last executing test programs:

2m29.968544512s ago: executing program 2 (id=9315):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x9f)

2m29.766824533s ago: executing program 2 (id=9318):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})

2m29.618590082s ago: executing program 2 (id=9320):
syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241)
syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)

2m29.353534427s ago: executing program 2 (id=9324):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4)

2m29.11958907s ago: executing program 2 (id=9326):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2m28.097980799s ago: executing program 2 (id=9335):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8040, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x44, 0x703, &(0x7f0000000c00)="$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")
chroot(&(0x7f0000000000)='./file0/../file0\x00')

2m12.424242531s ago: executing program 32 (id=9335):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8040, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x44, 0x703, &(0x7f0000000c00)="$eJzs3U9sHGcZB+DfrNdrbyq5bpu0BSHFaqQIGkjsmJIgIREqhHKoUCQuvZrEaaw4aWW7KIkQcYHCEU6ohx6KUDj0hHpAKuKAKGckJK4o90jcIw4smtlZZ72213Zjx0l4Hml2vpn5/rzzZmZ2djbWBvi/df7NjK6myPkTb9wol+/emV28e2f2Wq+cZCxJI2l2ZymuJ8Vnybl0p3yhXFl3V2w1zmv3Pv3w+Acfz3aXmvVU1W8Ma/dAZ8gIq/WUqSQj9XyXmlv1dzGvb+jv9q66LtbiLhN2rJc4OGidDVZ303wH5y3wuLudjIxusn4yOZRkvL4PSH11aDzi8Pbcrq5yAAAA8Hga2a7Cs/dzPzcy8WjCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKdD0f3NwKKeGr3yVIre7/+36nWlVuuA4x3uq9tsf//yIwoEAAAAAAAAAPbFJ/UX90fv535uZKK3vlNU3/m/Ui0crl6fybtZznyWcjI3MpeVrGQpM8noRF+HrRtzKytLMxtb/iZly06nc7tueTrJ5IaWp7cItLHHOw4AAAAAAAAAT6ef5nwmDjoIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVyQj3Vk1He6VJ9NoJhlP0irrrSZ/7pWfZH856AAAAABg/7Xr+UTx326hU1Sf+V+sPveP591cz0oWspLFzOdS9Syg+6m/8Y/V2cW7d2avldPGjr/z713FUfWYZCTvbTHydFXjyFqL8/lefpATmcqFLGUhP8pcVjKfqbTLnchciky2u08vJntxbh7vuXVLFwZjOzqw/HIVSTuXs1DFdjIXW+k+Nqn2oRzz5b7R/thKBkZ8r8xO8e3aDnN0qe/f69f1c5la59kd9rE/Jqs9H13LyHSZ+zobzw3P/S6Pk8GRZtJYewZ1eG2UoplkcKRezn+4m5wf6s7Gy5dfrM/5Xtvlo7TBTJxOoz76khf78p3Nov7KP/964Urj+tUrl5dP7OMuPYyp7SqM9gqDmZjty8RLw4++OhOLZSZWd56J0cEV4zttub9adTaqS9EOr5bfrUpzeaXvEHw7lzKfM5nOTM5mOt/M6cyuHWHldGRdXpuz19bnpDrXGhuvb+0hwR/7cl+lX25T+dEq8/JcX177r3ST1bZ6zblfZbrv6Ht++NG363eBcvwv1uVyjJ+tveM8DtZlor4296J7YXgmftspX5cXr19dujL3zg7HO17Py9P2/fVXud/tPOrBd/e9UB4vzydpVktVTtq946Xc9sJatOvz1aq/cem2a2zYdmRt22QmspDvb3mmtup7uI09dbe91L/tXw+unK36/qa3bd1dTt7OYnUXMmDbSzUA+2/dXdOhVw+12vfaf29/1P55+0r7jfHXx86OfamV0b81/zTyh8bvG98qXs1H+UkmDi5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4eizfvHV1bnFxfmmtkPHBNQ9baG051vBCGtvWufPMzjrMZDJ8rKIutPZ235/EQjsDa3q/sPSwPX+SZEid1rb9NLcZotjyGBt76ODrQpmHPclzp9NNarWmM7KL5s1eq83rNLM8nqtzRXOTM27swVmQyatzi//prGveTt8pAzzlTq1ce+fU8s1bX1u4NvfW/Fvz10+fPXP2zOw3Zr5+6vLC4vx09/WgowT2w/LNWyObrN7wS7cAAAAAAAAAAADA46P+3/8rn/uPGbb7k4zW0vLmIx991LsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPKHOv5nR1RSZmT45XS7fvTO7WE698oOazSSNJMWPk+Kz5Fy6Uyb7uiu2Gue1e59+ePyDj2cf9NXs1W8Ma7czq/WUqSQj9Xx7Y5t0s7G/i339rX6u8Iq1PSwTdqyXODho/wsAAP//P4bx+w==")
chroot(&(0x7f0000000000)='./file0/../file0\x00')

2m4.493978927s ago: executing program 1 (id=9439):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001080000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be452c6845325c"], 0x90)

2m4.298453728s ago: executing program 1 (id=9441):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x8000, 0x1, 0x59455247, 0x8, 0xc, [{0x6fc0, 0xd9}, {0x8, 0x3}, {0xe, 0x3ff}, {0x8}, {0x1, 0x8147}, {0x6, 0xd}, {0x80000001, 0xfffffff8}, {0x145, 0xf9}], 0x4, 0x3, 0x2, 0x1, 0x2}})

2m4.040197703s ago: executing program 1 (id=9443):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)

2m3.689706763s ago: executing program 1 (id=9445):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="320200007d01000005f1000000000400000000000000040000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff81020200000000000000bc920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x232)

2m3.478966235s ago: executing program 1 (id=9450):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x0, 0xfefffff8}, {0x0, 0x109003ff}, 0xc, 0x3})

2m3.251086778s ago: executing program 1 (id=9452):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
sync()

1m47.888346455s ago: executing program 33 (id=9452):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
sync()

4.242684748s ago: executing program 0 (id=10718):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x42000)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r0, 0x80184151, 0x0)

4.04125255s ago: executing program 0 (id=10722):
r0 = io_uring_setup(0x3aad, &(0x7f0000000340)={0x0, 0x241, 0x0, 0x6, 0x3d4})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f0000000140)={0xffd, 0x0, 0x0, 0x0}, 0x20)

3.706890889s ago: executing program 0 (id=10726):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
accept4(r0, 0x0, 0x0, 0x800)

3.460394143s ago: executing program 0 (id=10737):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x321c004, &(0x7f0000008280)={[{@discard}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@nointegrity}, {@nodiscard}, {@nointegrity}, {@errors_remount}, {@nodiscard}, {@uid}]}, 0x1, 0x626d, &(0x7f0000000380)="$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")
open(&(0x7f0000000080)='./file1\x00', 0x145142, 0x0)

2.264783031s ago: executing program 3 (id=10746):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10904, 0x2, '\x00', @value64=0x8}})

1.994768946s ago: executing program 0 (id=10747):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='discard,discard=0x0000000000020001,discard,iocharset=cp857,errors=remount-ro,iocharset=iso8859-2,uid=', @ANYRESHEX=0xee00, @ANYRES32=0x0], 0x23, 0x61f4, &(0x7f0000000a80)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

1.940871559s ago: executing program 3 (id=10748):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg1\x00', 'nicvf0\x00', {0x7f}, {}, 0x6c, 0x97, 0x5, 0x7e2891395e2b2924}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)

