error -5
[  246.856106][T10387] i2c i2c-0: new_device: Instantiated device mt6360 at 0x34
[  247.207608][  T172] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  247.445426][  T172] usb 6-1: unable to get BOS descriptor or descriptor too short
[  247.466570][  T172] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.516737][  T172] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  247.558920][  T172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  247.603223][  T172] usb 6-1: Product: syz
[  247.622714][  T172] usb 6-1: Manufacturer: syz
[  247.655142][  T172] usb 6-1: Found UVC 1.00 device syz (8086:0ad2)
[  247.984121][T10439] loop3: detected capacity change from 0 to 512
[  248.033753][T10439] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  248.055966][  T172] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  248.079512][T10439] EXT4-fs (loop3): orphan cleanup on readonly fs
[  248.114648][  T172] videodev: could not get a free minor
[  248.136527][T10439] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present
[  248.164820][  T172] uvcvideo 6-1:1.1: Failed to register meta-cap device (-23).
[  248.208259][T10439] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  248.254896][T10439] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1575: Failed to acquire dquot type 1
[  248.278916][T10449] loop0: detected capacity change from 0 to 512
[  248.329207][    T9] usb 6-1: USB disconnect, device number 4
[  248.347590][T10439] EXT4-fs (loop3): Remounting filesystem read-only
[  248.365839][T10449] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  248.401092][T10439] EXT4-fs (loop3): 1 truncate cleaned up
[  248.434664][T10439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  248.479471][T10449] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.1578: casefold flag without casefold feature
[  248.539041][T10449] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1578: couldn't read orphan inode 15 (err -117)
[  248.572932][ T8249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.596331][T10449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.693955][T10449] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1578: bg 0: block 5: invalid block bitmap
[  248.761672][T10449] CacheFiles: mkdir cache failed with error -28
[  248.786433][T10449] CacheFiles: Failed to register: -28
[  248.954945][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.350225][T10480] loop1: detected capacity change from 0 to 256
[  249.432645][T10480] exfat: Deprecated parameter 'namecase'
[  249.528787][T10480] exfat: Deprecated parameter 'namecase'
[  249.534507][T10480] exfat: Deprecated parameter 'namecase'
[  249.572023][T10486] loop0: detected capacity change from 0 to 2048
[  249.644005][T10486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.709271][T10480] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  249.728506][T10486] ext4 filesystem being mounted at /238/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  249.760006][    C0] vkms_vblank_simulate: vblank timer overrun
[  249.877516][ T5774] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  249.905596][T10486] fs-verity: sha512 using implementation "sha512-avx2"
[  250.057187][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.073829][T10469] loop3: detected capacity change from 0 to 40427
[  250.104834][ T5774] usb 6-1: Using ep0 maxpacket: 8
[  250.155501][ T5774] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  250.170048][T10469] F2FS-fs (loop3): invalid crc value
[  250.199933][T10469] F2FS-fs (loop3): Found nat_bits in checkpoint
[  250.234917][ T5774] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  250.281434][T10502] loop0: detected capacity change from 0 to 512
[  250.315473][ T5774] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  250.405873][ T5774] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  250.421920][T10469] F2FS-fs (loop3): Start checkpoint disabled!
[  250.505385][ T5774] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  250.556906][T10469] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  250.603406][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.867754][ T5774] usb 6-1: GET_CAPABILITIES returned 0
[  250.873302][ T5774] usbtmc 6-1:16.0: can't read capabilities
[  250.918549][   T12] kworker/u4:1: attempt to access beyond end of device
[  250.918549][   T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  250.994344][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  251.024775][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  251.072396][ T5774] usb 6-1: USB disconnect, device number 5
[  251.439264][   T28] audit: type=1400 audit(1791446769.862:105): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=10530 comm="syz.1.1600" name="foo" offset=81
[  251.808131][T10546] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  251.841613][T10545] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  251.988125][   T59] wlan1: Trigger new scan to find an IBSS to join
[  252.502846][T10570] loop0: detected capacity change from 0 to 2048
[  252.590210][T10570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.824665][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.029875][T10588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1613'.
[  253.056300][T10590] loop5: detected capacity change from 0 to 1024
[  253.145758][ T5788] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  253.513975][T10603] loop5: detected capacity change from 0 to 256
[  253.599208][T10603] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  253.710162][T10603] exFAT-fs (loop5): error, tried to truncate zeroed cluster.
[  253.768175][T10603] exFAT-fs (loop5): Filesystem has been set read-only
[  253.854260][T10585] loop3: detected capacity change from 0 to 32768
[  253.947131][T10561] loop1: detected capacity change from 0 to 32768
[  254.223772][T10561] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  254.499205][T10561] XFS (loop1): Ending clean mount
[  254.707907][T10561] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x4 
[  254.811006][T10646] loop5: detected capacity change from 0 to 512
[  254.827043][T10561] XFS (loop1): Unmount and run xfs_repair
[  254.904582][T10561] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  255.000436][T10561] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  255.028503][ T3486] wlan1: Trigger new scan to find an IBSS to join
[  255.115338][T10561] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  255.208172][T10561] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  255.292254][T10561] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  255.398838][T10561] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  255.501448][T10561] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  255.650155][T10561] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  255.778898][T10561] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  255.836384][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  255.850415][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  255.899976][T10561] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x4 len 4 error 74
[  255.981691][ T3486] wlan1: Creating new IBSS network, BSSID fe:3e:cb:b6:32:d5
[  256.082415][T10561] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  256.116933][T10679] loop0: detected capacity change from 0 to 1024
[  256.160590][T10682] program syz.5.1640 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  256.239727][T10679] hfsplus: bad catalog entry type
[  256.268681][T10561] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  256.380962][ T3486] hfsplus: b-tree write err: -5, ino 25
[  256.413559][ T3486] hfsplus: b-tree write err: -5, ino 4
[  256.437909][ T3486] hfsplus: b-tree write err: -5, ino 2
[  256.464731][ T8365] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  256.657483][ T5774] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  256.878097][ T5774] usb 4-1: Using ep0 maxpacket: 8
[  256.918274][ T5774] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  256.947486][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.020476][ T5774] pvrusb2: Hardware description: Terratec Grabster AV400
[  257.059905][ T5774] pvrusb2: **********
[  257.075979][ T5774] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  257.155077][ T5774] pvrusb2: Important functionality might not be entirely working.
[  257.213945][ T5774] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  257.266020][ T5774] pvrusb2: **********
[  257.296981][ T2321] pvrusb2: Invalid write control endpoint
[  257.332186][T10719] loop0: detected capacity change from 0 to 64
[  257.390011][T10719] hfs: request for non-existent node 131072 in B*Tree
[  257.433794][T10719] hfs: request for non-existent node 131072 in B*Tree
[  257.448880][ T2321] pvrusb2: Invalid write control endpoint
[  257.454676][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  257.514104][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  257.560110][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  257.607336][ T2321] pvrusb2: Device being rendered inoperable
[  257.636563][T10687] pvrusb2: Attempted to execute control transfer when device not ok
[  257.663637][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  257.677254][ T5815] usb 4-1: USB disconnect, device number 15
[  257.709330][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  257.742595][ T2321] pvrusb2: Attached sub-driver cx25840
[  257.773581][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  257.827743][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  257.976475][T10734] hsr0: entered promiscuous mode
[  258.673354][T10763] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.704477][T10763] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.711697][T10763] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.765542][T10763] bridge_slave_0: left allmulticast mode
[  258.797526][T10763] bridge_slave_0: left promiscuous mode
[  258.815076][T10763] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.857169][T10763] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  259.041015][T10770] loop5: detected capacity change from 0 to 4096
[  259.077132][T10770] EXT4-fs: Ignoring removed i_version option
[  259.119887][T10770] EXT4-fs: Ignoring removed oldalloc option
[  259.189843][T10770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  259.232176][T10770] EXT4-fs (loop5): Test dummy encryption mode enabled
[  259.244437][T10757] loop0: detected capacity change from 0 to 32768
[  259.270792][T10770] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[  259.404348][T10777] loop3: detected capacity change from 0 to 256
[  259.476314][T10777] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d)
[  259.529979][ T5815] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  259.748975][ T5815] usb 2-1: Using ep0 maxpacket: 16
[  259.777750][ T5815] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.841198][ T5815] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.895254][ T5815] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  259.953331][T10786] loop3: detected capacity change from 0 to 512
[  259.979524][ T5815] usb 2-1: config 0 interface 0 has no altsetting 0
[  259.986556][T10787] ip_tables: iptables: counters copy to user failed while replacing table
[  260.018194][ T5815] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  260.076324][T10786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.097476][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.131311][ T5815] usb 2-1: config 0 descriptor??
[  260.261414][ T8249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.534469][   T28] audit: type=1400 audit(1791446778.952:106): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=10798 comm="syz.3.1687"
[  260.590690][ T5815] hid (null): report_id 0 is invalid
[  260.637889][ T5815] hid (null): report_id 0 is invalid
[  260.799537][ T5815] usb 2-1: USB disconnect, device number 16
[  260.934054][T10794] loop0: detected capacity change from 0 to 32768
[  261.010634][T10794] find_entry called with index >= next_index
[  261.044500][T10794] find_entry called with index >= next_index
[  261.063109][T10794] find_entry called with index >= next_index
[  261.071712][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1693'.
[  261.091272][T10794] find_entry called with index >= next_index
[  261.128428][T10794] find_entry called with index >= next_index
[  261.174916][T10794] add_index: next_index = 0.  Resetting!
[  261.198018][T10794] find_entry called with index >= next_index
[  261.223291][T10794] find_entry called with index >= next_index
[  261.250939][T10794] find_entry called with index >= next_index
[  261.312098][T10794] non-latin1 character 0x3ff found in JFS file name
[  261.340447][T10794] mount with iocharset=utf8 to access
[  261.855413][T10834] loop1: detected capacity change from 0 to 1024
[  262.270890][T10826] loop5: detected capacity change from 0 to 32768
[  262.403962][T10840] sctp: [Deprecated]: syz.3.1706 (pid 10840) Use of int in max_burst socket option.
