last executing test programs:

3.010900107s ago: executing program 1 (id=2090):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x1, 0x6353, &(0x7f0000008480)="$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")
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)
open$dir(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x85c1, 0x116)

2.87597645s ago: executing program 4 (id=2092):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0), 0x1, 0x5c5, &(0x7f0000000480)="$eJzs3T1sG9cdAPD/HUVLtuXKQwu0hQejLeAChqkP263bSV6LujDgoUCXVqBowRAlGiLVWIKAyLsRxEOQBF6cLRkyJsiQIciSMWuWfMwBjFhIAMtDwoBfsixRDiWbZCL+fsCJ790d+f+/O77nu8OdGcDAOl37k0b8LiKuJhFj25YNRXPh6cZ6mxtr+ccba/kkqtVr3ySRRMSjjbV8a/2k+Xo8ItYj4rcR8XE24my69ZFHWoXyyur8TLFYWGrWxysLN8fLK6vnbizMzBXmCovn//q3i5cuXJycmtye7uPq9lp2f22988XdV+58+o/7d99599R6/rWZJKZjtLlseztepMY2ycb0jvkXuhGsj5J+J8CBZJr9vNaVfhNjkWn2+naq2weH4Z6kB3RRdTiiumVbERgAyXN0+tYgAvwStY4Daue/ramXxx8PLjdOQGpxNzfW8i9HK/5Q49pEjNTPTY59mzx1ZlI73zzZy0Q5lNZvR8TE0NDu73/S/P4d3MSLSJCu+uhyY0ft3v/p1vgTbcaf0da10+fUGv82m+PfZpv4mT3Gv6sdxvj+P1+9uWf828Px+7bxk634SZv4aUT8r8P49/79waW9llXfijgT7eO3JM++Pjx+/UaxMNH42zbGh2dO/X3v9kccq8fP7IrfuGY7Uk9ke/uPNHNKO2z/+5+894f1Z8T/8x+fvf/bbf+jEfFqJ8FrKz56+597LX5wO3lYOwrY7/5PIhv3O4kfEX+ZPv15s+iqIQAAAAAAAAAAvEBp/V62JM1tldM0l2s8w/vrOJYWS+XK2eul5cXZxj1vJyObtu60GmvUk1p9snk/bqs+taN+PtMMmDlar+fypeJsn9sOAAAAAAAAAAAAAAAAAAAAPxfHdzz//12m/vz/dMTUiX7nBvTA3j/5DRx2+j8Mrqf7f9K3PIDe8+8/DKyq/g+DS/+HwaX/w+DS/2Fwte3/R3ufB9B7u/r/SH/yAHpv38f//8p2JxEAAAAAAAAAAAAAAAAAAAAAAAAAADhcrl65UpuqjzfW8rX67NDK8nzp/+dmC+X53MJyPpcvLd3MzZVKc8VCLl9a+KnPS0qlmxOxuHxrvFIoV8bLK6v/XSgtL7Z+U7TgPw4FAAAAAAAAAAAAAAAAAACA3UbrU5LmIrKNeprmchEnIuJkEsn1G8XCRET8KiI+y2SHa/XJficNAAAAAAAAAAAAAAAAAAAAh0x5ZXV+plgsLHWvMNQM1dm7vqx0NZ+h/awcEetPzYlInm+L1T5x3+/KNjdgfc5I1/fX4S5kOvweDnyhj4MSAAAAAAAAAAAAAAAAAAAMqCcP/Xb6jh+6mxAAAAAAAAAAAAAAAAAAAAAMpPTrJCJq05mxP43uXHok2czUXyPipXvXXr81U6ksTdbmP9yaX3mjOX+qH/kDnWr10zQiav0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKK8sjo/UywWlg5YGO5gnX63EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAgfgwAAP//8czFuw==")
setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000300)=ANY=[@ANYBLOB="046e1f684d"], 0x10, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)

2.748672653s ago: executing program 2 (id=2095):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0x0, 0x0}]})

2.655102175s ago: executing program 2 (id=2096):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x8, 0xfffffffe, {0x1e}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x90)

2.586867097s ago: executing program 4 (id=2099):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x1444c, &(0x7f0000000440)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESHEX, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001dc0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJPBYGbfikuKsmRTpEj7+2zqNzv73ux7b9YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN97+dKZ59KjbgUAsJ+ujH/1zFn3fwD4RLnq//8BAAAAAAAAAAAAAOCgS1HE45Fi/sp6mqxedwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lz0/fKGbH1z/YXsyXh2/eqn+0tzN+YXW4mJruj4x256am2498BF2W3+7oWoA6jdfuzV9/fpi/eyz57a8fXvwvf7HTg5eHH769FPdshMjo6PjPWVqfR/50+9yrxkeR6OI05Hime/9JDUjoojdj8V9vjt77VjViaGqExMjo1VHZtrN2aXyzbHuQBQR9Z5Kje4Y7cO52JVGxHLZ/LLBQ2X3xuebC81rM636WHNhqb3UnpsdS53Wlv2pRxEXUsRKRKz13324viiiFim+c2I9XYuII91x+GI1Mfje7Sj2sI8PoGxnvS9ipTgE5+wA648iXokUP327iKlyzPJPfCHilTJ/EPFmmS9GpPKLcT7i3R2+RxxOtSjiL8rzf3E9TVfXg+515fLX6l+ZvT7XU7Z7XTn094f9dMCvTQNRRLO64q+nj/6bHQAAAAAAAAAAAAAAAAAetmNRxJOR4uX/+KNqXnFU89JPXBz+/cFf7J0z/sR9jlOWfTYilosHm5N7NE8hHktjKT3iucSfZANRxB/n+X/fetSNAQAAAAAAAAAAAAAAAAAA+EQr4seR4oV3TqWV6F1TvD17o361eW2msypsd+3f7prpGxsbG/XUyUbOyZzLOVdyruZcyxlFrp+zkXMy53LOlZyrOddyxpFcP2cj52TO5ZwrOVdzruWMWq6fs5FzMudyzpWcqznXcsYBWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjpIgi3o8U3/7GeooUEY2Iyejkan+3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKPWnIr4fKep/0LizrxYRqfq341T5y/loHC3z09EYLvPFaFzK2ayy1vjWI2g/u9OXivhRpOgfeOvOCc/nv6/z6s7XIN785uarX6l18kj3zcH3+h87eeLi8OivPXGv7bRTA4Yut2dv3a5PjIyOjvfsruVP/3TPvsH8ucXD6ToRsfj6G681Z2ZaCzY+GRu1zkYtDkh79msjX6/ioLRn+0bjYDRjc+MRX5jYF+X9/91I8dvv/Gf3ht+9//9C59WdO3z87E827/8vbD/QHt3/H+/Z90L+3UhfLWJg6eZ838mIgcXX3zjdvtm80brRmj1/5syXh4e/fO5M39GIgevtmVbP1q6HCgAAAAAAAAAAAAAAAGB/pSJ+N1I0f7Se6hFxu5qvNXhx+OnTTx2JI9V8qy3ztl4dv3qp/tLczfmF1uJia7o+MduemptuPejHDVTTvSZGRvekM/d1bI/bf2zgpbn51xfaN/5wacf3jw9cura4tNCc2vntOBZFRKN3z1DV4ImR0arRM+3mbFV1bMfJdB9eXyrivyLF1Pl6+nzel+f/bZ/hv2X+//L2A+3R/L9P9ewrPzOlIn4WKX7rL5+Iz1ftPB53jVku97eRYujC53K5OFqW67ah81yBzszAsuz/RYp/fH9r2e58yMc3yz73wAN7SJTn/0Sk+P6ffzd+Pe/b+vyHnc//8e0H2qPz/5mefce3PK9g110nn//TkeLFx9+K38j7Puj5H0VsbGz8acSpXPjO8zn26Px/tmffYHQ+9zcfXvcBAAAAAAAAAAAOrb5UxN9FiqdGa+n5vO9B/v7f9PYD7dHf//rlnn3T+7Re0a4HFQAAAAAOiL5UxI8jxY2lt+7Mod46/7tn/ufvbK69PpK2vVv9Od8vVc8NeJh//tdrMH/u5O67DQAAAAAAAAAAAAAAAAAAAAdKSkU8n9dTn7zPeuqrkeLl/3kml0sny3LddeAHq18HrszNnr40MzM31VxqXptp1cfnm1Otsu5nIsX633wu1y2q9dW768131ngf2Oiuxb4QKUb/vlu2sxZ7d23yznrgnbXYy7KfihT//Q9by3bXsf7sZtmzZdm/jhRf/+edy57cLHuuLPvdSPHDr9e7ZY+XZbvPR+08k3SgFjOtZ6fmZu56FCoAAAAAAAAAAAAAAAAAAAB8WH2piD+LFP97cyWW87T/vP5/dwX+Wrfsm9/sWe9/m9vVOv+D1fr/99r+KOv/Dz60ngIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOGRoog3IsX8lfW02l++7hi43J69dXtiZHTnasdSVfNIVb78GXju7LnzX3p++EI3P7j+w/ZkvDp+9VL9pbmb8wutxcXWdH1itj01N9164CPstv7m0HUMVQNQv/narenr1xfrZ589t+Xt24Pv9T92cvDi8NOnn+qWnRgZHR3vKVPr+xCf/qEat+loFPFXkeKZ7/0k/Ut/RBG7H4v7fHf22rGqE0NVJyZGRquOzLSbs0vlm2PdgSgi6j2VGt0x2odzsSuNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv/twfVHEa5HiOyfW07/2RxzpjsMXr4x/9czZe7ej2MM+PoCynfW+iJXiEJyzA6w/ivinSPHTt0/Fv/VH1KLzE1+IeKXMH0S8WeaLEan8YpyPeHeH7xGHUy2K+P/y/F9cT2/3l9eD7nXl8tfqX5m9PtdTtntdOfT3h/10wK9NA1HED6sr/nr6d/9dAwAAAAAAAAAAAAAAABwgRfxqpHjhnVOpmh98Z05xe/ZG/Wrz2kxnWl937l93zvTGxsZGPXWykXMy53LOlZyrOddyRpHr52zknMy5nHMl52rOtZxxJNfP2cg5mXM550rO1ZxrOaOW6+ds5JzMuZxzJedqzrWccUDm7gEAAAAAAAAAAAAAAAAAAB8vRfVPim9/Yz1t9HfWl56MTq5aD/Rj7+cBAAD//1vO/Qs=")
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x1, 0x6})

2.584460167s ago: executing program 2 (id=2100):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="180500006300000000000000feffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xf)

2.47700095s ago: executing program 3 (id=2101):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x80086c42, 0x0)

2.394261912s ago: executing program 2 (id=2102):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0x7, {"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", 0xfffffffffffffd8f}}, 0x1006)

2.131206278s ago: executing program 3 (id=2105):
r0 = timerfd_create(0x7, 0x80800)
timerfd_settime(r0, 0x1, &(0x7f00000004c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0)

1.890343864s ago: executing program 3 (id=2108):
setns(0xc9, 0x0)
r0 = socket(0x8, 0x5, 0x5)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

1.734079137s ago: executing program 3 (id=2110):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000000)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

1.532664093s ago: executing program 3 (id=2112):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000050800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24000000)

1.333029538s ago: executing program 1 (id=2114):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x2000, @mcast2, 0x9}, 0x0, {[0x1, 0x0, 0x0, 0xfffffffc, 0x9, 0x8]}}, 0x5c)
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000280)={0x3})

1.133257623s ago: executing program 3 (id=2116):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0x1, 0x5e9e, &(0x7f000000bc00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x75)
getdents64(r0, 0xfffffffffffffffe, 0x29)

905.042918ms ago: executing program 0 (id=2117):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x401, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x44010}, 0x0)

889.632358ms ago: executing program 4 (id=2118):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)

842.30606ms ago: executing program 0 (id=2119):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020)

776.327791ms ago: executing program 1 (id=2120):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0x0, 0x0)

667.513394ms ago: executing program 0 (id=2121):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140), 0x4)

525.058157ms ago: executing program 0 (id=2122):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xb0, 0x0, 0x3, [{{0x4, 0x2, 0x1ff, 0x2, 0x6d16, 0x7, {0x1, 0x6, 0x0, 0x6, 0xfffffffffffffff9, 0x9, 0x3, 0x6, 0x8, 0x1000, 0x3, 0x0, 0x0, 0x7168ad6a, 0x101}}, {0x1, 0x1, 0x8, 0x4, ')M.\xdb!\\*!'}}]}, 0x0, 0x0, 0x0})
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

464.819568ms ago: executing program 1 (id=2123):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x1, @empty}, 0x10)

392.422241ms ago: executing program 4 (id=2124):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x44c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x3, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff8, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x7, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x8, 0x1, 0xbc0, 0x9bf1, 0x5, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x6, 0x5, 0x1, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x20000000, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0xffffffff, 0x1, 0x0, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0x0, 0x8, 0xfffffff4, 0x3b98, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x7, 0xaa92, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cce, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0x0, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0xfff, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0x1, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x100, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x9, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ffffffff00000000000000000000000010000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff64010102000000003c00000002000000ac1e01010000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414aa00000000000000000000000000000000000004000000000003000000000000007f000001000000000000000000000000000000003c00000002"], 0x23c}}, 0x0)

373.058201ms ago: executing program 0 (id=2125):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0x1, 0x58c, &(0x7f0000001540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x800c6613, 0x0)

257.262144ms ago: executing program 4 (id=2126):
unshare(0x22020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38)

209.988845ms ago: executing program 1 (id=2127):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x82, 0xffffffff, 0x1})
r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x937, 0x1)
ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x2, 0x0, 0x0, 0x0})

108.961338ms ago: executing program 2 (id=2128):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="553900000000000000000100000008000200030000000800010000000000340004800500"], 0x58}}, 0x0)

43.947859ms ago: executing program 0 (id=2129):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)

36.936639ms ago: executing program 4 (id=2130):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file2\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c7072656665727265645f736c6f743d30303030303030303030303030303030303031342c636f686572656e63793d66756c6c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c6c6f63616c666c6f636b732c646174613d6f7264657265642c6e6f61636c2c008e89f1d3d9d17ed3fb0c454e26b4f51960c31985a5090c665b36e5930390cddcd71892162ba5358b5e94989e6b86"], 0x1, 0x4432, &(0x7f0000008940)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020)

1.10962ms ago: executing program 1 (id=2131):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc7baad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80186e82, &(0x7f0000000080)={@desc={0x200000, 0x0, @desc1}})

