last executing test programs:

5m20.18213883s ago: executing program 0 (id=20):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000240)='./file2\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="2e2d703e85840c7ae1b446485929ca212e30c622f200f57a5e788ebfbc1998e3012e127f76629f84e03ba28bdb368b6f60e7c57cf8f6ed160acfbbcbbba88879160e532876fcef4fc917d74530f2d7fd029a5311"], 0x1, 0x10609, &(0x7f0000002380)="$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")
open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)

5m18.669317503s ago: executing program 0 (id=28):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = add_key$keyring(&(0x7f0000002c00), &(0x7f0000002c40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_security(0x11, r0, &(0x7f0000003040)=""/156, 0x9c)

5m16.914885712s ago: executing program 0 (id=38):
unshare(0x22020600)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4)

5m16.6404722s ago: executing program 0 (id=41):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1400c, &(0x7f00000004c0)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000500)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000009c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
llistxattr(&(0x7f0000000b40)='./file0\x00', 0x0, 0xfffffdf3)

5m15.627209643s ago: executing program 0 (id=45):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x2010008, &(0x7f0000000740), 0xff, 0x553, &(0x7f0000002bc0)="$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")
r0 = syz_create_resource$binfmt(&(0x7f0000003140)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
syz_mount_image$vfat(&(0x7f0000001680), &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000017c0))

5m14.885751038s ago: executing program 0 (id=50):
io_setup(0x3ff, &(0x7f0000000500)=<r0=>0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

5m14.449558172s ago: executing program 32 (id=50):
io_setup(0x3ff, &(0x7f0000000500)=<r0=>0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15)
io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

3m13.472725039s ago: executing program 5 (id=1084):
sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x20040004, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

3m12.5814059s ago: executing program 5 (id=1087):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ac, 0x8, 0x9, 0x4, 0xf1d, 0x7ff, 0x2, 0xc98]}}]}]}]}, 0x38}}, 0x0)

3m12.336425865s ago: executing program 5 (id=1089):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb510df7d3d58208060001080006040015aaaac2aaaa19ac1e0101aaaaaaaaaaaaac"], 0x0)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

3m12.046513464s ago: executing program 5 (id=1090):
syz_mount_image$ext4(&(0x7f0000000980)='ext2\x00', &(0x7f0000000900)='./file0\x00', 0x201804d, &(0x7f000001a1c0), 0x1, 0x491, &(0x7f000001a200)="$eJzs3M9vVNUeAPDvnf4ACrz28XgqiFJFY6OxpQWVhQswmrjQxEQXuKxtQaRQ01YjhGh1gUtDYtwalyb+Ba50Y9SViVt1bUiIYQPq5po7c287M8yM09JhgPl8kqHn3HMv53zvuWd6zr2dCaBnjWb/JBE7IuKXiBiuZGt3GK38uH71wsyfVy/MJJGmr/6RlPe7dvXCTLFrcdz2IrNSu73a0rnzp6fn5+cW8/zE8pm3J5bOnX/y1Jnpk3Mn585OHTly+NDkM09PPbUpcWZturb3/YV9e158/dLLM8cvvfHDV0kRf00c77b/n25tWTraYFtfkXi0/VruCDur0kl/FxvCurwZEVl3DZTH/3D0xVrnDccLH3W1cUBHpWmabmlevJICd7Ekut0CoDvy3/NJxMpMtgauXs83d/cs8K4cq4STxX09f1VK+qOU7zNQt77dTNmZPL7y1+fZK+rupwAAdMI3xyo/i7nf2vyjVDPJO5o/GxqJiP9GxK6I+F9E7I6I/0fEPRFxb0TcV3VMo+c+9eofktw4/yld3lBgbcrmf8/mz7Zq53/F7C9G+vLcznL8A8mJU/NzByPiPxExFgNbsvxkizq+ff7nT5qVjVbN/7JXVn8xF8zbcbm/7gbd7PTy9M3EXO3KhxF7+xvFn6zO8rN+3BMRe/dvrI5Tj3+5r1nZv8ffwiYsQ9IvIh6r9P9K1MVfSFo/n5zYGvNzByeKq+JGP/508ZVm9d9U/Jsg6/+hhtf/avwjSfXz2qX113Hx14+brmnavP4Hq4/Jrv/B5LVyuih4b3p5eXEyYjB56bPK9qP59tr6yvtNre2fxT92oPH43xVrZ+L+iMgu4gci4sGI2J+3/aGIeDgiDrSI//vnHnlr4/F3Vhb/7Lr6v2mieLY9tzgQNUV9p7/7ulxSdNZIi/iTaND/h8upsXxLO+9/LVu6eDNXMwAAANx5ShGxI5LS+Gq6VBofr/y9/O4YKs0vLC0/cWLhnbOzlc8IjMRAqbjTNbx6PzRWJvNlfXF/dKoufyi/b/xp37ZyfnxmYX6228FDj9veZPxnfu/rduuAjrt7/pwPWK+Njv80TT/Y5KYAt9i6xv9g59oB3HJD5v/QuxqM/211+RbfEQDcyRr9/rewh95g/g+9y/iH3mX8Q+/awPj/bagTDQFupfyT8P3tfMC/Y4ns/ad7tbeTiJoWpmmXmjF4e5yNciJKXas9Nnj4WJfO2N/5l23eHh3XZqLb70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACb458AAAD//9VN4x4=")
mount$overlay(0x0, &(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0\x00', 0x141104, 0x80)
getdents64(r0, 0x0, 0x0)

3m11.348705225s ago: executing program 5 (id=1097):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000380)={&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000580)={0x0, 0xfffffff5, &(0x7f00000005c0)=[{&(0x7f0000000600)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

3m10.659572825s ago: executing program 5 (id=1105):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000001540)='./sec\x00', &(0x7f0000001580)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x4)
readv(r0, &(0x7f0000001a40)=[{&(0x7f0000001a80)=""/240, 0xf0}], 0x1)

3m10.11351932s ago: executing program 33 (id=1105):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000001540)='./sec\x00', &(0x7f0000001580)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./sec/safesetid/gid_allowlist_policy\x00', 0x2, 0x4)
readv(r0, &(0x7f0000001a40)=[{&(0x7f0000001a80)=""/240, 0xf0}], 0x1)

2m3.86218173s ago: executing program 1 (id=1522):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x110)

2m3.587345397s ago: executing program 1 (id=1527):
unshare(0x22020400)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002580), 0x81402, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000002d80))

2m3.204963836s ago: executing program 1 (id=1530):
mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './mnt/module/block2mtd/parameters/block2mtd', [{0x20, '--+*!.V[)#-\x89%#!$([)^)},,&'}], 0xa, "1f"}, 0x4a)

1m59.584927454s ago: executing program 1 (id=1552):
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008", @ANYRES16=0x0], 0xe)

1m59.23125487s ago: executing program 1 (id=1553):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m58.883068305s ago: executing program 1 (id=1555):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"})

1m43.729091464s ago: executing program 34 (id=1555):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"})

5.156986946s ago: executing program 2 (id=2375):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x44, r0, 0x1, 0x70bd25, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x25e2906596869c9d}, 0x0)

4.806752141s ago: executing program 2 (id=2379):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x4}, {0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080)

4.484159444s ago: executing program 2 (id=2383):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0fc5:1227:b\nnf', 0xe)

4.12830711s ago: executing program 2 (id=2387):
r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab})
r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0)

3.677316866s ago: executing program 2 (id=2393):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000040)={{&(0x7f0000000280)=[{0x3, 0x0, 0x9, {0xfffffffffffffff7, 0x2}, 0x58, 0xffffffffffffc}], 0x1, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0x8}})

2.484032348s ago: executing program 2 (id=2405):
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0)

1.997389847s ago: executing program 6 (id=2410):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}]}]}, 0x20}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}]}]}, 0x64}}, 0x0)

1.786984178s ago: executing program 6 (id=2413):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x0, 0xd3)
read(r0, &(0x7f0000000780), 0x100)

1.701796467s ago: executing program 3 (id=2415):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/185, 0xb9}, 0x5}], 0x1, 0x142, 0x0)

1.67480231s ago: executing program 6 (id=2416):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010)

1.588437859s ago: executing program 3 (id=2418):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0xd)
ioctl$sock_SIOCADDDLCI(r0, 0x5452, &(0x7f0000000100)={'veth1\x00'})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x7)

1.557252082s ago: executing program 6 (id=2420):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pnp/devices/00:01/options\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020)

1.421078076s ago: executing program 6 (id=2422):
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000000000)={[{@flushoncommit}]}, 0x0, 0x51ac, &(0x7f0000005280)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000500)=0x2)
ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r0}, 0x0, 0x0, 0x8000000000000000, 0x3})

1.420722936s ago: executing program 3 (id=2423):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)

1.28094381s ago: executing program 3 (id=2426):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2010418, &(0x7f0000000180)={[{@debug}]}, 0x6, 0x4d0, &(0x7f0000000300)="$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")
r0 = open(&(0x7f0000000800)='./file1\x00', 0x80242, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000840)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0x2, 0xa, 0x3, 0x80, {0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x103, 0x5, 0x9, 0xe, 0x0, 0x2000, 0x20000000, 0x0, 0x0, 0x3ff, 0x1000}}, {0x0, 0x3}}}, 0xa0)
sendfile(r0, r0, &(0x7f0000000900)=0x2, 0x7f03)

1.101864078s ago: executing program 4 (id=2428):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/164], 0x119)
syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x81)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='fd/4\x00')

1.017425326s ago: executing program 4 (id=2429):
syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)={[{@map_off}, {@check_strict}, {@check_relaxed}, {@check_strict}]}, 0x0, 0x437, &(0x7f0000000ac0)="$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")
mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

864.402622ms ago: executing program 3 (id=2430):
syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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")
r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getdents(r0, &(0x7f00000001c0)=""/201, 0xc9)

859.670862ms ago: executing program 7 (id=2431):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
capset(&(0x7f000000af00)={0x20080522}, &(0x7f000000af40)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
setns(r1, 0x24020000)

700.649389ms ago: executing program 4 (id=2432):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280"], 0x24}}, 0x44004)

700.160639ms ago: executing program 7 (id=2433):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bond\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@RTM_NEWMDB={0x18, 0x55, 0x1, 0x70bd2c, 0x25dfdbfe, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x2000000}, 0x40080c0)

468.818632ms ago: executing program 7 (id=2434):
r0 = mq_open(&(0x7f00000004c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5\x00\x02\x00\x00\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x00\x00\x00\x00\x00\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xac8t\xc5\xd7Q?\xb4\xeex@\xe4\xcc\xfe\x98\xf63\xde\xcd\x1841\x93\xe5\xb7D\xd49\"\f<\x8d\xa5m\x883\xcf\xc7\xe5Y\xb6H\xa4\xc4_Q|\v\x06:\xdap48T\xa6\xcb:+\x7f\x9771fK=\xc2)\xa60\x1d>\xd2\xe8\xc0\x03\xa7e\xbeo\x8d\xe3\x854\x11\xc5d\xcb\x82', 0x40, 0x10a, 0x0)
r1 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x14, 0x0)
mq_notify(r1, &(0x7f0000000240)={0x0, 0x3, 0x1, @thr={0x0, 0x0}})
mq_notify(r0, &(0x7f0000000a00)={0x0, 0x2d, 0x0, @thr={0x0, 0x0}})

367.573463ms ago: executing program 7 (id=2435):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth0_macvtap\x00', 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0)

367.322123ms ago: executing program 4 (id=2436):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2e, 0x0, &(0x7f0000000240)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef852506b41edcd3beef9757a601bee936390", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x403}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

348.758224ms ago: executing program 6 (id=2437):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x40000)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x9)

196.50489ms ago: executing program 7 (id=2438):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0)
write(r0, &(0x7f00000000c0)='sessname=s1 device_path=/dev/ram0 path=ip', 0x29)

185.211301ms ago: executing program 4 (id=2439):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4)

101.69447ms ago: executing program 3 (id=2440):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xff, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=")
lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="747275738b65642e"], 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8)

14.043338ms ago: executing program 4 (id=2441):
r0 = socket(0xa, 0x3, 0xff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1000000, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40080}, 0x1c)

0s ago: executing program 7 (id=2442):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048010000180090001006d61737100000000140001800a0001007265646972000000040002800900020073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
close(0x3)

kernel console output (not intermixed with test programs):