[  262.403962][T10840] Use struct sctp_assoc_value instead
[  263.287873][ T5774] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  263.495484][ T5774] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  263.537063][ T5774] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  263.577105][ T5774] usb 4-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00
[  263.615315][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.666915][ T5774] usb-storage 4-1:1.0: USB Mass Storage device detected
[  263.893063][T10877] overlayfs: failed to clone lowerpath
[  264.151689][ T5774] usb-storage: probe of 4-1:1.0 failed with error -5
[  264.192951][ T5774] usb 4-1: USB disconnect, device number 16
[  264.691021][T10899] netlink: 'syz.0.1733': attribute type 2 has an invalid length.
[  264.714791][T10899] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1733'.
[  265.265382][T10916] ieee802154 phy0 wpan0: encryption failed: -22
[  265.513721][T10928] loop5: detected capacity change from 0 to 64
[  265.599718][T10928] hfs: walked past end of dir
[  265.772502][T10932] loop5: detected capacity change from 0 to 4096
[  265.836087][T10936] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  265.943466][T10933] loop1: detected capacity change from 0 to 4096
[  266.031293][T10933] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  266.301852][T10942] trusted_key: encrypted_key: keyword 'uew' not recognized
[  266.908994][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'.
[  266.947633][ T5781] Bluetooth: hci4: command 0x1003 tx timeout
[  266.955347][   T51] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  267.236227][T10963] loop3: detected capacity change from 0 to 256
[  267.292850][T10963] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  267.334536][  T172] IPVS: starting estimator thread 0...
[  267.409825][   T28] audit: type=1800 audit(1791446785.832:107): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1762" name="file0" dev="loop3" ino=1048723 res=0 errno=0
[  267.458437][T10969] IPVS: using max 34 ests per chain, 81600 per kthread
[  268.193034][T11006] loop3: detected capacity change from 0 to 4096
[  268.203830][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'.
[  268.250802][T11006] ntfs: volume version 3.1.
[  268.537116][T11014] loop0: detected capacity change from 0 to 4096
[  268.590269][T11014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.690263][T11014] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.1783: corrupted inode contents
[  268.756669][T11014] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #15: comm syz.0.1783: mark_inode_dirty error
[  268.805912][T11014] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.1783: corrupted inode contents
[  268.878951][T11014] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #15: comm syz.0.1783: mark_inode_dirty error
[  268.933079][T11014] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.1783: corrupted inode contents
[  268.984192][T11014] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #15: comm syz.0.1783: mark_inode_dirty error
[  269.023751][T11014] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.1783: corrupted inode contents
[  269.113440][T11014] EXT4-fs error (device loop0): ext4_truncate:4314: inode #15: comm syz.0.1783: mark_inode_dirty error
[  269.165553][T11014] EXT4-fs error (device loop0) in ext4_setattr:5695: Corrupt filesystem
[  269.219937][T11022] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #15: comm syz.0.1783: corrupted inode contents
[  269.507079][T11050] vivid-001: disconnect
[  269.533003][T11044] vivid-001: reconnect
[  269.616338][   T28] audit: type=1326 audit(1791446788.032:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.5.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8cb19e199 code=0x0
[  269.639849][    C0] vkms_vblank_simulate: vblank timer overrun
[  269.753926][T11061] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1802'.
[  269.845981][ T8210] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  269.901823][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.640569][T11068] loop3: detected capacity change from 0 to 32768
[  270.673044][T11068] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  270.761734][T11068] XFS (loop3): Ending clean mount
[  270.799999][T11068] XFS (loop3): User initiated shutdown received.
[  270.831210][T11068] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  270.880856][T11068] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  270.973751][ T8249] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  270.988399][T11075] loop0: detected capacity change from 0 to 40427
[  271.032172][T11075] F2FS-fs (loop0): Corrupted extension count (327717 + 1 > 64)
[  271.085275][T11075] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  271.144817][T11075] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff
[  271.183494][T11075] F2FS-fs (loop0): invalid crc value
[  271.233009][T11075] F2FS-fs (loop0): Found nat_bits in checkpoint
[  271.439054][T11075] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  271.446141][T11075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  271.647923][T11073] loop1: detected capacity change from 0 to 32768
[  271.753027][ T8210] syz-executor: attempt to access beyond end of device
[  271.753027][ T8210] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  271.787203][   T28] audit: type=1800 audit(1791446790.202:109): pid=11073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1805" name="file1" dev="loop1" ino=4 res=0 errno=0
[  271.838125][T11073] ERROR: (device loop1): dbAllocNext: Corrupt dmap page
[  271.838125][T11073] 
[  271.873397][ T8210] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  271.921996][   T28] audit: type=1400 audit(1791446790.312:110): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=11101 comm="syz.5.1815" name="foo" offset=76
[  272.420504][T11118] loop5: detected capacity change from 0 to 256
[  272.517171][   T28] audit: type=1800 audit(1791446790.932:111): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1821" name="bus" dev="loop5" ino=1048726 res=0 errno=0
[  272.537981][    C0] vkms_vblank_simulate: vblank timer overrun
[  272.958944][   T28] audit: type=1400 audit(1791446791.382:112): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=11127 comm="syz.0.1825"
[  273.090003][T11132] netem: change failed
[  273.275470][T11120] loop3: detected capacity change from 0 to 32768
[  273.291072][T11134] loop0: detected capacity change from 0 to 2048
[  273.378099][T11134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.477303][T11124] loop5: detected capacity change from 0 to 32768
[  273.491687][T11134] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  273.582425][T11124] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.594604][T11134] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  273.654279][T11144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  273.734228][T11124] XFS (loop5): Ending clean mount
[  273.750335][T11134] EXT4-fs (loop0): This should not happen!! Data will be lost
[  273.750335][T11134] 
[  273.801824][T11144] EXT4-fs (loop0): This should not happen!! Data will be lost
[  273.801824][T11144] 
[  273.850502][T11134] EXT4-fs (loop0): Total free blocks count 0
[  273.885183][T11144] EXT4-fs (loop0): Total free blocks count 0
[  273.899532][T11134] EXT4-fs (loop0): Free/Dirty block details
[  273.920014][T11144] EXT4-fs (loop0): Free/Dirty block details
[  273.942321][T11134] EXT4-fs (loop0): free_blocks=2415919504
[  273.956054][ T9774] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  274.393487][T11158] loop5: detected capacity change from 0 to 512
[  274.411170][T11160] loop0: detected capacity change from 0 to 512
[  274.447497][T11158] EXT4-fs: Ignoring removed nobh option
[  274.477620][T11158] EXT4-fs (loop5): Test dummy encryption mode enabled
[  274.490763][T11160] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.1832: casefold flag without casefold feature
[  274.553167][T11130] loop1: detected capacity change from 0 to 32768
[  274.569266][T11158] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  274.609453][T11160] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1832: couldn't read orphan inode 15 (err -117)
[  274.650465][T11158] EXT4-fs (loop5): 1 truncate cleaned up
[  274.676806][T11160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.694622][T11158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.721668][T11130] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1826 (11130)
[  274.842452][ T9774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.856439][T11130] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  274.929469][T11130] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  274.959387][T11130] BTRFS warning (device loop1): excessive commit interval 3581
[  274.989503][T11130] BTRFS info (device loop1): force zlib compression, level 3
[  275.018268][T11130] BTRFS info (device loop1): metadata ratio 107050
[  275.037727][T11130] BTRFS info (device loop1): turning on flush-on-commit
[  275.044772][T11130] BTRFS info (device loop1): max_inline at 4096
[  275.089729][T11130] BTRFS info (device loop1): using free space tree
[  275.146685][T11130] BTRFS info (device loop1): enabling ssd optimizations
[  275.154023][  T172] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  275.349336][  T172] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  275.375312][  T172] usb 1-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00
[  275.405541][ T8365] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  275.426926][  T172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.597164][T11189] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check.
[  275.877650][  T172] iforce 1-1:1.0: usb_submit_urb failed: -71
[  275.917292][  T172] input input18: Device does not respond to id packet M
[  275.957077][  T172] iforce 1-1:1.0: usb_submit_urb failed: -71
[  275.985839][  T172] input input18: Device does not respond to id packet P
[  276.017578][  T172] iforce 1-1:1.0: usb_submit_urb failed: -71
[  276.024737][  T172] input input18: Device does not respond to id packet B
[  276.064930][  T172] iforce 1-1:1.0: usb_submit_urb failed: -71
[  276.077463][  T172] input input18: Device does not respond to id packet N
[  276.104989][  T172] iforce 1-1:1.0: usb_submit_urb failed: -71
[  276.125736][  T172] iforce 1-1:1.0: usb_submit_urb failed: -71
[  276.138241][  T172] iforce 1-1:1.0: usb_submit_urb failed: -71
[  276.157609][  T172] iforce 1-1:1.0: usb_submit_urb failed: -71
[  276.188507][  T172] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input18
[  276.271774][  T172] usb 1-1: USB disconnect, device number 9
[  276.277742][    C0] iforce 1-1:1.0: iforce_usb_irq - usb_submit_urb failed with result -19
[  276.445532][T11193] loop5: detected capacity change from 0 to 32768
[  276.532458][T11193] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  276.572640][T11193] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  276.582201][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.670287][T11193] XFS (loop5): Ending clean mount
[  276.849792][T11212] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  276.858667][ T5815] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  277.057750][ T5815] usb 4-1: Using ep0 maxpacket: 32
[  277.070404][ T5815] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  277.089871][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.126476][ T5815] usb 4-1: config 0 descriptor??
[  277.274931][ T9774] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  277.407606][ T5815] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  277.453203][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  277.518963][ T5815] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  277.526156][ T5815] usb 4-1: media controller created
[  277.603536][T11222] program syz.0.1849 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  277.631626][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  277.722312][ T5815] az6027: usb out operation failed. (-71)
[  277.742159][ T5815] az6027: usb out operation failed. (-71)
[  277.778368][ T5815] stb0899_attach: Driver disabled by Kconfig
[  277.789246][ T5815] az6027: no front-end attached
[  277.789246][ T5815] 
[  277.827185][ T5815] az6027: usb out operation failed. (-71)
[  277.842293][ T5815] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  277.884058][T11228] loop0: detected capacity change from 0 to 1024
[  277.896157][ T5815] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19
[  277.964418][ T5815] dvb-usb: schedule remote query interval to 400 msecs.
[  278.016969][ T5815] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.

syzkaller
syzkaller login: [  278.089824][ T5815] usb 4-1: USB disconnect, device number 17
[  278.224738][ T5815] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  278.496744][T11242] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1855'.