0s ago: executing program 2 (id=2132):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

ace 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.857911][ T4231] usb 1-1: config 1 interface 0 has no altsetting 0
[  117.988585][ T6790] loop2: detected capacity change from 0 to 64
[  118.041324][ T4767] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  118.062051][ T4767] asix: probe of 2-1:0.98 failed with error -71
[  118.083023][ T4767] usb 2-1: USB disconnect, device number 10
[  118.088961][  T433] attempt to access beyond end of device
[  118.088961][  T433] loop2: rw=1, want=268435470, limit=64
[  118.104425][ T4231] usb 1-1: string descriptor 0 read error: -22
[  118.110672][ T4231] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  118.111492][  T433] Buffer I/O error on dev loop2, logical block 134217734, lost async page write
[  118.126938][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.151218][ T4769] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e
[  118.151391][ T6756] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  118.160549][ T4769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.176459][ T4769] usb 4-1: Product: syz
[  118.180632][ T4769] usb 4-1: Manufacturer: syz
[  118.185337][ T4769] usb 4-1: SerialNumber: syz
[  118.192499][ T6756] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  118.212108][ T4231] cdc_ether: probe of 1-1:1.0 failed with error -22
[  118.270480][ T6794] loop2: detected capacity change from 0 to 1024
[  118.347595][ T6794] hfsplus: walked past end of dir
[  118.491284][ T4769] usb 4-1: USB disconnect, device number 7
[  118.519372][ T4240] usb 1-1: USB disconnect, device number 7
[  118.901510][ T6820] SQUASHFS error: Failed to read block 0xdfa: -5
[  118.912321][ T6820] SQUASHFS error: Unable to read metadata cache entry [dfa]
[  118.935721][ T6820] SQUASHFS error: Failed to read block 0x4e8: -5
[  118.954253][ T6820] SQUASHFS error: Failed to read block 0x4e8: -5
[  118.971770][   T25] audit: type=1800 audit(1785202577.874:9): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1032" name="file1" dev="loop1" ino=5 res=0 errno=0
[  119.203875][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready
[  119.298606][ T6836] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  119.409453][ T6836] ntfs3: loop1: failed to convert "c46c" to maccroatian
[  119.611464][ T6854] binder: 6853:6854 ioctl c00c620f 200000002980 returned -22
[  119.831083][ T6866] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  119.883565][ T6866] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  119.939776][ T6833] find_entry called with index = 0
[  119.955365][ T6866] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1049: attempt to clear invalid blocks 2 len 1
[  119.972442][ T6833] read_mapping_page failed!
[  119.977264][ T6833] ERROR: (device loop4): txCommit: 
[  119.977264][ T6833] 
[  120.006997][ T4767] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  120.017201][ T6866] EXT4-fs (loop3): Remounting filesystem read-only
[  120.023915][ T6866] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  120.051420][ T6866] EXT4-fs (loop3): Remounting filesystem read-only
[  120.058820][ T6866] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1049: invalid indirect mapped block 1819239214 (level 0)
[  120.079007][ T6866] EXT4-fs (loop3): Remounting filesystem read-only
[  120.086697][ T6866] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1049: invalid indirect mapped block 1819239214 (level 1)
[  120.127952][ T6866] EXT4-fs (loop3): Remounting filesystem read-only
[  120.145891][ T6866] EXT4-fs (loop3): 1 truncate cleaned up
[  120.165370][ T6866] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback.
[  120.251092][ T4767] usb 1-1: Using ep0 maxpacket: 32
[  120.285323][ T6866] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work
[  120.372267][ T4767] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.396093][ T6880] set_capacity_and_notify: 7 callbacks suppressed
[  120.396108][ T6880] loop2: detected capacity change from 0 to 512
[  120.399933][ T4767] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.465286][ T4767] usb 1-1: config 0 interface 0 has no altsetting 0
[  120.481967][ T4767] usb 1-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  120.559130][ T4767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.577773][ T6880] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,barrier=0x0000000000000004,journal_ioprio=0x0000000000000007,. Quota mode: writeback.
[  120.579221][ T4767] usb 1-1: config 0 descriptor??
[  120.631276][ T6880] ext4 filesystem being mounted at /259/file3 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.768567][ T6877] loop4: detected capacity change from 0 to 32768
[  120.887992][ T6897] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[  120.902420][ T6895] loop1: detected capacity change from 0 to 1024
[  120.948500][ T6877] XFS (loop4): Mounting V5 Filesystem
[  121.083433][ T4767] belkin 0003:050D:3201.000D: unknown main item tag 0x3
[  121.090435][ T4767] belkin 0003:050D:3201.000D: unknown main item tag 0x0
[  121.120116][ T6910] hfsplus: request for non-existent node 134217728 in B*Tree
[  121.121635][ T6915] loop3: detected capacity change from 0 to 128
[  121.175424][ T4767] belkin 0003:050D:3201.000D: unknown main item tag 0x0
[  121.185270][ T6910] hfsplus: request for non-existent node 134217728 in B*Tree
[  121.215746][ T4767] belkin 0003:050D:3201.000D: unknown main item tag 0x0
[  121.244713][ T4767] belkin 0003:050D:3201.000D: unknown main item tag 0x0
[  121.255910][ T6918] loop2: detected capacity change from 0 to 1024
[  121.283635][ T4767] belkin 0003:050D:3201.000D: unknown main item tag 0x0
[  121.290628][ T4767] belkin 0003:050D:3201.000D: unknown main item tag 0x0
[  121.300576][ T4767] belkin 0003:050D:3201.000D: unknown main item tag 0x0
[  121.316316][ T6877] XFS (loop4): Ending clean mount
[  121.350795][ T4767] belkin 0003:050D:3201.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 050d:3201] on usb-dummy_hcd.0-1/input0
[  121.425115][ T4195] XFS (loop4): Unmounting Filesystem
[  121.439925][ T4767] usb 1-1: USB disconnect, device number 8
[  121.663551][ T6924] fido_id[6924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  121.771200][ T5173] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  121.931477][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'.
[  122.021021][ T4240] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  122.029923][ T6945] loop0: detected capacity change from 0 to 256
[  122.103543][ T6951] loop2: detected capacity change from 0 to 256
[  122.152796][ T6951] exfat: Deprecated parameter 'namecase'
[  122.162462][ T6951] exfat: Deprecated parameter 'namecase'
[  122.187928][ T6945] FAT-fs (loop0): Directory bread(block 64) failed
[  122.201384][ T6951] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  122.231185][ T5173] usb 2-1: config index 0 descriptor too short (expected 63268, got 36)
[  122.241971][ T5173] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  122.251394][ T6945] FAT-fs (loop0): Directory bread(block 65) failed
[  122.264390][ T6945] FAT-fs (loop0): Directory bread(block 66) failed
[  122.281541][ T6945] FAT-fs (loop0): Directory bread(block 67) failed
[  122.290502][ T5173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  122.298391][ T6945] FAT-fs (loop0): Directory bread(block 68) failed
[  122.299836][ T4240] usb 4-1: Using ep0 maxpacket: 8
[  122.321265][ T6945] FAT-fs (loop0): Directory bread(block 69) failed
[  122.338458][ T5173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  122.359240][ T6945] FAT-fs (loop0): Directory bread(block 70) failed
[  122.371636][ T5173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.386790][ T6945] FAT-fs (loop0): Directory bread(block 71) failed
[  122.407017][ T6945] FAT-fs (loop0): Directory bread(block 72) failed
[  122.407309][ T5173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  122.425356][ T6945] FAT-fs (loop0): Directory bread(block 73) failed
[  122.433816][ T5173] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00
[  122.433843][ T5173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.446387][ T4240] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.446426][ T4240] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.446447][ T4240] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  122.446473][ T4240] usb 4-1: config 0 interface 0 has no altsetting 0
[  122.446499][ T4240] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[  122.446521][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.448906][ T4240] usb 4-1: config 0 descriptor??
[  122.451732][ T5173] usb 2-1: config 0 descriptor??
[  122.712048][ T6963] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  122.717171][ T6966] loop0: detected capacity change from 0 to 2048
[  122.736315][ T6963] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 1614071250 out of range (1000000..45000000)
[  122.773273][ T6966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.973134][ T5173] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x2
[  122.985438][ T4240] acrux 0003:1A34:F705.000F: item fetching failed at offset 1/40
[  123.006633][ T5173] thrustmaster 0003:044F:B653.000E: unknown main item tag 0xd
[  123.015625][ T4240] acrux 0003:1A34:F705.000F: parse failed
[  123.019532][ T6977] loop0: detected capacity change from 0 to 4096
[  123.029007][ T4240] acrux: probe of 0003:1A34:F705.000F failed with error -22
[  123.036694][ T5173] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x1
[  123.057261][ T5173] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x3
[  123.071072][ T6977] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  123.088544][ T5173] thrustmaster 0003:044F:B653.000E: unknown main item tag 0x1
[  123.125139][ T5173] thrustmaster 0003:044F:B653.000E: hidraw0: USB HID v80.09 Device [HID 044f:b653] on usb-dummy_hcd.1-1/input0
[  123.129120][ T4397] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  123.137964][ T5173] thrustmaster 0003:044F:B653.000E: no inputs found
[  123.255363][ T4231] usb 4-1: USB disconnect, device number 8
[  123.277625][ T4767] usb 2-1: USB disconnect, device number 11
[  123.326466][ T6977] EXT4-fs (loop0): Test dummy encryption mode enabled
[  123.349448][ T6984] fido_id[6984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  123.365444][ T6977] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  123.409367][   T25] audit: type=1326 audit(1785202582.304:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6993 comm="syz.2.1101" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29d32cbe99 code=0x0
[  123.411303][ T4397] usb 5-1: Using ep0 maxpacket: 8
[  123.561342][ T4397] usb 5-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 64
[  123.579095][ T4397] usb 5-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 8
[  123.589062][ T4397] usb 5-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  123.611143][ T4397] usb 5-1: config 1 interface 0 has no altsetting 0
[  123.760130][ T6997] loop0: detected capacity change from 0 to 32768
[  123.771251][ T4397] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  123.780681][ T4397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.788806][ T4397] usb 5-1: Product: syz
[  123.793024][ T4397] usb 5-1: Manufacturer: syz
[  123.798107][ T4397] usb 5-1: SerialNumber: syz
[  123.822325][ T6968] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  123.829412][ T6968] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  124.107396][ T7008] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.1108: Directory hole found for htree index block 0
[  124.126795][ T7008] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  124.145696][ T4397] usb 5-1: bad CDC descriptors
[  124.150646][ T7008] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000009,jqfmt=vfsold,nolazytime,grpjquota=.journal_async_commit,resuid=0x0000000000000000,bsddf,grpid,,,errors=continue. Quota mode: writeback.
[  124.186144][ T4397] usb 5-1: USB disconnect, device number 9
[  124.528037][ T7025] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1116: bg 0: block 473: padding at end of block bitmap is not set
[  124.671670][ T7025] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  124.698335][ T7025] EXT4-fs (loop2): 1 orphan inode deleted
[  124.736954][ T7025] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  124.761065][ T7025] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.822729][ T4231] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  124.982166][ T7040] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1120 (7040)
[  125.025278][ T7040] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  125.047512][ T7040] BTRFS info (device loop3): using free space tree
[  125.061186][ T4231] usb 1-1: Using ep0 maxpacket: 16
[  125.087011][ T7040] BTRFS info (device loop3): has skinny extents
[  125.261150][ T4231] usb 1-1: config 127 has an invalid interface number: 124 but max is 0
[  125.261178][ T4231] usb 1-1: config 127 has no interface number 0
[  125.261202][ T4231] usb 1-1: config 127 interface 124 has no altsetting 0
[  125.379211][ T7040] BTRFS info (device loop3): enabling ssd optimizations
[  125.426107][ T4231] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  125.451362][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.471464][ T4231] usb 1-1: Product: syz
[  125.475655][ T4231] usb 1-1: Manufacturer: syz
[  125.492319][ T4231] usb 1-1: SerialNumber: syz
[  125.501849][ T7093] set_capacity_and_notify: 4 callbacks suppressed
[  125.501862][ T7093] loop2: detected capacity change from 0 to 2048
[  125.588723][ T7093] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.988817][ T7100] loop4: detected capacity change from 0 to 256
[  126.020681][ T7102] x_tables: ip_tables: tcp match: only valid for protocol 6
[  126.124682][ T7100] FAT-fs (loop4): Directory bread(block 64) failed
[  126.139042][ T7100] FAT-fs (loop4): Directory bread(block 65) failed
[  126.146965][ T7100] FAT-fs (loop4): Directory bread(block 66) failed
[  126.191408][ T7100] FAT-fs (loop4): Directory bread(block 67) failed
[  126.198117][ T7100] FAT-fs (loop4): Directory bread(block 68) failed
[  126.231209][ T7100] FAT-fs (loop4): Directory bread(block 69) failed
[  126.237829][ T7100] FAT-fs (loop4): Directory bread(block 70) failed
[  126.251151][ T4231] usb 1-1: reset high-speed USB device number 9 using dummy_hcd
[  126.267656][ T7100] FAT-fs (loop4): Directory bread(block 71) failed
[  126.278709][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1142'.
[  126.296053][ T7100] FAT-fs (loop4): Directory bread(block 72) failed
[  126.303890][ T7096] loop1: detected capacity change from 0 to 32768
[  126.310990][ T7100] FAT-fs (loop4): Directory bread(block 73) failed
[  126.361701][ T7096] XFS: attr2 mount option is deprecated.
[  126.494479][ T7096] XFS (loop1): Mounting V5 Filesystem
[  126.611108][ T4231] usb 1-1: unable to get BOS descriptor or descriptor too short
[  126.618953][ T4231] usb 1-1: device firmware changed
[  126.659964][ T7118] loop4: detected capacity change from 0 to 8192
[  126.715363][ T4231] usb 1-1: USB disconnect, device number 9
[  126.723139][ T7096] XFS (loop1): Ending clean mount
[  126.724997][ T7096] XFS (loop1): Quotacheck needed: Please wait.
[  126.728130][ T7118] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  126.728232][ T7118] REISERFS (device loop4): using ordered data mode
[  126.728243][ T7118] reiserfs: using flush barriers
[  126.729362][ T7118] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  126.729650][ T7118] REISERFS (device loop4): checking transaction log (loop4)
[  126.829039][ T7096] XFS (loop1): Quotacheck: Done.
[  127.008105][ T7118] REISERFS (device loop4): Using tea hash to sort names
[  127.017946][ T4187] XFS (loop1): Unmounting Filesystem
[  127.022723][ T7118] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  127.038007][ T7118] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  127.855531][ T7164] binder_alloc: binder_alloc_mmap_handler: 7163 200000ffe000-200001000000 already mapped failed -16
[  128.345620][ T7186] loop3: detected capacity change from 0 to 4096
[  128.388923][ T7192] loop0: detected capacity change from 0 to 256
[  128.439190][ T7186] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  128.461000][ T7186] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  128.463543][ T7192] FAT-fs (loop0): Directory bread(block 64) failed
[  128.484149][ T7186] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  128.509008][ T7186] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  128.531047][ T7192] FAT-fs (loop0): Directory bread(block 65) failed
[  128.548037][ T7192] FAT-fs (loop0): Directory bread(block 66) failed
[  128.557896][ T7186] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  128.579483][ T7192] FAT-fs (loop0): Directory bread(block 67) failed
[  128.586471][ T7192] FAT-fs (loop0): Directory bread(block 68) failed
[  128.601234][ T7192] FAT-fs (loop0): Directory bread(block 69) failed