1.731996732s ago: executing program 3 (id=10750):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7fffffbf, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547e2db80000000000000002", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.511678894s ago: executing program 3 (id=10751):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1a8, 0x5c, 0x160, 0x0, 0x3e0, 0x2b8, 0x228, 0x25a, 0x2b8, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0xffffff00, 0xffffffff], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0x160, 0x1a8, 0x52020000, {0x0, 0x6802000000000000}, [@common=@srh1={{0x90}, {0xff, 0x84, 0x3, 0x1, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xffffff00, 0xffffff, 0x0, 0xffffff00], [0xff, 0xff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xff], 0x1000, 0x4449}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [0x0, 0x0, 0xff000000], [0xff], 'bond_slave_0\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)

1.289458717s ago: executing program 4 (id=10753):
r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6)
lseek(r0, 0x2, 0x1)

1.274451088s ago: executing program 3 (id=10754):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x10, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "321dafb6c4"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)

1.04317971s ago: executing program 3 (id=10756):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e04114098af000000190902120001000000000904"], 0x0)
ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0)

990.719474ms ago: executing program 4 (id=10757):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008000100", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x8840}, 0x0)

989.890204ms ago: executing program 5 (id=10758):
r0 = fsopen(&(0x7f0000000340)='erofs\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='acl\x00\t\x00\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xd3\x0f\x99R\xb3\x16n\rO\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:.\xf1!\x9d`YQ\xc3N\n\xbbWN:\xd3\x98', 0x0, r0)

811.525234ms ago: executing program 5 (id=10759):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x33}, 0x1c)

790.730895ms ago: executing program 4 (id=10760):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021241300001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000f8120380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000c41200800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d200000900090073797a3200000000c8010180380002800900020073797a300000000008000340000000000900020073797a300000000008000340000000000900020073797a30000000003c0002800900020073797a320000000008000180000000000800018000000000080003400000000008000180000000000900020073797a3100000000380002800900020073797a300000000008000180000000000900020073797a320000000008000340000000000900020073797a32000000002400028008000180000000000900020073797a32000000000900020073797a3000000000f3000100a6117a78b9e48d6dd9ad86fc2c54547cbee98c24f4b972c82722771febf3e388f9b3907852ee4adbd95ca25deb487ac3d49d3716931979f6bbf2b8cdcc0bc37f27a54709a59c31c01c5544b11cb9c6ca800d7f23c3cc5237458188f26a04c78ad8dfd3b13e958558dc3b7f0f4cfc16c4fd23e11b25bd23b195b64166e0c3a8ab3ebbd2ead4abf745bcf4d4b0610521d7ec52023ed38c7f9fb1cbab6a9d87c96fd783ff63f9483766557291fcc41f17c423550c1e965a66e30631b271db96cccb68bf8c91656e894ef46a296974170da742b0d13d665f0f2e80d3590b3dc637851b6e7b0adc59ab874ce337a258bc4300080003"], 0x13a8}}, 0x0)

678.844032ms ago: executing program 5 (id=10761):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newsa={0x180, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x192, 0x6, 0x10ffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'ecb-camellia-asm\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

594.698717ms ago: executing program 0 (id=10762):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

534.0389ms ago: executing program 5 (id=10763):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050011006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)

470.718334ms ago: executing program 4 (id=10764):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000580), &(0x7f0000000000)=0x80)

423.984676ms ago: executing program 5 (id=10765):
syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x208002, &(0x7f0000000540)=ANY=[], 0x5, 0x1bd, &(0x7f0000000a00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)

237.585397ms ago: executing program 4 (id=10766):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x22, 0x0, &(0x7f0000000880)="3d25ab324119c4cbd0017085080092624cf43f7b424432fc2142a9969ce36ebb5dac", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.882399ms ago: executing program 4 (id=10767):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc0000000002010400000000000000000a000000300001802c00018014000300fe80000000000000000000000000002014000400fe8000000000000000000000000000aa3c0003800c00028004000100890000002c00018014000300fe80000000000000000000000000002a14000400ff0100000000000000000000000000013c0002800c00028005000100860000002c0001801400030000000000000000000000000000000000140004"], 0xbc}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)

0s ago: executing program 5 (id=10768):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4})

kernel console output (not intermixed with test programs):