[  278.644347][T11245] loop3: detected capacity change from 0 to 256
[  278.804443][T11233] loop5: detected capacity change from 0 to 32768
[  278.863912][T11233] JBD2: Ignoring recovery information on journal
[  278.972062][T11233] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  279.002682][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'.
[  279.179257][ T9774] ocfs2: Unmounting device (7,5) on (node local)
[  279.292492][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1865'.
[  279.318108][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  279.389899][T11261] mac80211_hwsim hwsim21 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  279.500192][T11267] loop1: detected capacity change from 0 to 256
[  279.528261][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  279.550183][    T9] usb 4-1: config 1 interface 0 altsetting 36 endpoint 0x5 has an invalid bInterval 128, changing to 11
[  279.618091][    T9] usb 4-1: config 1 interface 0 altsetting 36 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  279.682136][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  279.742073][    T9] usb 4-1: New USB device found, idVendor=0499, idProduct=1020, bcdDevice= 0.40
[  279.783140][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.837990][    T9] usb 4-1: Product: syz
[  279.842200][    T9] usb 4-1: Manufacturer: syz
[  279.859590][    T9] usb 4-1: SerialNumber: syz
[  280.104395][    T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  280.149637][    T9] snd-usb-audio: probe of 4-1:1.0 failed with error -2
[  280.186520][    T9] usb 4-1: USB disconnect, device number 18
[  280.234757][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  280.543266][T11289] syz.0.1879[11289] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  280.543433][T11289] syz.0.1879[11289] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  281.337590][ T5815] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  281.406318][T11323] loop1: detected capacity change from 0 to 256
[  281.490631][ T5788] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  281.578923][ T5815] usb 1-1: not running at top speed; connect to a high speed hub
[  281.601338][ T5815] usb 1-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  281.613631][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.624673][ T5815] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  281.636346][ T5815] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  281.645723][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.662911][ T5815] usb 1-1: config 0 descriptor??
[  281.681665][ T5815] usb 1-1: Found UVC 9.00 device <unnamed> (046d:0825)
[  281.989475][ T3411] wlan1: Trigger new scan to find an IBSS to join
[  282.086091][ T5815] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  282.140812][ T5815] videodev: could not get a free minor
[  282.146330][ T5815] uvcvideo 1-1:0.1: Failed to register meta-cap device (-23).
[  282.189212][T11336] loop3: detected capacity change from 0 to 128
[  282.251034][T11336] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  282.312904][T11336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  282.427216][ T5815] usb 1-1: USB disconnect, device number 10
[  282.605458][T11340] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1901'.
[  283.210281][T11363] loop3: detected capacity change from 0 to 256
[  283.256884][T11363] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  283.354946][T11363] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[  283.354981][T11363] exFAT-fs (loop3): Filesystem has been set read-only
[  283.355028][   T28] audit: type=1800 audit(1791446801.762:113): pid=11363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1913" name="file1" dev="loop3" ino=1048729 res=0 errno=0
[  283.455454][T11371] loop5: detected capacity change from 0 to 256
[  283.456021][T11371] exfat: Deprecated parameter 'namecase'
[  283.456045][T11371] exfat: Deprecated parameter 'namecase'
[  283.456079][T11371] exfat: Deprecated parameter 'namecase'
[  283.484012][    C0] vkms_vblank_simulate: vblank timer overrun
[  283.502020][T11371] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  283.519884][ T5781] Bluetooth: hci0: command 0x080f tx timeout
[  284.854407][T11403] loop5: detected capacity change from 0 to 256
[  284.885173][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1938'.
[  284.909465][T11403] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  285.028400][   T49] wlan1: Trigger new scan to find an IBSS to join
[  285.065044][T11409] loop3: detected capacity change from 0 to 2048
[  285.115166][T11409] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  285.188694][T11409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  285.202672][T11415] loop5: detected capacity change from 0 to 256
[  285.243977][T11415] exfat: Deprecated parameter 'namecase'
[  285.244001][T11415] exfat: Deprecated parameter 'namecase'
[  285.244019][T11415] exfat: Deprecated parameter 'namecase'
[  285.259102][T11415] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  285.503433][T11421] i2c i2c-0: Failed to register i2c client mt6360 at 0x34 (-16)
[  286.053949][ T3486] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  286.501416][T11428] bond0 (unregistering): Released all slaves
[  286.521254][   T12] wlan1: Creating new IBSS network, BSSID 2a:d6:15:a7:5d:77
[  287.314492][T11441] loop5: detected capacity change from 0 to 32768
[  287.360451][T11441] XFS: attr2 mount option is deprecated.
[  287.404816][T11441] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  287.490941][T11441] XFS (loop5): Ending clean mount
[  287.559978][T11441] XFS (loop5): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  287.659873][ T9774] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  288.176225][T11472] loop0: detected capacity change from 0 to 128
[  288.450660][   T28] audit: type=1400 audit(1791446806.862:114): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=11475 comm="syz.5.1961" name="foo" offset=81
[  288.481244][T11478] loop0: detected capacity change from 0 to 512
[  288.559332][T11478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.620746][T11478] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.641043][ T5781] Bluetooth: hci2: command 0x0406 tx timeout
[  288.809544][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.827985][T11487] ALSA: mixer_oss: invalid OSS volume 'dev/net/tun'
[  288.901191][T11489] program syz.1.1965 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  288.996639][ T5815] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [syz0] on syz0
[  289.063884][ T5815] cp2112 0003:10C4:EA90.0009: error requesting version
[  289.103900][ T5815] cp2112: probe of 0003:10C4:EA90.0009 failed with error -5
[  289.162249][T11496] fido_id[11496]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  289.285844][T11507] loop0: detected capacity change from 0 to 16
[  289.312570][T11507] erofs: (device loop0): mounted with root inode @ nid 36.
[  289.427592][ T5815] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  289.444087][T11509] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  289.648819][ T5815] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  289.688264][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.722521][ T5815] usb 4-1: config 0 descriptor??
[  289.732703][   T28] audit: type=1107 audit(1791446808.152:115): pid=11520 uid=0 auid=4 ses=2 subj=unconfined msg=''
[  289.769693][ T5815] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  289.839447][T11523] loop1: detected capacity change from 0 to 128
[  289.964509][ T5815] gp8psk: usb in 128 operation failed.
[  290.199643][T11535] sit0: entered promiscuous mode
[  290.207527][ T5815] gp8psk: FW Version = 0.00.0 (0x0)  Build 2000/00/00
[  290.231204][T11535] netlink: 'syz.5.1987': attribute type 1 has an invalid length.
[  290.279230][T11535] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1987'.
[  290.312434][T11537] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1986'.
[  290.406239][ T5815] gp8psk: usb in 149 operation failed.
[  290.424736][ T5815] gp8psk: failed to get FPGA version
[  290.458523][ T5815] gp8psk: usb in 138 operation failed.
[  290.475500][ T5815] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  290.526819][ T5815] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  290.570425][ T5815] usb 4-1: USB disconnect, device number 19
[  291.158574][T11547] loop5: detected capacity change from 0 to 32768
[  291.236690][T11547] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.388828][T11547] XFS (loop5): Ending clean mount
[  291.454163][T11547] XFS (loop5): Quotacheck needed: Please wait.
[  291.474229][T11586] loop3: detected capacity change from 0 to 512
[  291.520398][T11586] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  291.606585][T11547] XFS (loop5): Quotacheck: Done.
[  291.613795][T11586] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.2007: casefold flag without casefold feature
[  291.721933][T11586] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2007: couldn't read orphan inode 15 (err -117)
[  291.765692][T11586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.850100][T11586] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.2007: bg 0: block 5: invalid block bitmap
[  291.880840][ T9774] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.904791][T11586] CacheFiles: mkdir cache failed with error -28
[  291.930302][T11586] CacheFiles: Failed to register: -28
[  292.079182][ T8249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.020926][T11612] loop1: detected capacity change from 0 to 131072
[  293.061246][T11612] F2FS-fs (loop1): invalid crc value
[  293.100877][T11612] F2FS-fs (loop1): Found nat_bits in checkpoint
[  293.146430][T11612] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  294.291914][T11640] loop3: detected capacity change from 0 to 40427
[  294.329535][T11640] F2FS-fs (loop3): invalid crc value
[  294.390971][T11640] F2FS-fs (loop3): Found nat_bits in checkpoint
[  294.520610][T11640] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  294.641170][ T8249] syz-executor: attempt to access beyond end of device
[  294.641170][ T8249] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  294.657851][ T5815] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  294.695301][ T8249] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  294.847732][ T5815] usb 1-1: Using ep0 maxpacket: 16
[  294.890268][ T5815] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.926328][ T5815] usb 1-1: config 0 interface 0 has no altsetting 0
[  294.953996][ T5815] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  294.980969][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.006683][ T5815] usb 1-1: config 0 descriptor??