[  128.608840][ T7186] ntfs: volume version 3.1.
[  128.619515][ T7186] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  128.643421][ T7192] FAT-fs (loop0): Directory bread(block 70) failed
[  128.650354][ T7192] FAT-fs (loop0): Directory bread(block 71) failed
[  128.665502][ T7186] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  128.681232][ T7192] FAT-fs (loop0): Directory bread(block 72) failed
[  128.687786][ T7192] FAT-fs (loop0): Directory bread(block 73) failed
[  128.694672][ T4240] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  128.714594][ T7186] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  128.741020][ T7186] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  128.781067][ T7186] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  128.861961][ T7145] loop1: detected capacity change from 0 to 65536
[  128.912857][ T7145] XFS: attr2 mount option is deprecated.
[  128.919117][ T7145] XFS: attr2 mount option is deprecated.
[  128.971294][ T4240] usb 5-1: Using ep0 maxpacket: 16
[  129.048786][ T7198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1180'.
[  129.104434][ T7145] XFS (loop1): Mounting V5 Filesystem
[  129.111718][ T4240] usb 5-1: config index 0 descriptor too short (expected 18, got 10)
[  129.156292][ T4240] usb 5-1: config 1 descriptor has 1 excess byte, ignoring
[  129.157118][ T7185] loop2: detected capacity change from 0 to 32768
[  129.170970][ T4240] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  129.204926][ T7145] XFS (loop1): Ending clean mount
[  129.227165][ T7145] XFS (loop1): Quotacheck needed: Please wait.
[  129.300818][ T7145] XFS (loop1): Quotacheck: Done.
[  129.377609][ T4187] XFS (loop1): Unmounting Filesystem
[  129.383393][ T7218] loop0: detected capacity change from 0 to 16
[  129.411241][ T4240] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  129.420394][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.455072][ T4240] usb 5-1: Product: syz
[  129.455874][ T7218] erofs: (device loop0): mounted with root inode @ nid 36.
[  129.469524][ T4240] usb 5-1: Manufacturer: syz
[  129.484832][ T4240] usb 5-1: SerialNumber: syz
[  129.740051][ T7227] loop2: detected capacity change from 0 to 4096
[  129.828774][ T4240] usb 5-1: USB disconnect, device number 10
[  129.983196][ T5817] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  130.171062][ T4231] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  130.178363][ T7250] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1188'.
[  130.251083][ T5817] usb 4-1: Using ep0 maxpacket: 16
[  130.374914][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.396823][ T5817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.543390][ T7261] loop4: detected capacity change from 0 to 512
[  130.551478][ T4231] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  130.571457][ T5817] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.584848][ T7252] loop1: detected capacity change from 0 to 32768
[  130.586433][ T4231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.601705][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.609706][ T5817] usb 4-1: Product: syz
[  130.634772][ T7252] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1203 (7252)
[  130.641084][ T5817] usb 4-1: Manufacturer: syz
[  130.681501][ T4231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  130.687772][ T7252] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  130.690493][ T4231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.732611][ T7252] BTRFS info (device loop1): setting nodatasum
[  130.738810][ T7252] BTRFS info (device loop1): disabling tree log
[  130.739189][ T5817] usb 4-1: SerialNumber: syz
[  130.771973][ T7252] BTRFS info (device loop1): max_inline at 0
[  130.793921][ T7252] BTRFS info (device loop1): turning on sync discard
[  130.821638][ T7252] BTRFS info (device loop1): using free space tree
[  130.858528][ T7252] BTRFS info (device loop1): has skinny extents
[  130.871192][ T7267] loop4: detected capacity change from 0 to 512
[  130.905801][ T7267] EXT4-fs (loop4): Ignoring removed orlov option
[  130.921074][ T7269] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  130.931255][ T4231] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  130.949044][ T7267] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  130.969973][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  130.978226][ T7269] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  131.010881][ T7267] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1209: corrupted in-inode xattr
[  131.040253][ T7269] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  131.049129][ T4231] usb 1-1: Product: syz
[  131.060420][ T4231] usb 1-1: Manufacturer: syz
[  131.069822][ T7267] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1209: couldn't read orphan inode 15 (err -117)
[  131.093767][ T7269] comedi comedi3: 8255: I/O port conflict (0xc9,4)
[  131.101248][ T5817] usb 4-1: 0:2 : does not exist
[  131.131072][ T7252] BTRFS info (device loop1): enabling ssd optimizations
[  131.139674][ T7269] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  131.166440][ T4231] cdc_wdm 1-1:1.0: skipping garbage
[  131.191403][ T5817] usb 4-1: USB disconnect, device number 9
[  131.197746][ T4231] cdc_wdm 1-1:1.0: skipping garbage
[  131.203634][ T7269] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  131.211329][ T7267] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[  131.212435][ T7269] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  131.242899][ T7269] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  131.259479][ T7269] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  131.266704][ T7269] comedi comedi3: 8255: I/O port conflict (0x81,4)
[  131.276824][ T7269] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  131.313844][ T4231] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  131.320709][ T7269] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  131.320859][ T4231] cdc_wdm 1-1:1.0: Unknown control protocol
[  131.433590][ T7269] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  131.458047][ T7269] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  131.513571][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.694946][ T4234] usb 1-1: USB disconnect, device number 10
[  131.839677][ T7309] loop4: detected capacity change from 0 to 2048
[  131.920223][ T7309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.021080][ T7309] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  132.076915][ T7320] loop1: detected capacity change from 0 to 1024
[  132.079533][ T7309] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[  132.141109][ T7320] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  132.349517][ T7337] loop4: detected capacity change from 0 to 16
[  132.464935][ T7337] erofs: (device loop4): mounted with root inode @ nid 36.
[  132.551473][ T7347] loop0: detected capacity change from 0 to 256
[  132.595040][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  132.601420][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  132.620422][ T7352] loop1: detected capacity change from 0 to 256
[  132.668237][ T7347] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  132.901507][ T7358] netlink: 'syz.4.1241': attribute type 1 has an invalid length.
[  133.289195][ T7372] sp0: Synchronizing with TNC
[  133.334768][ T7342] loop3: detected capacity change from 0 to 32768
[  133.540368][ T7342] XFS (loop3): Mounting V5 Filesystem
[  133.652011][ T7342] XFS (loop3): Ending clean mount
[  133.747021][ T4191] XFS (loop3): Unmounting Filesystem
[  133.964254][ T7398] netlink: 'syz.2.1256': attribute type 3 has an invalid length.
[  134.001139][ T7398] netlink: 'syz.2.1256': attribute type 304 has an invalid length.
[  134.267398][ T7376] loop4: detected capacity change from 0 to 32768
[  134.318229][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1263'.
[  134.375260][ T7417] device ip6gre1 entered promiscuous mode
[  134.546581][ T7419] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.612113][ T4395] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  134.635820][ T7419] overlayfs: upper fs needs to support d_type.
[  134.677882][ T7419] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  134.708938][ T7419] overlayfs: failed to set xattr on upper
[  134.727180][ T7419] overlayfs: ...falling back to index=off,metacopy=off.
[  134.749670][ T7419] overlayfs: conflicting lowerdir path
[  134.772123][ T7430] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  134.786572][ T7430] hpfs: filesystem error: improperly stopped
[  134.803654][ T7430] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  134.812010][ T7430] hpfs: You really don't want any checks? You are crazy...
[  134.843403][ T7430] hpfs: Code page index out of array
[  134.856212][ T7430] hpfs: code page support is disabled
[  134.884902][ T7430] hpfs: hpfs_map_4sectors(): unaligned read
[  134.894001][ T7430] hpfs: hpfs_map_4sectors(): unaligned read
[  134.899975][ T7430] hpfs: filesystem error: unable to find root dir
[  134.987661][ T7434] EXT4-fs (loop4): inline encryption not supported
[  135.001164][ T4395] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  135.020148][ T4395] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 19
[  135.063826][ T7434] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002]
[  135.101190][ T7434] System zones: 0-5
[  135.106488][ T7434] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  135.121248][ T4395] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  135.136730][ T4395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  135.145059][ T4395] usb 4-1: SerialNumber: syz
[  135.166005][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1272'.
[  135.202920][ T4395] cdc_ether: probe of 4-1:1.0 failed with error -22
[  135.521361][ T4233] usb 4-1: USB disconnect, device number 10
[  135.761000][    T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  135.868727][ T7465] set_capacity_and_notify: 3 callbacks suppressed
[  135.868751][ T7465] loop1: detected capacity change from 0 to 512
[  135.944595][ T7465] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1287: inode has both inline data and extents flags
[  135.947828][ T7453] loop0: detected capacity change from 0 to 32768
[  135.992195][ T7453] 
[  135.992195][ T7453]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  135.992195][ T7453] 
[  136.011060][    T7] usb 5-1: Using ep0 maxpacket: 16
[  136.070465][ T7465] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1287: couldn't read orphan inode 15 (err -117)
[  136.096315][ T7453] ERROR: (device loop0): diWrite: ixpxd invalid
[  136.096315][ T7453] 
[  136.135827][ T7453] ERROR: (device loop0): txCommit: 
[  136.135827][ T7453] 
[  136.143720][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.154826][ T7301] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  136.165253][ T7465] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback.
[  136.175979][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.208030][ T7471] ERROR: (device loop0): diWrite: ixpxd invalid
[  136.208030][ T7471] 
[  136.219305][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  136.244332][ T7471] ERROR: (device loop0): txCommit: 
[  136.244332][ T7471] 
[  136.270705][    T7] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  136.293042][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.311355][ T4188] 
[  136.311355][ T4188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  136.311355][ T4188] 
[  136.314793][    T7] usb 5-1: config 0 descriptor??
[  136.333396][ T4188] 
[  136.333396][ T4188]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  136.333396][ T4188] 
[  136.402263][ T7301] usb 3-1: Using ep0 maxpacket: 8
[  136.449264][ T7481] loop1: detected capacity change from 0 to 164
[  136.510850][ T7481] rock: directory entry would overflow storage
[  136.529602][ T7481] rock: sig=0x4f50, size=4, remaining=3
[  136.535768][ T7301] usb 3-1: config 0 has an invalid interface number: 30 but max is 0
[  136.548388][ T7301] usb 3-1: config 0 has no interface number 0
[  136.570468][ T7481] isofs: Unable to find the ".." directory for NFS.
[  136.586041][ T7301] usb 3-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30
[  136.621743][ T7301] usb 3-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.650068][ T7301] usb 3-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.677502][ T7301] usb 3-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  136.716569][ T7301] usb 3-1: config 0 interface 30 has no altsetting 0
[  136.723620][ T7301] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  136.744722][ T7301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.765404][ T7301] usb 3-1: config 0 descriptor??
[  136.779147][ T7489] loop3: detected capacity change from 0 to 8192
[  136.786315][ T7491] netlink: 'syz.0.1300': attribute type 2 has an invalid length.
[  136.812793][    T7] microsoft 0003:045E:07DA.0010: item 0 4 0 8 parsing failed
[  136.820645][    T7] microsoft 0003:045E:07DA.0010: parse failed
[  136.842755][    T7] microsoft: probe of 0003:045E:07DA.0010 failed with error -22
[  136.924048][ T7489] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  136.932588][ T7489] FAT-fs (loop3): Filesystem has been set read-only
[  137.031498][ T7499] vim2m vim2m.0: vidioc_s_fmt queue busy
[  137.116198][ T4395] usb 5-1: USB disconnect, device number 11
[  137.265523][   T25] kauditd_printk_skb: 8 callbacks suppressed
[  137.265545][   T25] audit: type=1400 audit(1785202596.164:13): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7512 comm="syz.1.1311"
[  137.284782][ T7301] uclogic 0003:256C:006E.0011: unknown main item tag 0x0
[  137.284812][ T7301] uclogic 0003:256C:006E.0011: unknown main item tag 0x0
[  137.284836][ T7301] uclogic 0003:256C:006E.0011: unknown main item tag 0x0
[  137.284860][ T7301] uclogic 0003:256C:006E.0011: unknown main item tag 0x0
[  137.284882][ T7301] uclogic 0003:256C:006E.0011: unknown main item tag 0x0
[  137.284903][ T7301] uclogic 0003:256C:006E.0011: unknown main item tag 0x0
[  137.285329][ T7301] uclogic 0003:256C:006E.0011: No inputs registered, leaving
[  137.286773][ T7301] uclogic 0003:256C:006E.0011: hidraw0: USB HID v0.00 Device [HID 256c:006e] on usb-dummy_hcd.2-1/input30
[  137.509634][ T4233] usb 3-1: USB disconnect, device number 4
[  137.689088][ T7511] loop0: detected capacity change from 0 to 32768
[  137.781604][ T7511] XFS (loop0): Mounting V5 Filesystem
[  137.854299][ T7511] XFS (loop0): Ending clean mount
[  137.889299][ T4188] XFS (loop0): Unmounting Filesystem
[  138.088859][ T7552] loop4: detected capacity change from 0 to 2048
[  138.173482][ T7552] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.280084][ T7552] overlayfs: upper fs needs to support d_type.
[  138.300365][ T7552] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  138.337791][ T7552] overlayfs: failed to set xattr on upper
[  138.351259][ T4395] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  138.358992][ T7552] overlayfs: ...falling back to index=off,metacopy=off.
[  138.399327][ T7552] overlayfs: conflicting lowerdir path
[  138.591138][ T4395] usb 2-1: Using ep0 maxpacket: 8
[  138.713250][ T4395] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  138.835852][ T7556] loop2: detected capacity change from 0 to 40427
[  138.878477][ T7580] netem: change failed
[  138.881462][ T4395] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  138.906954][ T4395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.928997][ T7582] loop4: detected capacity change from 0 to 2048
[  138.930083][ T4395] usb 2-1: Product: syz
[  138.944833][ T4395] usb 2-1: Manufacturer: syz
[  138.949486][ T4395] usb 2-1: SerialNumber: syz
[  138.971100][ T7556] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  138.978359][ T7556] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  138.998692][ T4395] usb 2-1: config 0 descriptor??
[  139.020630][ T7556] F2FS-fs (loop2): invalid crc value
[  139.038190][ T7582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.065535][ T4395] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  139.081705][ T7556] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  139.087866][ T4395] usb 2-1: setting power ON
[  139.114682][ T4395] dvb-usb: bulk message failed: -22 (2/0)
[  139.165331][ T4395] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  139.224794][ T4395] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  139.257435][ T4395] usb 2-1: media controller created
[  139.271410][ T7553] dvb-usb: bulk message failed: -22 (3/0)
[  139.291080][ T7553] dvb-usb: bulk message failed: -22 (3/0)
[  139.347616][ T7556] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  139.358108][ T4395] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  139.369995][ T7591] loop4: detected capacity change from 0 to 4096
[  139.376662][ T7556] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  139.387964][ T7567] loop0: detected capacity change from 0 to 40427