n - usb_submit_urb failed, error: -90
[ 1059.984660][ T5863] synaptics_usb: probe of 4-1:0.52 failed with error -5
[ 1060.202744][ T5856] usb 4-1: USB disconnect, device number 123
[ 1062.050711][T27029] loop1: detected capacity change from 0 to 40427
[ 1062.081005][T27029] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[ 1062.087707][T27029] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1062.144114][T27029] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1062.250256][T27029] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1062.264836][T27029] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1062.370035][T27029] syz.1.9394: attempt to access beyond end of device
[ 1062.370035][T27029] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[ 1062.417792][ T5769] syz-executor: attempt to access beyond end of device
[ 1062.417792][ T5769] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1062.462613][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[ 1063.765371][T27065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9420'.
[ 1063.970324][T27071] loop1: detected capacity change from 0 to 2048
[ 1064.028684][T27072] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1064.279987][T27076] loop3: detected capacity change from 0 to 64
[ 1064.399856][T27078] netlink: 'syz.1.9417': attribute type 4 has an invalid length.
[ 1064.456864][T27063] loop0: detected capacity change from 0 to 32768
[ 1064.671974][T27080] loop3: detected capacity change from 0 to 8192
[ 1064.699044][T27080] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1070.720581][T27083] loop3: detected capacity change from 0 to 164
[ 1071.063503][T27094] loop1: detected capacity change from 0 to 64
[ 1071.383368][T24577] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1071.397524][T24577] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1071.407538][T24577] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1071.421678][T24577] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1071.442099][T24577] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1071.451334][T24577] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1071.535214][T27097] lo speed is unknown, defaulting to 1000
[ 1072.192781][T27097] chnl_net:caif_netlink_parms(): no params data found
[ 1072.355825][T27097] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1072.390155][T27097] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1072.401303][T27097] bridge_slave_0: entered allmulticast mode
[ 1072.409268][T27097] bridge_slave_0: entered promiscuous mode
[ 1072.450026][T27097] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1072.457626][T27097] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1072.465720][T27097] bridge_slave_1: entered allmulticast mode
[ 1072.473948][T27097] bridge_slave_1: entered promiscuous mode
[ 1072.562954][T27097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1072.594907][T27097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1072.712299][T27097] team0: Port device team_slave_0 added
[ 1072.734543][T27097] team0: Port device team_slave_1 added
[ 1072.789039][T27097] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1072.797683][T27097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1072.825270][T27097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1072.838961][T27097] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1072.846542][T27097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1072.873397][T27097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1072.946315][T27097] hsr_slave_0: entered promiscuous mode
[ 1072.970032][T27097] hsr_slave_1: entered promiscuous mode
[ 1072.977434][T27097] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1072.997468][T27097] Cannot create hsr debugfs directory
[ 1073.484661][T27097] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1073.501250][T24577] Bluetooth: hci4: command tx timeout
[ 1073.520370][T27097] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1073.565700][T27097] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1073.595398][T27097] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1073.892530][T27097] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1073.924712][T27097] 8021q: adding VLAN 0 to HW filter on device team0
[ 1073.950305][T19393] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1073.957542][T19393] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1074.001586][T19393] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1074.008863][T19393] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1074.555397][T27097] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1075.216234][T27097] veth0_vlan: entered promiscuous mode
[ 1075.253716][T27097] veth1_vlan: entered promiscuous mode
[ 1075.334540][T27097] veth0_macvtap: entered promiscuous mode
[ 1075.367424][T27097] veth1_macvtap: entered promiscuous mode
[ 1075.438994][T27097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1075.480892][T27097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1075.504675][T27097] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1075.524739][T27097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1075.561675][T27097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1075.582992][T27097] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1075.585674][T24577] Bluetooth: hci4: command tx timeout
[ 1075.636208][T27097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1075.695976][T27097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1075.721384][T27097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1075.730162][T27097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1075.945423][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1075.965576][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1076.051333][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1076.073646][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1076.481358][T27136] netlink: 'syz.4.9430': attribute type 4 has an invalid length.
[ 1076.634327][T27138] loop1: detected capacity change from 0 to 128
[ 1076.991154][ T5863] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1077.192215][ T5863] usb 5-1: Using ep0 maxpacket: 8
[ 1077.212520][ T5863] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1077.234642][ T5863] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[ 1077.251228][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.269970][ T5863] usb 5-1: Product: syz
[ 1077.292217][ T5863] usb 5-1: Manufacturer: syz
[ 1077.296989][ T5863] usb 5-1: SerialNumber: syz
[ 1077.342466][ T5863] usb 5-1: config 0 descriptor??
[ 1077.360673][T27145] loop1: detected capacity change from 0 to 4096
[ 1077.366198][ T5863] gspca_main: stk014-2.14.0 probing 05e1:0893
[ 1077.383035][ T5863] usb 5-1: selecting invalid altsetting 1
[ 1077.418077][T27145] ntfs3: loop1: ino=3, Correct links count -> 2.
[ 1077.661222][T24577] Bluetooth: hci4: command tx timeout
[ 1077.790059][T27130] usb 5-1: USB disconnect, device number 2
[ 1078.988673][T27166] loop4: detected capacity change from 0 to 2048
[ 1079.033979][T27166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1079.651260][T27176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9448'.
[ 1079.660409][T27176] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9448'.
[ 1079.723429][T27176] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9448'.
[ 1079.741281][T24577] Bluetooth: hci4: command tx timeout
[ 1080.043718][T27186] loop4: detected capacity change from 0 to 1024
[ 1080.053013][T27188] loop0: detected capacity change from 0 to 512
[ 1080.104442][T27188] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1080.140671][T27186] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 1080.157513][T27188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1080.204038][T27186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1080.242579][T27188] ext4 filesystem being mounted at /2444/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1080.328455][T27186] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.9453: reserved inode found cleared - inode=2
[ 1080.413010][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1080.436744][T27197] loop3: detected capacity change from 0 to 128
[ 1080.493994][T27097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1080.593581][T27199] loop0: detected capacity change from 0 to 64
[ 1080.953874][T27207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9461'.
[ 1080.973464][T27207] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9461'.
[ 1081.022147][T27207] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9461'.
[ 1081.362455][T27220] loop3: detected capacity change from 0 to 1024
[ 1081.476941][   T59] hfsplus: b-tree write err: -5, ino 4
[ 1081.601517][T27130] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 1081.616444][T27222] loop3: detected capacity change from 0 to 64
[ 1081.780967][T27130] usb 1-1: Using ep0 maxpacket: 16
[ 1081.795611][T27130] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[ 1081.812454][T27130] usb 1-1: config 0 has no interface number 0
[ 1081.826688][T27130] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1081.849207][T27130] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1081.873822][T27130] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1081.888867][T27130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.914383][T27130] usb 1-1: Product: syz
[ 1081.925770][T27130] usb 1-1: Manufacturer: syz
[ 1081.941172][T27130] usb 1-1: SerialNumber: syz
[ 1081.955446][T27130] usb 1-1: config 0 descriptor??
[ 1081.983341][T27219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1081.990755][T27219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1082.152124][T27228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9470'.
[ 1082.161696][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9470'.
[ 1082.240287][T27219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1082.262771][T27219] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1082.403232][T27232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9473'.
[ 1082.421462][T27232] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9473'.