[  295.445409][ T5815] mcp2221 0003:04D8:00DD.000A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  295.648170][T11684] ip6gre1: entered promiscuous mode
[  295.672057][T11684] ip6gre1: entered allmulticast mode
[  295.700829][T11686] loop1: detected capacity change from 0 to 512
[  295.756724][T11686] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  295.849306][T11686] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.2024: casefold flag without casefold feature
[  295.873061][    T9] usb 1-1: USB disconnect, device number 11
[  295.933064][T11688] loop5: detected capacity change from 0 to 8192
[  295.986960][T11686] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.2024: couldn't read orphan inode 15 (err -117)
[  296.009704][T11688] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  296.091955][T11686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.124164][T11694] loop3: detected capacity change from 0 to 4096
[  296.152100][T11695] FAT-fs (loop5): error, clusters badly computed (1 != 0)
[  296.176023][T11695] FAT-fs (loop5): Filesystem has been set read-only
[  296.220180][T11695] FAT-fs (loop5): error, clusters badly computed (2 != 1)
[  296.252561][T11695] FAT-fs (loop5): error, clusters badly computed (3 != 2)
[  296.271656][T11686] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.2024: bg 0: block 5: invalid block bitmap
[  296.300840][T11695] FAT-fs (loop5): error, clusters badly computed (4 != 3)
[  296.332077][T11695] FAT-fs (loop5): error, clusters badly computed (5 != 4)
[  296.359741][T11697] loop3: detected capacity change from 0 to 8
[  296.366485][T11695] FAT-fs (loop5): error, clusters badly computed (6 != 5)
[  296.381649][T11686] CacheFiles: mkdir cache failed with error -28
[  296.408021][T11695] FAT-fs (loop5): error, clusters badly computed (7 != 6)
[  296.443154][T11695] FAT-fs (loop5): error, clusters badly computed (8 != 7)
[  296.451812][T11686] CacheFiles: Failed to register: -28
[  296.477654][T11695] FAT-fs (loop5): error, clusters badly computed (9 != 8)
[  296.505695][T11695] FAT-fs (loop5): error, clusters badly computed (10 != 9)
[  296.544011][T11695] FAT-fs (loop5): error, clusters badly computed (11 != 10)
[  296.574682][T11695] FAT-fs (loop5): error, clusters badly computed (12 != 11)
[  296.597007][T11695] FAT-fs (loop5): error, clusters badly computed (13 != 12)
[  296.635683][T11695] FAT-fs (loop5): error, clusters badly computed (14 != 13)
[  296.644172][ T8365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.659233][T11695] FAT-fs (loop5): error, clusters badly computed (15 != 14)
[  296.669314][T11701] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  296.680911][T11695] FAT-fs (loop5): error, clusters badly computed (16 != 15)
[  296.697560][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  296.891542][    T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  296.907714][    T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  296.932289][    T9] usb 4-1: config 220 has an invalid descriptor of length 117, skipping remainder of the config
[  296.988149][    T9] usb 4-1: config 220 has no interface number 2
[  297.012528][    T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  297.066589][    T9] usb 4-1: config 220 interface 0 has no altsetting 0
[  297.088749][    T9] usb 4-1: config 220 interface 76 has no altsetting 0
[  297.105856][    T9] usb 4-1: config 220 interface 1 has no altsetting 0
[  297.125923][    T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  297.149547][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.173815][    T9] usb 4-1: Product: syz
[  297.184671][    T9] usb 4-1: Manufacturer: syz
[  297.204264][    T9] usb 4-1: SerialNumber: syz
[  297.397628][ T5774] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  297.435515][    T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  297.450924][    T9] usb 4-1: No valid video chain found.
[  297.472278][    T9] usb 4-1: selecting invalid altsetting 0
[  297.506291][    T9] usb 4-1: selecting invalid altsetting 0
[  297.528378][    T9] usbtest: probe of 4-1:220.1 failed with error -22
[  297.552431][    T9] usb 4-1: USB disconnect, device number 20
[  297.612261][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  297.644682][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.680586][ T5774] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  297.697767][ T5774] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  297.706514][ T5774] usb 1-1: Manufacturer: syz
[  297.721468][ T5774] usb 1-1: config 0 descriptor??
[  297.937567][ T5815] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  298.005651][T11739] kAFS: Invalid Command on /proc/fs/afs/cells file
[  298.129621][ T5815] usb 6-1: Using ep0 maxpacket: 8
[  298.145319][ T5774] cougar 0003:060B:700A.000B: unknown main item tag 0x0
[  298.166500][T11743] loop3: detected capacity change from 0 to 1024
[  298.176535][ T5815] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  298.190118][ T5774] cougar 0003:060B:700A.000B: unknown main item tag 0x0
[  298.197105][ T5774] cougar 0003:060B:700A.000B: unknown main item tag 0x0
[  298.209142][ T5815] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  298.251012][ T5774] cougar 0003:060B:700A.000B: unknown main item tag 0x0
[  298.265011][   T28] audit: type=1800 audit(1791446816.682:116): pid=11743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2073" name="file1" dev="loop3" ino=3 res=0 errno=0
[  298.285425][    C0] vkms_vblank_simulate: vblank timer overrun
[  298.305612][ T5815] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  298.326758][T11737] loop1: detected capacity change from 0 to 32768
[  298.334529][ T5774] cougar 0003:060B:700A.000B: unknown main item tag 0x0
[  298.353968][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.378505][ T5774] cougar 0003:060B:700A.000B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  298.424431][ T5815] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected
[  298.448107][   T12] hfsplus: bad catalog file entry
[  298.453591][   T12] hfsplus: b-tree write err: -5, ino 3
[  298.484824][ T5774] usb 1-1: USB disconnect, device number 12
[  298.495738][ T5815] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  298.733238][T11744] fido_id[11744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  299.131315][ T5815] usb 6-1: USB disconnect, device number 6
[  299.160132][ T5815] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  299.205732][ T5815] kobil_sct 6-1:1.0: device disconnected
[  299.590896][T11777] program syz.1.2076 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  299.937297][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'.
[  300.108884][T11802] ip6gre1: entered promiscuous mode
[  300.131978][T11802] ip6gre1: entered allmulticast mode
[  300.150200][ T3486] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  300.210009][ T5815] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  300.231808][ T3486] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  300.418311][ T5774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  300.782646][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2109'.
[  300.804893][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2109'.
[  301.355815][ T5815] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  302.005795][T11851] loop0: detected capacity change from 0 to 164
[  302.207154][T11857] kAFS: Invalid Command on /proc/fs/afs/cells file
[  302.235806][T11860] loop0: detected capacity change from 0 to 256
[  302.296970][T11861] loop5: detected capacity change from 0 to 2048
[  302.367037][T11861] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  302.415497][ T5763] udevd[5763]: incorrect nilfs2 checksum on /dev/loop5
[  302.428826][ T5815] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  302.473242][T11864] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  302.642518][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  302.664519][ T5815] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  302.707557][ T5815] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  302.739701][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.769037][ T5815] usb 4-1: Product: syz
[  302.773244][ T5815] usb 4-1: Manufacturer: syz
[  302.807630][ T5815] usb 4-1: SerialNumber: syz
[  302.830571][ T5815] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  302.880199][ T5815] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  302.880199][ T5815]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  302.905349][    C0] vkms_vblank_simulate: vblank timer overrun
[  302.970293][T11874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2133'.
[  303.036414][T11874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2133'.
[  303.273121][ T5815] ums-sddr09: probe of 4-1:1.0 failed with error -5
[  303.309145][T11879] loop1: detected capacity change from 0 to 64
[  303.318946][ T5815] usb 4-1: USB disconnect, device number 21
[  303.861227][T11892] use of bytesused == 0 is deprecated and will be removed in the future,
[  303.908657][T11892] use the actual size instead.
[  304.547667][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  304.564520][T11901] loop1: detected capacity change from 0 to 131072
[  304.592071][T11901] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0)
[  304.601633][T11901] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  304.619094][T11901] F2FS-fs (loop1): invalid crc value
[  304.675020][T11901] F2FS-fs (loop1): Found nat_bits in checkpoint
[  304.736397][T11901] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  304.744870][T11901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  304.800024][T11901] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36
[  304.926366][T11913] loop0: detected capacity change from 0 to 128
[  305.019232][T11913] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  305.102306][T11913] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.304508][ T8210] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.429997][T11924] kAFS: bad VL server IP address
[  305.557511][ T5815] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  305.739062][ T5815] usb 6-1: Using ep0 maxpacket: 16
[  305.753226][ T5815] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.788160][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  305.837767][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  305.860874][T11938] loop3: detected capacity change from 0 to 2048
[  305.867583][ T5815] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  305.895823][T11938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  305.929985][ T5815] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  306.017604][ T5815] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  306.052169][ T5815] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  306.101785][ T5815] usb 6-1: Manufacturer: syz
[  306.124133][ T5815] usb 6-1: config 0 descriptor??
[  306.477474][ T5815] rc_core: IR keymap rc-hauppauge not found
[  306.483457][ T5815] Registered IR keymap rc-empty
[  306.515435][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  306.577524][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  306.637920][ T5815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  306.682328][ T5815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21
[  306.747681][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  306.773943][T11963] loop0: detected capacity change from 0 to 512
[  306.819236][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  306.878052][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  306.937628][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  306.987591][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  307.048722][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  307.106924][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  307.115431][T11967] sctp: [Deprecated]: syz.0.2170 (pid 11967) Use of int in maxseg socket option.
[  307.115431][T11967] Use struct sctp_assoc_value instead
[  307.167704][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  307.179488][T11958] loop3: detected capacity change from 0 to 32768
[  307.207834][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  307.228101][T11958] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  307.228101][T11958] 
[  307.260824][ T5815] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  307.280619][T11958] xtLookup: xtSearch returned -5
[  307.305977][T11958] free_index: error reading directory table
[  307.323868][T11969] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  307.334711][ T5815] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  307.379153][ T5815] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  307.409374][ T5815] usb 6-1: USB disconnect, device number 7
[  307.650405][T11975] loop5: detected capacity change from 0 to 128
[  307.709227][T11975] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  308.318405][T11994] loop0: detected capacity change from 0 to 2048
[  308.380949][T11994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.435328][T11994] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.522916][T11994] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 16: comm syz.0.2182: path /411/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  308.593776][T11981] loop3: detected capacity change from 0 to 32768
[  308.679293][T11981] JBD2: Ignoring recovery information on journal
[  308.737864][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.782710][T11981] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  308.970716][T12012] gretap0: entered promiscuous mode
[  309.064108][ T8249] ocfs2: Unmounting device (7,3) on (node local)
[  309.404218][T12027] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2195'.
[  309.450136][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2196'.
[  309.778413][T12047] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  309.778413][T12047] The task syz.3.2200 (12047) triggered the difference, watch for misbehavior.
[  309.967597][ T5774] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  310.162028][ T5774] usb 1-1: Using ep0 maxpacket: 8
[  310.174687][ T5774] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  310.194392][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.214560][ T5774] pvrusb2: Hardware description: Terratec Grabster AV400
[  310.243157][ T5774] pvrusb2: **********
[  310.251903][ T5774] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  310.270732][ T5774] pvrusb2: Important functionality might not be entirely working.