[  139.446381][ T4395] usb 2-1: selecting invalid altsetting 6
[  139.453179][ T4395] usb 2-1: digital interface selection failed (-22)
[  139.460139][ T4395] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  139.494044][ T7591] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  139.517000][ T7567] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  139.525516][ T4395] usb 2-1: setting power OFF
[  139.530619][ T4395] dvb-usb: bulk message failed: -22 (2/0)
[  139.531010][ T7591] NILFS (loop4): mounting unchecked fs
[  139.541043][ T7567] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  139.563263][ T4395] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  139.578384][ T7591] NILFS (loop4): recovery required for readonly filesystem
[  139.588530][ T7591] NILFS (loop4): write access will be enabled during recovery
[  139.590452][ T7567] F2FS-fs (loop0): invalid crc_offset: 33558524
[  139.613505][ T4395] (NULL device *): no alternate interface
[  139.626938][ T4857] udevd[4857]: incorrect nilfs2 checksum on /dev/loop4
[  139.658848][ T7591] NILFS (loop4): norecovery option specified, skipping roll-forward recovery
[  139.668383][ T4395] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  139.699736][ T7567] F2FS-fs (loop0): Found nat_bits in checkpoint
[  139.729385][ T4395] usb 2-1: USB disconnect, device number 12
[  139.786709][ T4857] udevd[4857]: incorrect nilfs2 checksum on /dev/loop4
[  139.940882][ T7567] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  139.961052][ T7567] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  140.182022][ T7601] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.215115][ T7601] ext4 filesystem being mounted at /251/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  140.246645][    C0] vkms_vblank_simulate: vblank timer overrun
[  140.526849][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1345'.
[  140.587311][ T7622] netlink: 'syz.4.1354': attribute type 1 has an invalid length.
[  140.861659][ T7636] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  140.895015][ T7633] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  140.931080][ T7633] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  140.967129][ T7638] set_capacity_and_notify: 3 callbacks suppressed
[  140.967143][ T7638] loop3: detected capacity change from 0 to 128
[  141.038678][ T7633] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters
[  141.078805][ T7638] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  141.086193][ T7616] loop2: detected capacity change from 0 to 40427
[  141.117785][ T7638] hpfs: filesystem error: improperly stopped
[  141.124132][ T7633] EXT4-fs (loop1): Remounting filesystem read-only
[  141.124433][ T7638] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  141.139902][ T7638] hpfs: You really don't want any checks? You are crazy...
[  141.148118][ T7638] hpfs: hpfs_map_sector(): read error
[  141.158041][ T7638] hpfs: code page support is disabled
[  141.163938][ T7616] F2FS-fs (loop2): invalid crc value
[  141.169502][ T7638] hpfs: hpfs_map_4sectors(): unaligned read
[  141.176484][ T7638] hpfs: hpfs_map_4sectors(): unaligned read
[  141.182892][ T7638] hpfs: filesystem error: unable to find root dir
[  141.192161][ T7616] F2FS-fs (loop2): Found nat_bits in checkpoint
[  141.242332][ T7633] EXT4-fs (loop1): 1 orphan inode deleted
[  141.248601][ T7633] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,lazytime,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,mblk_io_submit,barrier,quota,. Quota mode: writeback.
[  141.311495][ T7633] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.366149][ T7616] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  141.411164][ T7616] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  141.588217][ T4199] attempt to access beyond end of device
[  141.588217][ T4199] loop2: rw=2049, want=45104, limit=40427
[  141.738703][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1373'.
[  142.043981][ T7685] loop3: detected capacity change from 0 to 128
[  142.126165][ T7685] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  142.164839][ T7685] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.174383][ T7653] loop0: detected capacity change from 0 to 32768
[  142.257303][ T7653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1364 (7653)
[  142.401583][ T7653] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  142.430681][ T7653] BTRFS info (device loop0): setting nodatasum
[  142.461990][ T7653] BTRFS info (device loop0): disabling tree log
[  142.465673][ T4395] kernel write not supported for file /input/event0 (pid: 4395 comm: kworker/0:8)
[  142.468298][ T7653] BTRFS info (device loop0): max_inline at 0
[  142.468317][ T7653] BTRFS info (device loop0): turning on sync discard
[  142.530944][ T7702] netlink: 'syz.2.1387': attribute type 3 has an invalid length.
[  142.590404][ T7653] BTRFS info (device loop0): using free space tree
[  142.632364][ T7653] BTRFS info (device loop0): has skinny extents
[  142.683109][ T7684] loop1: detected capacity change from 0 to 32768
[  142.732530][ T7712] netlink: 'syz.3.1391': attribute type 49 has an invalid length.
[  142.744987][ T7714] netlink: 'syz.4.1392': attribute type 1 has an invalid length.
[  142.791948][ T7714] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1392'.
[  142.793146][ T7684] ERROR: (device loop1): dtReadFirst: btstack overrun
[  142.793146][ T7684] 
[  142.861166][ T7684] ERROR: (device loop1): remounting filesystem as read-only
[  142.917625][ T7684] btstack dump:
[  142.971222][ T7684] bn = 0, index = 0
[  142.975062][ T7684] bn = 0, index = 0
[  142.978874][ T7684] bn = 0, index = 0
[  143.002519][ T7730] loop4: detected capacity change from 0 to 128
[  143.008929][ T7684] bn = 0, index = 0
[  143.013233][ T7684] bn = 0, index = 0
[  143.017051][ T7684] bn = 0, index = 0
[  143.060997][ T7684] bn = 0, index = 0
[  143.105309][ T7684] bn = 0, index = 0
[  143.125013][ T7730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  143.140626][ T7684] jfs_readdir: unexpected rc = -5 from dtReadNext
[  143.231362][ T7653] BTRFS info (device loop0): enabling ssd optimizations
[  143.245213][ T7730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.331701][ T7730] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  143.388186][ T7728] loop3: detected capacity change from 0 to 32768
[  143.659000][ T7728] XFS (loop3): Mounting V5 Filesystem
[  143.842551][ T7728] XFS (loop3): Ending clean mount
[  143.895159][ T4191] XFS (loop3): Unmounting Filesystem
[  143.917573][ T7745] loop2: detected capacity change from 0 to 40427
[  143.989528][ T7745] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12
[  144.020484][ T7745] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  144.021925][ T7759] loop4: detected capacity change from 0 to 512
[  144.061595][ T7745] F2FS-fs (loop2): invalid crc value
[  144.086104][ T7745] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  144.169055][ T7759] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  144.237109][ T7759] EXT4-fs (loop4): orphan cleanup on readonly fs
[  144.261130][ T7745] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  144.261779][ T7747] loop1: detected capacity change from 0 to 32768
[  144.277104][ T7759] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  144.296687][ T7759] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1403: attempt to clear invalid blocks 2 len 1
[  144.318212][ T7745] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  144.414193][ T7759] EXT4-fs (loop4): Remounting filesystem read-only
[  144.441342][ T7759] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  144.475861][ T7747] XFS (loop1): Mounting V5 Filesystem
[  144.504596][ T7759] EXT4-fs (loop4): Remounting filesystem read-only
[  144.511388][ T7759] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1403: invalid indirect mapped block 1819239214 (level 0)
[  144.581022][ T7759] EXT4-fs (loop4): Remounting filesystem read-only
[  144.590903][ T7759] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1403: invalid indirect mapped block 1819239214 (level 1)
[  144.620104][ T7747] XFS (loop1): Ending clean mount
[  144.631608][ T7759] EXT4-fs (loop4): Remounting filesystem read-only
[  144.638836][ T7786] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.656856][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  144.664386][ T7759] EXT4-fs (loop4): 1 truncate cleaned up
[  144.670039][ T7759] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback.
[  144.689950][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  144.706437][ T7785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  144.718318][ T7785] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  144.770307][ T7759] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work
[  144.848022][ T4187] XFS (loop1): Unmounting Filesystem
[  145.041952][ T7795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1413'.
[  145.575508][ T7821] PKCS8: Unsupported PKCS#8 version
[  146.139852][ T7833] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,noinit_itable,dioread_nolock,init_itable,,errors=continue. Quota mode: writeback.
[  146.191028][ T7813] set_capacity_and_notify: 3 callbacks suppressed
[  146.191040][ T7813] loop2: detected capacity change from 0 to 32768
[  146.213470][ T7833] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.241364][ T7833] fs-verity: sha256 using implementation "sha256-avx2"
[  146.249280][ T7833] fs-verity (loop4, inode 18): fs-verity keyring is empty, rejecting signed file!
[  146.321669][ T7823] loop1: detected capacity change from 0 to 32768
[  146.353992][ T7813] XFS (loop2): Mounting V5 Filesystem
[  146.461286][ T7823] XFS (loop1): Mounting V5 Filesystem
[  146.472100][ T7813] XFS (loop2): Ending clean mount
[  146.548152][ T7861] loop4: detected capacity change from 0 to 4096
[  146.611169][ T7861] ntfs: (device loop4): parse_options(): NLS character set is not found. Using previous one default.
[  146.629178][ T4199] XFS (loop2): Unmounting Filesystem
[  146.668457][ T7823] XFS (loop1): Ending clean mount
[  146.745455][ T7861] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  146.805864][ T7861] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  146.820449][ T7861] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  146.892664][ T7861] ntfs: volume version 3.1.
[  146.903073][ T4187] XFS (loop1): Unmounting Filesystem
[  146.912685][ T7861] ntfs: (device loop4): map_mft_record_page(): Mft record 0x2 is corrupt.  Run chkdsk.
[  146.951227][ T7861] ntfs: (device loop4): map_mft_record(): Failed with error code 5.
[  146.959238][ T7861] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  147.018767][ T7861] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  147.212156][ T7876] loop0: detected capacity change from 0 to 4096
[  147.357713][ T7869] loop3: detected capacity change from 0 to 40427
[  147.416128][ T7869] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  147.447737][ T7869] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  147.457253][ T7880] netlink: 'syz.4.1444': attribute type 29 has an invalid length.
[  147.503210][ T7869] F2FS-fs (loop3): invalid crc value
[  147.506541][ T7880] netlink: 'syz.4.1444': attribute type 29 has an invalid length.
[  147.549832][ T7869] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  147.577695][ T7884] netlink: 'syz.4.1444': attribute type 29 has an invalid length.
[  147.707551][ T7895] loop1: detected capacity change from 0 to 512
[  147.773071][ T7869] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  147.780269][ T7869] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  147.807247][ T7895] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  147.840820][ T7895] EXT4-fs (loop1): 1 truncate cleaned up
[  147.846961][ T7895] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none.
[  147.885118][ T7907] syz.4.1453 uses obsolete (PF_INET,SOCK_PACKET)
[  148.061777][ T4233] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  148.130836][ T7915] netlink: 'syz.2.1458': attribute type 1 has an invalid length.
[  148.341019][ T5821] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  148.468792][ T7928] loop2: detected capacity change from 0 to 4096
[  148.514891][ T4233] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  148.524832][ T7928] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  148.554664][ T4233] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  148.618423][ T7939] loop3: detected capacity change from 0 to 764
[  148.649317][ T7928] ntfs3: loop2: failed to convert "076c" to cp869
[  148.657190][ T7928] ntfs3: loop2: ino=5, "/" directory corrupted
[  148.720677][ T7939] rock: directory entry would overflow storage
[  148.735437][ T7939] rock: sig=0x4654, size=5, remaining=4
[  148.765447][ T4233] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  148.784887][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.821764][ T4233] usb 1-1: Product: syz
[  148.826037][ T4233] usb 1-1: Manufacturer: syz
[  148.830635][ T4233] usb 1-1: SerialNumber: syz
[  148.857521][ T4233] usb 1-1: config 0 descriptor??
[  148.861239][ T5821] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  148.887896][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  148.901360][ T7901] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  148.910147][ T7901] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  148.914826][ T5821] usb 2-1: Product: syz
[  148.939292][ T5821] usb 2-1: Manufacturer: syz
[  148.957298][ T5821] usb 2-1: SerialNumber: syz
[  148.984967][ T5821] usb 2-1: config 0 descriptor??
[  149.128389][ T7956] loop3: detected capacity change from 0 to 256
[  149.157017][ T7901] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  149.178568][ T7901] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  149.318272][ T5164] usb 2-1: USB disconnect, device number 13
[  149.471283][ T4233] Error reading MAC address
[  149.487568][ T4233] usb 1-1: USB disconnect, device number 11
[  149.673515][ T7962] loop3: detected capacity change from 0 to 32768
[  149.745504][ T7962] XFS (loop3): Mounting V5 Filesystem
[  149.892795][ T7966] F2FS-fs (loop2): invalid crc value
[  149.908919][ T7962] XFS (loop3): Ending clean mount
[  149.923041][ T7966] F2FS-fs (loop2): Found nat_bits in checkpoint
[  150.063601][ T7966] F2FS-fs (loop2): Start checkpoint disabled!
[  150.101040][ T4233] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  150.119428][ T7966] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  150.134794][ T4191] XFS (loop3): Unmounting Filesystem
[  150.367899][    T9] attempt to access beyond end of device
[  150.367899][    T9] loop2: rw=2049, want=40976, limit=40427
[  150.391055][ T4233] usb 5-1: Using ep0 maxpacket: 16
[  150.506122][ T4233] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  150.550964][ T4233] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  150.581199][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0
[  150.587910][ T4233] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  150.602894][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.638089][ T4233] usb 5-1: config 0 descriptor??
[  150.791452][ T7996] XFS (loop0): Mounting V5 Filesystem
[  150.800265][ T8009] erofs: (device loop2): mounted with root inode @ nid 36.
[  150.946813][ T7996] XFS (loop0): Ending clean mount
[  151.030113][ T4188] XFS (loop0): Unmounting Filesystem
[  151.114792][ T8022] usb usb8: usbfs: process 8022 (syz.2.1501) did not claim interface 4 before use
[  151.128801][ T4233] uclogic 0003:2179:0077.0012: ignoring exceeding usage max
[  151.162724][ T4233] uclogic 0003:2179:0077.0012: No inputs registered, leaving
[  151.186868][ T4233] uclogic 0003:2179:0077.0012: hidraw0: USB HID v0.05 Device [HID 2179:0077] on usb-dummy_hcd.4-1/input0
[  151.273344][ T8029] "syz.1.1505" (8029) uses obsolete ecb(arc4) skcipher
[  151.407226][ T4233] usb 5-1: USB disconnect, device number 12
[  151.669526][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1512'.
[  151.685039][ T8048] nbd: socks must be embedded in a SOCK_ITEM attr
[  151.886138][ T8037] set_capacity_and_notify: 3 callbacks suppressed
[  151.886153][ T8037] loop2: detected capacity change from 0 to 32768
[  151.969271][   T25] audit: type=1800 audit(1785202610.864:14): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1509" name="file3" dev="loop2" ino=7 res=0 errno=0
[  151.977695][ T8037] ERROR: (device loop2): diAllocAG: numfree > numinos
[  151.977695][ T8037] 
[  152.047299][ T8037] ERROR: (device loop2): remounting filesystem as read-only
[  152.089595][ T8037] ialloc: diAlloc returned -5!
[  152.098040][ T8061] cgroup: fork rejected by pids controller in /syz3
[  152.544632][ T8081] program syz.0.1528 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.595580][ T8084] program syz.0.1528 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.647825][ T8084] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  152.661368][ T8059] loop4: detected capacity change from 0 to 32768
[  152.710731][ T8088] loop1: detected capacity change from 0 to 1024