[ 1082.506095][T27130] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1082.520946][T27130] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[ 1082.541468][T27130] asix: probe of 1-1:0.251 failed with error -5
[ 1082.582320][T27130] usb 1-1: USB disconnect, device number 127
[ 1082.591480][T27234] loop3: detected capacity change from 0 to 128
[ 1082.868720][   T28] audit: type=1326 audit(2000000462.343:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27237 comm="syz.3.9476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff93b79aeb9 code=0x0
[ 1083.436779][T27246] loop3: detected capacity change from 0 to 4096
[ 1083.462515][T27246] ntfs3: loop3: ino=3, Correct links count -> 2.
[ 1084.140570][   T28] audit: type=1326 audit(2000000463.623:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27257 comm="syz.0.9485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8829f9aeb9 code=0x0
[ 1084.431641][T27266] loop3: detected capacity change from 0 to 16
[ 1084.471296][T27266] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1095.316689][T27273] loop4: detected capacity change from 0 to 1024
[ 1095.464560][T27278] loop3: detected capacity change from 0 to 512
[ 1095.484661][T27278] EXT4-fs: Ignoring removed oldalloc option
[ 1095.570626][   T12] hfsplus: b-tree write err: -5, ino 4
[ 1095.649857][T27278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1095.741308][T27278] ext4 filesystem being mounted at /2441/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1095.892607][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1096.239374][T14297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1096.251911][T14297] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1096.265801][T14297] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1096.285934][T14297] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1096.295537][T14297] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1096.303390][T14297] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1096.420873][T27303] tmpfs: Bad value for 'nr_inodes'
[ 1096.486768][T27296] lo speed is unknown, defaulting to 1000
[ 1097.271643][T27333] __nla_validate_parse: 1 callbacks suppressed
[ 1097.271664][T27333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9519'.
[ 1097.795059][T27296] chnl_net:caif_netlink_parms(): no params data found
[ 1098.046124][T27340] loop4: detected capacity change from 0 to 32768
[ 1098.088388][T27340] JBD2: Ignoring recovery information on journal
[ 1098.173254][T27296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1098.181351][T27296] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.188704][T27296] bridge_slave_0: entered allmulticast mode
[ 1098.196683][T27296] bridge_slave_0: entered promiscuous mode
[ 1098.206232][T27340] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1098.208188][T27296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1098.224009][T27296] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.239793][T27296] bridge_slave_1: entered allmulticast mode
[ 1098.285700][T27296] bridge_slave_1: entered promiscuous mode
[ 1098.381930][T14297] Bluetooth: hci5: command tx timeout
[ 1098.458611][T27296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1098.478490][   T28] audit: type=1800 audit(2000000477.963:278): pid=27340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9521" name="file0" dev="loop4" ino=17058 res=0 errno=0
[ 1098.499411][T27296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1098.633243][T27296] team0: Port device team_slave_0 added
[ 1098.673203][T27296] team0: Port device team_slave_1 added
[ 1098.746485][T27097] ocfs2: Unmounting device (7,4) on (node local)
[ 1098.761864][T27296] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1098.768910][T27296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1098.801678][T27296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1098.815621][T27296] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1098.823826][T27296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1098.850643][T27296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1099.087194][T27296] hsr_slave_0: entered promiscuous mode
[ 1099.131618][T27296] hsr_slave_1: entered promiscuous mode
[ 1099.171172][T27296] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1099.178840][T27296] Cannot create hsr debugfs directory
[ 1099.223328][T27375] loop3: detected capacity change from 0 to 16
[ 1099.277871][T27375] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1099.372369][T27375] syz.3.9536: attempt to access beyond end of device
[ 1099.372369][T27375] loop3: rw=0, sector=32, nr_sectors = 8 limit=16
[ 1099.656467][T27383] sctp: [Deprecated]: syz.3.9540 (pid 27383) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1099.656467][T27383] Use struct sctp_sack_info instead
[ 1099.945155][T27296] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1099.985981][T27296] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1100.026569][T27296] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1100.057492][T27296] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1100.318109][T27409] Cannot find del_set index 2 as target
[ 1100.408111][T27296] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1100.462112][T14297] Bluetooth: hci5: command tx timeout
[ 1100.510615][T27296] 8021q: adding VLAN 0 to HW filter on device team0
[ 1100.548485][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1100.556477][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1100.598233][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1100.605519][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1100.691723][   T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1100.738315][T27418] Scaler: =================  START STATUS  =================
[ 1100.761039][T27418] Scaler: ==================  END STATUS  ==================
[ 1100.901553][   T23] usb 1-1: Using ep0 maxpacket: 32
[ 1100.910606][   T23] usb 1-1: too many configurations: 17, using maximum allowed: 8
[ 1100.943794][   T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[ 1100.970949][   T23] usb 1-1: config 0 has no interface number 0
[ 1100.988491][   T23] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1101.019354][   T23] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1101.062750][   T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[ 1101.090914][   T23] usb 1-1: config 0 has no interface number 0
[ 1101.102948][   T23] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1101.143847][   T23] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1101.175874][   T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[ 1101.206504][   T23] usb 1-1: config 0 has no interface number 0
[ 1101.221603][   T23] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1101.247965][   T23] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1101.270323][   T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[ 1101.301123][   T23] usb 1-1: config 0 has no interface number 0
[ 1101.307345][   T23] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1101.346318][   T23] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1101.368530][   T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[ 1101.377805][   T23] usb 1-1: config 0 has no interface number 0
[ 1101.389928][   T23] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1101.441273][   T23] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1101.474645][   T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[ 1101.484418][   T23] usb 1-1: config 0 has no interface number 0
[ 1101.490781][   T23] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1101.506139][T27296] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1101.520994][   T23] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1101.543127][   T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[ 1101.553088][   T23] usb 1-1: config 0 has no interface number 0
[ 1101.583605][   T23] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1101.610918][   T23] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1101.641345][   T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[ 1101.660096][   T23] usb 1-1: config 0 has no interface number 0
[ 1101.700041][   T23] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1101.724981][   T23] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1101.774026][   T23] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[ 1101.802420][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.831560][   T23] usb 1-1: Product: syz
[ 1101.835828][   T23] usb 1-1: Manufacturer: syz
[ 1101.840516][   T23] usb 1-1: SerialNumber: syz
[ 1101.863895][   T23] usb 1-1: config 0 descriptor??
[ 1101.922752][   T23] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz)
[ 1102.109927][   T23] etas_es58x 1-1:0.2: could not parse product info: 'à …'
[ 1102.307563][T27455] Cannot find del_set index 6 as target
[ 1102.541391][T14297] Bluetooth: hci5: command tx timeout
[ 1102.557245][T27296] veth0_vlan: entered promiscuous mode
[ 1102.583953][ T5816] usb 1-1: USB disconnect, device number 2
[ 1102.601235][ T5816] etas_es58x 1-1:0.2: Disconnecting syz syz
[ 1102.605192][T27296] veth1_vlan: entered promiscuous mode
[ 1102.640022][T27461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9570'.
[ 1102.676240][T27296] veth0_macvtap: entered promiscuous mode
[ 1102.760470][T27296] veth1_macvtap: entered promiscuous mode
[ 1102.897758][T27296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1102.924515][T27470] loop3: detected capacity change from 0 to 64
[ 1102.941240][T27296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.971941][T27296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1103.010059][T27470] syz.3.9573: attempt to access beyond end of device
[ 1103.010059][T27470] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64
[ 1103.013733][T27296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.051108][T27470] Buffer I/O error on dev loop3, logical block 512, async page read
[ 1103.089313][T27470] syz.3.9573: attempt to access beyond end of device
[ 1103.089313][T27470] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64