[  310.280455][ T5774] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  310.299681][ T5774] pvrusb2: **********
[  310.377971][ T5780] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  310.421290][ T2321] pvrusb2: Invalid write control endpoint
[  310.493632][ T2321] pvrusb2: Invalid write control endpoint
[  310.517784][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  310.542511][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  310.564503][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  310.580412][ T5780] usb 6-1: Using ep0 maxpacket: 8
[  310.596150][ T2321] pvrusb2: Device being rendered inoperable
[  310.616395][ T5780] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  310.634994][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  310.659556][ T5780] usb 6-1: config 179 has no interface number 0
[  310.673459][T12070] loop1: detected capacity change from 0 to 2048
[  310.685576][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  310.695042][T12041] pvrusb2: Attempted to execute control transfer when device not ok
[  310.704539][ T5780] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  310.729900][ T5815] usb 1-1: USB disconnect, device number 13
[  310.737831][ T2321] pvrusb2: Attached sub-driver cx25840
[  310.763789][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  310.774218][ T5780] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  310.815926][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  310.831819][ T5780] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  310.874368][T12070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.898401][ T5780] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  310.949032][ T5780] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  310.971896][ T5780] usb 6-1: config 179 interface 65 has no altsetting 0
[  310.997143][ T5780] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  311.023296][ T5780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.086574][ T5780] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input22
[  311.129297][ T8365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.269895][ T5780] usb 6-1: USB disconnect, device number 8
[  311.275803][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  311.336504][ T5780] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  311.987850][ T5780] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  312.185060][ T5780] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  312.204398][ T5780] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.245817][ T5780] usb 4-1: Product: syz
[  312.268768][ T5780] usb 4-1: Manufacturer: syz
[  312.284691][ T5780] usb 4-1: SerialNumber: syz
[  312.297564][ T5815] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  312.316927][ T5780] usb 4-1: config 0 descriptor??
[  312.343117][ T5780] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  312.385122][ T5780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  312.415987][ T5780] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  312.436773][T12118] loop0: detected capacity change from 0 to 8
[  312.444235][ T5780] usb 4-1: media controller created
[  312.496381][T12118] SQUASHFS error: Unable to read directory block [249:9]
[  312.510606][ T5815] usb 2-1: Using ep0 maxpacket: 8
[  312.516539][ T5780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  312.542989][T12097] dvb-usb: bulk message failed: -22 (7/0)
[  312.558087][ T5815] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  312.605126][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.647953][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2231'.
[  312.669958][ T5815] pvrusb2: Hardware description: Terratec Grabster AV400
[  312.699658][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2231'.
[  312.720859][ T5815] pvrusb2: **********
[  312.742715][ T5780] DVB: Unable to find symbol mt352_attach()
[  312.749142][ T5815] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  312.762165][T12124] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2231'.
[  312.782179][ T5815] pvrusb2: Important functionality might not be entirely working.
[  312.802472][T12124] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2231'.
[  312.824089][ T5815] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  312.864265][ T5780] DVB: Unable to find symbol nxt6000_attach()
[  312.887135][ T5815] pvrusb2: **********
[  312.893363][ T5780] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  312.918609][ T2321] pvrusb2: Invalid write control endpoint
[  312.965243][ T5780] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23
[  313.028661][ T5780] dvb-usb: schedule remote query interval to 1000 msecs.
[  313.060452][ T2321] pvrusb2: Invalid write control endpoint
[  313.077315][ T5780] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  313.109764][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  313.151361][ T5780] dvb-usb: bulk message failed: -22 (7/0)
[  313.157136][ T5780] dvb-usb: bulk message failed: -22 (7/0)
[  313.179725][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  313.187329][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  313.245377][ T5780] usb 4-1: USB disconnect, device number 22
[  313.299187][    T9] usb 2-1: USB disconnect, device number 17
[  313.320911][ T2321] pvrusb2: Device being rendered inoperable
[  313.333752][T12132] loop3: detected capacity change from 0 to 2048
[  313.350058][ T2321] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  313.385604][ T2321] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  313.414092][ T5780] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  313.427477][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  313.451945][ T2321] pvrusb2: Attached sub-driver cx25840
[  313.465670][T12132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.478099][ T5815] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  313.496497][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  313.536811][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  313.586056][T12132] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  313.632609][T12123] loop0: detected capacity change from 0 to 32768
[  313.645170][T12132] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  313.692332][T12123] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  313.703442][T12136] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  313.719887][ T5815] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  313.741424][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.762726][T12136] EXT4-fs (loop3): This should not happen!! Data will be lost
[  313.762726][T12136] 
[  313.784092][ T5815] usb 6-1: config 0 descriptor??
[  313.809177][T12132] EXT4-fs (loop3): This should not happen!! Data will be lost
[  313.809177][T12132] 
[  313.860479][T12123] XFS (loop0): Ending clean mount
[  313.868369][T12136] EXT4-fs (loop3): Total free blocks count 0
[  313.917994][T12132] EXT4-fs (loop3): Total free blocks count 0
[  313.938869][T12136] EXT4-fs (loop3): Free/Dirty block details
[  313.956846][T12132] EXT4-fs (loop3): Free/Dirty block details
[  314.010144][T12136] EXT4-fs (loop3): free_blocks=2415919504
[  314.026200][ T8210] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  314.235943][ T5781] Bluetooth: hci3: command 0x0405 tx timeout
[  314.271266][ T5815] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  314.336734][ T5815] [drm] Initialized udl on minor 2
[  314.452956][T12151] i2c i2c-0: Failed to register i2c client mt6360 at 0x34 (-16)
[  314.466026][T12150] loop3: detected capacity change from 0 to 2048
[  314.474725][ T5815] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  314.493445][ T5815] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  314.551424][T12152] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  314.632061][T12152] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  314.659832][T12152] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  314.676570][    T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  314.698901][T12152] Remounting filesystem read-only
[  314.727253][ T5815] usb 6-1: USB disconnect, device number 9
[  314.741747][    T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  314.781425][    T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  314.804621][T12154] loop0: detected capacity change from 0 to 8192
[  314.821786][ T8249] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  314.854412][ T8249] NILFS (loop3): discard dirty page: offset=0, ino=15
[  314.866624][T12154] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  314.909508][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  314.930978][T12154] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  314.944986][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  314.968473][T12154] REISERFS (device loop0): using ordered data mode
[  314.979687][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.007652][T12154] reiserfs: using flush barriers
[  315.015928][ T8249] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  315.035510][T12154] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  315.064375][ T8249] NILFS (loop3): discard dirty page: offset=4096, ino=15
[  315.104084][ T8249] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  315.119573][T12154] REISERFS (device loop0): checking transaction log (loop0)
[  315.134680][ T8249] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  315.156912][ T8249] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  315.192886][ T8249] NILFS (loop3): discard dirty block: blocknr=0, size=1024
[  315.217867][ T8249] NILFS (loop3): discard dirty page: offset=0, ino=6
[  315.239327][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.250112][T12154] REISERFS (device loop0): Using tea hash to sort names
[  315.257326][T12154] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  315.274059][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.299303][ T8249] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  315.333911][ T8249] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  315.371430][ T8249] NILFS (loop3): discard dirty page: offset=0, ino=5
[  315.397933][ T8249] NILFS (loop3): discard dirty block: blocknr=41, size=1024
[  315.405318][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.464230][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.519169][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.560038][ T8249] NILFS (loop3): discard dirty page: offset=0, ino=4
[  315.566793][ T8249] NILFS (loop3): discard dirty block: blocknr=40, size=1024
[  315.625053][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.662150][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.692990][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.716670][ T8249] NILFS (loop3): discard dirty page: offset=0, ino=3
[  315.735377][ T8249] NILFS (loop3): discard dirty block: blocknr=42, size=1024
[  315.746858][ T8249] NILFS (loop3): discard dirty block: blocknr=43, size=1024
[  315.764313][ T8249] NILFS (loop3): discard dirty block: blocknr=44, size=1024
[  315.776576][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.796425][ T8249] NILFS (loop3): discard dirty page: offset=229376, ino=3
[  315.804739][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.816056][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  315.839013][ T8249] NILFS (loop3): discard dirty block: blocknr=50, size=1024
[  315.846355][ T8249] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  316.030239][T12172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.050308][T12172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.063180][T12172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.081144][T12172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.267631][ T5815] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  316.394052][T12178] loop5: detected capacity change from 0 to 4096
[  316.411010][T12178] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  316.445311][T12181] trusted_key: encrypted_key: keyword 'uew' not recognized
[  316.478451][ T5815] usb 4-1: Using ep0 maxpacket: 32
[  316.509241][ T5815] usb 4-1: config 139 has an invalid interface number: 104 but max is 0
[  316.539279][ T5815] usb 4-1: config 139 has no interface number 0
[  316.562075][ T5815] usb 4-1: config 139 interface 104 has no altsetting 0
[  316.571299][   T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  316.600142][ T5815] usb 4-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=82.25
[  316.655844][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.694152][ T5815] usb 4-1: Product: syz
[  316.725417][ T5815] usb 4-1: Manufacturer: syz
[  316.733836][ T5815] usb 4-1: SerialNumber: syz
[  317.058512][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2257'.
[  317.080715][ T3486] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  317.174089][ T5815] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6253
[  317.206809][T12195] loop1: detected capacity change from 0 to 4096
[  317.253382][T12195] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  317.279859][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  317.296812][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  317.365765][T12195] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  317.400074][T12195] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  317.582551][ T5815] gspca_sn9c20x: Write register 1001 failed -71
[  317.600613][ T5815] gspca_sn9c20x: Device initialization failed
[  317.641797][ T5815] gspca_sn9c20x: probe of 4-1:139.104 failed with error -71
[  317.671910][ T5815] usb 4-1: USB disconnect, device number 23
[  317.693279][T12203] loop5: detected capacity change from 0 to 32768
[  317.743292][T12203] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2259 (12203)
[  317.787843][T12203] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  317.815778][T12203] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  317.840963][T12203] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  317.871315][T12203] BTRFS info (device loop5): use zstd compression, level 3
[  317.891539][T12203] BTRFS info (device loop5): using free space tree
[  317.946393][T12203] BTRFS info (device loop5): enabling ssd optimizations
[  317.978786][T12203] BTRFS info (device loop5): auto enabling async discard
[  318.067179][   T28] audit: type=1800 audit(1791446836.482:117): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2259" name="bus" dev="loop5" ino=263 res=0 errno=0
[  318.487231][ T9774] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  319.052133][T12208] loop1: detected capacity change from 0 to 32768
[  319.267854][ T5774] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  319.487600][ T5774] usb 6-1: Using ep0 maxpacket: 8
[  319.503620][ T5781] Bluetooth: hci0: unexpected cc 0x0c47 length: 2 > 1
[  319.511387][ T5781] Bluetooth: hci0: unexpected event for opcode 0x0c47
[  319.528787][ T5774] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  319.558567][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.611868][ T5774] pvrusb2: Hardware description: Terratec Grabster AV400
[  319.646299][ T5774] pvrusb2: **********
[  319.667423][ T5774] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  319.699134][ T5774] pvrusb2: Important functionality might not be entirely working.