 out of range 1-5
[  166.669592][ T6263] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  166.744181][ T6249] loop5: detected capacity change from 0 to 32768
[  166.771883][ T6263] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.605: Failed to acquire dquot type 1
[  166.800918][ T6249] find_entry called with index = 0
[  166.822203][ T6249] find_entry called with index >= next_index
[  166.833727][ T6249] find_entry called with index >= next_index
[  166.853596][ T6249] find_entry called with index = 0
[  166.858784][ T6249] find_entry called with index >= next_index
[  166.886336][ T6249] find_entry called with index >= next_index
[  166.905435][ T6263] EXT4-fs (loop2): 1 truncate cleaned up
[  166.912703][ T6249] find_entry called with index = 0
[  166.921212][ T6263] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  166.946570][ T6249] find_entry called with index >= next_index
[  166.973383][ T6249] find_entry called with index >= next_index
[  166.994311][ T6249] read_mapping_page failed!
[  167.021988][ T6249] ERROR: (device loop5): txCommit: 
[  167.021988][ T6249] 
[  167.089130][ T6272] jfs_mkdir: dtSearch returned -17
[  167.172380][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  167.634432][ T4265] kernel write not supported for file [eventfd] (pid: 4265 comm: kworker/0:3)
[  167.941670][ T6300] loop3: detected capacity change from 0 to 2048
[  168.004299][ T6300] EXT4-fs: Ignoring removed oldalloc option
[  168.102387][ T6300] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  168.207688][ T6300] EXT4-fs (loop3): shut down requested (2)
[  168.382116][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  168.486436][ T6292] loop2: detected capacity change from 0 to 32768
[  168.494845][ T6319] program syz.1.630 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  168.515390][ T6292] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.617 (6292)
[  168.567234][ T4357] kernel write not supported for file /vcsa1 (pid: 4357 comm: kworker/1:4)
[  168.589032][ T6292] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  168.643385][ T6292] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  168.652209][ T6292] BTRFS info (device loop2): setting nodatacow, compression disabled
[  168.703330][ T6292] BTRFS info (device loop2): turning on flush-on-commit
[  168.710942][ T6292] BTRFS info (device loop2): using free space tree
[  168.885389][ T6302] loop4: detected capacity change from 0 to 32768
[  168.970287][ T6292] BTRFS info (device loop2): enabling ssd optimizations
[  168.988137][ T6302] XFS (loop4): Mounting V5 Filesystem
[  169.122395][ T6302] XFS (loop4): Ending clean mount
[  169.161322][ T6302] XFS (loop4): Quotacheck needed: Please wait.
[  169.272941][ T6302] XFS (loop4): Quotacheck: Done.
[  169.378522][ T4284] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  169.632746][   T26] audit: type=1326 audit(1794402234.870:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca47a8f19 code=0x7fc00000
[  169.723426][   T26] audit: type=1326 audit(1794402234.900:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faca47a8f19 code=0x7fc00000
[  169.787267][ T4278] XFS (loop4): Unmounting Filesystem
[  169.857606][ T6365] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  169.899600][   T26] audit: type=1326 audit(1794402234.900:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca47a8f19 code=0x7fc00000
[  169.972312][   T26] audit: type=1326 audit(1794402234.900:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca47a8f19 code=0x7fc00000
[  170.002831][ T6365] syz.1.641 (6365) used greatest stack depth: 19792 bytes left
[  170.073488][   T26] audit: type=1326 audit(1794402234.900:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca47a8f19 code=0x7fc00000
[  170.173483][   T26] audit: type=1326 audit(1794402234.900:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca47a8f19 code=0x7fc00000
[  170.258493][   T26] audit: type=1326 audit(1794402234.900:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca47a8f19 code=0x7fc00000
[  170.326337][   T26] audit: type=1326 audit(1794402234.900:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca47a8f19 code=0x7fc00000
[  170.361826][   T26] audit: type=1326 audit(1794402234.900:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca47a8f19 code=0x7fc00000
[  170.583669][   T26] audit: type=1326 audit(1794402234.900:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6327 comm="syz.3.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca47a8f19 code=0x7fc00000
[  170.722789][ T6378] loop2: detected capacity change from 0 to 256
[  170.838771][ T6363] loop5: detected capacity change from 0 to 32768
[  170.986745][ T6363] XFS (loop5): Mounting V5 Filesystem
[  171.140145][ T6363] XFS (loop5): Ending clean mount
[  171.209387][ T6363] XFS (loop5): Quotacheck needed: Please wait.
[  171.330412][ T6363] XFS (loop5): Quotacheck: Done.
[  171.346759][ T6394] ip_tables: iptables: counters copy to user failed while replacing table
[  171.562032][ T4593] XFS (loop5): Unmounting Filesystem
[  172.049146][ T6412] loop1: detected capacity change from 0 to 512
[  172.107205][ T6412] EXT4-fs: Ignoring removed nobh option
[  172.232132][ T6412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  172.278841][ T6412] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.462932][ T6412] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #2: block 3: comm syz.1.658: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0
[  172.602761][ T6421] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #2: block 3: comm syz.1.658: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0
[  172.656481][ T6404] loop4: detected capacity change from 0 to 131072
[  172.717382][ T6404] F2FS-fs (loop4): invalid crc value
[  172.747002][ T6424] loop2: detected capacity change from 0 to 512
[  172.783148][ T6404] F2FS-fs (loop4): Found nat_bits in checkpoint
[  172.858114][ T6404] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  172.871743][ T6404] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  172.887357][ T6424] EXT4-fs (loop2): 1 truncate cleaned up
[  172.935825][ T6424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  172.947097][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  172.953470][ T6404] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  173.063781][ T6424] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.662: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  173.162242][ T6431] loop1: detected capacity change from 0 to 1024
[  173.174111][ T6424] EXT4-fs (loop2): Remounting filesystem read-only
[  173.310458][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  173.562971][ T4276] hfsplus: node 4:3 still has 1 user(s)!
[  173.747699][ T6422] loop3: detected capacity change from 0 to 32768
[  173.837410][ T6446] loop2: detected capacity change from 0 to 2048
[  173.935330][ T6446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.151545][ T6449] loop4: detected capacity change from 0 to 8192
[  174.228300][ T6449] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  174.391664][ T6449] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  174.403492][ T6449] REISERFS (device loop4): using ordered data mode
[  174.453379][ T6449] reiserfs: using flush barriers
[  174.503261][ T6449] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  174.603835][ T6449] REISERFS (device loop4): checking transaction log (loop4)
[  174.626333][ T6449] REISERFS (device loop4): Using r5 hash to sort names
[  174.660958][ T6449] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  175.370872][ T6457] loop2: detected capacity change from 0 to 32768
[  175.411483][ T6457] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.674 (6457)
[  175.487094][ T6457] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  175.523375][ T6457] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  175.576207][ T6457] BTRFS info (device loop2): using free space tree
[  175.793357][ T6457] BTRFS info (device loop2): enabling ssd optimizations
[  175.872414][ T6463] loop3: detected capacity change from 0 to 32768
[  176.041030][ T6463] XFS (loop3): Mounting V5 Filesystem
[  176.136560][ T4284] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  176.174786][ T6463] XFS (loop3): Ending clean mount
[  176.652284][ T4277] XFS (loop3): Unmounting Filesystem
[  176.960927][ T6516] loop5: detected capacity change from 0 to 2048
[  177.038921][ T6516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.463460][ T4390] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  177.509327][ T6522] loop2: detected capacity change from 0 to 256
[  177.588520][ T6522] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  177.678181][ T4390] usb 4-1: Using ep0 maxpacket: 8
[  177.685332][ T4390] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  177.701622][ T6524] loop5: detected capacity change from 0 to 8192
[  177.714768][ T4390] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  177.756133][ T6524] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  177.770873][ T4390] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  177.783359][ T4390] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  177.793380][ T6524] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  177.793766][ T6524] REISERFS (device loop5): using ordered data mode
[  177.804225][ T4390] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  177.824642][ T4390] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  177.838833][ T4390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.860126][ T6524] reiserfs: using flush barriers
[  177.909432][ T6524] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  177.985467][ T6524] REISERFS (device loop5): checking transaction log (loop5)
[  178.075873][ T4390] usb 4-1: GET_CAPABILITIES returned 0
[  178.081443][ T4390] usbtmc 4-1:16.0: can't read capabilities
[  178.293117][ T6531] usb usb7: usbfs: process 6531 (syz.4.694) did not claim interface 0 before use
[  178.330209][ T6524] REISERFS (device loop5): Using tea hash to sort names
[  178.346516][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.359521][ T6524] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  178.370448][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.384675][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.393832][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.402967][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.412096][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.421336][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.513487][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.522664][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.531813][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.540941][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.550098][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.594226][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.603486][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.612767][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.621995][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  178.661616][ T4390] usb 4-1: USB disconnect, device number 6
[  178.901265][ T6543] loop2: detected capacity change from 0 to 256
[  179.614881][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.706'.
[  179.704830][ T6539] loop5: detected capacity change from 0 to 32768
[  179.832289][ T6539] XFS (loop5): Mounting V5 Filesystem
[  179.967803][ T6539] XFS (loop5): Ending clean mount
[  180.093414][ T4265] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  180.126389][ T4593] XFS (loop5): Unmounting Filesystem
[  180.284711][ T4265] usb 4-1: Using ep0 maxpacket: 8
[  180.304182][ T4265] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  180.312560][ T4265] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  180.342998][ T4265] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  180.364221][ T4265] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  180.379794][ T4265] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  180.402842][ T6557] loop2: detected capacity change from 0 to 32768
[  180.414788][ T4265] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  180.455460][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.529464][ T6557] XFS (loop2): Mounting V5 Filesystem
[  180.641314][ T6557] XFS (loop2): Ending clean mount
[  180.675332][ T6557] XFS (loop2): Quotacheck needed: Please wait.
[  180.717430][ T4265] usb 4-1: GET_CAPABILITIES returned 0
[  180.723006][ T4265] usbtmc 4-1:16.0: can't read capabilities
[  180.795516][ T6557] XFS (loop2): Quotacheck: Done.
[  180.827967][ T6580] loop5: detected capacity change from 0 to 1024
[  180.923994][ T4284] XFS (loop2): Unmounting Filesystem
[  180.942119][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.951394][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.960526][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.969699][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  180.978823][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.052053][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.061226][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.071565][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.080724][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.089940][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.099081][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.135323][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.144501][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.153646][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.162785][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.178064][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  181.202172][ T5258] usb 4-1: USB disconnect, device number 7
[  181.406459][ T4593] hfsplus: node 4:3 still has 1 user(s)!
[  181.754213][ T6594] loop1: detected capacity change from 0 to 4096
[  181.802588][ T6596] loop5: detected capacity change from 0 to 256
[  181.848878][ T6596] exfat: Deprecated parameter 'namecase'
[  181.891168][ T6594] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  181.919547][ T6596] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  182.067402][ T6599] loop2: detected capacity change from 0 to 4096
[  182.116142][ T6599] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  182.206713][ T6601] loop3: detected capacity change from 0 to 8192
[  182.303535][ T6601] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  182.463151][ T6601] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  182.503697][ T6601] REISERFS (device loop3): using ordered data mode
[  182.544231][ T6601] reiserfs: using flush barriers
[  182.566090][ T6601] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  182.633861][ T6601] REISERFS (device loop3): checking transaction log (loop3)
[  182.665077][ T6601] REISERFS (device loop3): Using r5 hash to sort names
[  182.672925][ T6601] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  183.410974][ T6639] loop5: detected capacity change from 0 to 1024
[  183.430617][ T6639] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  183.475459][ T6639] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  183.484626][ T6639] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  183.555864][ T6622] loop2: detected capacity change from 0 to 32768
[  183.599755][ T6641] loop3: detected capacity change from 0 to 2048
[  183.654184][ T6622] XFS (loop2): Mounting V5 Filesystem
[  183.686835][ T4593] EXT4-fs (loop5): unmounting filesystem.
[  183.748774][ T6641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.776619][ T6622] XFS (loop2): Ending clean mount
[  184.048081][ T4284] XFS (loop2): Unmounting Filesystem
[  184.250063][ T6667] loop3: detected capacity change from 0 to 1024
[  184.323526][ T6667] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  184.436043][ T6667] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  184.491109][ T6667] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  184.551827][ T6677] loop1: detected capacity change from 0 to 512
[  184.641739][ T6677] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  184.721360][ T6677] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.746: invalid indirect mapped block 32768 (level 2)
[  184.853990][ T6677] EXT4-fs (loop1): 1 orphan inode deleted
[  184.859985][ T6677] EXT4-fs (loop1): 1 truncate cleaned up
[  184.868385][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  184.919179][ T6677] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  184.988385][ T6689] loop4: detected capacity change from 0 to 512
[  185.193109][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  185.429744][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.753'.
[  185.849706][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.760'.
[  185.868566][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.760'.
[  185.999408][ T6714] loop1: detected capacity change from 0 to 8192
[  186.080154][ T6714] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  186.123366][ T6714] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  186.152595][ T6714] REISERFS (device loop1): using ordered data mode
[  186.159932][ T6714] reiserfs: using flush barriers
[  186.166976][ T6714] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  186.183796][ T6714] REISERFS (device loop1): checking transaction log (loop1)
[  186.192421][ T6714] REISERFS (device loop1): Using r5 hash to sort names
[  186.201331][ T6714] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  186.308092][ T6726] loop3: detected capacity change from 0 to 256
[  186.390794][ T6726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d)
[  186.921978][ T6738] vhci_hcd vhci_hcd.0: failed to lookup sock
[  187.073094][ T6742] loop2: detected capacity change from 0 to 512
[  187.152999][ T6742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  187.181377][ T6742] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.455187][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  187.471818][ T6753] loop4: detected capacity change from 0 to 4096
[  187.553617][ T4536] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  187.585574][ T6753] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  187.781394][ T4536] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.818817][ T4536] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 768
[  187.843410][ T4536] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  187.894718][ T4536] usb 4-1: New USB device found, idVendor=7b4c, idProduct=0000, bcdDevice= 0.00
[  187.923452][ T4536] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  187.952051][ T4536] usb 4-1: SerialNumber: syz
[  187.988553][ T4536] usb-storage 4-1:1.0: USB Mass Storage device detected
[  188.039960][ T4536] scsi host1: usb-storage 4-1:1.0
[  188.238992][ T5258] usb 4-1: USB disconnect, device number 8
[  188.427724][ T6759] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  188.439467][ T6759] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  188.463643][ T6759] F2FS-fs (loop1): invalid crc value
[  188.473825][ T6759] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  188.538025][ T6759] F2FS-fs (loop1): Found nat_bits in checkpoint