[ 1103.104718][T27296] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1103.141184][T27470] Buffer I/O error on dev loop3, logical block 56576, async page read
[ 1103.163025][T27296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1103.248923][T27296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.270997][T27296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1103.294505][T27296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1103.307373][T27296] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1103.320381][T27296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.335256][T27296] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.345265][T27296] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.365428][T27296] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.564147][T27482] [U] 
[ 1103.585830][T27478] loop0: detected capacity change from 0 to 2048
[ 1103.666322][T27485] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1103.745937][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1103.746317][T27478] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[ 1103.780656][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1103.811110][ T5856] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1103.819714][T27478] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16)
[ 1103.928937][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1103.965332][T27478] Remounting filesystem read-only
[ 1103.971912][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1104.001997][T27478] NILFS (loop0): error -5 truncating bmap (ino=16)
[ 1104.043119][ T5856] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1104.053713][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.091356][ T5856] usb 4-1: Product: syz
[ 1104.102001][ T5856] usb 4-1: Manufacturer: syz
[ 1104.120933][ T5856] usb 4-1: SerialNumber: syz
[ 1104.135315][ T5771] NILFS (loop0): discard dirty page: offset=4096, ino=6
[ 1104.152169][ T5856] usb 4-1: config 0 descriptor??
[ 1104.160908][ T5771] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[ 1104.182654][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1104.221354][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1104.230457][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1104.287079][ T5771] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[ 1104.325561][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=16
[ 1104.333134][T27494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9491'.
[ 1104.351092][ T5771] NILFS (loop0): discard dirty block: blocknr=23, size=1024
[ 1104.367397][T27494] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9491'.
[ 1104.379080][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1104.399595][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1104.419286][ T5856] hso 4-1:0.0: Failed to find BULK IN ep
[ 1104.432734][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1104.451223][ T5856] usb-storage 4-1:0.0: USB Mass Storage device detected
[ 1104.472127][T27494] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9491'.
[ 1104.483437][ T5771] NILFS (loop0): discard dirty page: offset=0, ino=3
[ 1104.490212][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1104.543005][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1104.576762][ T5771] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[ 1104.589669][ T5771] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[ 1104.622056][T14297] Bluetooth: hci5: command tx timeout
[ 1104.765298][   T23] usb 4-1: USB disconnect, device number 124
[ 1105.189646][T27514] loop0: detected capacity change from 0 to 2048
[ 1105.228798][T27514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1105.976111][T27535] loop3: detected capacity change from 0 to 4096
[ 1106.022589][T27535] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[ 1106.337563][T27547] loop4: detected capacity change from 0 to 1024
[ 1107.475380][T27582] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[ 1107.497457][T27584] loop3: detected capacity change from 0 to 256
[ 1107.504356][T27582] (unnamed net_device) (uninitialized): option use_carrier: invalid value (6)
[ 1107.605888][T27585] bridge1: entered promiscuous mode
[ 1107.766532][T27590] netlink: 'syz.5.9618': attribute type 2 has an invalid length.
[ 1107.864883][T27594] loop4: detected capacity change from 0 to 16
[ 1107.902644][T27594] erofs: (device loop4): mounted with root inode @ nid 36.
[ 1107.998017][T27594] syz.4.9621: attempt to access beyond end of device
[ 1107.998017][T27594] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 1108.106115][T27595] loop3: detected capacity change from 0 to 4096
[ 1109.010391][T27622] loop3: detected capacity change from 0 to 4096
[ 1109.032488][T27622] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[ 1109.173902][T27622] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 1109.183541][T27628] loop5: detected capacity change from 0 to 512
[ 1109.224172][T27628] EXT4-fs: Ignoring removed bh option
[ 1109.259798][T27628] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1109.410710][T27628] EXT4-fs (loop5): 1 truncate cleaned up
[ 1109.462415][T27628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1109.692570][T27296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.002920][T27650] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[ 1110.079919][T27648] loop5: detected capacity change from 0 to 4096
[ 1110.581023][T23739] usb 4-1: new low-speed USB device number 125 using dummy_hcd
[ 1110.595951][T27639] loop4: detected capacity change from 0 to 32768
[ 1110.765740][T27664] loop0: detected capacity change from 0 to 64
[ 1110.793061][T23739] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1110.812674][T23739] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[ 1110.846091][T23739] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1110.898098][T23739] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 1110.940465][T23739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 1110.962083][T27668] loop5: detected capacity change from 0 to 512
[ 1110.980463][T23739] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 1111.019009][T23739] usb 4-1: string descriptor 0 read error: -22
[ 1111.032931][T27668] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[ 1111.049889][T23739] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 1111.064434][T27668] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[ 1111.091686][T23739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1111.126821][T23739] usb 4-1: config 0 descriptor??
[ 1111.145440][T27656] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1111.154132][T27668] EXT4-fs (loop5): 1 truncate cleaned up
[ 1111.173022][T27668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1111.192099][T23739] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1111.229823][T23739] hub: probe of 4-1:0.0 failed with error -5
[ 1111.244414][T23739] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input52
[ 1111.350990][T27668] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1111.351504][    C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1
[ 1111.728525][T27296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1111.789624][    C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1
[ 1111.993965][T23739] usb 4-1: USB disconnect, device number 125
[ 1111.994231][    C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -19
[ 1112.477497][T27694] loop5: detected capacity change from 0 to 256
[ 1112.499765][T27695] ieee802154 phy0 wpan0: encryption failed: -90
[ 1112.729405][T27700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9671'.
[ 1112.743730][T27700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9671'.
[ 1112.816239][T27703] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1113.043928][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1113.067212][T27709] xt_limit: Overflow, try lower: 2147483649/3300
[ 1113.271432][   T23] usb 6-1: Using ep0 maxpacket: 16
[ 1113.282685][   T23] usb 6-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55
[ 1113.292533][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1113.322081][   T23] usb 6-1: Product: syz
[ 1113.335786][   T23] usb 6-1: Manufacturer: syz
[ 1113.368708][   T23] usb 6-1: SerialNumber: syz
[ 1113.392286][   T23] usb 6-1: config 0 descriptor??
[ 1113.412020][   T23] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a
[ 1113.563998][T27725] netlink: 'syz.0.9683': attribute type 2 has an invalid length.
[ 1113.574401][T27723] loop4: detected capacity change from 0 to 4096
[ 1113.611029][T27723] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[ 1113.844017][   T23] gspca_sn9c20x: Write register 1001 failed -71
[ 1113.853377][   T23] gspca_sn9c20x: Device initialization failed
[ 1113.880128][   T23] gspca_sn9c20x: probe of 6-1:0.0 failed with error -71
[ 1113.909408][   T23] usb 6-1: USB disconnect, device number 2
[ 1114.137983][T27736] program syz.4.9688 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1114.224924][T27738] bond8: entered allmulticast mode
[ 1114.304798][T27743] IPVS: length: 218 != 24
[ 1114.525385][T27749] loop3: detected capacity change from 0 to 256
[ 1114.553249][T27749] exfat: Deprecated parameter 'utf8'
[ 1114.558722][T27749] exfat: Deprecated parameter 'namecase'
[ 1114.588904][T27749] exfat: Deprecated parameter 'namecase'
[ 1114.596422][T27749] exfat: Deprecated parameter 'utf8'
[ 1114.714200][T27749] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[ 1114.836672][T27757] tmpfs: Bad value for 'mpol'
[ 1115.230669][T27769] loop3: detected capacity change from 0 to 8
[ 1115.273668][T27769] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1115.337944][T27769] cramfs: Error -5 while decompressing!
[ 1115.348804][T27458] udevd[27458]: incorrect cramfs checksum on /dev/loop3
[ 1115.361310][T27769] cramfs: ffffffff973f4382(26)->ffff88805043f000(4096)
[ 1115.368298][T27769] cramfs: Error -3 while decompressing!
[ 1115.389828][T27773] loop5: detected capacity change from 0 to 1024
[ 1115.428597][T27276] udevd[27276]: incorrect cramfs checksum on /dev/loop3
[ 1115.438863][T27769] cramfs: ffffffff973f439c(16)->ffff888059ba0000(4096)
[ 1115.451516][T27769] cramfs: Error -5 while decompressing!