[  319.736304][ T5774] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  319.774424][ T5774] pvrusb2: **********
[  319.806794][ T2321] pvrusb2: Invalid write control endpoint
[  319.898929][ T2321] pvrusb2: Invalid write control endpoint
[  319.916418][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  319.943280][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  319.974429][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  320.002293][ T2321] pvrusb2: Device being rendered inoperable
[  320.032783][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  320.043536][T12272] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  320.078377][T12241] pvrusb2: Attempted to execute control transfer when device not ok
[  320.109422][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  320.118165][ T5774] usb 6-1: USB disconnect, device number 10
[  320.138308][ T2321] pvrusb2: Attached sub-driver cx25840
[  320.143814][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  320.198533][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  320.321384][T12278] loop1: detected capacity change from 0 to 128
[  320.819083][T12274] loop0: detected capacity change from 0 to 32768
[  320.850873][T12274] XFS: attr2 mount option is deprecated.
[  320.895205][T12274] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  320.982715][T12274] XFS (loop0): Ending clean mount
[  321.060010][T12274] XFS (loop0): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  321.154799][ T8210] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  321.544487][T12324] loop5: detected capacity change from 0 to 256
[  321.583737][T12324] exfat: Deprecated parameter 'namecase'
[  321.653715][T12324] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  321.947591][ T5774] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  321.969716][T12340] Bluetooth: MGMT ver 1.22
[  322.093377][T12345] loop1: detected capacity change from 0 to 256
[  322.152876][ T5774] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  322.193014][ T5774] usb 1-1: config 0 has no interface number 0
[  322.235535][ T5774] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  322.271299][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.324169][ T5774] usb 1-1: Product: syz
[  322.347836][ T5774] usb 1-1: Manufacturer: syz
[  322.352506][ T5774] usb 1-1: SerialNumber: syz
[  322.408762][ T5774] usb 1-1: config 0 descriptor??
[  322.544478][T12341] loop3: detected capacity change from 0 to 32768
[  322.582948][T12341] JBD2: Ignoring recovery information on journal
[  322.645914][ T5774] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  322.670024][T12341] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  322.689429][ T5774] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  322.722100][ T5774] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  322.743310][ T5774] usb 1-1: media controller created
[  322.781179][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  322.820927][ T8249] ocfs2: Unmounting device (7,3) on (node local)
[  322.827720][ T5815] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  323.028051][ T5815] usb 6-1: Using ep0 maxpacket: 32
[  323.034738][ T5815] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  323.049836][ T5815] usb 6-1: config 0 has no interface number 0
[  323.064209][ T5815] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  323.096779][ T5815] usb 6-1: config 0 interface 85 has no altsetting 0
[  323.119415][ T5815] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  323.136965][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.162489][ T5815] usb 6-1: Product: syz
[  323.174533][ T5815] usb 6-1: Manufacturer: syz
[  323.200281][ T5815] usb 6-1: SerialNumber: syz
[  323.229245][ T5815] usb 6-1: config 0 descriptor??
[  323.506738][T12380] loop3: detected capacity change from 0 to 64
[  323.552366][T12378] loop1: detected capacity change from 0 to 4096
[  323.585576][T12378] EXT4-fs: Ignoring removed nobh option
[  323.596104][T12380] syz.3.2329: attempt to access beyond end of device
[  323.596104][T12380] loop3: rw=0, sector=786432, nr_sectors = 2 limit=64
[  323.639700][T12378] EXT4-fs: Ignoring removed bh option
[  323.653202][T12380] Buffer I/O error on dev loop3, logical block 393216, async page read
[  323.686626][T12380] syz.3.2329: attempt to access beyond end of device
[  323.686626][T12380] loop3: rw=0, sector=786432, nr_sectors = 2 limit=64
[  323.708823][T12378] EXT4-fs (loop1): Test dummy encryption mode enabled
[  323.716805][T12380] Buffer I/O error on dev loop3, logical block 393216, async page read
[  323.731788][T12378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.757831][T12380] Trying to free block not in datazone
[  323.763675][   T28] audit: type=1800 audit(1791446842.172:118): pid=12380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2329" name="file1" dev="loop3" ino=5 res=0 errno=0
[  323.783237][    C0] vkms_vblank_simulate: vblank timer overrun
[  323.854926][ T5815] appletouch 6-1:0.85: Geyser mode initialized.
[  323.865240][ T5815] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input24
[  323.909967][ T5774] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  323.999725][ T5774] usb 1-1: USB disconnect, device number 14
[  324.059581][ T5780] usb 6-1: USB disconnect, device number 11
[  324.077217][ T5780] appletouch 6-1:0.85: input: appletouch disconnected
[  324.132406][ T8365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.464280][T12396] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  324.696681][T12407] program syz.5.2343 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  325.012748][T12425] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  325.097613][ T5780] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  325.186991][ T5872] kernel write not supported for file /sg0 (pid: 5872 comm: kworker/0:7)
[  325.286308][T12438] netlink: 'syz.0.2359': attribute type 9 has an invalid length.
[  325.298312][ T5780] usb 6-1: Using ep0 maxpacket: 32
[  325.310987][T12438] netlink: 371 bytes leftover after parsing attributes in process `syz.0.2359'.
[  325.334450][ T5780] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  325.360439][ T5780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.398490][ T5774] wiimote 0005:057E:0306.000C: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  325.410361][ T5780] usb 6-1: Product: syz
[  325.414572][ T5780] usb 6-1: Manufacturer: syz
[  325.445600][ T5774] wiimote 0005:057E:0306.000C: New device registered
[  325.467441][ T5780] usb 6-1: SerialNumber: syz
[  325.491151][ T5780] usb 6-1: config 0 descriptor??
[  325.541524][T12446] mtrr: base(0x2df12710000) is not aligned on a size(0x26000) boundary
[  325.638384][ T5872] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  325.676165][T12450] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  325.839238][ T5872] usb 2-1: Using ep0 maxpacket: 8
[  325.870053][ T5872] usb 2-1: config 0 has no interfaces?
[  325.890256][ T5872] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  325.921245][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.944178][ T5780] airspy 6-1:0.0: Board ID: 00
[  325.958789][ T5872] usb 2-1: Product: syz
[  325.968038][ T5780] airspy 6-1:0.0: Firmware version: 
[  325.983365][ T5872] usb 2-1: Manufacturer: syz
[  326.004762][ T5872] usb 2-1: SerialNumber: syz
[  326.031285][ T5872] usb 2-1: config 0 descriptor??
[  326.152828][ T5780] airspy 6-1:0.0: usb_control_msg() failed -71 request 11
[  326.172053][ T5780] airspy 6-1:0.0: Registered as swradio24
[  326.188406][ T5780] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  326.222066][ T5780] usb 6-1: USB disconnect, device number 12
[  326.263232][T12440] wiimote 0005:057E:0306.000C: Unhandled report 0 size 23
[  326.333810][ T5872] usb 2-1: USB disconnect, device number 18
[  326.348096][T12439] wiimote 0005:057E:0306.000C: Device removed
[  326.548715][  T172] wiimote 0005:057E:0306.000C: detected device: Nintendo Wii Remote (Gen 1)
[  326.637101][  T172] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input26
[  326.716930][  T172] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input27
[  326.760116][ T5774] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  326.780268][  T172] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input25
[  326.942322][T12474] kAFS: Invalid Command on /proc/fs/afs/cells file
[  326.997452][ T5774] usb 4-1: Using ep0 maxpacket: 16
[  327.014265][ T5774] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  327.031758][ T5774] usb 4-1: config 0 has no interface number 0
[  327.059130][ T5774] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  327.099847][ T5774] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  327.131839][ T5774] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  327.153636][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  327.187996][ T5774] usb 4-1: Product: syz
[  327.192350][ T5774] usb 4-1: SerialNumber: syz
[  327.222694][ T5774] usb 4-1: config 0 descriptor??
[  327.250846][ T5774] cm109 4-1:0.8: invalid payload size 0, expected 4
[  327.280023][ T5774] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input28
[  327.293372][T12478] loop0: detected capacity change from 0 to 8192
[  327.304005][T12470] loop5: detected capacity change from 0 to 32768
[  327.332287][T12470] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2372 (12470)
[  327.349959][T12478] Dev loop0: RDB in block 1 has bad checksum
[  327.445863][T12470] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  327.540770][T12470] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  327.540803][T12470] BTRFS info (device loop5): metadata ratio 220
[  327.540817][T12470] BTRFS info (device loop5): setting nodatasum
[  327.540829][T12470] BTRFS info (device loop5): metadata ratio 4
[  327.540839][T12470] BTRFS info (device loop5): enabling ssd optimizations
[  327.540849][T12470] BTRFS info (device loop5): allowing degraded mounts
[  327.540859][T12470] BTRFS info (device loop5): using free space tree
[  327.745389][T12470] BTRFS info (device loop5): auto enabling async discard
[  328.015231][ T9774] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  328.217675][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.226849][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.234105][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.241829][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.249109][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.256229][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.263363][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.270477][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.277702][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.284799][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  328.328660][ T5774] usb 4-1: USB disconnect, device number 24
[  328.328696][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  328.346131][ T5774] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  328.381208][T12503] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  328.672405][T12507] loop0: detected capacity change from 0 to 8
[  328.698567][T12507] Filesystem uses "unknown" compression. This is not supported
[  328.770924][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  329.057170][T12515] cramfs: checking physical address 0x000000014279a000 for linear cramfs image
[  329.082528][T12515] cramfs: wrong magic
[  329.093586][T12515] cramfs: wrong magic
[  329.137505][ T5774] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  329.193730][T12520] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  329.320128][ T5774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 82, changing to 10
[  329.337318][ T5774] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  329.352120][ T5774] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  329.361616][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.378020][ T5774] usb 1-1: config 0 descriptor??