[  152.789757][ T8059] jfs_lookup: iget failed on inum 4
[  152.937018][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.991716][ T8094] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  153.085716][ T8099] loop0: detected capacity change from 0 to 64
[  153.110757][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.239999][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.532127][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.559558][ T8119] loop0: detected capacity change from 0 to 64
[  153.669012][ T8102] loop1: detected capacity change from 0 to 32768
[  153.831511][ T8102] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  153.850093][ T8102] JBD2: Ignoring recovery information on journal
[  153.941265][ T5165] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  153.967023][ T8102] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  154.045437][ T8111] chnl_net:caif_netlink_parms(): no params data found
[  154.372931][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[  154.399929][ T5165] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  154.428898][ T8123] loop2: detected capacity change from 0 to 32768
[  154.430512][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.443190][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.455120][ T8111] device bridge_slave_0 entered promiscuous mode
[  154.456289][ T5165] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.503547][ T5165] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  154.513973][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.551059][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.561529][ T8111] device bridge_slave_1 entered promiscuous mode
[  154.568365][ T5165] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  154.597530][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.621131][ T5165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.662354][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.664211][ T5165] usb 5-1: config 0 descriptor??
[  154.778455][ T5165] usb-storage 5-1:0.0: USB Mass Storage device detected
[  154.782881][ T8111] team0: Port device team_slave_0 added
[  154.821718][ T8160] loop0: detected capacity change from 0 to 1024
[  154.842335][ T8111] team0: Port device team_slave_1 added
[  154.876006][ T5165] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  154.969193][ T8160] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  154.980789][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.993967][ T8160] hfsplus: xattr searching failed
[  155.007363][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.033305][    C1] vkms_vblank_simulate: vblank timer overrun
[  155.088880][ T8173] loop1: detected capacity change from 0 to 1024
[  155.127441][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.144654][  T144] hfsplus: b-tree write err: -5, ino 25
[  155.156789][ T4395] usb 5-1: USB disconnect, device number 13
[  155.174909][  T144] hfsplus: b-tree write err: -5, ino 4
[  155.180690][  T144] hfsplus: b-tree write err: -5, ino 2
[  155.187134][  T144] hfsplus: b-tree write err: -5, ino 23
[  155.199130][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.208933][ T8177] loop2: detected capacity change from 0 to 512
[  155.220659][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.262357][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.298095][ T8173] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback.
[  155.335906][ T8173] EXT4-fs warning (device loop1): empty_inline_dir:1870: bad inline directory (dir #12) - no `..'
[  155.420432][ T8177] EXT4-fs (loop2): Test dummy encryption mode enabled
[  155.471442][ T5165] Bluetooth: hci2: command 0x0409 tx timeout
[  155.480497][ T8177] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.1559: inode has both inline data and extents flags
[  155.546435][ T8111] device hsr_slave_0 entered promiscuous mode
[  155.573747][ T8111] device hsr_slave_1 entered promiscuous mode
[  155.580009][ T8177] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1559: couldn't read orphan inode 15 (err -117)
[  155.631571][ T8111] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.644949][ T8111] Cannot create hsr debugfs directory
[  155.653129][ T8177] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  155.667576][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'.
[  155.780463][    T7] hid-generic 0004:0004:FFFF0001.0013: unknown main item tag 0x0
[  155.782411][ T8177] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #2: comm syz.2.1559: invalid size
[  155.821790][    T7] hid-generic 0004:0004:FFFF0001.0013: unknown main item tag 0x0
[  155.848275][    T7] hid-generic 0004:0004:FFFF0001.0013: unknown main item tag 0x0
[  155.861140][ T7301] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  155.889528][    T7] hid-generic 0004:0004:FFFF0001.0013: hidraw0: <UNKNOWN> HID v0.b3 Device [syz0] on syz1
[  156.098306][ T8206] fido_id[8206]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  156.112701][ T7301] usb 1-1: Using ep0 maxpacket: 16
[  156.217510][ T8217] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  156.231216][ T7301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.250229][ T7301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.284959][ T8217] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  156.295693][ T7301] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  156.311016][    T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  156.362150][ T7301] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  156.391387][ T7301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.438809][ T7301] usb 1-1: config 0 descriptor??
[  156.489744][   T25] audit: type=1800 audit(1785202615.384:15): pid=8228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1573" name="file1" dev="loop4" ino=5 res=0 errno=0
[  156.551097][    T7] usb 2-1: Using ep0 maxpacket: 8
[  156.675542][    T7] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  156.702000][    T7] usb 2-1: config 179 has no interface number 0
[  156.721038][    T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  156.751009][    T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  156.788930][    T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  156.821132][    T7] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  156.838562][    T7] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  156.867103][    T7] usb 2-1: config 179 interface 65 has no altsetting 0
[  156.881050][    T7] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  156.905890][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.932944][ T7301] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max
[  156.948402][ T7301] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max
[  156.970272][ T7301] microsoft 0003:045E:07DA.0014: No inputs registered, leaving
[  156.986338][ T7301] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  157.012688][    T7] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input13
[  157.028901][ T7301] microsoft 0003:045E:07DA.0014: no inputs found
[  157.049697][ T7301] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway
[  157.229572][ T7301] usb 1-1: USB disconnect, device number 12
[  157.307610][ T8268] use of bytesused == 0 is deprecated and will be removed in the future,
[  157.318527][ T8268] use the actual size instead.
[  157.390529][ T8270] set_capacity_and_notify: 2 callbacks suppressed
[  157.390542][ T8270] loop4: detected capacity change from 0 to 16
[  157.450379][ T8270] erofs: (device loop4): mounted with root inode @ nid 36.
[  157.470434][ T8272] loop2: detected capacity change from 0 to 512
[  157.484578][    T7] usb 2-1: USB disconnect, device number 14
[  157.502270][    T7] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  157.526418][ T8270] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 36
[  157.566635][ T4233] Bluetooth: hci2: command 0x041b tx timeout
[  157.586517][ T8272] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.1588: inode has both inline data and extents flags
[  157.618821][ T8111] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  157.632387][ T8272] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1588: couldn't read orphan inode 15 (err -117)
[  157.646765][ T8272] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  157.647772][ T8111] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  157.705844][ T8111] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  157.717441][ T8111] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  157.840121][    T9] device hsr_slave_0 left promiscuous mode
[  157.862696][    T9] device hsr_slave_1 left promiscuous mode
[  157.921868][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.929385][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.978358][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.989258][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.037961][    T9] device bridge_slave_1 left promiscuous mode
[  158.047812][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.088240][ T8303] binder: 8301:8303 ioctl c0306201 200000000000 returned -14
[  158.179598][    T9] device bridge_slave_0 left promiscuous mode
[  158.190306][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.343093][    T9] device veth1_macvtap left promiscuous mode
[  158.381013][    T9] device veth0_macvtap left promiscuous mode
[  158.405410][    T9] device veth1_vlan left promiscuous mode
[  158.431976][    T9] device veth0_vlan left promiscuous mode
[  158.738247][ T8284] loop4: detected capacity change from 0 to 32768
[  158.948747][ T8284] XFS (loop4): Mounting V5 Filesystem
[  159.083805][ T8284] XFS (loop4): Ending clean mount
[  159.091552][ T8284] XFS (loop4): Quotacheck needed: Please wait.
[  159.106244][    T9] team0 (unregistering): Port device team_slave_1 removed
[  159.126303][    T9] team0 (unregistering): Port device team_slave_0 removed
[  159.149246][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.198639][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.243882][ T8284] XFS (loop4): Quotacheck: Done.
[  159.263262][   T25] audit: type=1800 audit(1785202618.164:16): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1592" name="bus" dev="loop4" ino=9291 res=0 errno=0
[  159.296095][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'.
[  159.315331][ T8343] netlink: 'syz.1.1603': attribute type 1 has an invalid length.
[  159.359195][ T4195] XFS (loop4): Unmounting Filesystem
[  159.468520][    T9] bond0 (unregistering): Released all slaves
[  159.679373][ T5164] Bluetooth: hci2: command 0x040f tx timeout
[  159.782688][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  159.783154][ T8362] loop2: detected capacity change from 0 to 128
[  159.825359][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.883524][ T8313] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  159.917357][ T8362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  159.925358][ T8362] System zones: 1-3, 19-19, 35-36
[  160.008097][ T8362] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none.
[  160.023508][ T8362] ext4 filesystem being mounted at /390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  160.064825][ T8364] loop1: detected capacity change from 0 to 4096
[  160.142897][ T8364] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  160.190695][ T8377] loop0: detected capacity change from 0 to 1024
[  160.198926][ T8362] EXT4-fs warning (device loop2): ext4_group_extend:1852: can't read last block, resize aborted
[  160.268446][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.280328][ T8364] ntfs3: loop1: Failed to load $Extend.
[  160.327327][ T6476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  160.380087][ T6476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  160.389540][ T8380] loop4: detected capacity change from 0 to 4096
[  160.409927][ T8111] 8021q: adding VLAN 0 to HW filter on device team0
[  160.452766][ T8380] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  160.503305][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  160.524569][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  160.587369][  T433] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.594515][  T433] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.678206][ T8380] ntfs: volume version 3.1.
[  160.731312][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  160.753691][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  160.812334][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.831093][  T433] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.838193][  T433] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.852205][ T8380] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-1.  You might want to try to use the mount option nls=utf8.
[  160.911260][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  160.911278][ T8380] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  160.970056][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  161.010619][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  161.039709][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  161.100060][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  161.132128][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  161.147768][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  161.171608][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  161.254544][ T8111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  161.318287][ T8111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.355823][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  161.371776][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  161.393821][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  161.721595][ T5166] Bluetooth: hci2: command 0x0419 tx timeout
[  161.843437][ T8446] loop4: detected capacity change from 0 to 512
[  161.863224][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  161.872916][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  161.888167][ T8445] loop2: detected capacity change from 0 to 2048
[  161.904987][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.957696][ T8446] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1627: inode #1: comm syz.4.1627: iget: illegal inode #
[  162.018471][ T8450] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.047127][ T8451] sp0: Synchronizing with TNC
[  162.079839][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  162.088413][ T8446] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1627: error while reading EA inode 1 err=-117
[  162.105142][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  162.121232][ T8446] EXT4-fs (loop4): 1 orphan inode deleted
[  162.198799][ T8446] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.205888][ T8111] device veth0_vlan entered promiscuous mode
[  162.301622][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  162.320181][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  162.353078][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  162.362145][ T8455] loop1: detected capacity change from 0 to 2048
[  162.385746][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  162.426391][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'.
[  162.473691][ T8111] device veth1_vlan entered promiscuous mode
[  162.556046][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  162.565201][ T8462] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.612409][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  162.620483][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  162.731657][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  162.742334][ T8111] device veth0_macvtap entered promiscuous mode
[  162.752593][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  162.795863][ T8111] device veth1_macvtap entered promiscuous mode
[  162.820510][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.838569][ T8472] loop0: detected capacity change from 0 to 1024
[  162.855606][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.861128][ T4234] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  162.867487][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.889777][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.900133][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.917695][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.927692][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  162.943416][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.958914][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.000368][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  163.030274][  T433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  163.070571][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.116560][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.159329][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.185379][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.196068][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.207958][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.218558][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.230645][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.241149][ T4234] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  163.251691][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.256036][ T4234] usb 3-1: config 0 has no interface number 0