[ 1115.457159][T27769] cramfs: ffffffff973f4382(26)->ffff88805043f000(4096)
[ 1115.512439][   T28] audit: type=1800 audit(2000000495.003:279): pid=27769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9704" name="file2" dev="loop3" ino=348 res=0 errno=0
[ 1116.067898][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.074391][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.334126][T27763] loop0: detected capacity change from 0 to 32768
[ 1116.361972][T27763] 
[ 1116.361972][T27763]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1116.361972][T27763] 
[ 1116.458928][T27763] read_mapping_page failed!
[ 1116.490345][T27798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9718'.
[ 1116.523917][T27763] ERROR: (device loop0): txCommit: 
[ 1116.523917][T27763] 
[ 1116.576897][T27763] ERROR: (device loop0): remounting filesystem as read-only
[ 1116.611257][   T28] audit: type=1400 audit(2000000496.103:280): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=27800 comm="syz.3.9720"
[ 1116.842714][T27805] netlink: 'syz.4.9722': attribute type 8 has an invalid length.
[ 1116.911083][T27805] bridge2: entered promiscuous mode
[ 1117.696888][T27835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9737'.
[ 1117.731576][T27835] netlink: 'syz.5.9737': attribute type 1 has an invalid length.
[ 1118.477787][   T28] audit: type=1326 audit(2000000497.963:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27858 comm="syz.4.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1118.570947][   T28] audit: type=1326 audit(2000000497.963:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27858 comm="syz.4.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1118.631117][   T28] audit: type=1326 audit(2000000497.983:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27858 comm="syz.4.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1118.653708][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1118.731110][   T28] audit: type=1326 audit(2000000497.983:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27858 comm="syz.4.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1118.753592][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1118.797656][   T28] audit: type=1326 audit(2000000497.983:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27858 comm="syz.4.9749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1118.820189][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1119.006079][T27869] loop3: detected capacity change from 0 to 2048
[ 1119.063586][T27869] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1119.074844][T27868] loop4: detected capacity change from 0 to 4096
[ 1119.102784][T27868] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[ 1119.259932][T27848] loop0: detected capacity change from 0 to 32768
[ 1119.271215][T27868] ntfs3: loop4: failed to convert "c46c" to cp866
[ 1119.306781][T27848] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1119.340673][T27848] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1119.473715][T27848] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 1119.490542][T20387] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1119.512836][T20387] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1119.670588][T20387] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 157ms
[ 1119.715645][T20387] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1119.737584][T27848] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1120.330422][T27848] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 1120.501113][T27903] netlink: 'syz.4.9769': attribute type 3 has an invalid length.
[ 1120.551063][T27903] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9769'.
[ 1120.622266][ T5771] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 1120.622266][ T5771]   inode = 11 2339
[ 1120.622266][ T5771]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472
[ 1120.641915][ T5771] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[ 1120.651939][ T5771] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5771 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[ 1120.662402][ T5771] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[ 1120.670773][ T5771] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 1120.774826][ T5771] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 1120.795163][T27909] loop4: detected capacity change from 0 to 1024
[ 1120.815526][ T5771] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 1120.831913][ T5771] gfs2: fsid=syz:syz.0: File system withdrawn
[ 1120.831934][ T5771] CPU: 1 PID: 5771 Comm: syz-executor Not tainted syzkaller #0
[ 1120.831958][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1120.831973][ T5771] Call Trace:
[ 1120.831983][ T5771]  <TASK>
[ 1120.831993][ T5771]  dump_stack_lvl+0x18c/0x250
[ 1120.832031][ T5771]  ? kobject_uevent_env+0x363/0x8b0
[ 1120.832060][ T5771]  ? show_regs_print_info+0x20/0x20
[ 1120.832092][ T5771]  ? load_image+0x400/0x400
[ 1120.832119][ T5771]  ? kobject_uevent_env+0x363/0x8b0
[ 1120.832155][ T5771]  gfs2_withdraw+0xb24/0x13d0
[ 1120.832204][ T5771]  ? gfs2_lm+0x240/0x240
[ 1120.832255][ T5771]  ? gfs2_consist_inode_i+0xf5/0x110
[ 1120.832292][ T5771]  gfs2_inode_refresh+0xb89/0x1000
[ 1120.832326][ T5771]  ? gfs2_inode_metasync+0xf0/0xf0
[ 1120.832354][ T5771]  ? gfs2_glock_nq+0xd4f/0x1420
[ 1120.832395][ T5771]  gfs2_instantiate+0x162/0x220
[ 1120.832431][ T5771]  gfs2_glock_wait+0x1d4/0x2a0
[ 1120.832501][ T5771]  do_sync+0x4c6/0xe50
[ 1120.832526][ T5771]  ? gfs2_quota_sync+0x411/0x5a0
[ 1120.832552][ T5771]  ? bh_get+0x760/0x760
[ 1120.832577][ T5771]  ? __lock_acquire+0x7d40/0x7d40
[ 1120.832609][ T5771]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1120.832642][ T5771]  ? gfs2_quota_sync+0x411/0x5a0
[ 1120.832666][ T5771]  ? do_raw_spin_unlock+0x121/0x230
[ 1120.832701][ T5771]  gfs2_quota_sync+0x411/0x5a0
[ 1120.832733][ T5771]  gfs2_sync_fs+0x4c/0xb0
[ 1120.832761][ T5771]  sync_filesystem+0xea/0x220
[ 1120.832785][ T5771]  generic_shutdown_super+0x6f/0x2b0
[ 1120.832812][ T5771]  kill_block_super+0x44/0x90
[ 1120.832834][ T5771]  deactivate_locked_super+0x97/0x100
[ 1120.832857][ T5771]  cleanup_mnt+0x43b/0x4d0
[ 1120.832888][ T5771]  task_work_run+0x1d4/0x260
[ 1120.832922][ T5771]  ? task_work_cancel+0x220/0x220
[ 1120.832959][ T5771]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1120.832993][ T5771]  exit_to_user_mode_loop+0xe6/0x110
[ 1120.833022][ T5771]  exit_to_user_mode_prepare+0xee/0x180
[ 1120.833053][ T5771]  syscall_exit_to_user_mode+0x1a/0x50
[ 1120.833075][ T5771]  do_syscall_64+0x61/0xa0
[ 1120.833101][ T5771]  ? clear_bhb_loop+0x40/0x90
[ 1120.833121][ T5771]  ? clear_bhb_loop+0x40/0x90
[ 1120.833142][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1120.833161][ T5771] RIP: 0033:0x7f8829f9c117
[ 1120.833179][ T5771] Code: a2 c7 05 7c a4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1120.833194][ T5771] RSP: 002b:00007ffce4175bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1120.833215][ T5771] RAX: 0000000000000000 RBX: 00007f882a00471f RCX: 00007f8829f9c117
[ 1120.833228][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce4175cb0
[ 1120.833240][ T5771] RBP: 00007ffce4175cb0 R08: 00007ffce4176cb0 R09: 00000000ffffffff
[ 1120.833253][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffce4176d40
[ 1120.833265][ T5771] R13: 00007f882a00471f R14: 0000000000111874 R15: 00007ffce4176d80
[ 1120.833292][ T5771]  </TASK>
[ 1121.034630][T19393] hfsplus: b-tree write err: -5, ino 4
[ 1121.413822][T27917] loop5: detected capacity change from 0 to 8192
[ 1121.419426][T27917] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1121.709967][T27917] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[ 1121.824468][T27917] REISERFS (device loop5): using ordered data mode
[ 1121.843089][T27917] reiserfs: using flush barriers
[ 1121.862615][T27917] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1121.947910][T27917] REISERFS (device loop5): checking transaction log (loop5)
[ 1121.988713][T27917] REISERFS (device loop5): Using r5 hash to sort names
[ 1122.193444][T27934] loop0: detected capacity change from 0 to 512
[ 1122.265829][T27936] geneve1: entered promiscuous mode
[ 1122.271651][T27130] usb 4-1: new full-speed USB device number 126 using dummy_hcd
[ 1122.303023][T27934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1122.392710][T27934] ext4 filesystem being mounted at /2529/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1122.431754][T27936] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1122.453278][T27130] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1122.473973][T27130] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 42769, setting to 64
[ 1122.570942][T27130] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1122.594066][T27130] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1122.606893][T27130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1122.618636][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1122.628528][T27130] usb 4-1: Product: syz
[ 1122.641149][T27130] usb 4-1: Manufacturer: syz
[ 1122.646374][T27130] usb 4-1: SerialNumber: syz
[ 1122.705159][T27130] usb 4-1: config 0 descriptor??
[ 1122.717298][T27130] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[ 1122.854036][   T28] audit: type=1326 audit(2000000502.333:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27949 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8829f9aeb9 code=0x7ffc0000
[ 1122.969864][   T28] audit: type=1326 audit(2000000502.333:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27949 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8829f9aeb9 code=0x7ffc0000
[ 1123.023942][T27130] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1123.049658][   T28] audit: type=1326 audit(2000000502.333:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27949 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f8829f9aeb9 code=0x7ffc0000
[ 1123.059463][T27130] snd_usb_toneport: probe of 4-1:0.0 failed with error -22
[ 1123.072095][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1123.099098][   T28] audit: type=1326 audit(2000000502.333:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27949 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8829f9aeb9 code=0x7ffc0000