[  329.577482][    T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  329.762321][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  329.776185][    T9] usb 4-1: can't read configurations, error -71
[  329.793541][ T5774] plantronics 0003:047F:FFFF.000D: unbalanced delimiter at end of report description
[  329.804244][ T5774] plantronics 0003:047F:FFFF.000D: parse failed
[  329.812482][ T5774] plantronics: probe of 0003:047F:FFFF.000D failed with error -22
[  329.992571][ T5819] usb 1-1: USB disconnect, device number 15
[  330.067480][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  330.238133][T12534] loop5: detected capacity change from 0 to 32768
[  330.256600][T12534] JBD2: Ignoring recovery information on journal
[  330.320363][T12534] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  330.414306][T12534] overlayfs: upper fs does not support tmpfile.
[  330.441962][T12534] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  330.465148][T12534] overlayfs: failed to set xattr on upper
[  330.473000][T12534] overlayfs: ...falling back to redirect_dir=nofollow.
[  330.480174][T12534] overlayfs: ...falling back to index=off.
[  330.486127][T12534] overlayfs: ...falling back to uuid=null.
[  330.494961][T12534] overlayfs: upper fs missing required features.
[  330.574680][ T9774] ocfs2: Unmounting device (7,5) on (node local)
[  330.907771][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  331.111357][    T9] usb 4-1: config 0 has an invalid interface number: 182 but max is 1
[  331.128783][    T9] usb 4-1: config 0 has an invalid interface number: 9 but max is 1
[  331.146093][    T9] usb 4-1: config 0 has no interface number 0
[  331.157443][    T9] usb 4-1: config 0 has no interface number 1
[  331.174245][    T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  331.194110][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.218043][    T9] usb 4-1: config 0 descriptor??
[  331.239490][    T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  331.313736][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2402'.
[  331.328391][ T5872] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  331.434406][    T9] snd-usb-audio: probe of 4-1:0.182 failed with error -2
[  331.476995][    T9] usb 4-1: USB disconnect, device number 26
[  331.531325][ T5872] usb 1-1: unable to get BOS descriptor or descriptor too short
[  331.548854][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  331.577515][ T5872] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  331.592728][ T5872] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  331.618732][ T5872] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  331.653016][ T5872] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  331.685602][ T5872] usb 1-1: config 1 interface 1 has no altsetting 0
[  331.700179][ T5872] usb 1-1: string descriptor 0 read error: -22
[  331.706610][ T5872] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  331.733516][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.207643][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  332.265203][ T5781] Bluetooth: hci2: unexpected cc 0x0c47 length: 2 > 1
[  332.272318][ T5781] Bluetooth: hci2: unexpected event for opcode 0x0c47
[  332.407488][    T9] usb 6-1: Using ep0 maxpacket: 8
[  332.415841][    T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  332.426630][    T9] usb 6-1: config 179 has no interface number 0
[  332.433323][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  332.447899][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  332.460895][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  332.473120][    T9] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  332.489450][    T9] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  332.515540][    T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  332.526155][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.539419][T12576] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  332.571439][ T5872] usb 1-1: 2:0: failed to get current value for ch 1 (-71)
[  332.649044][ T5872] usb 1-1: USB disconnect, device number 16
[  332.781760][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input29
[  332.879772][T12592] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2418'.
[  332.976700][ T5872] usb 6-1: USB disconnect, device number 13
[  332.976758][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  332.976788][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  333.049287][ T5872] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  333.271283][T12598] loop0: detected capacity change from 0 to 512
[  333.300737][T12598] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  333.351662][T12598] EXT4-fs (loop0): 1 truncate cleaned up
[  333.375102][T12598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.396894][T12594] loop3: detected capacity change from 0 to 32768
[  333.426875][T12594] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  333.450222][T12598] EXT4-fs error (device loop0): ext4_empty_dir:3179: inode #2: block 13: comm syz.0.2421: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  333.476980][T12594] JBD2: Ignoring recovery information on journal
[  333.541312][T12594] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  333.601354][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.762736][T12594] syz.3.2419 (12594) used greatest stack depth: 19320 bytes left
[  333.845805][ T8249] ocfs2: Unmounting device (7,3) on (node local)
[  333.862165][T12610] bond0: option arp_validate: invalid value (	I)
[  334.164363][T12620] 
[  334.331520][T12625] ./dev/sda1: Can't open blockdev
[  334.561300][T12634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2437'.
[  335.366915][T12672] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2454'.
[  335.661495][T12680] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2457'.
[  335.793711][T12684] bonding: b is being created...
[  335.948243][T12694] kAFS: bad VL server IP address
[  335.987952][   T59] wlan1: Trigger new scan to find an IBSS to join
[  336.085685][T12700] loop3: detected capacity change from 0 to 512
[  336.092374][T12699] loop0: detected capacity change from 0 to 1024
[  336.109814][T12699] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  336.122052][T12700] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  336.192283][T12699] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.2473: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  336.212790][T12700] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.2465: invalid indirect mapped block 32768 (level 2)
[  336.238066][T12705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'.
[  336.249229][T12700] EXT4-fs (loop3): Remounting filesystem read-only
[  336.255964][T12700] EXT4-fs (loop3): 1 orphan inode deleted
[  336.262543][T12699] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.2473: couldn't read orphan inode 11 (err -117)
[  336.279959][T12705] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.287477][T12705] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.296295][T12700] EXT4-fs (loop3): 1 truncate cleaned up
[  336.303757][T12699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.318742][T12700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.339210][T12705] bridge0: entered allmulticast mode
[  336.374070][T12699] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.2473: lblock 2 mapped to illegal pblock 2 (length 1)
[  336.443667][T12699] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  336.455616][T12699] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.2473: lblock 0 mapped to illegal pblock 48 (length 1)
[  336.479770][ T8249] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.532796][T12699] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  336.571616][T12699] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2473: Failed to acquire dquot type 0
[  336.700280][ T8210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.725925][ T8210] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[  336.788805][ T8210] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  336.828714][ T8210] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[  337.033276][T12721] sd 0:0:1:0: PR command failed: 1026
[  337.056586][T12721] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  337.084453][T12721] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  337.481140][T12733] loop3: detected capacity change from 0 to 512
[  337.539568][T12733] EXT4-fs (loop3): bad s_want_extra_isize: 192
[  337.900256][T12745] loop5: detected capacity change from 0 to 64
[  338.028858][ T9774] hfs: node 4:3 still has 1 user(s)!
[  338.039160][T12747] loop3: detected capacity change from 0 to 128
[  338.052091][T12726] loop0: detected capacity change from 0 to 32768
[  338.087237][T12747] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  338.178291][T12747] FAT-fs (loop3): error, clusters badly computed (3 != 1)
[  338.191081][T12726] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root
[  338.191081][T12726] 
[  338.231736][T12747] FAT-fs (loop3): Filesystem has been set read-only
[  338.356363][ T8249] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  338.607629][ T8210] BUG: Bad page state in process syz-executor  pfn:65e11
[  338.615279][ T8210] page:ffffea0001978440 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x65e11
[  338.655694][T12759] program syz.1.2490 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.677570][T12760] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  338.695827][ T8210] flags: 0xfff1800000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  338.718965][ T8210] page_type: 0xffffffff()
[  338.737010][T12760] overlayfs: overlapping lowerdir path
[  338.751288][ T8210] raw: 00fff1800000820c ffffea00016f5548 ffffc90004b07940 0000000000000000
[  338.772666][ T8210] raw: 0000000000000004 ffff888062fe02e8 00000000ffffffff 0000000000000000
[  338.798877][ T8210] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  338.815904][ T8210] page_owner tracks the page as allocated