[  163.266539][ T8111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.282172][ T8111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.283969][ T4234] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  163.312549][ T8111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.339870][ T8111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.369011][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  163.401852][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  163.521317][ T4234] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  163.561516][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.569537][ T4234] usb 3-1: Product: syz
[  163.583014][ T4234] usb 3-1: Manufacturer: syz
[  163.589335][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.605146][ T4234] usb 3-1: SerialNumber: syz
[  163.609890][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.611708][ T4234] usb 3-1: config 0 descriptor??
[  163.668480][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  163.681346][ T8464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  163.714229][ T8490] loop0: detected capacity change from 0 to 256
[  163.785458][ T4234] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 82:2f:75:3d:a0:32
[  163.798779][ T6476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.828311][ T6476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.879497][ T6476] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  164.163266][ T4234] usb 3-1: USB disconnect, device number 5
[  164.199323][ T4234] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  164.228784][ T8507] loop4: detected capacity change from 0 to 256
[  164.305788][ T8502] loop0: detected capacity change from 0 to 4096
[  164.553788][ T8524] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.801036][ T5164] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  164.894207][ T4188] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  165.044535][ T8546] netlink: 'syz.1.1664': attribute type 10 has an invalid length.
[  165.172139][ T8546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.186655][ T8546] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  165.212099][ T5164] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  165.234417][ T5164] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  165.241983][ T8550] usb usb9: usbfs: process 8550 (syz.2.1665) did not claim interface 36 before use
[  165.264085][ T5164] usb 5-1: config 0 interface 0 has no altsetting 0
[  165.286701][ T5164] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  165.312978][ T5164] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.321362][ T5165] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  165.359357][ T5164] usb 5-1: config 0 descriptor??
[  165.583186][ T8536] loop3: detected capacity change from 0 to 32768
[  165.647940][ T8536] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  165.699602][ T8536] JBD2: Ignoring recovery information on journal
[  165.724434][ T5165] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  165.741083][ T5165] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  165.823871][ T5165] usb 1-1: config 220 has no interface number 2
[  165.830184][ T5165] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  165.885939][ T8536] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  165.905125][ T5164] lg-g15 0003:046D:C22D.0015: ignoring exceeding usage max
[  165.909500][ T8567] loop2: detected capacity change from 0 to 32768
[  165.913647][ T5165] usb 1-1: config 220 interface 0 has no altsetting 0
[  165.956674][ T8582] loop1: detected capacity change from 0 to 128
[  165.966638][ T5164] lg-g15 0003:046D:C22D.0015: hidraw0: USB HID v0.0c Device [HID 046d:c22d] on usb-dummy_hcd.4-1/input0
[  165.996923][ T5165] usb 1-1: config 220 interface 76 has no altsetting 0
[  166.021142][ T5165] usb 1-1: config 220 interface 1 has no altsetting 0
[  166.036140][ T8582] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  166.069199][ T8567] XFS (loop2): Mounting V5 Filesystem
[  166.086617][ T8582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.126795][ T8111] ocfs2: Unmounting device (7,3) on (node local)
[  166.145540][ T4395] usb 5-1: USB disconnect, device number 14
[  166.179547][ T8588] fido_id[8588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  166.221793][ T5165] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  166.232822][ T8582] overlayfs: upper fs needs to support d_type.
[  166.236681][ T8567] XFS (loop2): Ending clean mount
[  166.239116][ T8582] overlayfs: upper fs does not support tmpfile.
[  166.266057][ T5165] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.331638][ T5165] usb 1-1: Product: syz
[  166.336231][ T5165] usb 1-1: Manufacturer: syz
[  166.360950][ T5165] usb 1-1: SerialNumber: syz
[  166.367657][ T4199] XFS (loop2): Unmounting Filesystem
[  166.583594][ T8599] sock: sock_set_timeout: `syz.3.1680' (pid 8599) tries to set negative timeout
[  166.711945][ T8601] loop3: detected capacity change from 0 to 2048
[  166.731402][ T5165] usb 1-1: selecting invalid altsetting 0
[  166.737542][ T5165] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  166.743978][ T5165] usb 1-1: No valid video chain found.
[  166.767292][ T8601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.771260][ T8606] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  166.771260][ T8606] The task syz.4.1682 (8606) triggered the difference, watch for misbehavior.
[  166.862559][ T5165] usb 1-1: selecting invalid altsetting 0
[  166.868771][ T5165] usbtest: probe of 1-1:220.1 failed with error -22
[  166.901361][ T5165] usb 1-1: USB disconnect, device number 13
[  166.924132][ T4179] udevd[4179]: setting mode of /dev/bus/usb/001/013 to 020664 failed: No such file or directory
[  166.945087][ T4179] udevd[4179]: setting owner of /dev/bus/usb/001/013 to uid=0, gid=0 failed: No such file or directory
[  167.088283][ T8609] loop3: detected capacity change from 0 to 32768
[  167.226128][ T8609] XFS (loop3): Mounting V5 Filesystem
[  167.412965][ T8609] XFS (loop3): Ending clean mount
[  167.453383][   T25] audit: type=1800 audit(1785202626.354:17): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1683" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  167.505519][ T8111] XFS (loop3): Unmounting Filesystem
[  167.514194][ T8618] loop2: detected capacity change from 0 to 32768
[  167.647144][ T8618] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  167.827992][ T8631] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  167.883224][ T8631] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.938314][ T4199] ocfs2: Unmounting device (7,2) on (node local)
[  167.993254][   T25] audit: type=1800 audit(1785202626.894:18): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1690" name="file1" dev="loop1" ino=15 res=0 errno=0
[  168.248917][ T8664] set_capacity_and_notify: 1 callbacks suppressed
[  168.248931][ T8664] loop0: detected capacity change from 0 to 16
[  168.335740][ T8664] erofs: (device loop0): mounted with root inode @ nid 36.
[  168.504626][ T8680] program syz.0.1709 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  168.725758][ T8686] loop0: detected capacity change from 0 to 4096
[  168.829209][ T8686] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  168.989317][ T8686] ntfs: (device loop0): parse_options(): NLS character set asciĀ not found. Using previous one macinuit.
[  169.047851][ T8694] loop3: detected capacity change from 0 to 256
[  169.084639][ T8686] ntfs: volume version 3.1.
[  169.167416][ T8694] FAT-fs (loop3): Directory bread(block 64) failed
[  169.194463][ T8694] FAT-fs (loop3): Directory bread(block 65) failed
[  169.229332][ T8682] loop2: detected capacity change from 0 to 32768
[  169.241012][ T8694] FAT-fs (loop3): Directory bread(block 66) failed
[  169.257830][ T8694] FAT-fs (loop3): Directory bread(block 67) failed
[  169.283599][ T8694] FAT-fs (loop3): Directory bread(block 68) failed
[  169.290457][ T8694] FAT-fs (loop3): Directory bread(block 69) failed
[  169.298619][ T8694] FAT-fs (loop3): Directory bread(block 70) failed
[  169.305423][ T8694] FAT-fs (loop3): Directory bread(block 71) failed
[  169.312805][ T8694] FAT-fs (loop3): Directory bread(block 72) failed
[  169.319797][ T8694] FAT-fs (loop3): Directory bread(block 73) failed
[  169.326073][ T8688] loop1: detected capacity change from 0 to 32768
[  169.376629][ T8682] XFS (loop2): Mounting V5 Filesystem
[  169.598509][ T8688] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  169.604484][ T8682] XFS (loop2): Starting recovery (logdev: internal)
[  169.710282][ T8682] XFS (loop2): Ending recovery (logdev: internal)
[  169.822373][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[  170.042353][ T4199] XFS (loop2): Unmounting Filesystem
[  170.130376][ T8727] loop4: detected capacity change from 0 to 2048
[  170.229999][ T8730] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.537182][ T8738] loop1: detected capacity change from 0 to 1024
[  170.671938][ T8738] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,nojournal_checksum,grpquota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,mb_optimize_scan=0x0000000000000001,i_version,,errors=continue. Quota mode: writeback.
[  170.691050][ T8721] loop3: detected capacity change from 0 to 32768
[  170.867085][ T8721] XFS (loop3): Mounting V5 Filesystem
[  170.926832][ T8742] loop4: detected capacity change from 0 to 32768
[  170.954948][ T8756] loop2: detected capacity change from 0 to 4096
[  170.986166][ T8721] XFS (loop3): Ending clean mount
[  171.031331][ T8756] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  171.131175][ T8742] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  171.154872][ T8742] JBD2: Ignoring recovery information on journal
[  171.324145][ T8111] XFS (loop3): Unmounting Filesystem
[  171.383937][ T8742] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  171.433080][ T8764] F2FS-fs (loop0): invalid crc value
[  171.477687][ T8764] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  171.634116][ T4195] ocfs2: Unmounting device (7,4) on (node local)
[  171.723114][ T8764] F2FS-fs (loop0): Start checkpoint disabled!
[  171.809047][ T8764] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  172.054313][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'.
[  172.099466][ T8791] device gretap0 entered promiscuous mode
[  172.421172][ T4233] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  172.451645][ T8809] exfat: Deprecated parameter 'utf8'
[  172.457539][ T8809] exfat: Deprecated parameter 'namecase'
[  172.477031][ T8809] exfat: Deprecated parameter 'namecase'
[  172.490538][ T8815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1752'.
[  172.513064][ T8809] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  172.671324][ T4395] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  172.700964][ T4233] usb 2-1: Using ep0 maxpacket: 32
[  172.760635][ T8829] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  172.770468][ T8827] FAT-fs (loop0): Directory bread(block 64) failed
[  172.787015][ T8827] FAT-fs (loop0): Directory bread(block 65) failed
[  172.796963][ T8829] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  172.799327][ T8827] FAT-fs (loop0): Directory bread(block 66) failed
[  172.842022][ T4233] usb 2-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.857487][ T8827] FAT-fs (loop0): Directory bread(block 67) failed
[  172.871690][ T4233] usb 2-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.883727][ T8829] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,mblk_io_submit,,errors=continue. Quota mode: none.
[  172.884769][ T8827] FAT-fs (loop0): Directory bread(block 68) failed
[  172.911209][ T8827] FAT-fs (loop0): Directory bread(block 69) failed
[  172.951152][ T8827] FAT-fs (loop0): Directory bread(block 70) failed
[  172.957737][ T8827] FAT-fs (loop0): Directory bread(block 71) failed
[  172.970459][ T4233] usb 2-1: config 0 interface 0 has no altsetting 0
[  172.989473][ T4233] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00
[  173.026419][ T8827] FAT-fs (loop0): Directory bread(block 72) failed
[  173.031208][ T4395] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30
[  173.046856][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.060855][ T8827] FAT-fs (loop0): Directory bread(block 73) failed
[  173.077213][ T4395] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  173.090233][ T4395] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  173.101764][ T4233] usb 2-1: config 0 descriptor??
[  173.108946][ T4395] usb 5-1: config 0 interface 0 has no altsetting 0
[  173.151953][ T4395] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  173.176448][ T4395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.200490][ T4395] usb 5-1: config 0 descriptor??
[  173.221371][ T8807] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  173.582638][ T4233] a4tech 0003:09DA:0006.0016: unknown main item tag 0x5
[  173.589677][ T4233] a4tech 0003:09DA:0006.0016: unknown main item tag 0x4
[  173.598143][ T4233] a4tech 0003:09DA:0006.0016: unknown main item tag 0x2
[  173.605395][ T4233] a4tech 0003:09DA:0006.0016: unknown main item tag 0x7
[  173.612681][ T4233] a4tech 0003:09DA:0006.0016: unknown main item tag 0x7
[  173.637565][ T4233] a4tech 0003:09DA:0006.0016: hidraw0: USB HID v0.08 Device [HID 09da:0006] on usb-dummy_hcd.1-1/input0
[  173.687677][ T4395] lenovo 0003:17EF:6062.0017: unknown main item tag 0x1
[  173.698821][ T8861] set_capacity_and_notify: 7 callbacks suppressed
[  173.698836][ T8861] loop2: detected capacity change from 0 to 128
[  173.711375][ T4395] lenovo 0003:17EF:6062.0017: unknown main item tag 0x0
[  173.729932][ T4395] lenovo 0003:17EF:6062.0017: unknown main item tag 0x0
[  173.737314][ T4395] lenovo 0003:17EF:6062.0017: unknown main item tag 0x0
[  173.762079][ T4395] lenovo 0003:17EF:6062.0017: unknown main item tag 0x0
[  173.783038][ T4395] lenovo 0003:17EF:6062.0017: hidraw1: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0
[  173.814476][ T8861] EXT4-fs (loop2): Test dummy encryption mode enabled
[  173.833586][ T4233] usb 2-1: USB disconnect, device number 15
[  173.868218][ T8861] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: none.
[  173.958817][ T5165] usb 5-1: USB disconnect, device number 15
[  174.021184][ T8861] ext4 filesystem being mounted at /426/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  174.056480][ T8866] fido_id[8866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  174.114304][ T8870] fido_id[8870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  174.334560][ T8853] loop0: detected capacity change from 0 to 32768
[  174.458107][ T8853] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  174.601403][ T4188] ocfs2: Unmounting device (7,0) on (node local)
[  174.628211][ T8881] loop2: detected capacity change from 0 to 32768
[  174.737986][   T25] audit: type=1800 audit(1785202633.634:19): pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1790" name="bus" dev="loop2" ino=7 res=0 errno=0
[  174.859124][ T8901] loop0: detected capacity change from 0 to 1024
[  174.951043][ T4233] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  175.014888][ T8901] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  175.032579][ T8901] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.067794][   T25] audit: type=1800 audit(1785202633.964:20): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1798" name="file1" dev="loop0" ino=15 res=0 errno=0
[  175.299683][ T8920] loop3: detected capacity change from 0 to 16
[  175.326768][ T8921] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  175.336793][ T8921] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  175.345747][ T8921] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  175.346031][ T8917] loop2: detected capacity change from 0 to 2048
[  175.354505][ T8921] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  175.375221][ T8921] Zero length message leads to an empty skb
[  175.413514][ T8917] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  175.421165][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  175.437390][ T8920] erofs: (device loop3): mounted with root inode @ nid 36.
[  175.459025][ T8920] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89
[  175.469584][ T4233] usb 5-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.00
[  175.490161][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.504291][ T8920] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89
[  175.538460][ T4233] usb 5-1: config 0 descriptor??
[  175.541631][ T8929] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.565769][ T8920] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89