[ 1123.121520][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1123.160626][   T28] audit: type=1326 audit(2000000502.333:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27949 comm="syz.0.9790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8829f9aeb9 code=0x7ffc0000
[ 1123.258835][  T788] usb 4-1: USB disconnect, device number 126
[ 1123.363236][T27960] binder: Bad value for 'stats'
[ 1123.613733][T27968] geneve1: entered promiscuous mode
[ 1123.653517][T27968] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1124.442928][T27985] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9808'.
[ 1124.471019][T27130] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[ 1124.622062][T27974] loop5: detected capacity change from 0 to 32768
[ 1124.658430][T27988] loop4: detected capacity change from 0 to 8
[ 1124.676529][T27130] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1124.689071][T27130] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[ 1124.720132][T27974] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1124.761479][T27130] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1124.770503][T27130] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 1124.784940][T27988] SQUASHFS error: Failed to read block 0x738: -5
[ 1124.801028][T27988] SQUASHFS error: Unable to read metadata cache entry [736]
[ 1124.877994][T27130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 1124.907754][T27974] OCFS2: ERROR (device loop5): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[ 1124.927689][T27130] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 1124.989931][T27974] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1125.000940][T27130] usb 1-1: string descriptor 0 read error: -22
[ 1125.018096][T27130] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 1125.029748][T27974] OCFS2: Returning error to the calling process.
[ 1125.053018][T27130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1125.064797][T27974] (syz.5.9803,27974,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5
[ 1125.076691][T27130] usb 1-1: config 0 descriptor??
[ 1125.092186][T27983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1125.102702][T27130] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1125.109230][T27130] hub: probe of 1-1:0.0 failed with error -5
[ 1125.109526][T27974] (syz.5.9803,27974,0):ocfs2_reserve_new_inode:1091 ERROR: status = -5
[ 1125.137243][T27130] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input54
[ 1125.150253][T27974] (syz.5.9803,27974,1):ocfs2_reserve_new_inode:1114 ERROR: status = -5
[ 1125.185034][T27974] (syz.5.9803,27974,1):ocfs2_mknod:306 ERROR: status = -5
[ 1125.226153][T27974] (syz.5.9803,27974,1):ocfs2_mknod:502 ERROR: status = -5
[ 1125.258607][T27974] (syz.5.9803,27974,1):ocfs2_mkdir:659 ERROR: status = -5
[ 1125.405738][   T28] audit: type=1326 audit(2000000504.883:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28001 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1125.438899][   T28] audit: type=1326 audit(2000000504.883:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28001 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1125.448661][T27296] ocfs2: Unmounting device (7,5) on (node local)
[ 1125.490070][   T28] audit: type=1326 audit(2000000504.923:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28001 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1125.564350][  T788] usb 1-1: USB disconnect, device number 3
[ 1125.599833][   T28] audit: type=1326 audit(2000000504.923:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28001 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1125.646109][T28005] netlink: 'syz.4.9815': attribute type 2 has an invalid length.
[ 1125.656153][   T28] audit: type=1326 audit(2000000504.923:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28001 comm="syz.4.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1125.739466][T28007] bridge6: entered promiscuous mode
[ 1126.291429][T28022] netlink: 'syz.5.9822': attribute type 5 has an invalid length.
[ 1126.671622][T28035] ieee802154 phy0 wpan0: encryption failed: -90
[ 1126.843446][T28039] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9831'.
[ 1126.930405][T28042] overlay: Unknown parameter '\'
[ 1127.282870][T28027] loop3: detected capacity change from 0 to 32768
[ 1127.332216][T28027] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.9825 (28027)
[ 1127.384403][T28027] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1127.430950][T28027] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 1127.439712][T28027] BTRFS info (device loop3): using free space tree
[ 1127.622077][T28027] BTRFS info (device loop3): enabling ssd optimizations
[ 1127.640944][T28027] BTRFS info (device loop3): auto enabling async discard
[ 1127.861368][ T5776] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1128.277677][T28088] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1129.271957][T27130] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1129.360786][T28125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9863'.
[ 1129.376117][T28125] veth1_to_bond: entered promiscuous mode
[ 1129.383531][T28125] veth1_to_bond: entered allmulticast mode
[ 1129.481014][T27130] usb 5-1: Using ep0 maxpacket: 32
[ 1129.487545][T27130] usb 5-1: too many configurations: 17, using maximum allowed: 8
[ 1129.512637][T27130] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[ 1129.520742][T27130] usb 5-1: config 0 has no interface number 0
[ 1129.571076][T27130] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1129.591255][T27130] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1129.613475][T27130] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[ 1129.654529][T27130] usb 5-1: config 0 has no interface number 0
[ 1129.670326][T27130] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1129.690878][   T28] audit: type=1326 audit(2000000509.173:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28130 comm="syz.5.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1129.725880][T27130] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1129.748484][T27130] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[ 1129.761015][   T28] audit: type=1326 audit(2000000509.173:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28130 comm="syz.5.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1129.783792][T27130] usb 5-1: config 0 has no interface number 0
[ 1129.790070][T27130] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1129.807247][T27130] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1129.818205][   T28] audit: type=1326 audit(2000000509.173:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28130 comm="syz.5.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1129.853820][T27130] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[ 1129.871177][T27130] usb 5-1: config 0 has no interface number 0
[ 1129.877385][T27130] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1129.890927][   T28] audit: type=1326 audit(2000000509.183:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28130 comm="syz.5.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1129.932002][T27130] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1129.959380][T27130] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[ 1129.972155][   T28] audit: type=1326 audit(2000000509.203:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28130 comm="syz.5.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1129.995662][T27130] usb 5-1: config 0 has no interface number 0
[ 1130.021536][T27130] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1130.041058][T27130] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1130.069828][   T28] audit: type=1326 audit(2000000509.203:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28130 comm="syz.5.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1130.101295][T27130] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[ 1130.134885][T27130] usb 5-1: config 0 has no interface number 0
[ 1130.142050][T27130] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1130.161584][   T28] audit: type=1326 audit(2000000509.203:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28130 comm="syz.5.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1130.189130][T27130] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1130.200707][   T28] audit: type=1326 audit(2000000509.203:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28130 comm="syz.5.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1130.228281][   T28] audit: type=1326 audit(2000000509.203:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28130 comm="syz.5.9868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1130.228434][T27130] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[ 1130.275275][T27130] usb 5-1: config 0 has no interface number 0
[ 1130.287099][T27130] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1130.297576][T27130] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1130.348515][T27130] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[ 1130.358079][T27130] usb 5-1: config 0 has no interface number 0
[ 1130.370763][T27130] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1130.402921][T27130] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1130.436188][T27130] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[ 1130.455818][T27130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1130.481260][T27130] usb 5-1: Product: syz
[ 1130.485521][T27130] usb 5-1: Manufacturer: syz
[ 1130.519488][T27130] usb 5-1: SerialNumber: syz
[ 1130.532001][T28146] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9876'.
[ 1130.543521][T27130] usb 5-1: config 0 descriptor??
[ 1130.564399][T27130] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz)
[ 1130.582390][T28146] veth1_to_bond: entered promiscuous mode
[ 1130.588256][T28146] veth1_to_bond: entered allmulticast mode
[ 1130.805619][T27130] etas_es58x 5-1:0.2: could not parse product info: 'à …'
[ 1130.872688][T28154] ieee802154 phy0 wpan0: encryption failed: -90