[  188.650556][ T6777] set_capacity_and_notify: 1 callbacks suppressed
[  188.650573][ T6777] loop2: detected capacity change from 0 to 256
[  188.692825][ T6759] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  188.716004][ T6777] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  188.736544][ T6759] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  188.935421][ T4276] syz-executor: attempt to access beyond end of device
[  188.935421][ T4276] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  189.561619][ T6792] loop2: detected capacity change from 0 to 1024
[  190.111133][ T6802] ip_tables: iptables: counters copy to user failed while replacing table
[  190.148668][ T6802] ip_tables: iptables: counters copy to user failed while replacing table
[  190.280944][ T5258] hid-generic 0005:046D:C082.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0
[  190.551609][ T6809] fido_id[6809]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  190.903420][ T4536] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  190.947711][ T6821] loop1: detected capacity change from 0 to 8192
[  191.034410][ T6821] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  191.093499][ T4536] usb 5-1: Using ep0 maxpacket: 8
[  191.100612][ T4536] usb 5-1: config 0 has no interfaces?
[  191.103653][ T6821] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  191.111595][ T4536] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  191.125468][ T4536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.138113][ T4536] usb 5-1: config 0 descriptor??
[  191.154783][ T6821] REISERFS (device loop1): using ordered data mode
[  191.161538][ T6821] reiserfs: using flush barriers
[  191.192007][ T6821] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  191.219314][ T6821] REISERFS (device loop1): checking transaction log (loop1)
[  191.348641][ T4539] usb 5-1: USB disconnect, device number 8
[  191.536547][ T6821] REISERFS (device loop1): Using tea hash to sort names
[  191.544381][ T6821] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  191.792180][ T6841] program syz.2.815 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  192.098279][ T6849] netlink: 84 bytes leftover after parsing attributes in process `syz.5.820'.
[  192.141208][ T6849] netlink: 140 bytes leftover after parsing attributes in process `syz.5.820'.
[  192.482694][ T6869] device macvlan0 entered promiscuous mode
[  192.530776][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.827'.
[  192.583282][ T4357] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  192.657367][ T6867] loop4: detected capacity change from 0 to 8192
[  192.697950][ T6867] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  192.726315][ T6867] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  192.768789][ T6867] REISERFS (device loop4): using ordered data mode
[  192.793500][ T4357] usb 2-1: Using ep0 maxpacket: 8
[  192.800946][ T4357] usb 2-1: config 3 has an invalid interface number: 45 but max is 0
[  192.815681][ T6867] reiserfs: using flush barriers
[  192.859478][ T6867] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  192.871178][ T4357] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  192.878833][ T6867] REISERFS (device loop4): checking transaction log (loop4)
[  192.944546][ T6881] program syz.3.833 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  192.957592][ T4357] usb 2-1: config 3 has no interface number 0
[  192.978564][ T4357] usb 2-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.023382][ T4357] usb 2-1: config 3 interface 45 has no altsetting 0
[  193.043635][ T4357] usb 2-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  193.075566][ T4357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.093835][ T4357] usb 2-1: Product: syz
[  193.115484][ T4357] usb 2-1: Manufacturer: syz
[  193.120158][ T4357] usb 2-1: SerialNumber: syz
[  193.199590][ T6867] REISERFS (device loop4): Using tea hash to sort names
[  193.245884][ T6867] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  193.313026][ T6886] loop3: detected capacity change from 0 to 164
[  193.495661][ T4357] usb 2-1: USB disconnect, device number 6
[  193.682274][ T6891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.837'.
[  193.728145][ T6891] netlink: 'syz.3.837': attribute type 7 has an invalid length.
[  193.753917][ T6891] netlink: 'syz.3.837': attribute type 8 has an invalid length.
[  193.784575][ T6896] netlink: 16 bytes leftover after parsing attributes in process `syz.2.839'.
[  193.791181][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'.
[  193.841041][ T6891] device gretap0 entered promiscuous mode
[  193.874365][ T6891] device gretap0 left promiscuous mode
[  193.904658][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  194.142221][ T6902] loop4: detected capacity change from 0 to 2048
[  194.216193][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  194.222583][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  194.262208][ T6913] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.297471][ T6911] loop2: detected capacity change from 0 to 1024
[  194.363028][ T6911] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869)
[  194.389054][ T6913] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  194.415281][ T6911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  194.443394][ T6911] System zones: 0-1, 3-36
[  194.448217][ T6911] EXT4-fs (loop2): orphan cleanup on readonly fs
[  194.462046][ T6913] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  194.539886][ T6913] Remounting filesystem read-only
[  194.556698][ T6911] EXT4-fs (loop2): 1 orphan inode deleted
[  194.633547][ T6922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.850'.
[  194.649672][ T6911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  194.740925][ T6911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002]
[  194.768047][ T6911] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  194.790821][ T6911] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.846: Block bitmap for bg 0 marked uninitialized
[  194.900541][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  194.949865][ T6927] loop3: detected capacity change from 0 to 8192
[  195.012284][ T6927] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  195.098359][ T6938] loop4: detected capacity change from 0 to 512
[  195.110395][ T6927] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  195.120200][ T6927] REISERFS (device loop3): using ordered data mode
[  195.128282][ T6927] reiserfs: using flush barriers
[  195.145368][ T6927] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  195.189030][ T6938] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.855: missing EA_INODE flag
[  195.207383][ T6927] REISERFS (device loop3): checking transaction log (loop3)
[  195.267221][ T6938] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.855: error while reading EA inode 2 err=-117
[  195.303270][ T6941] loop2: detected capacity change from 0 to 512
[  195.320551][ T6938] EXT4-fs (loop4): 1 orphan inode deleted
[  195.333079][ T6941] EXT4-fs: Ignoring removed oldalloc option
[  195.341288][ T6938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  195.369280][ T6941] EXT4-fs: Ignoring removed i_version option
[  195.419889][ T6941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  195.496784][ T6927] REISERFS (device loop3): Using tea hash to sort names
[  195.530153][ T6941] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.856: invalid block
[  195.548980][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  195.563686][ T6927] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  195.663564][ T6941] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.856: invalid indirect mapped block 4294967295 (level 1)
[  195.715176][ T6941] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.856: invalid indirect mapped block 4294967295 (level 1)
[  195.768945][ T6941] EXT4-fs (loop2): 2 truncates cleaned up
[  195.787631][ T6941] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  195.881410][ T6941] EXT4-fs (loop2): shut down requested (1)
[  196.025559][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  196.462307][ T6964] loop1: detected capacity change from 0 to 256
[  196.557693][ T6964] FAT-fs (loop1): Directory bread(block 64) failed
[  196.571306][ T6964] FAT-fs (loop1): Directory bread(block 65) failed
[  196.581493][ T6964] FAT-fs (loop1): Directory bread(block 66) failed
[  196.593708][ T6964] FAT-fs (loop1): Directory bread(block 67) failed
[  196.610637][ T6964] FAT-fs (loop1): Directory bread(block 68) failed
[  196.617460][ T6964] FAT-fs (loop1): Directory bread(block 69) failed
[  196.633423][ T6964] FAT-fs (loop1): Directory bread(block 70) failed
[  196.652048][ T6964] FAT-fs (loop1): Directory bread(block 71) failed
[  196.670980][ T6964] FAT-fs (loop1): Directory bread(block 72) failed
[  196.691176][ T6964] FAT-fs (loop1): Directory bread(block 73) failed
[  196.784904][ T4265] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  196.996048][ T4265] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.017415][ T4265] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 768
[  197.055618][ T4265] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  197.100302][ T6962] loop5: detected capacity change from 0 to 40427
[  197.107927][ T4265] usb 3-1: New USB device found, idVendor=7b4c, idProduct=0000, bcdDevice= 0.00
[  197.136767][ T4265] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  197.145124][ T4265] usb 3-1: SerialNumber: syz
[  197.162002][ T6962] F2FS-fs (loop5): invalid crc value
[  197.201596][ T4265] usb-storage 3-1:1.0: USB Mass Storage device detected
[  197.244817][ T4265] scsi host1: usb-storage 3-1:1.0
[  197.252244][ T6962] F2FS-fs (loop5): Found nat_bits in checkpoint
[  197.353021][ T6988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.872'.
[  197.398259][ T4265] usb 3-1: USB disconnect, device number 4
[  197.434819][ T6962] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  197.480931][ T6962] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  197.750672][ T4593] syz-executor: attempt to access beyond end of device
[  197.750672][ T4593] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  198.440227][   T26] kauditd_printk_skb: 33 callbacks suppressed
[  198.440243][   T26] audit: type=1326 audit(1794402263.680:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7011 comm="syz.1.886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03c35a8f19 code=0x0
[  199.061954][ T7010] loop2: detected capacity change from 0 to 40427
[  199.102104][ T7010] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  199.125919][ T7010] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  199.154051][ T7010] F2FS-fs (loop2): invalid crc value
[  199.181062][ T7010] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  199.476254][ T7010] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  199.502909][ T7010] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  199.525949][ T7050] loop1: detected capacity change from 0 to 1024
[  199.611465][ T7052] loop5: detected capacity change from 0 to 512
[  199.665420][ T7052] EXT4-fs: Ignoring removed oldalloc option
[  199.705433][ T7052] EXT4-fs: Ignoring removed i_version option
[  199.755022][ T7052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  199.889349][ T7052] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.902: invalid indirect mapped block 4294967295 (level 1)
[  199.950022][ T7052] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.902: invalid indirect mapped block 4294967295 (level 1)
[  199.977365][ T7052] EXT4-fs (loop5): 2 truncates cleaned up
[  199.984253][ T7052] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  200.009581][ T4284] syz-executor: attempt to access beyond end of device
[  200.009581][ T4284] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  200.075904][ T7052] EXT4-fs (loop5): shut down requested (1)
[  200.202131][ T4593] EXT4-fs (loop5): unmounting filesystem.
[  200.362493][ T7064] loop1: detected capacity change from 0 to 64
[  201.003332][ T4265] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  201.197425][ T4265] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  201.217927][ T4265] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  201.238431][ T7082] device veth0_virt_wifi entered promiscuous mode
[  201.248652][ T4265] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  201.279742][ T4265] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  201.302260][ T4265] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  201.320626][ T4265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.336276][ T7074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  201.344397][ T7074] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  201.353570][ T4265] pl2303 4-1:1.0: pl2303 converter detected
[  201.363452][ T4265] usb 4-1: pl2303 converter now attached to ttyUSB0
[  201.678746][ T7074] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  201.697166][ T7074] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  201.719059][ T7074] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  201.736554][ T7074] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  201.758012][ T7074] pl2303 ttyUSB0: failed to submit interrupt urb: -90
[  201.780108][ T4265] usb 4-1: USB disconnect, device number 9
[  201.782186][ T7091] loop1: detected capacity change from 0 to 2048
[  201.806218][ T4265] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  201.842079][ T7091] NILFS (loop1): invalid segment: Magic number mismatch
[  201.860217][ T7091] NILFS (loop1): trying rollback from an earlier position
[  201.862801][ T4265] pl2303 4-1:1.0: device disconnected
[  201.950058][ T7091] NILFS (loop1): recovery complete
[  201.972200][ T7095] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.692319][ T7123] kvm [7122]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x80000006
[  202.738855][ T7130] loop1: detected capacity change from 0 to 128
[  202.743931][ T4536] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  202.965395][ T4536] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  202.980568][ T4536] usb 4-1: config 1 has no interface number 0
[  203.011411][ T4536] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  203.041299][ T4536] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.056864][ T4536] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  203.066518][ T4536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.083518][ T4536] usb 4-1: Product: syz
[  203.087792][ T4536] usb 4-1: Manufacturer: syz
[  203.092434][ T4536] usb 4-1: SerialNumber: syz
[  203.126777][ T7115] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  203.145032][ T4536] usb 4-1: Expected 3 endpoints, found: 2
[  203.472356][ T4357] usb 4-1: USB disconnect, device number 10
[  203.709590][ T7161] program syz.5.953 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  203.958584][ T7167] netlink: 'syz.4.956': attribute type 7 has an invalid length.
[  204.211259][ T7157] loop1: detected capacity change from 0 to 32768
[  204.350193][   T26] audit: type=1326 audit(1794402269.590:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7172 comm="syz.3.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faca47a8f19 code=0x0
[  204.582483][ T7163] loop2: detected capacity change from 0 to 32768
[  204.676583][ T7163] XFS (loop2): Mounting V5 Filesystem
[  204.794393][ T7163] XFS (loop2): Ending clean mount
[  205.015534][ T7165] loop5: detected capacity change from 0 to 40427
[  205.060478][ T4284] XFS (loop2): Unmounting Filesystem
[  205.071964][ T7165] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  205.114238][ T7165] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  205.144387][ T7165] F2FS-fs (loop5): invalid crc value
[  205.235237][ T7165] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  205.503314][ T7165] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  205.533289][ T7165] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  205.705068][ T4593] syz-executor: attempt to access beyond end of device
[  205.705068][ T4593] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  205.925573][ T7192] loop1: detected capacity change from 0 to 40427
[  206.111616][ T7192] F2FS-fs (loop1): invalid crc value
[  206.173588][ T7192] F2FS-fs (loop1): Found nat_bits in checkpoint
[  206.496287][ T7192] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  206.593845][ T4291] Bluetooth: hci4: command 0x0406 tx timeout
[  206.599975][ T4291] Bluetooth: hci2: command 0x0406 tx timeout
[  206.606312][ T4280] Bluetooth: hci1: command 0x0406 tx timeout
[  206.817618][ T7199] loop3: detected capacity change from 0 to 40427
[  206.884578][ T7209] loop4: detected capacity change from 0 to 131072
[  206.902674][ T7209] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  206.909497][ T7209] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  206.923016][ T7199] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  206.929491][ T7199] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  206.939333][ T7199] F2FS-fs (loop3): invalid crc value
[  206.945360][ T7209] F2FS-fs (loop4): invalid crc value
[  207.001431][ T7209] F2FS-fs (loop4): Found nat_bits in checkpoint
[  207.059838][ T7199] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  207.081721][ T7209] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  207.088963][ T7209] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  207.118309][ T7226] Set syz0 is full, maxelem 0 reached
[  207.175463][ T7209] F2FS-fs (loop4): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix
[  207.405903][ T7199] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  207.442958][   T26] audit: type=1400 audit(1794402272.680:201): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="p" pid=7230 comm="syz.2.974" name="p" offset=79
[  207.457393][ T7199] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  207.740597][ T4277] syz-executor: attempt to access beyond end of device
[  207.740597][ T4277] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  208.060304][ T7242] loop4: detected capacity change from 0 to 2048
[  208.071641][ T7244] netlink: 'syz.2.982': attribute type 8 has an invalid length.
[  208.162313][ T7242] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  208.197474][ T7242] EXT4-fs (loop4): shut down requested (2)
[  208.409118][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  208.528290][ T7253] pimreg0: tun_chr_ioctl cmd 1074025677
[  208.546475][ T7253] pimreg0: linktype set to 773
[  208.617424][ T7255] loop4: detected capacity change from 0 to 512
[  208.669679][ T7255] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.984: inode has both inline data and extents flags
[  208.774900][ T7255] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.984: couldn't read orphan inode 15 (err -117)
[  208.828267][ T7255] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  208.850334][ T7251] loop2: detected capacity change from 0 to 32768