[  175.591682][ T8891] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  175.632165][ T5165] Bluetooth: hci1: command 0x0406 tx timeout
[  175.637145][ T8920] attempt to access beyond end of device
[  175.637145][ T8920] loop3: rw=524288, want=24, limit=16
[  175.641427][ T4233] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14
[  175.679043][ T8920] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  175.695115][ T8935] loop0: detected capacity change from 0 to 512
[  175.713280][ T5165] Bluetooth: hci4: command 0x0406 tx timeout
[  175.728565][ T5165] Bluetooth: hci3: command 0x0406 tx timeout
[  175.728692][   T25] audit: type=1800 audit(1785202634.624:21): pid=8920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1807" name="file2" dev="loop3" ino=89 res=0 errno=0
[  175.744915][ T5165] Bluetooth: hci0: command 0x0406 tx timeout
[  175.766951][ T8939] loop2: detected capacity change from 0 to 256
[  175.811559][ T8939] exfat: Deprecated parameter 'utf8'
[  175.818239][ T8939] exfat: Deprecated parameter 'utf8'
[  175.829793][ T8939] exfat: Deprecated parameter 'utf8'
[  175.861024][ T8939] exfat: Deprecated parameter 'namecase'
[  175.873519][ T3544] bcm5974 5-1:0.0: could not read from device
[  175.904967][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'.
[  175.920086][ T4233] usb 5-1: USB disconnect, device number 16
[  175.928839][ T8939] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  175.931890][ T3544] bcm5974 5-1:0.0: could not read from device
[  175.950682][ T8935] EXT4-fs (loop0): 1 truncate cleaned up
[  175.981891][ T8935] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  176.360441][ T8965] loop2: detected capacity change from 0 to 128
[  176.414855][ T8969] IPVS: set_ctl: invalid protocol: 59 172.20.20.32:20001
[  176.647255][ T8982] loop3: detected capacity change from 0 to 16
[  176.756245][ T8982] erofs: (device loop3): mounted with root inode @ nid 36.
[  176.795757][ T8982] erofs: (device loop3): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  176.827522][ T8982] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117]
[  177.058611][ T9001] netlink: 'syz.0.1841': attribute type 26 has an invalid length.
[  177.265992][ T9007] EXT4-fs (loop0): Test dummy encryption mode enabled
[  177.290710][ T9007] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  177.358388][ T9007] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.1844: bad orphan inode 131083
[  177.395900][ T9007] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none.
[  177.536977][ T8988] XFS (loop4): Mounting V5 Filesystem
[  177.616894][ T8988] XFS (loop4): Ending clean mount
[  177.758006][ T9007] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  177.808771][ T9007] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.1844: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  177.937304][ T4195] XFS (loop4): Unmounting Filesystem
[  178.545964][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1871'.
[  178.557282][ T9074] device macvlan0 entered promiscuous mode
[  178.626293][ T9071] iso9660: Corrupted directory entry in block 2 of inode 1920
[  178.761035][ T5165] Bluetooth: hci2: command 0x0405 tx timeout
[  178.952659][ T9095] set_capacity_and_notify: 5 callbacks suppressed
[  178.952674][ T9095] loop2: detected capacity change from 0 to 16
[  178.977150][ T9097] loop0: detected capacity change from 0 to 256
[  179.031533][ T9097] exfat: Deprecated parameter 'utf8'
[  179.039033][ T9097] exfat: Deprecated parameter 'utf8'
[  179.044496][ T9095] erofs: (device loop2): mounted with root inode @ nid 36.
[  179.074354][   T25] audit: type=1800 audit(1785202637.974:22): pid=9095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1879" name="file2" dev="loop2" ino=89 res=0 errno=0
[  179.136960][ T9097] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  179.190252][ T9081] loop3: detected capacity change from 0 to 32768
[  179.230390][ T9081] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1872 (9081)
[  179.258454][ T9099] loop2: detected capacity change from 0 to 2048
[  179.279138][ T9081] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  179.308841][ T9081] BTRFS info (device loop3): use zlib compression, level 3
[  179.312985][ T9099] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.348750][ T9081] BTRFS info (device loop3): using free space tree
[  179.381450][ T9081] BTRFS info (device loop3): has skinny extents
[  179.713546][ T9081] BTRFS info (device loop3): enabling ssd optimizations
[  179.812390][ T9130] loop2: detected capacity change from 0 to 128
[  179.896373][ T9081] BTRFS warning (device loop3): can't clear the compat:0 feature bit while mounted
[  179.916645][ T9130] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  179.918471][ T9130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.015976][ T4234] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  180.098792][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'.
[  180.186869][ T4857] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4857)
[  180.263871][ T9137] loop2: detected capacity change from 0 to 64
[  180.381283][ T4234] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  180.411902][ T4234] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  180.442404][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.532868][ T4234] gspca_main: stv0680-2.14.0 probing 041e:4007
[  180.927950][ T9160] loop2: detected capacity change from 0 to 128
[  181.052811][ T9160] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  181.128994][ T9160] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  181.285717][  T154] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  181.831147][ T4395] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  181.851081][ T4234] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  181.863808][ T4234] stv0680 2-1:4.0: last error: 2,  command = 0x30
[  181.881280][ T4769] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  181.899979][ T4234] usb 2-1: USB disconnect, device number 16
[  182.091087][ T4395] usb 3-1: Using ep0 maxpacket: 8
[  182.121078][ T4769] usb 5-1: Using ep0 maxpacket: 16
[  182.176455][ T9205] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  182.211231][ T4395] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  182.219509][ T4395] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  182.241165][ T4769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.260968][ T4395] usb 3-1: config 179 has no interface number 0
[  182.267280][ T4395] usb 3-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  182.281548][ T4769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.300961][ T4769] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  182.313849][ T4395] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  182.330994][ T4395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.353989][ T4769] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  182.365241][ T4769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.399281][ T4769] usb 5-1: config 0 descriptor??
[  182.557718][ T9217] loop3: detected capacity change from 0 to 1024
[  182.642444][ T4234] usb 3-1: USB disconnect, device number 6
[  182.685557][ T9217] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  182.699079][ T9217] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  182.793213][ T9217] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,mblk_io_submit,,errors=continue. Quota mode: none.
[  182.874593][ T4769] microsoft 0003:045E:07DA.0018: No inputs registered, leaving
[  182.891868][ T4769] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  182.903491][ T4769] microsoft 0003:045E:07DA.0018: no inputs found
[  182.909830][ T4769] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway
[  182.992553][ T9234] loop1: detected capacity change from 0 to 128
[  183.097793][ T5165] usb 5-1: USB disconnect, device number 17
[  183.183482][ T9234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  183.216260][ T9234] System zones: 1-3, 19-19, 35-36
[  183.238300][ T9234] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none.
[  183.291846][ T9234] ext4 filesystem being mounted at /375/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  183.312230][ T9238] loop2: detected capacity change from 0 to 1024
[  183.516481][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'.
[  183.937126][ T9240] JBD2: Ignoring recovery information on journal
[  183.951067][ T4176] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  184.047928][ T9240] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  184.165191][ T8111] ocfs2: Unmounting device (7,3) on (node local)
[  184.191179][ T4176] usb 2-1: Using ep0 maxpacket: 16
[  184.212521][ T9261] set_capacity_and_notify: 1 callbacks suppressed
[  184.212535][ T9261] loop2: detected capacity change from 0 to 32768
[  184.312388][ T9261] ERROR: (device loop2): diAllocAG: nfreeinos = 0, but iag on freelist
[  184.312388][ T9261] 
[  184.353485][ T9261] ialloc: diAlloc returned -5!
[  184.353616][ T4176] usb 2-1: unable to get BOS descriptor or descriptor too short
[  184.461129][ T4176] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.507569][ T4176] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  184.681185][ T4176] usb 2-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  184.692619][ T9271] loop4: detected capacity change from 0 to 32768
[  184.699127][ T4176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.717996][ T4176] usb 2-1: Product: syz
[  184.724243][ T4176] usb 2-1: Manufacturer: syz
[  184.729418][ T4176] usb 2-1: SerialNumber: syz
[  184.778371][ T9271] XFS (loop4): Mounting V5 Filesystem
[  184.833810][ T9275] loop3: detected capacity change from 0 to 32768
[  184.855842][ T9275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1954 (9275)
[  184.877518][ T9275] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  184.878088][ T9271] XFS (loop4): Ending clean mount
[  184.887574][ T9275] BTRFS info (device loop3): setting nodatasum
[  184.897916][ T9275] BTRFS info (device loop3): enabling auto defrag
[  184.904513][ T9275] BTRFS info (device loop3): disabling tree log
[  184.911273][ T9275] BTRFS info (device loop3): using free space tree
[  184.917846][ T9275] BTRFS info (device loop3): has skinny extents
[  184.989340][ T4195] XFS (loop4): Unmounting Filesystem
[  185.096546][ T9275] BTRFS info (device loop3): enabling ssd optimizations
[  185.114451][ T4176] usb 2-1: 0:1 : does not exist
[  185.119545][ T4176] usb 2-1: unit 5 not found!
[  185.151064][ T4176] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x200, type = 4
[  185.170496][ T4176] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  185.209579][ T9307] netlink: 'syz.2.1956': attribute type 3 has an invalid length.
[  185.214809][ T4176] usb 2-1: USB disconnect, device number 17
[  185.504527][ T9311] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1959'.
[  185.530335][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1959'.
[  185.549849][ T9313] loop4: detected capacity change from 0 to 1764
[  185.602576][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1960'.
[  185.695707][ T9318] loop3: detected capacity change from 0 to 256
[  185.785513][ T9318] exfat: Deprecated parameter 'namecase'
[  185.816866][ T9318] exfat: Deprecated parameter 'namecase'
[  185.898389][ T9320] loop2: detected capacity change from 0 to 32768
[  185.910565][ T9318] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d)
[  185.959103][ T9320] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1961 (9320)
[  185.992378][ T9323] loop1: detected capacity change from 0 to 4096
[  186.062637][ T9320] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  186.071477][ T9320] BTRFS info (device loop2): turning on sync discard
[  186.078174][ T9320] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  186.088897][ T9320] BTRFS info (device loop2): trying to use backup root at mount time
[  186.097590][ T9320] BTRFS info (device loop2): enabling auto defrag
[  186.104111][ T9320] BTRFS info (device loop2): using free space tree
[  186.110616][ T9320] BTRFS info (device loop2): has skinny extents
[  186.218743][ T9323] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  186.388731][ T9323] ntfs3: loop1: Failed to load $Extend.
[  186.527506][  T144] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  186.585575][ T9367] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  186.607792][ T9320] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[  186.618909][  T144] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  186.634725][ T9320] BTRFS warning (device loop2): couldn't read tree root
[  186.642855][ T9320] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[  186.652861][ T9320] BTRFS warning (device loop2): couldn't read tree root
[  186.662908][ T9365] loop0: detected capacity change from 0 to 4096
[  186.675476][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1978'.
[  186.676143][    T9] BTRFS warning (device loop2): checksum verify failed on 5242880 wanted 0xc0857788 found 0xd69fdd74 level 0
[  186.687487][ T9372] netlink: 'syz.4.1978': attribute type 2 has an invalid length.
[  186.704265][ T9372] netlink: 'syz.4.1978': attribute type 1 has an invalid length.
[  186.712123][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'.
[  186.746909][ T9375] sp0: Synchronizing with TNC
[  186.754638][ T9320] BTRFS warning (device loop2): couldn't read tree root
[  186.757983][ T9374] [U] č`
[  186.794705][ T9320] BTRFS error (device loop2): open_ctree failed: -22
[  186.870606][ T9378] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.910700][ T9379] vivid-000: disconnect
[  186.958192][ T9376] vivid-000: reconnect
[  187.747995][ T9423] loop0: detected capacity change from 0 to 2048
[  187.793645][ T9419] loop1: detected capacity change from 0 to 4096
[  187.867023][ T9419] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  187.903467][ T9419] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  187.932650][ T9419] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  187.953073][ T9419] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  187.968437][ T9423] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  187.984199][ T9439] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  187.988355][ T9443] SQUASHFS error: Unable to read directory block [2c0:35]
[  188.008376][ T9423] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.090304][ T9449] netlink: 'syz.2.2011': attribute type 30 has an invalid length.
[  188.100631][ T9419] ntfs: volume version 3.1.
[  188.129436][ T9439] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  188.191618][ T9439] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  188.246285][ T9419] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default.  You might want to try to use the mount option nls=utf8.
[  188.279908][ T9419] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x45.
[  188.371054][ T9455] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  188.386480][ T9459] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  188.463801][ T9459] CIFS: Unable to determine destination address
[  188.887126][ T9476] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000010,delalloc,sysvgroups,delalloc,resuid=0x0000000000000000,nouid32,inode_readahead_blks=0x0000000000020000,noauto_da_alloc,norecovery,jqfmt=vfsv0,,errors=continue. Quota mode: none.
[  189.225128][ T9505] lec:lec_atm_close: lec0: Shut down!
[  189.227838][ T9512] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  189.316043][ T9517] set_capacity_and_notify: 5 callbacks suppressed
[  189.316055][ T9517] loop0: detected capacity change from 0 to 164
[  189.352638][ T9520] loop1: detected capacity change from 0 to 64
[  189.442202][ T9517] iso9660: Corrupted directory entry in block 2 of inode 1792
[  189.463261][ T9524] loop3: detected capacity change from 0 to 256
[  189.597854][ T9524] FAT-fs (loop3): Directory bread(block 64) failed
[  189.613297][ T9524] FAT-fs (loop3): Directory bread(block 65) failed
[  189.660604][ T9524] FAT-fs (loop3): Directory bread(block 66) failed
[  189.670658][ T9524] FAT-fs (loop3): Directory bread(block 67) failed
[  189.693189][ T9524] FAT-fs (loop3): Directory bread(block 68) failed
[  189.713097][ T9524] FAT-fs (loop3): Directory bread(block 69) failed
[  189.732428][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2049'.
[  189.751059][ T9524] FAT-fs (loop3): Directory bread(block 70) failed
[  189.788003][ T9524] FAT-fs (loop3): Directory bread(block 71) failed
[  189.827689][ T9524] FAT-fs (loop3): Directory bread(block 72) failed
[  189.936343][ T9524] FAT-fs (loop3): Directory bread(block 73) failed
[  190.092214][ T9518] loop2: detected capacity change from 0 to 32768
[  190.138828][ T9511] loop4: detected capacity change from 0 to 40427
[  190.205387][ T9518] XFS (loop2): Mounting V5 Filesystem
[  190.228306][ T9511] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  190.250629][ T9511] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  190.288101][ T9511] F2FS-fs (loop4): invalid crc_offset: 33558524