[  338.823284][ T8210] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 12726, tgid 12725 (syz.0.2474), ts 338174842843, free_ts 336358392977
[  338.843222][ T8210]  post_alloc_hook+0x1c1/0x200
[  338.849697][ T8210]  get_page_from_freelist+0x2181/0x22a0
[  338.855348][ T8210]  __alloc_pages+0x1f0/0x460
[  338.862981][ T8210]  folio_alloc+0x1e/0x30
[  338.871111][ T8210]  filemap_alloc_folio+0xdf/0x490
[  338.876361][ T8210]  do_read_cache_folio+0x381/0x7f0
[  338.883309][ T8210]  do_read_cache_page+0x32/0x260
[  338.888873][ T8210]  __get_metapage+0x31d/0xfa0
[  338.894921][ T8210]  dbAllocCtl+0xd2/0x980
[  338.900931][ T8210]  dbAllocAG+0xc46/0x1000
[  338.905341][ T8210]  dbDiscardAG+0x2c5/0x8e0
[  338.910048][ T8210]  jfs_ioc_trim+0x42c/0x670
[  338.914634][ T8210]  jfs_ioctl+0x292/0x3b0
[  338.920402][ T8210]  __se_sys_ioctl+0xfd/0x170
[  338.925060][ T8210]  do_syscall_64+0x55/0xb0
[  338.929776][ T8210]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  338.935760][ T8210] page last free stack trace:
[  338.941962][ T8210]  free_unref_page_prepare+0x7d7/0x8f0
[  338.950154][ T8210]  free_unref_page+0x32/0x2e0
[  338.954903][ T8210]  vfree+0x1a7/0x340
[  338.961826][ T8210]  deflate_exit+0x42/0x80
[  338.966253][ T8210]  crypto_destroy_tfm+0x114/0x290
[  338.973079][ T8210]  ipcomp_free_tfms+0x24d/0x2c0
[  338.980125][ T8210]  ipcomp_free_data+0x4c/0x1a0
[  338.984995][ T8210]  ipcomp_destroy+0x56/0x80
[  338.989977][ T8210]  xfrm_state_gc_task+0x54f/0x900
[  338.996387][ T8210]  process_scheduled_works+0xa60/0x1600
[  339.003457][ T8210]  worker_thread+0xa5e/0xfe0
[  339.008268][ T8210]  kthread+0x2fa/0x390
[  339.012395][ T8210]  ret_from_fork+0x48/0x80
[  339.017018][ T8210]  ret_from_fork_asm+0x11/0x20
[  339.023447][ T8210] Modules linked in:
[  339.028755][ T3411] wlan1: Trigger new scan to find an IBSS to join
[  339.035347][ T8210] CPU: 0 PID: 8210 Comm: syz-executor Not tainted syzkaller #0
[  339.042881][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  339.052940][ T8210] Call Trace:
[  339.056208][ T8210]  <TASK>
[  339.059133][ T8210]  dump_stack_lvl+0x18c/0x250
[  339.063815][ T8210]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  339.069955][ T8210]  ? show_regs_print_info+0x20/0x20
[  339.075139][ T8210]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  339.081286][ T8210]  bad_page+0x14b/0x170
[  339.085426][ T8210]  free_unref_page_prepare+0x884/0x8f0
[  339.090872][ T8210]  free_unref_page_list+0xbe/0x860
[  339.095983][ T8210]  ? __folio_memcg+0x63/0x170
[  339.100648][ T8210]  ? folio_memcg+0x127/0x4a0
[  339.105222][ T8210]  release_pages+0x208a/0x2300
[  339.109984][ T8210]  ? lru_cache_disable+0x30/0x30
[  339.114913][ T8210]  ? mlock_drain_local+0x79/0x490
[  339.119920][ T8210]  ? mlock_drain_local+0x79/0x490
[  339.124938][ T8210]  ? mlock_drain_local+0x28d/0x490
[  339.130033][ T8210]  __folio_batch_release+0x71/0xe0
[  339.135133][ T8210]  truncate_inode_pages_range+0x381/0xea0
[  339.140861][ T8210]  ? mapping_evict_folio+0x530/0x530
[  339.146150][ T8210]  ? do_raw_spin_unlock+0x121/0x230
[  339.151351][ T8210]  dbUnmount+0x109/0x180
[  339.155592][ T8210]  jfs_umount+0x235/0x3a0
[  339.159911][ T8210]  jfs_put_super+0x8c/0x190
[  339.164410][ T8210]  ? jfs_free_inode+0x30/0x30
[  339.169082][ T8210]  generic_shutdown_super+0x134/0x2b0
[  339.174441][ T8210]  kill_block_super+0x44/0x90
[  339.179104][ T8210]  deactivate_locked_super+0x97/0x100
[  339.184463][ T8210]  cleanup_mnt+0x3d7/0x460
[  339.188864][ T8210]  task_work_run+0x1d4/0x260
[  339.193440][ T8210]  ? task_work_cancel+0x220/0x220
[  339.198451][ T8210]  ? exit_to_user_mode_loop+0x3b/0x110
[  339.203917][ T8210]  exit_to_user_mode_loop+0xe6/0x110
[  339.209186][ T8210]  exit_to_user_mode_prepare+0xee/0x180
[  339.214717][ T8210]  syscall_exit_to_user_mode+0x1a/0x50
[  339.220162][ T8210]  do_syscall_64+0x61/0xb0
[  339.224556][ T8210]  ? clear_bhb_loop+0x40/0x90
[  339.229230][ T8210]  ? clear_bhb_loop+0x40/0x90
[  339.233888][ T8210]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  339.239793][ T8210] RIP: 0033:0x7f6ba999f3d7
[  339.244215][ T8210] Code: a2 c7 05 1c 63 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  339.263804][ T8210] RSP: 002b:00007fff16ae8d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  339.272198][ T8210] RAX: 0000000000000000 RBX: 00007f6ba9a34ccb RCX: 00007f6ba999f3d7
[  339.280150][ T8210] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff16ae8e00
[  339.288108][ T8210] RBP: 00007fff16ae8e00 R08: 00007fff16ae9e00 R09: 00000000ffffffff
[  339.296061][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff16ae9e90
[  339.304017][ T8210] R13: 00007f6ba9a34ccb R14: 00000000000529a4 R15: 00007fff16ae9ed0
[  339.311994][ T8210]  </TASK>
[  339.315134][    C0] vkms_vblank_simulate: vblank timer overrun
[  339.344181][ T8210] Disabling lock debugging due to kernel taint
[  339.350684][ T8210] BUG: Bad page state in process syz-executor  pfn:5bd55
[  339.358904][ T8210] page:ffffea00016f5540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x5bd55
[  339.369521][ T8210] flags: 0xfff1800000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  339.380437][ T8210] page_type: 0xffffffff()
[  339.384799][ T8210] raw: 00fff1800000820c ffffea0001837e88 ffffc90004b07940 0000000000000000
[  339.393766][ T8210] raw: 0000000000000003 ffff888062fe04d8 00000000ffffffff 0000000000000000
[  339.404016][ T8210] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  339.411691][ T8210] page_owner tracks the page as allocated
[  339.417791][ T8210] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 12726, tgid 12725 (syz.0.2474), ts 338160295722, free_ts 338153418482
[  339.439632][ T8210]  post_alloc_hook+0x1c1/0x200
[  339.444460][ T8210]  get_page_from_freelist+0x2181/0x22a0
[  339.450473][ T8210]  __alloc_pages+0x1f0/0x460
[  339.455217][ T8210]  folio_alloc+0x1e/0x30
[  339.459845][ T8210]  filemap_alloc_folio+0xdf/0x490
[  339.464912][ T8210]  do_read_cache_folio+0x381/0x7f0
[  339.470420][ T8210]  do_read_cache_page+0x32/0x260
[  339.475430][ T8210]  __get_metapage+0x31d/0xfa0
[  339.480587][ T8210]  dbAllocAG+0x3fa/0x1000
[  339.484953][ T8210]  dbDiscardAG+0x2c5/0x8e0
[  339.489762][ T8210]  jfs_ioc_trim+0x42c/0x670
[  339.494306][ T8210]  jfs_ioctl+0x292/0x3b0
[  339.498978][ T8210]  __se_sys_ioctl+0xfd/0x170
[  339.503614][ T8210]  do_syscall_64+0x55/0xb0
[  339.509536][ T8210]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  339.515486][ T8210] page last free stack trace:
[  339.520655][ T8210]  free_unref_page_prepare+0x7d7/0x8f0
[  339.526154][ T8210]  free_unref_page+0x32/0x2e0
[  339.531211][ T8210]  lmLogShutdown+0x44f/0x850
[  339.535843][ T8210]  lmLogClose+0x28c/0x530
[  339.541398][ T8210]  jfs_remount+0x414/0x5c0
[  339.545849][ T8210]  reconfigure_super+0x229/0x8e0
[  339.553203][ T8210]  path_mount+0xcfe/0xfa0
[  339.557971][ T8210]  __se_sys_mount+0x2e7/0x3d0
[  339.562712][ T8210]  do_syscall_64+0x55/0xb0
[  339.567195][ T8210]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  339.573735][ T8210] Modules linked in:
[  339.580087][ T8210] CPU: 0 PID: 8210 Comm: syz-executor Tainted: G    B              syzkaller #0
[  339.589104][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  339.599142][ T8210] Call Trace:
[  339.602410][ T8210]  <TASK>
[  339.605326][ T8210]  dump_stack_lvl+0x18c/0x250
[  339.609991][ T8210]  ? show_regs_print_info+0x20/0x20
[  339.615170][ T8210]  ? swiotlb_print_info+0x70/0x70
[  339.620196][ T8210]  bad_page+0x14b/0x170
[  339.624332][ T8210]  free_unref_page_prepare+0x884/0x8f0
[  339.629787][ T8210]  free_unref_page_list+0xbe/0x860
[  339.634876][ T8210]  ? __folio_memcg+0x63/0x170
[  339.639533][ T8210]  ? folio_memcg+0x127/0x4a0
[  339.644121][ T8210]  release_pages+0x208a/0x2300
[  339.648867][ T8210]  ? lru_cache_disable+0x30/0x30
[  339.653804][ T8210]  ? mlock_drain_local+0x79/0x490
[  339.658825][ T8210]  ? mlock_drain_local+0x79/0x490
[  339.663827][ T8210]  ? mlock_drain_local+0x28d/0x490
[  339.668920][ T8210]  __folio_batch_release+0x71/0xe0
[  339.674007][ T8210]  truncate_inode_pages_range+0x381/0xea0
[  339.679726][ T8210]  ? mapping_evict_folio+0x530/0x530
[  339.685008][ T8210]  ? do_raw_spin_unlock+0x121/0x230
[  339.690188][ T8210]  dbUnmount+0x109/0x180
[  339.694411][ T8210]  jfs_umount+0x235/0x3a0
[  339.698721][ T8210]  jfs_put_super+0x8c/0x190
[  339.703208][ T8210]  ? jfs_free_inode+0x30/0x30
[  339.707881][ T8210]  generic_shutdown_super+0x134/0x2b0
[  339.713232][ T8210]  kill_block_super+0x44/0x90
[  339.717889][ T8210]  deactivate_locked_super+0x97/0x100
[  339.723241][ T8210]  cleanup_mnt+0x3d7/0x460
[  339.727638][ T8210]  task_work_run+0x1d4/0x260
[  339.732210][ T8210]  ? task_work_cancel+0x220/0x220
[  339.737217][ T8210]  ? exit_to_user_mode_loop+0x3b/0x110
[  339.742662][ T8210]  exit_to_user_mode_loop+0xe6/0x110
[  339.747945][ T8210]  exit_to_user_mode_prepare+0xee/0x180
[  339.753475][ T8210]  syscall_exit_to_user_mode+0x1a/0x50
[  339.758916][ T8210]  do_syscall_64+0x61/0xb0
[  339.763309][ T8210]  ? clear_bhb_loop+0x40/0x90
[  339.767964][ T8210]  ? clear_bhb_loop+0x40/0x90
[  339.772618][ T8210]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  339.778497][ T8210] RIP: 0033:0x7f6ba999f3d7
[  339.782912][ T8210] Code: a2 c7 05 1c 63 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  339.802586][ T8210] RSP: 002b:00007fff16ae8d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  339.810976][ T8210] RAX: 0000000000000000 RBX: 00007f6ba9a34ccb RCX: 00007f6ba999f3d7
[  339.818943][ T8210] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff16ae8e00
[  339.826891][ T8210] RBP: 00007fff16ae8e00 R08: 00007fff16ae9e00 R09: 00000000ffffffff
[  339.834841][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff16ae9e90
[  339.842801][ T8210] R13: 00007f6ba9a34ccb R14: 00000000000529a4 R15: 00007fff16ae9ed0
[  339.850758][ T8210]  </TASK>
[  339.853770][    C0] vkms_vblank_simulate: vblank timer overrun
[  340.457701][   T41] wlan1: Creating new IBSS network, BSSID 32:e2:66:b0:97:1c
[  344.950704][ T5781] Bluetooth: hci1: command 0x0406 tx timeout
[  347.595106][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)