[  209.145474][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  209.413531][ T4390] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  209.551718][ T7277] loop4: detected capacity change from 0 to 128
[  209.607424][ T7277] EXT4-fs: Ignoring removed i_version option
[  209.636413][ T4390] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[  209.654502][ T4390] usb 6-1: config 1 has no interface number 0
[  209.667444][ T7277] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  209.698364][ T4390] usb 6-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  209.729841][ T7277] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  209.761829][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.776511][ T4390] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.855110][ T4390] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  209.883534][ T4390] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.895259][ T4390] usb 6-1: Product: syz
[  209.899499][ T4390] usb 6-1: Manufacturer: syz
[  209.904567][ T4390] usb 6-1: SerialNumber: syz
[  209.936866][ T7263] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  209.955190][ T4390] usb 6-1: Expected 3 endpoints, found: 2
[  210.238645][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  210.353517][ T4536] usb 6-1: USB disconnect, device number 5
[  210.429706][ T7298] netlink: 'syz.1.1002': attribute type 8 has an invalid length.
[  210.988967][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1010'.
[  211.139864][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'.
[  211.582637][ T7325] loop1: detected capacity change from 0 to 256
[  211.704501][ T7325] FAT-fs (loop1): Directory bread(block 64) failed
[  211.769982][ T7325] FAT-fs (loop1): Directory bread(block 65) failed
[  211.793449][ T7325] FAT-fs (loop1): Directory bread(block 66) failed
[  211.863354][ T7325] FAT-fs (loop1): Directory bread(block 67) failed
[  211.870056][ T7325] FAT-fs (loop1): Directory bread(block 68) failed
[  211.930857][ T7325] FAT-fs (loop1): Directory bread(block 69) failed
[  211.951407][ T7311] loop3: detected capacity change from 0 to 131072
[  211.963620][ T7311] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  211.970382][ T7311] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  211.984854][ T7325] FAT-fs (loop1): Directory bread(block 70) failed
[  211.991465][ T7325] FAT-fs (loop1): Directory bread(block 71) failed
[  211.998166][ T7325] FAT-fs (loop1): Directory bread(block 72) failed
[  212.004888][ T7325] FAT-fs (loop1): Directory bread(block 73) failed
[  212.012221][ T7311] F2FS-fs (loop3): invalid crc value
[  212.043054][ T7311] F2FS-fs (loop3): Found nat_bits in checkpoint
[  212.107840][ T7311] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  212.115153][ T7311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  212.165066][ T7311] F2FS-fs (loop3): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix
[  212.218848][ T7325] syz.1.1017: attempt to access beyond end of device
[  212.218848][ T7325] loop1: rw=2049, sector=1240, nr_sectors = 32 limit=256
[  212.444819][ T4370] kworker/u4:6: attempt to access beyond end of device
[  212.444819][ T4370] loop1: rw=1, sector=1224, nr_sectors = 16 limit=256
[  212.866696][ T7336] loop3: detected capacity change from 0 to 8192
[  212.890169][ T7336] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  213.408031][ T7333] loop4: detected capacity change from 0 to 32768
[  213.444892][ T7347] loop3: detected capacity change from 0 to 64
[  213.514903][ T7333] XFS (loop4): Mounting V5 Filesystem
[  213.519513][ T7347] syz.3.1025: attempt to access beyond end of device
[  213.519513][ T7347] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64
[  213.535154][ T7347] Buffer I/O error on dev loop3, logical block 512, async page read
[  213.543523][ T7347] syz.3.1025: attempt to access beyond end of device
[  213.543523][ T7347] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64
[  213.566702][ T7347] Buffer I/O error on dev loop3, logical block 56576, async page read
[  213.633080][ T7333] XFS (loop4): Ending clean mount
[  213.938659][ T4278] XFS (loop4): Unmounting Filesystem
[  214.074859][ T7362] netlink: 'syz.1.1028': attribute type 11 has an invalid length.
[  214.103879][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'.
[  214.763924][ T7385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1040'.
[  214.947412][ T7395] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  214.975161][ T7395] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  215.170183][ T7406] loop2: detected capacity change from 0 to 64
[  215.250590][ T7406] BFS-fs: bfs_readdir(): Bad f_pos=00000001 for loop2:00000002
[  215.573376][ T4536] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  215.610477][ T7422] loop1: detected capacity change from 0 to 512
[  215.640147][ T7422] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  215.692282][ T7422] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.1056: bad orphan inode 131083
[  215.715409][ T7422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  215.763429][ T4536] usb 5-1: Using ep0 maxpacket: 8
[  215.771001][ T4536] usb 5-1: unable to get BOS descriptor or descriptor too short
[  215.790844][ T4536] usb 5-1: config 4 interface 0 has no altsetting 0
[  215.806542][ T4536] usb 5-1: string descriptor 0 read error: -22
[  215.813536][ T4536] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  215.822629][ T4536] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  215.841509][ T4536] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  215.868546][ T4536] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  215.885275][ T4536] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  215.898084][ T4536] usb 5-1: media controller created
[  215.950043][ T4536] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  216.032755][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  216.206814][ T7438] netlink: 'syz.3.1062': attribute type 34 has an invalid length.
[  216.314270][ T4536] zl10353_read_register: readreg error (reg=127, ret==0)
[  216.405340][ T4536] usb 5-1: USB disconnect, device number 9
[  216.545779][ T7452] Format for adding new device is "id port_count num_queues" (uint uint unit).
[  216.810768][ T7461] bond0: option arp_validate: invalid value (a)
[  217.095331][ T7444] loop2: detected capacity change from 0 to 32768
[  217.129700][ T7444] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1066 (7444)
[  217.161987][ T7444] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  217.189899][ T7444] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  217.229219][ T7444] BTRFS info (device loop2): using free space tree
[  217.370549][ T7483] loop5: detected capacity change from 0 to 256
[  217.392606][ T7486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1077'.
[  217.503825][ T7483] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  217.621933][ T7483] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff)
[  217.689252][ T7444] BTRFS info (device loop2): enabling ssd optimizations
[  217.863385][ T4539] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  217.886958][ T7463] loop1: detected capacity change from 0 to 40427
[  217.898654][ T4284] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  217.938475][ T7463] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  217.961403][ T7463] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  218.009488][ T7463] F2FS-fs (loop1): invalid crc value
[  218.049549][ T7463] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  218.073286][ T4539] usb 5-1: Using ep0 maxpacket: 16
[  218.081254][ T4539] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  218.128400][ T4539] usb 5-1: config 0 has no interface number 0
[  218.153363][ T4539] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.195355][ T4539] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.210894][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1084'.
[  218.230846][ T4539] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.246905][ T4451] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (4451)
[  218.270824][ T4539] usb 5-1: config 0 interface 1 has no altsetting 0
[  218.279261][ T7509] device batadv0 entered promiscuous mode
[  218.290206][ T4539] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  218.308995][ T7509] device macsec2 entered promiscuous mode
[  218.328660][ T4539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.342220][ T7463] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  218.359788][ T7463] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  218.378810][ T4539] usb 5-1: config 0 descriptor??
[  218.410488][ T4539] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count
[  218.623774][ T7509] device batadv0 left promiscuous mode
[  218.805169][ T4276] syz-executor: attempt to access beyond end of device
[  218.805169][ T4276] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  218.827085][ T4539] elan 0003:04F3:074D.0007: failed to start in urb: -90
[  219.037367][ T4539] elan 0003:04F3:074D.0007: Set report error for parm 6: -71
[  219.054166][ T4539] elan 0003:04F3:074D.0007: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.4-1/input1
[  219.083839][ T4539] elan 0003:04F3:074D.0007: Input device is not registered
[  219.131108][ T4539] elan: probe of 0003:04F3:074D.0007 failed with error -119
[  219.191773][ T7521] loop2: detected capacity change from 0 to 512
[  219.209276][ T4539] usb 5-1: USB disconnect, device number 10
[  219.239873][ T7521] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.1088: missing EA_INODE flag
[  219.319335][ T7521] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1088: error while reading EA inode 2 err=-117
[  219.383031][ T7521] EXT4-fs (loop2): 1 orphan inode deleted
[  219.414490][ T7521] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  219.414602][ T7512] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  219.501639][ T7521] EXT4-fs warning (device loop2): ext4_empty_dir:3149: inode #2: comm syz.2.1088: directory missing '.'
[  219.522025][ T7523] fido_id[7523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  219.634391][ T7512] usb 4-1: Using ep0 maxpacket: 8
[  219.643588][ T7512] usb 4-1: unable to get BOS descriptor or descriptor too short
[  219.657618][ T7529] loop5: detected capacity change from 0 to 512
[  219.674961][ T7512] usb 4-1: config 4 interface 0 has no altsetting 0
[  219.683021][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  219.714620][ T7512] usb 4-1: string descriptor 0 read error: -22
[  219.738792][ T7529] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  219.752299][ T7512] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  219.789661][ T7512] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  219.800386][ T7529] EXT4-fs (loop5): orphan cleanup on readonly fs
[  219.845045][ T7536] program syz.4.1093 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  219.856679][ T7529] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1090: bg 0: block 104: invalid block bitmap
[  219.884870][ T7512] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  219.902906][ T7529] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6195: Corrupt filesystem
[  219.957518][ T7512] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  219.968753][ T7529] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1090: invalid indirect mapped block 1 (level 1)
[  219.993052][ T7512] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  220.013086][ T7512] usb 4-1: media controller created
[  220.021727][ T7529] EXT4-fs (loop5): 1 truncate cleaned up
[  220.027734][ T6509] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  220.050931][ T7529] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  220.092951][ T7512] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  220.219755][ T4593] EXT4-fs error (device loop5): __ext4_iget:5135: inode #13: block 7962: comm syz-executor: invalid block
[  220.240538][ T6509] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.261245][ T6509] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64
[  220.284314][ T6509] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.312386][ T4593] EXT4-fs error (device loop5): __ext4_iget:5135: inode #13: block 7962: comm syz-executor: invalid block
[  220.322264][ T6509] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  220.338410][ T7512] zl10353_read_register: readreg error (reg=127, ret==0)
[  220.344583][ T6509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.376766][ T6509] usb 2-1: Product: syz
[  220.381007][ T6509] usb 2-1: Manufacturer: syz
[  220.414138][ T6509] usb 2-1: SerialNumber: syz
[  220.449901][ T7512] usb 4-1: USB disconnect, device number 11
[  220.793920][ T7554] atomic_op ffff888073652198 conn xmit_atomic 0000000000000000
[  220.810821][ T4593] EXT4-fs (loop5): unmounting filesystem.
[  220.841204][ T7531] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  220.961728][ T7556] IPVS: sed: FWM 3 0x00000003 - no destination available
[  221.035432][ T4405] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.088837][ T7558] loop4: detected capacity change from 0 to 512
[  221.128285][ T7558] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  221.168121][ T7558] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.1103: bad orphan inode 131083
[  221.236044][ T7558] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  221.293442][ T6509] ATM dev 0: failed to start ADSL synchronisation: -71
[  221.300963][    C1] ATM dev 0: usbatm_complete: urb 0xffff8880283be100 failed (-71)!
[  221.308991][    C1] ATM dev 0: usbatm_complete: urb 0xffff8880283beb00 failed (-71)!
[  221.316969][    C1] ATM dev 0: usbatm_complete: urb 0xffff8880283be400 failed (-71)!
[  221.324934][    C1] ATM dev 0: usbatm_complete: urb 0xffff8880283be200 failed (-71)!
[  221.346228][ T4405] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.413447][ T6509] usb 2-1: USB disconnect, device number 7
[  221.481573][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  221.634049][ T4405] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.772345][ T4405] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.340518][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  222.363330][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  222.375514][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  222.387179][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  222.398111][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  222.407563][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  222.510985][ T4536] smpboot: CPU 1 is now offline
[  222.737062][ T7588] rxe_eth0 speed is unknown, defaulting to 1000
[  223.097318][ T7600] loop3: detected capacity change from 0 to 256
[  223.572997][ T7605] ALSA: mixer_oss: invalid OSS volume '¾áÿôƒxŠ·*ß'
[  223.951522][ T7614] digital: digital_start_poll: Unknown protocol
[  224.453606][ T4291] Bluetooth: hci3: command 0x0409 tx timeout
[  224.593374][ T4540] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  224.825441][ T4540] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  224.880196][ T4540] usb 2-1: config 0 has no interface number 0
[  224.950121][ T4540] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  224.994058][ T4540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.038840][ T4540] usb 2-1: Product: syz
[  225.063626][ T4540] usb 2-1: Manufacturer: syz
[  225.068287][ T4540] usb 2-1: SerialNumber: syz
[  225.097608][ T4540] usb 2-1: config 0 descriptor??
[  225.231456][ T7629] loop4: detected capacity change from 0 to 256
[  225.341917][ T7588] chnl_net:caif_netlink_parms(): no params data found
[  225.370747][ T7629] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d)
[  225.773074][ T4540] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  225.825921][ T4540] asix: probe of 2-1:0.251 failed with error -524
[  225.860283][ T7624] loop2: detected capacity change from 0 to 32768
[  225.913961][ T4405] device hsr_slave_0 left promiscuous mode
[  225.964529][ T4405] device hsr_slave_1 left promiscuous mode
[  225.980005][ T4540] usb 2-1: USB disconnect, device number 8
[  225.999990][ T7636] device-mapper: ioctl: Invalid ioctl structure: name m, dev 1b00
[  226.054161][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.096347][ T7624] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  226.114389][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.157857][ T4405] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.203346][ T4405] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.251722][ T4405] device bridge_slave_1 left promiscuous mode
[  226.289750][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.363842][ T4405] device bridge_slave_0 left promiscuous mode
[  226.401592][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.533343][ T4291] Bluetooth: hci3: command 0x041b tx timeout
[  226.582118][ T4405] device veth1_macvtap left promiscuous mode
[  226.607755][ T7642] syz.2.1127 (7642) used greatest stack depth: 18656 bytes left
[  226.636194][ T4405] device veth0_macvtap left promiscuous mode
[  226.672920][ T4405] device veth1_vlan left promiscuous mode
[  226.713413][ T4405] device veth0_vlan left promiscuous mode
[  226.870342][ T4284] ocfs2: Unmounting device (7,2) on (node local)
[  227.624693][ T7656] device-mapper: table: 248:1: crypt: Error decoding and setting key (-EINVAL)
[  227.661714][ T7656] device-mapper: ioctl: error adding target to table
[  228.026959][ T7677] rnbd_client L600: Mapping device /dev/ram0 on session s., (access_mode: rw, nr_poll_queues: 0)
[  228.125879][ T7677] rtrs_client L2815: pathname cannot contain / and .
[  228.246665][ T7679] loop4: detected capacity change from 0 to 512
[  228.332738][ T7679] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  228.400619][ T7679] FAT-fs (loop4): Filesystem has been set read-only
[  228.592302][ T7685] loop4: detected capacity change from 0 to 256
[  228.613389][ T4291] Bluetooth: hci3: command 0x040f tx timeout
[  229.211486][ T4405] team0 (unregistering): Port device team_slave_1 removed
[  229.279450][ T4405] team0 (unregistering): Port device team_slave_0 removed
[  229.347935][ T4405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.418166][ T4405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.972933][ T4405] bond0 (unregistering): Released all slaves
[  230.061966][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.075529][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.096757][ T7588] device bridge_slave_0 entered promiscuous mode
[  230.153522][ T7588] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.209256][ T7588] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.250599][ T7588] device bridge_slave_1 entered promiscuous mode
[  230.424260][ T7588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.528260][ T7588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.693424][ T4291] Bluetooth: hci3: command 0x0419 tx timeout
[  230.750541][ T7588] team0: Port device team_slave_0 added
[  230.831602][ T7588] team0: Port device team_slave_1 added
[  230.929238][ T7702] loop1: detected capacity change from 0 to 164