[  190.363428][ T9511] F2FS-fs (loop4): Found nat_bits in checkpoint
[  190.382274][ T9518] XFS (loop2): Ending clean mount
[  190.428329][   T25] audit: type=1800 audit(1785202649.324:23): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2041" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  190.509855][ T4199] XFS (loop2): Unmounting Filesystem
[  190.534249][ T9511] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  190.547197][ T9511] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  190.929549][ T9541] loop3: detected capacity change from 0 to 40427
[  190.990351][ T9541] F2FS-fs (loop3): invalid crc value
[  191.060502][ T9541] F2FS-fs (loop3): Found nat_bits in checkpoint
[  191.161737][ T5164] lec:lec_start_xmit: lec0:No lecd attached
[  191.211712][ T9541] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  191.398539][ T9588] comedi: No check for data length of config insn id 1986356271 is implemented
[  191.450381][ T9588] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  191.462940][ T9579] loop4: detected capacity change from 0 to 4096
[  191.475764][ T9588] comedi: Assuming n=65536 is correct
[  191.494454][ T9579] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  191.616531][ T9579] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  191.650658][ T9597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2062'.
[  191.699724][   T25] audit: type=1800 audit(1785202650.594:24): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2055" name="file1" dev="loop4" ino=24 res=0 errno=0
[  191.815965][ T4195] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  191.838437][ T4195] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22.
[  192.178759][ T9626] loop2: detected capacity change from 0 to 1024
[  192.240766][ T9626] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  192.258622][ T9626] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  192.350003][ T9626] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  192.375616][ T9634] loop3: detected capacity change from 0 to 1024
[  192.426135][ T9626] System zones: 0-1, 3-36
[  192.460494][ T9626] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  192.480522][    C1] vkms_vblank_simulate: vblank timer overrun
[  192.691093][ T9641] loop4: detected capacity change from 0 to 4096
[  192.844754][ T9641] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  192.875147][ T9643] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2078: invalid indirect mapped block 4294967295 (level 1)
[  193.001708][ T9643] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2078: invalid indirect mapped block 4294967295 (level 1)
[  193.027514][ T9643] EXT4-fs (loop3): 2 truncates cleaned up
[  193.036456][ T9643] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  193.090319][ T9641] ntfs3: loop4: failed to convert "0080" to koi8-ru
[  193.132071][ T9643] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2078: bg 0: block 5: invalid block bitmap
[  193.195803][ T9643] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  193.700284][ T9674] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  193.751742][ T9674] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.765841][ T9660] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  193.988227][ T9691] sctp: [Deprecated]: syz.0.2098 (pid 9691) Use of int in max_burst socket option.
[  193.988227][ T9691] Use struct sctp_assoc_value instead
[  194.036435][ T1418] ieee802154 phy0 wpan0: encryption failed: -22
[  194.042779][ T1418] ieee802154 phy1 wpan1: encryption failed: -22
[  194.336783][ T9693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.773386][ T9672] set_capacity_and_notify: 4 callbacks suppressed
[  194.773400][ T9672] loop1: detected capacity change from 0 to 32768
[  194.840265][ T9715] loop3: detected capacity change from 0 to 512
[  194.918936][ T9715] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none.
[  194.923506][ T9715] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  194.958041][ T9695] loop4: detected capacity change from 0 to 32768
[  195.008606][ T9720] loop0: detected capacity change from 0 to 512
[  195.037061][ T9695] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2099 (9695)
[  195.071338][ T9720] EXT4-fs (loop0): Ignoring removed orlov option
[  195.071370][ T9720] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  195.110644][ T9695] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  195.110736][ T9695] BTRFS info (device loop4): use zlib compression, level 3
[  195.110756][ T9695] BTRFS info (device loop4): using free space tree
[  195.110778][ T9695] BTRFS info (device loop4): has skinny extents
[  195.111392][ T9720] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.2113: corrupted in-inode xattr
[  195.121611][ T9720] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2113: couldn't read orphan inode 15 (err -117)
[  195.122032][ T9720] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback.
[  195.351383][ T9695] BTRFS info (device loop4): enabling ssd optimizations
[  195.586151][ T9695] BTRFS warning (device loop4): can't clear the compat:0 feature bit while mounted
[  195.820101][ T4857] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4857)
[  196.022775][    C1] vkms_vblank_simulate: vblank timer overrun
[  196.217954][ T9770] loop0: detected capacity change from 0 to 512
[  196.270700][ T9770] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  196.418876][ T9779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2128'.
[  196.431100][ T9770] ext4 filesystem being mounted at /442/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.601370][    C1] ------------[ cut here ]------------
[  196.607581][    C1] NETDEV WATCHDOG: lec0 (): transmit queue 0 timed out
[  196.615005][    C1] WARNING: CPU: 1 PID: 9785 at net/sched/sch_generic.c:481 dev_watchdog+0x85d/0xa40
[  196.624442][    C1] Modules linked in:
[  196.625200][ T9747] loop3: detected capacity change from 0 to 32768
[  196.628340][    C1] CPU: 1 PID: 9785 Comm: syz.0.2129 Not tainted syzkaller #0
[  196.642173][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  196.652282][    C1] RIP: 0010:dev_watchdog+0x85d/0xa40
[  196.657597][    C1] Code: 8a 72 05 01 48 8b 5c 24 20 48 89 df e8 5c f2 e3 ff 48 c7 c7 c0 46 22 8b 48 89 de 48 8b 1c 24 48 89 c2 44 89 e1 e8 43 5d b0 01 <0f> 0b e9 51 fe ff ff e8 e7 34 74 f9 0f 0b e9 33 fe ff ff 89 d9 80
[  196.677265][    C1] RSP: 0000:ffffc90000dd0af0 EFLAGS: 00010246
[  196.683632][    C1] RAX: 3bc98587410feb00 RBX: ffff8880783dc448 RCX: ffff888077998000
[  196.691671][    C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[  196.699653][    C1] RBP: dffffc0000000000 R08: ffffc90000dd0627 R09: 1ffff920001ba0c4
[  196.707674][    C1] R10: dffffc0000000000 R11: fffff520001ba0c5 R12: 0000000000000000
[  196.715687][    C1] R13: ffff8880783dc540 R14: 0000000000000000 R15: dffffc0000000000
[  196.723724][    C1] FS:  0000555560c53500(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  196.732706][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  196.739328][    C1] CR2: 00007f2997faae00 CR3: 0000000050494000 CR4: 00000000003506e0
[  196.747354][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  196.755370][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  196.763391][    C1] Call Trace:
[  196.766672][    C1]  <IRQ>
[  196.769598][    C1]  ? dev_init_scheduler+0x360/0x360
[  196.774943][    C1]  call_timer_fn+0x17b/0x540
[  196.779641][    C1]  ? dev_init_scheduler+0x360/0x360
[  196.784892][    C1]  ? __run_timers+0x810/0x810
[  196.789703][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  196.794947][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  196.800156][    C1]  ? dev_init_scheduler+0x360/0x360
[  196.805415][    C1]  __run_timers+0x56c/0x810
[  196.809948][    C1]  ? detach_timer+0x2b0/0x2b0
[  196.814676][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  196.820701][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  196.825605][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  196.831886][    C1]  run_timer_softirq+0x63/0xf0
[  196.836691][    C1]  handle_softirqs+0x336/0x830
[  196.841510][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  196.846386][    C1]  ? do_softirq+0x210/0x210
[  196.850931][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[  196.856184][    C1]  __irq_exit_rcu+0x13b/0x230
[  196.860875][    C1]  ? irq_exit_rcu+0x20/0x20
[  196.865682][    C1]  irq_exit_rcu+0x5/0x20
[  196.869957][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  196.875628][    C1]  </IRQ>
[  196.878561][    C1]  <TASK>
[  196.881521][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  196.887549][    C1] RIP: 0010:get_page_from_freelist+0x1f20/0x2670
[  196.893914][    C1] Code: 8f 84 24 c0 01 00 00 f7 84 24 c0 01 00 00 00 02 00 00 c6 44 08 04 f8 0f 85 89 02 00 00 41 f7 c5 00 02 00 00 74 01 fb 4d 85 f6 <44> 8b 6c 24 2c 0f 84 d5 00 00 00 4c 89 f0 48 c1 e8 03 80 3c 08 00
[  196.913566][    C1] RSP: 0000:ffffc9000361f780 EFLAGS: 00000286
[  196.919672][    C1] RAX: 1ffff920006c3f24 RBX: ffffffff8be3d828 RCX: dffffc0000000000
[  196.927711][    C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200
[  196.935752][    C1] RBP: ffffc9000361f9d0 R08: ffffffff901ee0f7 R09: 1ffffffff203dc1e
[  196.943761][    C1] R10: dffffc0000000000 R11: fffffbfff203dc1f R12: ffff88813fffd310
[  196.952071][    C1] R13: 0000000000000202 R14: ffffea00015239c0 R15: 0000000001100dca
[  196.960093][    C1]  ? __alloc_pages+0x11b/0x480
[  196.964917][    C1]  ? __alloc_pages+0x480/0x480
[  196.969721][    C1]  ? prepare_alloc_pages+0x359/0x5b0
[  196.975044][    C1]  __alloc_pages+0x1ee/0x480
[  196.979651][    C1]  ? zone_statistics+0x170/0x170
[  196.984642][    C1]  alloc_pages_vma+0x2bc/0x790
[  196.989541][    C1]  wp_page_copy+0x225/0x2090
[  196.994178][    C1]  ? __lock_acquire+0x7b50/0x7b50
[  196.999223][    C1]  ? insert_page_into_pte_locked+0x470/0x470
[  197.005263][    C1]  ? _raw_spin_unlock+0x24/0x40
[  197.010120][    C1]  ? do_wp_page+0x965/0xb30
[  197.014676][    C1]  handle_mm_fault+0x1fbd/0x4440
[  197.019664][    C1]  ? get_page+0xe0/0xe0
[  197.024057][    C1]  ? vmacache_find+0x238/0x590
[  197.028835][    C1]  ? find_vma+0xd2/0x230
[  197.033128][    C1]  do_user_addr_fault+0x494/0xc90
[  197.038210][    C1]  exc_page_fault+0x60/0x100
[  197.042840][    C1]  asm_exc_page_fault+0x22/0x30
[  197.047959][    C1] RIP: 0033:0x7f2997bdc7fc
[  197.052448][    C1] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83
[  197.072103][    C1] RSP: 002b:00007fff17b62f28 EFLAGS: 00010246
[  197.078360][    C1] RAX: 0000000000000000 RBX: ffffffff83a67bc0 RCX: 0000000000000000
[  197.086395][    C1] RDX: 0000000000001bc0 RSI: ffffffff83a67bc0 RDI: 0000000000000000
[  197.094418][    C1] RBP: 0000000000000000 R08: 00007f2997f9b000 R09: 00007f2997f9d000
[  197.102454][    C1] R10: 0000000083a67bc4 R11: 0000000000000000 R12: 00007f2997fb1038
[  197.110427][    C1] R13: 0000000000000010 R14: ffffffff83a67816 R15: 00007f2998ae0720
[  197.118448][    C1]  ? security_socket_create+0x26/0xb0
[  197.123874][    C1]  ? security_socket_accept+0x10/0x90
[  197.129270][    C1]  ? security_socket_accept+0x10/0x90
[  197.134698][    C1]  </TASK>
[  197.137766][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  197.144666][ T9781] loop4: detected capacity change from 0 to 32768
[  197.145037][    C1] CPU: 1 PID: 9785 Comm: syz.0.2129 Not tainted syzkaller #0
[  197.158786][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  197.168843][    C1] Call Trace:
[  197.172129][    C1]  <IRQ>
[  197.174973][    C1]  dump_stack_lvl+0x188/0x250
[  197.179668][    C1]  ? show_regs_print_info+0x20/0x20
[  197.184879][    C1]  ? load_image+0x410/0x410
[  197.189397][    C1]  panic+0x2f8/0x850
[  197.193392][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  197.197912][    C1]  ? dev_watchdog+0x85d/0xa40
[  197.202602][    C1]  __warn+0x248/0x2b0
[  197.206604][    C1]  ? dev_watchdog+0x85d/0xa40
[  197.211296][    C1]  report_bug+0x1b9/0x2e0
[  197.215651][    C1]  handle_bug+0x3a/0x70
[  197.219815][    C1]  exc_invalid_op+0x16/0x40
[  197.224326][    C1]  asm_exc_invalid_op+0x16/0x20
[  197.229184][    C1] RIP: 0010:dev_watchdog+0x85d/0xa40
[  197.234475][    C1] Code: 8a 72 05 01 48 8b 5c 24 20 48 89 df e8 5c f2 e3 ff 48 c7 c7 c0 46 22 8b 48 89 de 48 8b 1c 24 48 89 c2 44 89 e1 e8 43 5d b0 01 <0f> 0b e9 51 fe ff ff e8 e7 34 74 f9 0f 0b e9 33 fe ff ff 89 d9 80
[  197.238372][ T9787] loop1: detected capacity change from 0 to 4096
[  197.254113][    C1] RSP: 0000:ffffc90000dd0af0 EFLAGS: 00010246
[  197.254135][    C1] RAX: 3bc98587410feb00 RBX: ffff8880783dc448 RCX: ffff888077998000
[  197.254149][    C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[  197.254161][    C1] RBP: dffffc0000000000 R08: ffffc90000dd0627 R09: 1ffff920001ba0c4
[  197.254174][    C1] R10: dffffc0000000000 R11: fffff520001ba0c5 R12: 0000000000000000
[  197.254188][    C1] R13: ffff8880783dc540 R14: 0000000000000000 R15: dffffc0000000000
[  197.254221][    C1]  ? dev_init_scheduler+0x360/0x360
[  197.254242][    C1]  call_timer_fn+0x17b/0x540
[  197.254262][    C1]  ? dev_init_scheduler+0x360/0x360
[  197.254279][    C1]  ? __run_timers+0x810/0x810
[  197.326041][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  197.331252][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  197.336462][    C1]  ? dev_init_scheduler+0x360/0x360
[  197.341674][    C1]  __run_timers+0x56c/0x810
[  197.346205][    C1]  ? detach_timer+0x2b0/0x2b0
[  197.350890][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  197.356887][    C1]  ? sched_clock_cpu+0x15/0x3c0
[  197.361752][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  197.368002][    C1]  run_timer_softirq+0x63/0xf0
[  197.372771][    C1]  handle_softirqs+0x336/0x830
[  197.377546][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  197.382409][    C1]  ? do_softirq+0x210/0x210
[  197.386920][    C1]  ? hrtimer_interrupt+0x6a2/0x8b0
[  197.392044][    C1]  __irq_exit_rcu+0x13b/0x230
[  197.396737][    C1]  ? irq_exit_rcu+0x20/0x20
[  197.401254][    C1]  irq_exit_rcu+0x5/0x20
[  197.405498][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  197.411150][    C1]  </IRQ>
[  197.414081][    C1]  <TASK>
[  197.417007][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  197.422993][    C1] RIP: 0010:get_page_from_freelist+0x1f20/0x2670
[  197.429417][    C1] Code: 8f 84 24 c0 01 00 00 f7 84 24 c0 01 00 00 00 02 00 00 c6 44 08 04 f8 0f 85 89 02 00 00 41 f7 c5 00 02 00 00 74 01 fb 4d 85 f6 <44> 8b 6c 24 2c 0f 84 d5 00 00 00 4c 89 f0 48 c1 e8 03 80 3c 08 00
[  197.449030][    C1] RSP: 0000:ffffc9000361f780 EFLAGS: 00000286
[  197.455104][    C1] RAX: 1ffff920006c3f24 RBX: ffffffff8be3d828 RCX: dffffc0000000000
[  197.463165][    C1] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200
[  197.467453][ T9781] JBD2: Ignoring recovery information on journal
[  197.471139][    C1] RBP: ffffc9000361f9d0 R08: ffffffff901ee0f7 R09: 1ffffffff203dc1e
[  197.471158][    C1] R10: dffffc0000000000 R11: fffffbfff203dc1f R12: ffff88813fffd310
[  197.471171][    C1] R13: 0000000000000202 R14: ffffea00015239c0 R15: 0000000001100dca
[  197.471213][    C1]  ? __alloc_pages+0x11b/0x480
[  197.471249][    C1]  ? __alloc_pages+0x480/0x480
[  197.510922][    C1]  ? prepare_alloc_pages+0x359/0x5b0
[  197.516228][    C1]  __alloc_pages+0x1ee/0x480
[  197.520834][    C1]  ? zone_statistics+0x170/0x170
[  197.525818][    C1]  alloc_pages_vma+0x2bc/0x790
[  197.530595][    C1]  wp_page_copy+0x225/0x2090
[  197.535205][    C1]  ? __lock_acquire+0x7b50/0x7b50
[  197.540244][    C1]  ? insert_page_into_pte_locked+0x470/0x470
[  197.546234][    C1]  ? _raw_spin_unlock+0x24/0x40
[  197.551092][    C1]  ? do_wp_page+0x965/0xb30
[  197.555614][    C1]  handle_mm_fault+0x1fbd/0x4440
[  197.560574][    C1]  ? get_page+0xe0/0xe0
[  197.564754][    C1]  ? vmacache_find+0x238/0x590
[  197.569534][    C1]  ? find_vma+0xd2/0x230
[  197.573785][    C1]  do_user_addr_fault+0x494/0xc90
[  197.578829][    C1]  exc_page_fault+0x60/0x100
[  197.583433][    C1]  asm_exc_page_fault+0x22/0x30
[  197.588289][    C1] RIP: 0033:0x7f2997bdc7fc
[  197.592708][    C1] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83
[  197.612331][    C1] RSP: 002b:00007fff17b62f28 EFLAGS: 00010246
[  197.618405][    C1] RAX: 0000000000000000 RBX: ffffffff83a67bc0 RCX: 0000000000000000
[  197.626374][    C1] RDX: 0000000000001bc0 RSI: ffffffff83a67bc0 RDI: 0000000000000000
[  197.634349][    C1] RBP: 0000000000000000 R08: 00007f2997f9b000 R09: 00007f2997f9d000
[  197.642324][    C1] R10: 0000000083a67bc4 R11: 0000000000000000 R12: 00007f2997fb1038
[  197.650334][    C1] R13: 0000000000000010 R14: ffffffff83a67816 R15: 00007f2998ae0720
[  197.658313][    C1]  ? security_socket_create+0x26/0xb0
[  197.663880][    C1]  ? security_socket_accept+0x10/0x90
[  197.669264][    C1]  ? security_socket_accept+0x10/0x90
[  197.674646][    C1]  </TASK>
[  197.677874][    C1] Kernel Offset: disabled
[  197.682535][    C1] Rebooting in 86400 seconds..