[  230.975760][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.049311][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.281731][ T7588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.444971][ T7588] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.451977][ T7588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.520085][ T7714] loop3: detected capacity change from 0 to 256
[  231.648184][ T7714] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  231.739913][ T7588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.861461][ T7714] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  231.906041][ T7722] loop4: detected capacity change from 0 to 2048
[  231.957471][ T7588] device hsr_slave_0 entered promiscuous mode
[  231.965857][ T7722] EXT4-fs: Ignoring removed i_version option
[  232.026960][ T7588] device hsr_slave_1 entered promiscuous mode
[  232.066457][ T7722] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  232.153500][ T7722] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.271269][   T26] audit: type=1326 audit(1794402297.510:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.2.1158" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9770fa8f19 code=0x0
[  232.446050][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  233.020245][ T7588] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  233.084186][ T7588] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  233.163652][ T7588] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  233.183315][ T7512] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  233.237319][ T7751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1165'.
[  233.273056][ T7588] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  233.326682][ T4390] kernel write not supported for file /input/mice (pid: 4390 comm: kworker/0:6)
[  233.404645][ T7512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  233.491147][ T7512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  233.560343][ T7512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  233.620247][ T7588] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.636072][ T7512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  233.668734][ T7761] loop4: detected capacity change from 0 to 256
[  233.724100][ T7512] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  233.738559][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  233.771060][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  233.784839][ T7761] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  233.815461][ T7512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.861297][ T7588] 8021q: adding VLAN 0 to HW filter on device team0
[  233.878342][ T7512] usb 4-1: Product: syz
[  233.882546][ T7512] usb 4-1: Manufacturer: syz
[  233.944343][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  233.956697][ T7512] usb 4-1: SerialNumber: syz
[  233.999095][ T7761] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[  234.013957][ T7512] usb 4-1: config 0 descriptor??
[  234.024251][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  234.083019][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.090217][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.191688][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  234.255354][ T7512] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  234.290266][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  234.358641][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  234.418594][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.425775][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.480452][ T4536] usb 4-1: USB disconnect, device number 12
[  234.553010][ T7775] loop1: detected capacity change from 0 to 164
[  234.565286][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  234.664431][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  234.720936][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  234.792695][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  234.801906][ T7777] device-mapper: ioctl: Invalid ioctl structure: name m, dev 2d
[  234.868670][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  234.924010][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  234.978495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  235.046972][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  235.112611][ T7588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.211676][ T7588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  235.267449][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  235.309324][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  235.373546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  235.811356][ T7769] loop2: detected capacity change from 0 to 32768
[  236.016005][ T7769] find_entry called with index = 0
[  236.082994][ T7769] find_entry called with index >= next_index
[  236.159708][ T7769] find_entry called with index >= next_index
[  236.236796][ T7769] find_entry called with index = 0
[  236.241967][ T7769] find_entry called with index >= next_index
[  236.347225][ T7769] find_entry called with index >= next_index
[  236.450215][ T7769] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4
[  236.450215][ T7769] 
[  236.613790][ T7769] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 5
[  236.613790][ T7769] 
[  236.662327][ T7588] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.711305][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  236.744119][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  236.971626][ T7815] loop3: detected capacity change from 0 to 4096
[  237.119277][ T7815] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  237.275759][ T7815] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #2: comm syz.3.1186: directory missing '..'
[  237.462502][ T7804] loop1: detected capacity change from 0 to 32768
[  237.637220][ T7804] 
[  237.637220][ T7804]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  237.637220][ T7804] 
[  237.797025][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  237.867657][ T7804] ERROR: (device loop1): diWrite: ixpxd invalid
[  237.867657][ T7804] 
[  238.011205][ T7804] ERROR: (device loop1): txCommit: 
[  238.011205][ T7804] 
[  238.070211][ T7832] ERROR: (device loop1): dtSearch: stack overrun!
[  238.070211][ T7832] 
[  238.153403][ T4536] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  238.161276][ T7832] btstack dump:
[  238.191384][ T7832] bn = 0, index = 0
[  238.218822][ T7832] bn = 0, index = 0
[  238.243035][ T7832] bn = 0, index = 0
[  238.267346][ T7839] loop3: detected capacity change from 0 to 512
[  238.301760][ T7832] bn = 0, index = 0
[  238.305965][ T7832] bn = 0, index = 0
[  238.330139][ T7832] bn = 0, index = 0
[  238.367800][ T7839] EXT4-fs (loop3): 1 truncate cleaned up
[  238.383485][ T7832] bn = 0, index = 0
[  238.389281][ T4536] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  238.433311][ T7832] bn = 0, index = 0
[  238.437184][ T7832] jfs_mkdir: dtSearch returned -5
[  238.463958][ T7839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  238.476484][ T4536] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.523541][ T4536] usb 3-1: Product: syz
[  238.554801][ T4536] usb 3-1: Manufacturer: syz
[  238.587115][ T4536] usb 3-1: SerialNumber: syz
[  238.632614][ T7839] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1189: bg 0: block 465: padding at end of block bitmap is not set
[  238.726801][ T4276] 
[  238.726801][ T4276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  238.726801][ T4276] 
[  238.790421][ T7839] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6195: Corrupt filesystem
[  238.822437][ T4276] 
[  238.822437][ T4276]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  238.822437][ T4276] 
[  238.843437][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  238.886050][ T7839] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1189: invalid indirect mapped block 234881024 (level 0)
[  238.910020][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  238.994154][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  239.054883][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  239.119793][ T7588] device veth0_vlan entered promiscuous mode
[  239.177406][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  239.218834][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  239.250852][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  239.288604][ T7588] device veth1_vlan entered promiscuous mode
[  239.431906][ T7851] loop4: detected capacity change from 0 to 512
[  239.451064][ T7588] device veth0_macvtap entered promiscuous mode
[  239.511827][ T4536] (unnamed net_device) (uninitialized): Assigned a random MAC address: fa:29:7d:b0:8a:81
[  239.539948][ T7851] EXT4-fs: Ignoring removed nobh option
[  239.580838][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready
[  239.633852][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready
[  239.642962][ T7851] EXT4-fs warning (device loop4): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix.
[  239.699120][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  239.727473][ T7851] EXT4-fs (loop4): mount failed
[  239.742858][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  239.799838][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  239.883978][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  239.971551][ T7588] device veth1_macvtap entered promiscuous mode
[  240.003874][ T4536] rtl8150 3-1:1.0: eth9: rtl8150 is detected
[  240.023871][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  240.080998][ T4536] usb 3-1: USB disconnect, device number 5
[  240.091173][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  240.206721][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.270822][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.285252][ T4390] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  240.308856][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.330498][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.356061][ T7865] device-mapper: verity: sha512 using implementation "sha512-avx2"
[  240.366199][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.387358][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.406141][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.418511][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.461034][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.493562][ T4390] usb 5-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40
[  240.529854][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  240.543468][ T4390] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.572420][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  240.590498][ T4390] usb 5-1: Product: syz
[  240.615436][ T4390] usb 5-1: Manufacturer: syz
[  240.620066][ T4390] usb 5-1: SerialNumber: syz
[  240.639122][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.684500][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.722122][ T7871] __sock_release: fasync list not empty!
[  240.748485][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.803298][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.854921][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.923786][ T4390] usb 5-1: 1:1: All rates were zero
[  240.933345][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.970516][ T4390] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  240.989931][ T7588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.041337][ T7588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.122956][ T4390] usb 5-1: USB disconnect, device number 11
[  241.144105][ T7588] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.218189][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  241.259937][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  241.326608][ T7588] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.380254][ T7588] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.409654][ T7588] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.458241][ T7588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.843962][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.890014][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.931829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  242.032510][ T7894] netlink: 'syz.2.1207': attribute type 12 has an invalid length.
[  242.096032][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.135688][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.157691][ T7898] loop1: detected capacity change from 0 to 64
[  242.202234][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  242.811609][ T7913] loop1: detected capacity change from 0 to 1024
[  243.978661][   T26] audit: type=1326 audit(1794402309.220:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9770fa8f19 code=0x7ffc0000
[  244.096994][ T7947] loop1: detected capacity change from 0 to 512
[  244.174796][ T7947] FAT-fs (loop1): Unrecognized mount option "tots" or missing value
[  244.212473][   T26] audit: type=1326 audit(1794402309.300:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9770fa8f19 code=0x7ffc0000
[  244.466645][   T26] audit: type=1326 audit(1794402309.300:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9770fa8f19 code=0x7ffc0000
[  244.667952][   T26] audit: type=1326 audit(1794402309.300:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9770fa8f19 code=0x7ffc0000
[  244.831062][   T26] audit: type=1326 audit(1794402309.300:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f9770fa8f19 code=0x7ffc0000
[  244.894725][ T7512] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  244.972382][ T7941] loop6: detected capacity change from 0 to 32768
[  244.996514][   T26] audit: type=1326 audit(1794402309.300:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9770fa8f19 code=0x7ffc0000
[  245.090987][ T7941] JBD2: Ignoring recovery information on journal
[  245.125494][ T7512] usb 5-1: Using ep0 maxpacket: 32
[  245.161299][ T7512] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  245.244896][   T26] audit: type=1326 audit(1794402309.300:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9770fa8f19 code=0x7ffc0000
[  245.277878][ T7512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.328611][ T7941] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  245.371325][ T7512] usb 5-1: config 0 descriptor??
[  245.435139][ T7512] gspca_main: sunplus-2.14.0 probing 041e:400b
[  245.482342][ T7967] netlink: 'syz.3.1231': attribute type 5 has an invalid length.
[  245.506112][   T26] audit: type=1326 audit(1794402309.310:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9770fa8f19 code=0x7ffc0000
[  245.719537][   T26] audit: type=1326 audit(1794402309.310:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9770fa8f19 code=0x7ffc0000
[  245.786412][ T7971] loop2: detected capacity change from 0 to 256
[  245.800198][ T7588] ocfs2: Unmounting device (7,6) on (node local)
[  245.989989][   T26] audit: type=1326 audit(1794402309.310:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.2.1224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9770fa8f19 code=0x7ffc0000
[  246.018287][ T7971] FAT-fs (loop2): Directory bread(block 64) failed
[  246.088710][ T7971] FAT-fs (loop2): Directory bread(block 65) failed
[  246.169214][ T7971] FAT-fs (loop2): Directory bread(block 66) failed
[  246.216741][ T7971] FAT-fs (loop2): Directory bread(block 67) failed
[  246.246615][ T7512] gspca_sunplus: reg_r err -71
[  246.268633][ T7512] sunplus: probe of 5-1:0.0 failed with error -71
[  246.289544][ T7971] FAT-fs (loop2): Directory bread(block 68) failed
[  246.341378][ T7512] usb 5-1: USB disconnect, device number 12
[  246.359635][ T7971] FAT-fs (loop2): Directory bread(block 69) failed
[  246.406884][ T7971] FAT-fs (loop2): Directory bread(block 70) failed
[  246.454740][ T7971] FAT-fs (loop2): Directory bread(block 71) failed
[  246.506906][ T7971] FAT-fs (loop2): Directory bread(block 72) failed
[  246.547024][ T7971] FAT-fs (loop2): Directory bread(block 73) failed
[  246.747107][ T7971] syz.2.1232: attempt to access beyond end of device
[  246.747107][ T7971] loop2: rw=2049, sector=1240, nr_sectors = 32 limit=256
[  247.005897][ T4370] kworker/u4:6: attempt to access beyond end of device
[  247.005897][ T4370] loop2: rw=1, sector=1224, nr_sectors = 16 limit=256
[  247.645388][ T4536] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  247.883452][ T4536] usb 7-1: Using ep0 maxpacket: 8
[  247.919194][ T4536] usb 7-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  247.989366][ T4536] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.039911][ T4536] usb 7-1: Product: syz
[  248.068098][ T4536] usb 7-1: Manufacturer: syz
[  248.097996][ T4536] usb 7-1: SerialNumber: syz
[  248.126977][ T4536] usb 7-1: config 0 descriptor??
[  248.174685][ T4536] gspca_main: sq930x-2.14.0 probing 2770:930c
[  248.482857][ T8035] loop1: detected capacity change from 0 to 256
[  248.576866][ T8035] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9e32f1fe, utbl_chksum : 0xe619d30d)
[  248.976982][ T4536] gspca_sq930x: ucbus_write failed -71
[  249.233381][ T4536] gspca_sq930x: Sensor ov9630 not yet treated
[  249.258331][ T4536] sq930x: probe of 7-1:0.0 failed with error -22
[  249.334396][ T4536] usb 7-1: USB disconnect, device number 2
[  250.627915][ T8059] loop1: detected capacity change from 0 to 32768
[  250.795923][ T8059] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  250.820469][ T8071] loop4: detected capacity change from 0 to 32768
[  251.029116][ T8071] JBD2: Ignoring recovery information on journal
[  251.259639][ T8071] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  251.379957][ T4276] ocfs2: Unmounting device (7,1) on (node local)
[  251.471244][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1275'.
[  251.491472][ T8100] xt_CT: You must specify a L4 protocol and not use inversions on it
[  251.767308][ T8071] syz.4.1265 (8071) used greatest stack depth: 17760 bytes left
[  251.842291][ T4278] ocfs2: Unmounting device (7,4) on (node local)
[  252.296065][ T8117] loop1: detected capacity change from 0 to 1024
[  252.369581][ T8117] EXT4-fs: inline encryption not supported
[  252.488348][ T8117] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  252.988157][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  253.413354][ T7512] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  253.632688][ T8160] loop4: detected capacity change from 0 to 512
[  253.639295][ T7512] usb 3-1: Using ep0 maxpacket: 32
[  253.659942][ T7512] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  253.705212][ T8160] EXT4-fs: Ignoring removed nobh option
[  253.723817][ T7512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.791838][ T8160] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  253.806066][ T7512] usb 3-1: config 0 descriptor??
[  253.839165][ T8165] loop3: detected capacity change from 0 to 512
[  253.871714][ T8160] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.965306][ T8165] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #15: comm syz.3.1296: inline data xattr refers to an external xattr inode
[  254.032861][ T7512] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  254.047031][ T8170] ip_tables: iptables: counters copy to user failed while replacing table
[  254.099497][ T7512] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  254.152107][ T8165] EXT4-fs (loop3): Remounting filesystem read-only
[  254.172888][ T8173] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.1294: corrupted inode contents
[  254.193724][ T7512] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  254.220470][ T8165] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.1296: couldn't read orphan inode 15 (err -117)
[  254.257602][ T7512] usb 3-1: media controller created
[  254.303579][ T8173] EXT4-fs error (device loop4): ext4_dirty_inode:6199: inode #2: comm syz.4.1294: mark_inode_dirty error
[  254.328200][ T7512] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  254.340800][ T8165] EXT4-fs (loop3): Remounting filesystem read-only
[  254.372912][ T8173] EXT4-fs error (device loop4): ext4_do_update_inode:5312: inode #2: comm syz.4.1294: corrupted inode contents
[  254.394622][ T8165] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  254.457118][ T7512] az6027: usb out operation failed. (-71)
[  254.477769][ T8173] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1294: mark_inode_dirty error
[  254.506623][ T7512] az6027: usb out operation failed. (-71)
[  254.517203][ T7512] stb0899_attach: Driver disabled by Kconfig
[  254.546045][ T7512] az6027: no front-end attached
[  254.546045][ T7512] 
[  254.609086][ T7512] az6027: usb out operation failed. (-71)
[  254.644658][ T7512] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  254.682923][ T7512] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15
[  254.764032][ T7512] dvb-usb: schedule remote query interval to 400 msecs.
[  254.837175][ T7512] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  254.884500][ T7512] usb 3-1: USB disconnect, device number 6
[  254.948956][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  255.057706][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  255.305367][ T7512] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  255.466894][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  255.466906][   T26] audit: type=1400 audit(1794402320.710:222): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="foo" pid=8199 comm="syz.3.1305" name="foo" offset=81
[  255.658127][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  255.672429][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  255.893380][ T7512] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  256.016696][ T8190] loop1: detected capacity change from 0 to 32768
[  256.094782][ T7512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.165467][ T7512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.226069][ T7512] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  256.283265][ T7512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.339825][ T7512] usb 5-1: config 0 descriptor??
[  256.398177][ T8190] XFS (loop1): Mounting V5 Filesystem
[  256.529159][ T8190] XFS (loop1): Ending clean mount
[  256.737548][ T4276] XFS (loop1): Unmounting Filesystem
[  256.911964][ T4537] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  257.126864][ T4537] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  257.174918][ T4537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.195349][ T7512] hid-led: probe of 0003:27B8:01ED.0008 failed with error -71
[  257.237780][ T4537] usb 3-1: Product: syz
[  257.242000][ T4537] usb 3-1: Manufacturer: syz
[  257.273486][ T7512] usb 5-1: USB disconnect, device number 13
[  257.318073][ T4537] usb 3-1: SerialNumber: syz
[  257.363691][ T4537] usb 3-1: config 0 descriptor??
[  257.608252][ T4537] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 007
[  257.835274][ T8229] i2c i2c-1: adapter quirk: no zero length (addr 0x0200, size 0, read)
[  257.902792][ T7512] usb 3-1: USB disconnect, device number 7
[  258.101508][ T8251] ieee802154 phy0 wpan0: encryption failed: -22
[  259.071105][ T8279] loop2: detected capacity change from 0 to 256
[  259.100490][ T8278] loop1: detected capacity change from 0 to 1764
[  259.174597][ T8279] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9e32f1fe, utbl_chksum : 0xe619d30d)
[  259.232493][ T8278] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  259.311602][ T8278] isofs_fill_super: get root inode failed
[  260.030726][ T8298] loop6: detected capacity change from 0 to 512
[  260.096739][ T8298] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  260.176777][   T26] audit: type=1400 audit(1794402325.420:223): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=8300 comm="syz.3.1345" name="unknown" offset=28
[  260.235627][ T8298] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.1342: inode #88: comm syz.6.1342: iget: illegal inode #
[  260.313726][ T8298] EXT4-fs (loop6): Remounting filesystem read-only
[  260.320401][ T8298] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1342: error while reading EA inode 88 err=-117
[  260.431733][ T8298] EXT4-fs (loop6): Remounting filesystem read-only
[  260.462854][ T8298] EXT4-fs (loop6): 1 orphan inode deleted
[  260.492035][ T8298] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  260.550044][ T8298] EXT4-fs (loop6): shut down requested (2)
[  260.667462][ T4537] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  260.709132][ T7588] EXT4-fs (loop6): unmounting filesystem.
[  260.837558][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'.
[  260.883421][ T4537] usb 2-1: Using ep0 maxpacket: 16
[  260.905574][ T4537] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.922870][ T8322] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  260.942085][ T8324] jffs2: notice: (8324) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  260.979653][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'.
[  260.989498][ T4537] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.035127][ T4537] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  261.100281][ T8325] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  261.121350][ T4537] usb 2-1: config 0 interface 0 has no altsetting 0
[  261.154087][ T4537] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  261.216418][ T4537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.259008][ T4537] usb 2-1: config 0 descriptor??
[  261.706752][ T4537] hid (null): bogus close delimiter
[  261.905262][ T7512] usb 2-1: USB disconnect, device number 9
[  262.407694][   T11] bond0: (slave bond_slave_0): interface is now down
[  262.481618][   T11] bond0: (slave bond_slave_1): interface is now down
[  262.577640][   T11] bond0: now running without any active interface!
[  262.714489][ T8355] loop4: detected capacity change from 0 to 256
[  262.766759][ T4537] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  262.797539][ T8360] process 'syz.6.1367' launched './file0' with NULL argv: empty string added
[  263.005262][ T4537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  263.090831][ T4537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  263.171111][ T4537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  263.193779][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'.
[  263.273880][ T4537] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  263.351479][ T4537] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  263.414196][ T4537] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.479098][ T4537] usb 3-1: Product: syz
[  263.521281][ T4537] usb 3-1: Manufacturer: syz
[  263.566317][ T4537] usb 3-1: SerialNumber: syz
[  263.617491][ T4537] usb 3-1: config 0 descriptor??
[  263.879963][ T4537] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  264.012287][ T8392] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  264.012287][ T8392] The task syz.4.1375 (8392) triggered the difference, watch for misbehavior.
[  264.127770][ T4537] usb 3-1: USB disconnect, device number 8
[  264.140119][ T8394] jffs2: notice: (8394) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  264.618789][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1381'.
[  265.449822][ T8418] loop6: detected capacity change from 0 to 256
[  265.517668][ T8418] exfat: Deprecated parameter 'utf8'
[  265.589403][ T8418] exfat: Deprecated parameter 'utf8'
[  265.655754][ T8418] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  266.982373][ T8420] loop2: detected capacity change from 0 to 32768
[  267.149319][ T8420] JBD2: Ignoring recovery information on journal
[  267.160271][ T8463] i2c i2c-0: new_device: Instantiated device isp1301 at 0x24
[  267.270887][ T8466] MTRR 1 not used
[  267.293429][ T7512] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  267.359586][ T8420] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  267.524598][ T7512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  267.589943][ T7512] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.674812][ T7512] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  267.743282][ T7512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.821684][ T7512] usb 2-1: config 0 descriptor??
[  268.126035][ T4284] ocfs2: Unmounting device (7,2) on (node local)
[  268.161133][ T8485] loop4: detected capacity change from 0 to 1024
[  268.275627][ T8485] EXT4-fs: Ignoring removed bh option
[  268.301079][ T7512] isku 0003:1E7D:319C.000A: unknown main item tag 0x0
[  268.363432][ T7512] isku 0003:1E7D:319C.000A: unknown main item tag 0x0
[  268.431733][ T8485] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  268.459401][ T7512] isku 0003:1E7D:319C.000A: unknown main item tag 0x0
[  268.527947][ T7512] isku 0003:1E7D:319C.000A: unknown main item tag 0x0
[  268.564314][ T8485] EXT4-fs (loop4): Online resizing not supported with bigalloc
[  268.612315][ T7512] isku 0003:1E7D:319C.000A: unknown main item tag 0x0
[  268.670015][ T7512] isku 0003:1E7D:319C.000A: unknown main item tag 0x0
[  268.730778][ T7512] isku 0003:1E7D:319C.000A: unknown main item tag 0x0
[  268.783763][ T7512] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  268.864762][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  269.162080][ T7512] usb 2-1: USB disconnect, device number 10
[  269.380158][ T8498] fido_id[8498]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  269.669372][ T8511] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0024'
[  269.763502][ T8511] CPU: 0 PID: 8511 Comm: syz.6.1413 Not tainted syzkaller #0
[  269.770923][ T8511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  269.781008][ T8511] Call Trace:
[  269.784302][ T8511]  <TASK>
[  269.787245][ T8511]  dump_stack_lvl+0x188/0x24e
[  269.791946][ T8511]  ? show_regs_print_info+0x12/0x12
[  269.797181][ T8511]  ? load_image+0x410/0x410
[  269.801708][ T8511]  sysfs_create_dir_ns+0x26a/0x290
[  269.806871][ T8511]  ? __lock_acquire+0x7ea0/0x7ea0
[  269.811924][ T8511]  ? sysfs_warn_dup+0xa0/0xa0
[  269.816618][ T8511]  ? do_raw_spin_unlock+0x11d/0x230
[  269.821828][ T8511]  kobject_add_internal+0x617/0xca0
[  269.827056][ T8511]  kobject_add+0x160/0x230
[  269.831514][ T8511]  ? kobject_init+0x1c0/0x1c0
[  269.836209][ T8511]  ? __raw_spin_lock_init+0x41/0x100
[  269.841501][ T8511]  ? klist_children_get+0x50/0x50
[  269.846639][ T8511]  ? get_device_parent+0xa5/0x3e0
[  269.851679][ T8511]  device_add+0x470/0x1050
[  269.856113][ T8511]  ? device_initialize+0x247/0x450
[  269.861240][ T8511]  i2c_new_client_device+0xa6e/0x10a0
[  269.866631][ T8511]  ? i2c_dev_irq_from_resources+0x230/0x230
[  269.872535][ T8511]  ? rcu_is_watching+0x11/0xa0
[  269.877321][ T8511]  ? new_device_store+0x122/0x510
[  269.882375][ T8511]  new_device_store+0x23b/0x510
[  269.887334][ T8511]  ? i2c_do_add_adapter+0x9b0/0x9b0
[  269.892556][ T8511]  ? sysfs_kf_write+0x183/0x2a0
[  269.897423][ T8511]  ? sysfs_kf_read+0x350/0x350
[  269.902200][ T8511]  kernfs_fop_write_iter+0x3a0/0x520
[  269.907516][ T8511]  vfs_write+0x482/0x9a0
[  269.911792][ T8511]  ? file_end_write+0x250/0x250
[  269.916677][ T8511]  ? __fget_files+0x3fc/0x460
[  269.921399][ T8511]  ? __fdget_pos+0x2ae/0x360
[  269.926105][ T8511]  ? ksys_write+0x70/0x260
[  269.930539][ T8511]  ksys_write+0x14d/0x260
[  269.934894][ T8511]  ? __ia32_sys_read+0x80/0x80
[  269.939757][ T8511]  ? lockdep_hardirqs_on+0x94/0x140
[  269.944995][ T8511]  do_syscall_64+0x4c/0xa0
[  269.949442][ T8511]  ? clear_bhb_loop+0x60/0xb0
[  269.954137][ T8511]  ? clear_bhb_loop+0x60/0xb0
[  269.958830][ T8511]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  269.964756][ T8511] RIP: 0033:0x7f84b4fa8f19
[  269.969194][ T8511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  269.988809][ T8511] RSP: 002b:00007f84b5e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  269.997245][ T8511] RAX: ffffffffffffffda RBX: 00007f84b5225fa0 RCX: 00007f84b4fa8f19
[  270.005222][ T8511] RDX: 000000000000000d RSI: 0000200000000500 RDI: 0000000000000003
[  270.013201][ T8511] RBP: 00007f84b5037f6d R08: 0000000000000000 R09: 0000000000000000
[  270.021196][ T8511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  270.029177][ T8511] R13: 00007f84b5226038 R14: 00007f84b5225fa0 R15: 00007ffd818b7258
[  270.037264][ T8511]  </TASK>
[  270.866811][ T8494] loop3: detected capacity change from 0 to 40427
[  270.923878][ T8494] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff
[  270.990305][ T8509] loop4: detected capacity change from 0 to 32768
[  271.048247][ T8494] F2FS-fs (loop3): invalid crc value
[  271.089258][ T8531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1418'.
[  271.180720][ T8494] F2FS-fs (loop3): Found nat_bits in checkpoint
[  271.647131][ T8494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  272.103533][ T7512] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  272.240945][ T8511] kobject_add_internal failed for 0-0024 with -EEXIST, don't try to register things with the same name in the same directory.
[  272.319632][ T7512] usb 2-1: unable to read config index 0 descriptor/start: -71
[  272.346183][ T7512] usb 2-1: can't read configurations, error -71
[  272.419504][ T8511] i2c i2c-0: Failed to register i2c client isp1301 at 0x24 (-17)
[  273.230079][ T8565] device netdevsim0 entered promiscuous mode
[  273.294213][ T8565] device netdevsim0 left promiscuous mode
[  273.678782][ T8578] loop5: detected capacity change from 0 to 7
[  273.730480][ T4451] Dev loop5: unable to read RDB block 7
[  273.779161][ T4451]  loop5: unable to read partition table
[  273.823603][ T4451] loop5: partition table beyond EOD, truncated
[  273.917618][ T8578] Dev loop5: unable to read RDB block 7
[  273.944304][ T8578]  loop5: unable to read partition table
[  273.988927][ T8578] loop5: partition table beyond EOD, truncated
[  274.061099][ T8578] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  274.193850][ T3641] Dev loop5: unable to read RDB block 7
[  274.224002][ T3641]  loop5: unable to read partition table
[  274.230346][ T3641] loop5: partition table beyond EOD, truncated
[  274.392325][ T8593] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-0/0-0024'
[  274.495286][ T8593] CPU: 0 PID: 8593 Comm: syz.2.1436 Not tainted syzkaller #0
[  274.502730][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  274.512816][ T8593] Call Trace:
[  274.516132][ T8593]  <TASK>
[  274.519073][ T8593]  dump_stack_lvl+0x188/0x24e
[  274.523795][ T8593]  ? show_regs_print_info+0x12/0x12
[  274.529044][ T8593]  ? load_image+0x410/0x410
[  274.533585][ T8593]  sysfs_create_dir_ns+0x26a/0x290
[  274.538748][ T8593]  ? __lock_acquire+0x7ea0/0x7ea0
[  274.543793][ T8593]  ? sysfs_warn_dup+0xa0/0xa0
[  274.548566][ T8593]  ? do_raw_spin_unlock+0x11d/0x230
[  274.553808][ T8593]  kobject_add_internal+0x617/0xca0
[  274.559071][ T8593]  kobject_add+0x160/0x230
[  274.563521][ T8593]  ? kobject_init+0x1c0/0x1c0
[  274.568227][ T8593]  ? __raw_spin_lock_init+0x41/0x100
[  274.573552][ T8593]  ? klist_children_get+0x50/0x50
[  274.578602][ T8593]  ? get_device_parent+0xa5/0x3e0
[  274.583657][ T8593]  device_add+0x470/0x1050
[  274.588093][ T8593]  ? device_initialize+0x247/0x450
[  274.593242][ T8593]  i2c_new_client_device+0xa6e/0x10a0
[  274.598647][ T8593]  ? i2c_dev_irq_from_resources+0x230/0x230
[  274.604583][ T8593]  ? rcu_is_watching+0x11/0xa0
[  274.609432][ T8593]  ? new_device_store+0x122/0x510
[  274.614473][ T8593]  new_device_store+0x23b/0x510
[  274.619360][ T8593]  ? i2c_do_add_adapter+0x9b0/0x9b0
[  274.624607][ T8593]  ? sysfs_kf_write+0x183/0x2a0
[  274.629497][ T8593]  ? sysfs_kf_read+0x350/0x350
[  274.634284][ T8593]  kernfs_fop_write_iter+0x3a0/0x520
[  274.639687][ T8593]  vfs_write+0x482/0x9a0
[  274.643961][ T8593]  ? file_end_write+0x250/0x250
[  274.648939][ T8593]  ? __fget_files+0x3fc/0x460
[  274.653656][ T8593]  ? __fdget_pos+0x2ae/0x360
[  274.658283][ T8593]  ? ksys_write+0x70/0x260
[  274.662715][ T8593]  ksys_write+0x14d/0x260
[  274.667075][ T8593]  ? __ia32_sys_read+0x80/0x80
[  274.671877][ T8593]  ? lockdep_hardirqs_on+0x94/0x140
[  274.677112][ T8593]  do_syscall_64+0x4c/0xa0
[  274.681569][ T8593]  ? clear_bhb_loop+0x60/0xb0
[  274.686282][ T8593]  ? clear_bhb_loop+0x60/0xb0
[  274.691016][ T8593]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.696943][ T8593] RIP: 0033:0x7f9770fa8f19
[  274.701377][ T8593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  274.721015][ T8593] RSP: 002b:00007f9771e6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  274.729443][ T8593] RAX: ffffffffffffffda RBX: 00007f9771225fa0 RCX: 00007f9770fa8f19
[  274.737435][ T8593] RDX: 000000000000000d RSI: 0000200000000500 RDI: 0000000000000003
[  274.745429][ T8593] RBP: 00007f9771037f6d R08: 0000000000000000 R09: 0000000000000000
[  274.753415][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.761397][ T8593] R13: 00007f9771226038 R14: 00007f9771225fa0 R15: 00007ffdb7458998
[  274.769395][ T8593]  </TASK>
[  275.444279][ T4537] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  275.475322][ T4352] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  275.644867][ T4537] usb 4-1: Using ep0 maxpacket: 32
[  275.661719][ T4537] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  275.683271][ T4352] usb 7-1: Using ep0 maxpacket: 16
[  275.699745][ T4352] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.723933][ T4537] usb 4-1: config 0 has no interface number 0
[  275.751232][ T4352] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.769996][ T4537] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  275.806699][ T4537] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.818358][ T4352] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  275.858316][ T4537] usb 4-1: Product: syz
[  275.871552][ T4537] usb 4-1: Manufacturer: syz
[  275.886748][ T4352] usb 7-1: config 0 interface 0 has no altsetting 0
[  275.902765][ T4537] usb 4-1: SerialNumber: syz
[  275.918540][ T4352] usb 7-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00
[  275.939148][ T4537] usb 4-1: config 0 descriptor??
[  275.968043][ T4537] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  275.999543][ T4352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.049589][ T4352] usb 7-1: config 0 descriptor??
[  276.175868][ T4537] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  276.255574][ T4537] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  276.505234][ T4352] wacom 0003:056A:5200.000B: unknown main item tag 0x0
[  276.537432][ T4352] wacom 0003:056A:5200.000B: unknown main item tag 0x0
[  276.573596][ T4352] wacom 0003:056A:5200.000B: unknown main item tag 0x0
[  276.599988][ T4352] wacom 0003:056A:5200.000B: unknown main item tag 0x0
[  276.633574][ T4352] wacom 0003:056A:5200.000B: unknown main item tag 0x0
[  276.653321][ T8593] kobject_add_internal failed for 0-0024 with -EEXIST, don't try to register things with the same name in the same directory.
[  276.670368][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  276.706527][ T4352] wacom 0003:056A:5200.000B: unknown main item tag 0x0
[  276.733507][ T4352] wacom 0003:056A:5200.000B: unknown main item tag 0x0
[  276.781677][ T4352] wacom 0003:056A:5200.000B: unknown main item tag 0x0
[  276.813590][ T8593] i2c i2c-0: Failed to register i2c client isp1301 at 0x24 (-17)
[  276.840362][ T4352] wacom 0003:056A:5200.000B: unknown main item tag 0x0
[  276.876047][ T4352] wacom 0003:056A:5200.000B: unknown main item tag 0x0
[  276.877294][ T4352] wacom 0003:056A:5200.000B: Unknown device_type for 'HID 056a:5200'. Ignoring.
[  276.900470][ T4352] usb 7-1: USB disconnect, device number 3
[  276.925905][ T4537] usb 4-1: USB disconnect, device number 13
[  276.962667][ T4537] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  276.967704][ T4537] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  276.968035][ T4537] quatech2 4-1:0.51: device disconnected
[  277.305667][ T4537] kernel write not supported for file /comedi4 (pid: 4537 comm: kworker/0:14)
[  277.591593][ T8647] loop6: detected capacity change from 0 to 512
[  277.756347][ T8647] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  277.864735][ T8647] FAT-fs (loop6): Filesystem has been set read-only
[  279.678508][ T8664] loop4: detected capacity change from 0 to 40427
[  279.767077][ T8664] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  279.856581][ T8664] F2FS-fs (loop4): invalid crc value
[  279.892556][ T8664] F2FS-fs (loop4): Found nat_bits in checkpoint
[  279.953514][ T4537] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  279.996908][ T8710] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  280.215582][ T4537] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  280.263630][ T8664] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  280.303764][ T8710] CIFS: Attempting to mount \\1#7.0.0.1\Ë7Ì
[  280.317960][ T4537] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.374285][ T8710] CIFS: VFS: No username specified
[  280.420094][ T4537] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  280.505230][ T4537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.588708][ T4537] usb 4-1: config 0 descriptor??
[  281.088952][ T4537] isku 0003:1E7D:319C.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0
[  281.491590][ T4537] usb 4-1: USB disconnect, device number 14
[  281.712496][ T8730] fido_id[8730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  282.125922][ T8744] loop2: detected capacity change from 0 to 256
[  282.211830][ T8722] loop1: detected capacity change from 0 to 32768
[  282.608917][ T8722] ea_get: invalid extended attribute
[  282.657038][ T8722] ffff8880472e3170: 04 00 00 00                                      ....
[  282.769205][ T8722] ea_get: invalid extended attribute
[  282.826033][ T8722] ffff8880472e3170: 04 00 00 00                                      ....
[  282.896991][ T8759] ea_get: invalid extended attribute
[  282.930399][ T8759] ffff8880472e3170: 04 00 00 00                                      ....
[  283.067030][ T4352] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  283.273380][ T4352] usb 3-1: Using ep0 maxpacket: 16
[  283.296869][ T4352] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.383428][ T4352] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.440552][ T4352] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  283.511665][ T4352] usb 3-1: config 0 interface 0 has no altsetting 0
[  283.557712][ T4352] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  283.618397][ T4352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.670932][ T4352] usb 3-1: config 0 descriptor??
[  284.119023][ T8782] loop1: detected capacity change from 0 to 256
[  284.156238][ T4352] hid (null): unknown global tag 0xd
[  284.211008][ T8779] loop6: detected capacity change from 0 to 2048
[  284.219098][ T8782] FAT-fs (loop1): Unrecognized mount option "shortname" or missing value
[  284.259502][ T8777] loop4: detected capacity change from 0 to 8192
[  284.370683][ T8777] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  284.456181][ T4390] usb 3-1: USB disconnect, device number 9
[  284.499889][ T8777] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  284.544038][ T7512] kernel read not supported for file /video7 (pid: 7512 comm: kworker/0:18)
[  284.601334][ T8777] REISERFS (device loop4): using ordered data mode
[  284.661764][ T8777] reiserfs: using flush barriers
[  284.711682][ T8777] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  284.809197][ T8777] REISERFS (device loop4): checking transaction log (loop4)
[  285.107817][ T8777] REISERFS (device loop4): Using tea hash to sort names
[  285.156130][ T8777] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  285.243083][ T8799] loop1: detected capacity change from 0 to 512
[  285.250380][ T8777] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  285.365649][ T8799] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  285.431378][ T8799] EXT4-fs error (device loop1): ext4_iget_extra_inode:4766: inode #15: comm syz.1.1498: corrupted in-inode xattr
[  285.512506][ T8799] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1498: couldn't read orphan inode 15 (err -117)
[  285.536569][ T8777] REISERFS error (device loop4): vs-7000 search_by_entry_key: search_by_key returned item position == 0
[  285.600389][ T8799] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  285.628817][ T8777] REISERFS (device loop4): Remounting filesystem read-only
[  285.809964][ T4276] EXT4-fs (loop1): unmounting filesystem.
[  287.020677][ T8811] loop2: detected capacity change from 0 to 40427
[  287.086957][ T8811] F2FS-fs (loop2): invalid crc value
[  287.140371][ T8811] F2FS-fs (loop2): Found nat_bits in checkpoint
[  287.463625][ T8811] F2FS-fs (loop2): Start checkpoint disabled!
[  287.542897][ T8811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  288.021111][ T8859] loop3: detected capacity change from 0 to 512
[  288.196726][ T8859] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  288.386328][ T8859] EXT4-fs (loop3): 1 truncate cleaned up
[  288.429338][ T8859] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  288.496689][ T8873] block2mtd: Using custom MTD label '&
[  288.496689][ T8873] ' for dev #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)}
[  289.001362][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  289.421098][ T8869] loop4: detected capacity change from 0 to 32768
[  289.490901][ T8869] 
[  289.490901][ T8869]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  289.490901][ T8869] 
[  289.597680][ T8869] ERROR: (device loop4): diWrite: ixpxd invalid
[  289.597680][ T8869] 
[  289.660449][ T8869] ERROR: (device loop4): txCommit: 
[  289.660449][ T8869] 
[  289.709104][ T8892] ERROR: (device loop4): dtSearch: stack overrun!
[  289.709104][ T8892] 
[  289.780250][ T8892] btstack dump:
[  289.795539][ T8892] bn = 0, index = 0
[  289.834310][ T8892] bn = 0, index = 0
[  289.869540][ T8892] bn = 0, index = 0
[  289.906955][ T8892] bn = 0, index = 0
[  289.910829][ T8892] bn = 0, index = 0
[  289.937457][ T8892] bn = 0, index = 0
[  289.941332][ T8892] bn = 0, index = 0
[  289.980788][ T8892] bn = 0, index = 0
[  290.077919][ T4278] 
[  290.077919][ T4278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.077919][ T4278] 
[  290.125281][ T4278] 
[  290.125281][ T4278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  290.125281][ T4278] 
[  290.546562][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1540'.
[  291.536579][ T8904] loop2: detected capacity change from 0 to 40427
[  291.591434][ T8904] F2FS-fs (loop2): invalid crc value
[  291.639639][ T8904] F2FS-fs (loop2): Found nat_bits in checkpoint
[  291.733439][ T8873] block2mtd: error: cannot open device #! ./mnt/module/block2mtd/parameters/block2mtd --+*!.V[)#-‰%#!$([)^)}
[  291.907876][ T8904] F2FS-fs (loop2): Start checkpoint disabled!
[  292.020925][ T8904] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  292.121884][ T8917] loop4: detected capacity change from 0 to 40427
[  292.132149][ T8924] loop6: detected capacity change from 0 to 2048
[  292.191080][ T8917] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  292.212592][ T8924] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  292.267536][ T8917] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  292.300738][ T8924] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  292.346743][ T8917] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  292.410523][ T8924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.423508][ T8917] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  292.487184][ T8917] F2FS-fs (loop4): invalid crc value
[  292.558190][ T8917] F2FS-fs (loop4): Found nat_bits in checkpoint
[  292.689888][    T9] kworker/u4:0: attempt to access beyond end of device
[  292.689888][    T9] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  292.791320][ T8917] F2FS-fs (loop4): Start checkpoint disabled!
[  292.907281][ T8917] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  292.935194][ T8917] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  293.429917][ T4377] kworker/u4:7: attempt to access beyond end of device
[  293.429917][ T4377] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  294.416863][ T8952] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  294.787204][ T8958] i2c i2c-0: new_device: Invalid device name
[  296.722278][ T8996] loop3: detected capacity change from 0 to 16
[  296.783094][ T8996] erofs: Unknown parameter 'ÿ'
[  296.861945][ T9000] ieee802154 phy0 wpan0: encryption failed: -22
[  297.050335][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1583'.
[  297.215641][ T9005] overlayfs: conflicting lowerdir path
[  297.535465][ T4352] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  297.639766][ T9015] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1589'.
[  297.736828][ T4352] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  297.776527][ T4352] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  297.830216][ T4352] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  297.875662][ T9019] block2mtd: device name too long
[  297.885724][ T4352] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  297.947696][ T4352] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  297.990928][ T4352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.391209][ T9025] loop2: detected capacity change from 0 to 1024
[  298.459372][ T4352] gud: probe of 4-1:1.0 failed with error -121
[  298.560590][ T9025] hfsplus: found bad thread record in catalog
[  298.737647][ T4352] usb 4-1: USB disconnect, device number 15
[  298.844356][    T9] hfsplus: found bad thread record in catalog
[  298.950295][ T9035] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  299.376697][ T9041] loop2: detected capacity change from 0 to 512
[  299.619910][ T9032] loop6: detected capacity change from 0 to 32768
[  300.842793][ T9043] loop4: detected capacity change from 0 to 40427
[  300.922596][ T9043] F2FS-fs (loop4): invalid crc value
[  300.985276][ T9043] F2FS-fs (loop4): Found nat_bits in checkpoint
[  301.322918][ T9043] F2FS-fs (loop4): Start checkpoint disabled!
[  301.342949][ T9075] loop3: detected capacity change from 0 to 512
[  301.538137][ T9043] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  302.028715][ T4370] kworker/u4:6: attempt to access beyond end of device
[  302.028715][ T4370] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  302.617410][ T9093] loop6: detected capacity change from 0 to 128
[  302.683054][ T9093] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  302.776795][ T9093] hpfs: filesystem error: improperly stopped
[  302.782855][ T9093] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  302.857824][ T9093] hpfs: You really don't want any checks? You are crazy...
[  302.898985][ T9093] hpfs: Code page index out of array
[  302.941789][ T9093] hpfs: code page support is disabled
[  302.965887][ T9093] hpfs: hpfs_map_4sectors(): unaligned read
[  302.971997][ T9093] hpfs: hpfs_map_4sectors(): unaligned read
[  303.041517][ T9093] hpfs: filesystem error: unable to find root dir
[  303.100601][ T9093] hpfs: hpfs_map_sector(): read error
[  303.139456][ T9093] hpfs: hpfs_map_sector(): read error
[  303.276642][   T14] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  303.508681][   T14] usb 5-1: unable to get BOS descriptor or descriptor too short
[  303.537706][   T14] usb 5-1: not running at top speed; connect to a high speed hub
[  303.602434][   T14] usb 5-1: config 127 has too many interfaces: 46, using maximum allowed: 32
[  303.650396][   T14] usb 5-1: config 127 has an invalid interface number: 105 but max is 45
[  303.696360][   T14] usb 5-1: config 127 has an invalid interface number: 109 but max is 45
[  303.728586][   T14] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  303.776806][   T14] usb 5-1: config 127 has 2 interfaces, different from the descriptor's value: 46
[  303.818236][ T9109] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1631'.
[  303.832352][   T14] usb 5-1: config 127 has no interface number 0
[  303.852252][ T9111] loop2: detected capacity change from 0 to 512
[  303.861515][   T14] usb 5-1: config 127 has no interface number 1
[  303.880661][   T14] usb 5-1: config 127 interface 105 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  303.912741][ T9111] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  303.955298][   T14] usb 5-1: config 127 interface 105 has no altsetting 0
[  303.986965][ T9111] EXT4-fs (loop2): 1 truncate cleaned up
[  304.027209][   T14] usb 5-1: New USB device found, idVendor=0499, idProduct=5008, bcdDevice=b0.dc
[  304.056528][ T9111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  304.085607][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.136548][   T14] usb 5-1: Product: syz
[  304.140761][   T14] usb 5-1: Manufacturer: syz
[  304.148653][ T9111] EXT4-fs (loop2): shut down requested (2)
[  304.166635][   T14] usb 5-1: SerialNumber: syz
[  304.181348][ T9111] EXT4-fs warning (device loop2): ext4_empty_dir:3158: inode #2: comm syz.2.1632: directory missing '..'
[  304.220435][ T9097] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  304.347461][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  304.507618][   T14] usb 5-1: invalid MIDI in EP 0
[  304.657165][   T14] snd-usb-audio: probe of 5-1:127.109 failed with error -22
[  304.709951][   T14] usb 5-1: USB disconnect, device number 14
[  304.957781][ T9124] loop3: detected capacity change from 0 to 512
[  305.001847][ T9124] EXT4-fs: Ignoring removed nobh option
[  305.079787][ T9124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  305.161989][ T9124] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.270301][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1638'.
[  305.430568][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  307.204727][ T9167] netlink: 'syz.6.1654': attribute type 2 has an invalid length.
[  307.315591][ T9169] netlink: 'syz.2.1655': attribute type 21 has an invalid length.
[  307.390601][ T9169] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1655'.
[  307.495886][ T9172] netlink: 'syz.2.1655': attribute type 21 has an invalid length.
[  307.551089][ T9172] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1655'.
[  308.112924][ T9179] loop3: detected capacity change from 0 to 4096
[  308.211380][ T9179] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  308.455679][ T9188] No such timeout policy "syz1"
[  309.114557][ T4294] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  309.128798][ T4294] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  309.137544][ T4294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  309.146069][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  309.155365][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  309.162584][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  309.509781][ T9196] rxe_eth0 speed is unknown, defaulting to 1000
[  309.783021][ T4370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.886544][ T9207] loop6: detected capacity change from 0 to 1024
[  310.018215][ T9194] comedi comedi1: reset error (fatal)
[  310.067746][ T9207] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  310.131801][ T9207] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.176322][ T4370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.575252][ T4370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.658651][ T7588] EXT4-fs (loop6): unmounting filesystem.
[  310.705957][    T9] tipc: Resetting bearer <ib:wg0>
[  310.955087][ T4370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.253452][ T4291] Bluetooth: hci5: command 0x0409 tx timeout
[  311.636325][ T9196] chnl_net:caif_netlink_parms(): no params data found
[  311.734088][ T4537] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  311.825747][ T4370] tipc: Disabling bearer <ib:wg0>
[  311.842823][ T4370] tipc: Left network mode
[  311.955071][ T4537] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  311.968255][ T9196] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.013340][ T4537] usb 7-1: config 0 has no interface number 0
[  312.050005][ T4537] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  312.073274][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.081386][ T9196] device bridge_slave_0 entered promiscuous mode
[  312.121633][ T4537] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  312.161558][ T9196] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.179563][ T4537] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  312.203310][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.222400][ T4537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.247645][ T9196] device bridge_slave_1 entered promiscuous mode
[  312.280522][ T4537] usb 7-1: config 0 descriptor??
[  312.313581][ T9230] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  312.361538][ T4537] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  312.406549][ T9196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.623723][ T4537] usb 7-1: USB disconnect, device number 4
[  312.730687][ T9196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.990118][ T9196] team0: Port device team_slave_0 added
[  313.098793][ T9196] team0: Port device team_slave_1 added
[  313.335281][ T4291] Bluetooth: hci5: command 0x041b tx timeout
[  313.430875][ T9271] loop6: detected capacity change from 0 to 512
[  313.505192][ T9271] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  313.538987][ T9273] program syz.4.1691 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  313.562962][ T9271] UDF-fs: Scanning with blocksize 512 failed
[  313.574311][ T9196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.599035][ T9196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.630948][ T9271] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  313.672847][ T9271] UDF-fs: Scanning with blocksize 1024 failed
[  313.716663][ T9271] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  313.757022][ T9271] UDF-fs: Scanning with blocksize 2048 failed
[  313.776267][ T9196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.800668][ T9271] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  313.865925][ T9271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  313.926639][ T9196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.974050][ T9196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.181128][ T9196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.696780][ T9196] device hsr_slave_0 entered promiscuous mode
[  314.728665][ T9196] device hsr_slave_1 entered promiscuous mode
[  314.761003][ T9196] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.821013][ T9196] Cannot create hsr debugfs directory
[  315.418481][ T4291] Bluetooth: hci5: command 0x040f tx timeout
[  316.063323][ T4352] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  316.285066][ T4370] device hsr_slave_0 left promiscuous mode
[  316.322683][ T4370] device hsr_slave_1 left promiscuous mode
[  316.330483][ T4352] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.393382][ T4352] usb 7-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  316.455025][ T4352] usb 7-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  316.511990][ T4352] usb 7-1: Product: syz
[  316.532216][ T4352] usb 7-1: Manufacturer: syz
[  316.596053][ T4352] usb 7-1: Found UVC 1.00 device syz (225a:e1d4)
[  316.644849][ T4352] usb 7-1: No streaming interface found for terminal 2.
[  316.780451][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.808895][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.834173][ T4390] usb 7-1: USB disconnect, device number 5
[  316.971815][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.011115][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.082473][ T4370] device bridge_slave_1 left promiscuous mode
[  317.096960][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  317.103579][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  317.140765][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.225075][ T4370] device bridge_slave_0 left promiscuous mode
[  317.276056][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.449468][ T4370] device veth1_macvtap left promiscuous mode
[  317.493460][ T4291] Bluetooth: hci5: command 0x0419 tx timeout
[  317.514146][ T4370] device veth0_macvtap left promiscuous mode
[  317.535221][ T4370] device veth1_vlan left promiscuous mode
[  317.575866][ T4370] device veth0_vlan left promiscuous mode
[  318.140479][ T9353] loop6: detected capacity change from 0 to 4096
[  318.271913][ T9356] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  318.482218][ T7588] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  319.183017][ T4390] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  319.409141][ T4390] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  319.451834][ T4390] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  319.481251][ T4390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  319.492728][ T4390] usb 4-1: SerialNumber: syz
[  319.590979][ T4370] team0 (unregistering): Port device team_slave_1 removed
[  319.667625][ T4370] team0 (unregistering): Port device team_slave_0 removed
[  319.750840][ T4370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  319.827231][ T4370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  320.184579][ T4390] cdc_ether: probe of 4-1:1.0 failed with error -22
[  320.389694][ T4370] bond0 (unregistering): Released all slaves
[  320.400547][   T14] usb 4-1: USB disconnect, device number 16
[  320.540593][ T9360] (unnamed net_device) (uninitialized): (slave vxcan0): Device is not bonding slave
[  320.617395][ T9360] (unnamed net_device) (uninitialized): option active_slave: invalid value (vxcan0)
[  320.749665][ T9196] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  320.860807][ T9196] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  320.930654][ T9196] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  321.034825][ T9196] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  321.507098][ T9196] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.619284][ T9385] loop4: detected capacity change from 0 to 512
[  321.641597][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  321.692051][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  321.745600][ T9196] 8021q: adding VLAN 0 to HW filter on device team0
[  321.788279][ T9385] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  321.880816][ T9385] EXT4-fs (loop4): orphan cleanup on readonly fs
[  321.902733][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  321.939600][ T9385] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.1731: bad orphan inode 15
[  321.954900][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  321.972774][ T9394] loop2: detected capacity change from 0 to 1024
[  322.006682][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.013883][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.055985][ T9385] ext4_test_bit(bit=14, block=18) = 1
[  322.079835][ T9394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  322.101705][ T9385] is_bad_inode(inode)=0
[  322.140646][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  322.149062][ T9385] NEXT_ORPHAN(inode)=1023
[  322.171099][ T9385] max_ino=32
[  322.194569][ T9385] i_nlink=0
[  322.199621][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  322.255545][ T9385] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2921: inode #15: comm syz.4.1731: corrupted xattr block 19
[  322.276029][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.283242][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.347549][ T9385] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117)
[  322.361206][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  322.401252][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  322.411354][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  322.424747][ T9385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  322.487401][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  322.568205][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  322.650169][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  322.813355][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  322.828544][ T9407] loop3: detected capacity change from 0 to 512
[  322.863897][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  322.935502][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  322.980950][ T4278] EXT4-fs (loop4): unmounting filesystem.
[  323.028164][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  323.040873][ T9407] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  323.134505][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  323.193363][ T9407] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.204761][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  323.244564][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  323.302404][ T9196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  323.310298][ T9420] binder: 9418:9420 ioctl 4018620d 0 returned -22
[  323.595692][ T4277] EXT4-fs (loop3): unmounting filesystem.
[  324.990297][ T9443] loop4: detected capacity change from 0 to 131072
[  325.020718][ T9443] F2FS-fs (loop4): invalid crc value
[  325.052971][ T9444] loop3: detected capacity change from 0 to 256
[  325.064421][ T9443] F2FS-fs (loop4): Found nat_bits in checkpoint
[  325.093105][ T9443] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  325.115029][ T9443] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  325.244852][ T9443] F2FS-fs (loop4): access invalid blkaddr:36
[  325.251406][ T9443] CPU: 0 PID: 9443 Comm: syz.4.1744 Not tainted syzkaller #0
[  325.258803][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  325.268957][ T9443] Call Trace:
[  325.272247][ T9443]  <TASK>
[  325.275198][ T9443]  dump_stack_lvl+0x188/0x24e
[  325.279923][ T9443]  ? show_regs_print_info+0x12/0x12
[  325.285327][ T9443]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  325.291169][ T9443]  ? f2fs_get_dnode_of_data+0x129b/0x1c20
[  325.296907][ T9443]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  325.302306][ T9443]  f2fs_get_read_data_page+0x40f/0x640
[  325.307779][ T9443]  ? f2fs_reserve_block+0x240/0x240
[  325.313094][ T9443]  ? folio_unlock+0x114/0x2f0
[  325.317793][ T9443]  ? folio_unlock+0x114/0x2f0
[  325.322497][ T9443]  f2fs_get_new_data_page+0x3c8/0x600
[  325.327889][ T9443]  ? lock_page+0x2b0/0x2b0
[  325.332322][ T9443]  ? has_not_enough_free_secs+0xe20/0xe20
[  325.338060][ T9443]  ? __kasan_slab_alloc+0x6b/0x80
[  325.343109][ T9443]  ? memset+0x1e/0x40
[  325.347186][ T9443]  f2fs_add_regular_entry+0x5c7/0xd30
[  325.352695][ T9443]  f2fs_add_dentry+0xdd/0x1d0
[  325.357407][ T9443]  f2fs_do_add_link+0x1c8/0x2a0
[  325.362407][ T9443]  ? __might_sleep+0xd0/0xd0
[  325.367022][ T9443]  ? f2fs_add_dentry+0x1d0/0x1d0
[  325.371989][ T9443]  ? up_read+0x20/0x20
[  325.376096][ T9443]  ? f2fs_lookup+0x4be/0x800
[  325.380699][ T9443]  ? down_read+0x1a8/0x2d0
[  325.385145][ T9443]  f2fs_create+0x74a/0xa30
[  325.389580][ T9443]  ? f2fs_lookup+0x800/0x800
[  325.394179][ T9443]  path_openat+0x11b9/0x2f10
[  325.398808][ T9443]  ? do_filp_open+0x420/0x420
[  325.403526][ T9443]  do_filp_open+0x1ee/0x420
[  325.408052][ T9443]  ? vfs_tmpfile+0x490/0x490
[  325.412681][ T9443]  ? _raw_spin_unlock+0x24/0x40
[  325.417545][ T9443]  ? alloc_fd+0x590/0x640
[  325.421915][ T9443]  do_sys_openat2+0x14b/0x4f0
[  325.426637][ T9443]  ? do_sys_open+0xe0/0xe0
[  325.431079][ T9443]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  325.437078][ T9443]  ? lock_chain_count+0x20/0x20
[  325.441953][ T9443]  __x64_sys_creat+0x8c/0xb0
[  325.446572][ T9443]  do_syscall_64+0x4c/0xa0
[  325.451022][ T9443]  ? clear_bhb_loop+0x60/0xb0
[  325.455720][ T9443]  ? clear_bhb_loop+0x60/0xb0
[  325.460438][ T9443]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  325.466350][ T9443] RIP: 0033:0x7f9394ba8f19
[  325.470794][ T9443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  325.490585][ T9443] RSP: 002b:00007f9395abd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  325.499019][ T9443] RAX: ffffffffffffffda RBX: 00007f9394e25fa0 RCX: 00007f9394ba8f19
[  325.507002][ T9443] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 00002000000059c0
[  325.514986][ T9443] RBP: 00007f9394c37f6d R08: 0000000000000000 R09: 0000000000000000
[  325.522970][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  325.530958][ T9443] R13: 00007f9394e26038 R14: 00007f9394e25fa0 R15: 00007ffd3e39fc68
[  325.538954][ T9443]  </TASK>
[  325.600173][ T9444] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[  325.761604][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  325.823667][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  325.839507][ T9196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.013384][ T9444] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  326.139169][ T9444] overlayfs: filesystem on './file0' not supported
[  327.316238][ T9477] loop3: detected capacity change from 0 to 2048
[  327.475268][ T9477] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  327.984949][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  328.078629][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  328.190542][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  328.280655][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  328.381136][ T9196] device veth0_vlan entered promiscuous mode
[  328.420504][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  328.487352][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  328.513653][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1758'.
[  328.571992][ T9196] device veth1_vlan entered promiscuous mode
[  328.724126][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready
[  328.778286][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready
[  328.854612][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  328.913509][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  328.962345][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  329.025298][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  329.102980][ T9196] device veth0_macvtap entered promiscuous mode
[  329.177022][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  329.211996][ T9518] loop4: detected capacity change from 0 to 2048
[  329.236963][ T9196] device veth1_macvtap entered promiscuous mode
[  329.306446][ T9518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.355844][ T9196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.463274][ T9196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.531211][ T9196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.590493][ T9196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.616393][ T9522] jffs2: notice: (9522) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  329.647349][ T9196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.672050][ T9196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.713017][ T9196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  329.753255][ T9196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  329.815538][ T9196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  329.844236][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  329.852945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  329.965298][ T9196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.002208][ T9514] loop6: detected capacity change from 0 to 32768
[  330.029848][ T9196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.101149][ T9514] JBD2: Ignoring recovery information on journal
[  330.120877][ T9530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1771'.
[  330.131590][ T9196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.210886][ T9196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.248935][ T9514] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  330.271768][ T9196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.354400][ T9196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.424283][ T9196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  330.488732][ T9196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  330.570150][ T9196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  330.638018][ T7588] (syz-executor,7588,0):ocfs2_inode_is_valid_to_delete:921 ERROR: Skipping delete of system file 66
[  330.663066][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  330.698132][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  330.739604][ T7588] ocfs2: Unmounting device (7,6) on (node local)
[  330.784231][ T9196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  330.792963][ T9196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  330.925323][ T9196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  330.943318][ T9543] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1775'.
[  330.996700][ T9196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.017122][ T9543] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1775'.
[  331.363692][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.371595][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.499110][   T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  331.547106][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.601686][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.686889][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  332.121792][ T9538] loop2: detected capacity change from 0 to 32768
[  332.205628][ T9569] loop4: detected capacity change from 0 to 512
[  332.306874][ T9569] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  332.317950][ T9538] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  332.411983][ T9577] loop3: detected capacity change from 0 to 128
[  332.436981][ T9569] EXT4-fs error (device loop4): ext4_init_orphan_info:623: comm syz.4.1782: orphan file block 0: bad magic
[  332.490303][ T9538] JBD2: Ignoring recovery information on journal
[  332.562787][ T9569] EXT4-fs (loop4): mount failed
[  332.633979][ T9577] FAT-fs (loop3): Directory bread(block 32) failed
[  332.729836][ T9577] FAT-fs (loop3): Directory bread(block 33) failed
[  332.773960][ T9538] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  332.856038][ T9577] FAT-fs (loop3): Directory bread(block 34) failed
[  332.862630][ T9577] FAT-fs (loop3): Directory bread(block 35) failed
[  332.940010][ T9569] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1782'.
[  333.018061][ T9577] FAT-fs (loop3): Directory bread(block 36) failed
[  333.089160][ T9538] (syz.2.1773,9538,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  333.106670][ T9577] FAT-fs (loop3): Directory bread(block 37) failed
[  333.186874][ T9577] FAT-fs (loop3): Directory bread(block 38) failed
[  333.223307][ T9538] (syz.2.1773,9538,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: read block 2333041375221960101 failed -12
[  333.303573][ T9577] FAT-fs (loop3): Directory bread(block 39) failed
[  333.310218][ T9577] FAT-fs (loop3): Directory bread(block 40) failed
[  333.360252][ T9538] (syz.2.1773,9538,0):ocfs2_get_suballoc_slot_bit:2773 ERROR: status = -12
[  333.483487][ T9577] FAT-fs (loop3): Directory bread(block 41) failed
[  333.533322][ T9538] (syz.2.1773,9538,0):ocfs2_test_inode_bit:2855 ERROR: get alloc slot and bit failed -12
[  333.640639][ T9538] (syz.2.1773,9538,0):ocfs2_test_inode_bit:2896 ERROR: status = -12
[  333.753291][ T9538] (syz.2.1773,9538,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  334.091310][ T4284] ocfs2: Unmounting device (7,2) on (node local)
[  334.167372][ T9577] FAT-fs (loop3): Filesystem has been set read-only
[  334.732687][ T9602] sctp: [Deprecated]: syz.7.1792 (pid 9602) Use of struct sctp_assoc_value in delayed_ack socket option.
[  334.732687][ T9602] Use struct sctp_sack_info instead
[  335.171482][ T9614] ima: signed policy file (specified as an absolute pathname) required
[  335.231618][   T26] audit: type=1802 audit(1794402656.467:224): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=signed policy required comm="syz.6.1795" res=0 errno=0
[  335.260293][ T9611] ima: policy update failed
[  335.358872][   T26] audit: type=1802 audit(1794402656.527:225): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1795" res=0 errno=0
[  335.612495][ T9625] loop6: detected capacity change from 0 to 1024
[  335.904589][ T9625] hfsplus: request for non-existent node 33423360 in B*Tree
[  335.972548][ T9625] hfsplus: request for non-existent node 33423360 in B*Tree
[  337.076943][ T9661] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  337.102154][ T9622] loop2: detected capacity change from 0 to 32768