[ 1131.074981][T27130] usb 5-1: USB disconnect, device number 3
[ 1131.083095][T27130] etas_es58x 5-1:0.2: Disconnecting syz syz
[ 1131.095266][T28157] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1131.635566][   T28] audit: type=1326 audit(2000000511.123:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28173 comm="syz.3.9888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93b79aeb9 code=0x7ffc0000
[ 1132.190054][T28186] loop5: detected capacity change from 0 to 4096
[ 1132.313728][T28186] ntfs: volume version 3.1.
[ 1132.760889][T20387] usb 4-1: new full-speed USB device number 127 using dummy_hcd
[ 1132.811588][T28202] loop5: detected capacity change from 0 to 1024
[ 1132.923330][T28172] loop0: detected capacity change from 0 to 32768
[ 1132.975006][T28172] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.9887 (28172)
[ 1133.003659][T20387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1133.036101][T20387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1133.087294][T20387] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[ 1133.102468][T28172] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1133.129620][T19393] hfsplus: b-tree write err: -5, ino 4
[ 1133.134050][T20387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1133.153958][T28172] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[ 1133.192679][T20387] usb 4-1: config 0 descriptor??
[ 1133.197853][T28172] BTRFS info (device loop0): using free space tree
[ 1133.225289][T20387] xbox_remote_probe: endpoint_in message size==0?
[ 1133.433423][T20387] usbhid 4-1:0.0: can't add hid device: -71
[ 1133.439790][T28172] BTRFS info (device loop0): enabling ssd optimizations
[ 1133.440189][T20387] usbhid: probe of 4-1:0.0 failed with error -71
[ 1133.457594][T20387] usb 4-1: USB disconnect, device number 127
[ 1133.482471][T28172] BTRFS info (device loop0): auto enabling async discard
[ 1133.800498][ T5771] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1134.246574][T27458] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop0 scanned by udevd (27458)
[ 1134.675043][T28263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9912'.
[ 1135.118983][T28279] loop5: detected capacity change from 0 to 512
[ 1135.292485][T28279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1135.796470][T27296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1136.513724][T28290] loop0: detected capacity change from 0 to 32768
[ 1136.529916][T28275] loop4: detected capacity change from 0 to 32768
[ 1136.556916][T28275] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1136.585701][T28275] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1136.616838][T28275] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 1136.653261][T20387] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1136.669179][T20387] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1136.832434][T20387] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 163ms
[ 1136.868432][T20387] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1136.909854][T28275] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1136.926342][T28290] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1137.002655][T28290] OCFS2: ERROR (device loop0): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74
[ 1137.048945][T28290] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1137.120938][T28290] OCFS2: Returning error to the calling process.
[ 1137.127486][T28290] (syz.0.9922,28290,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5
[ 1137.168235][T28290] (syz.0.9922,28290,1):ocfs2_reserve_new_inode:1091 ERROR: status = -5
[ 1137.197425][T28290] (syz.0.9922,28290,1):ocfs2_reserve_new_inode:1114 ERROR: status = -5
[ 1137.245701][T28290] (syz.0.9922,28290,1):ocfs2_mknod:306 ERROR: status = -5
[ 1137.279525][T28290] (syz.0.9922,28290,1):ocfs2_mknod:502 ERROR: status = -5
[ 1137.305671][T28290] (syz.0.9922,28290,1):ocfs2_mkdir:659 ERROR: status = -5
[ 1137.410930][T28275] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 1137.476220][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[ 1137.502188][T28321] loop5: detected capacity change from 0 to 512
[ 1137.509892][T28321] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1137.531722][T28321] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1137.555716][T28321] EXT4-fs (loop5): revision level too high, forcing read-only mode
[ 1137.564220][T28321] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[ 1137.573736][T28321] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80)
[ 1137.585012][T28321] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features
[ 1137.598278][T28321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1137.721087][T28321] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80)
[ 1137.872878][T27296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1137.892547][T27097] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[ 1137.892547][T27097]   inode = 11 2339
[ 1137.892547][T27097]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472
[ 1137.933076][T27097] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[ 1137.971191][T27097] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:27097 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[ 1138.021632][T27097] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[ 1138.030024][T27097] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 1138.088947][T27097] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[ 1138.113509][T27097] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[ 1138.139378][T27097] gfs2: fsid=syz:syz.0: File system withdrawn
[ 1138.156439][T27097] CPU: 1 PID: 27097 Comm: syz-executor Not tainted syzkaller #0
[ 1138.164176][T27097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1138.174405][T27097] Call Trace:
[ 1138.177733][T27097]  <TASK>
[ 1138.180713][T27097]  dump_stack_lvl+0x18c/0x250
[ 1138.185460][T27097]  ? kobject_uevent_env+0x363/0x8b0
[ 1138.190799][T27097]  ? show_regs_print_info+0x20/0x20
[ 1138.196060][T27097]  ? load_image+0x400/0x400
[ 1138.200620][T27097]  ? kobject_uevent_env+0x363/0x8b0
[ 1138.205882][T27097]  gfs2_withdraw+0xb24/0x13d0
[ 1138.210636][T27097]  ? gfs2_lm+0x240/0x240
[ 1138.215410][T27097]  ? gfs2_consist_inode_i+0xf5/0x110
[ 1138.220768][T27097]  gfs2_inode_refresh+0xb89/0x1000
[ 1138.225952][T27097]  ? gfs2_inode_metasync+0xf0/0xf0
[ 1138.231142][T27097]  ? gfs2_glock_nq+0xd4f/0x1420
[ 1138.236100][T27097]  gfs2_instantiate+0x162/0x220
[ 1138.241021][T27097]  gfs2_glock_wait+0x1d4/0x2a0
[ 1138.246290][T27097]  do_sync+0x4c6/0xe50
[ 1138.250408][T27097]  ? gfs2_quota_sync+0x411/0x5a0
[ 1138.255413][T27097]  ? bh_get+0x760/0x760
[ 1138.259620][T27097]  ? __lock_acquire+0x7d40/0x7d40
[ 1138.264788][T27097]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1138.269871][T27097]  ? gfs2_quota_sync+0x411/0x5a0
[ 1138.274854][T27097]  ? do_raw_spin_unlock+0x121/0x230
[ 1138.280110][T27097]  gfs2_quota_sync+0x411/0x5a0
[ 1138.285010][T27097]  gfs2_sync_fs+0x4c/0xb0
[ 1138.289473][T27097]  sync_filesystem+0xea/0x220
[ 1138.294188][T27097]  generic_shutdown_super+0x6f/0x2b0
[ 1138.299512][T27097]  kill_block_super+0x44/0x90
[ 1138.304240][T27097]  deactivate_locked_super+0x97/0x100
[ 1138.309648][T27097]  cleanup_mnt+0x43b/0x4d0
[ 1138.314123][T27097]  task_work_run+0x1d4/0x260
[ 1138.318790][T27097]  ? task_work_cancel+0x220/0x220
[ 1138.324038][T27097]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1138.329540][T27097]  exit_to_user_mode_loop+0xe6/0x110
[ 1138.334871][T27097]  exit_to_user_mode_prepare+0xee/0x180
[ 1138.340640][T27097]  syscall_exit_to_user_mode+0x1a/0x50
[ 1138.346397][T27097]  do_syscall_64+0x61/0xa0
[ 1138.350956][T27097]  ? clear_bhb_loop+0x40/0x90
[ 1138.355727][T27097]  ? clear_bhb_loop+0x40/0x90
[ 1138.360717][T27097]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1138.366655][T27097] RIP: 0033:0x7f515379c117
[ 1138.371135][T27097] Code: a2 c7 05 7c a4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1138.390772][T27097] RSP: 002b:00007ffc2e8e2858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1138.399424][T27097] RAX: 0000000000000000 RBX: 00007f515380471f RCX: 00007f515379c117
[ 1138.407445][T27097] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2e8e2910
[ 1138.415557][T27097] RBP: 00007ffc2e8e2910 R08: 00007ffc2e8e3910 R09: 00000000ffffffff
[ 1138.423603][T27097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2e8e39a0
[ 1138.431889][T27097] R13: 00007f515380471f R14: 0000000000115c4c R15: 00007ffc2e8e39e0
[ 1138.439923][T27097]  </TASK>
[ 1138.781285][ T5863] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1138.790965][ T5816] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1138.961172][ T5863] usb 1-1: Using ep0 maxpacket: 8
[ 1138.976983][ T5816] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1138.993463][ T5816] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1139.012018][ T5816] usb 6-1: config 1 has no interface number 0
[ 1139.018344][ T5863] usb 1-1: config 0 has an invalid interface number: 56 but max is 0
[ 1139.027987][ T5863] usb 1-1: config 0 has no interface number 0
[ 1139.041052][ T5816] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1139.058321][ T5816] usb 6-1: config 1 interface 1 has no altsetting 0
[ 1139.068117][ T5863] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76
[ 1139.087860][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.099532][ T5863] usb 1-1: Product: syz
[ 1139.106381][ T5816] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1139.116343][ T5863] usb 1-1: Manufacturer: syz
[ 1139.121471][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.129657][ T5863] usb 1-1: SerialNumber: syz
[ 1139.136042][ T5816] usb 6-1: Product: syz
[ 1139.145212][ T5863] usb 1-1: config 0 descriptor??
[ 1139.151398][ T5816] usb 6-1: Manufacturer: syz
[ 1139.156233][ T5816] usb 6-1: SerialNumber: syz
[ 1139.313752][T28347] loop3: detected capacity change from 0 to 4096
[ 1139.331999][T28347] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[ 1139.401026][ T5863] peak_usb 1-1:0.56: PEAK-System PCAN-USB X6 v134 fw v24.0.0 (2 channels)
[ 1139.597427][ T5863] peak_usb 1-1:0.56 can0: unable to request usb[type=2 value=5] err=-71
[ 1139.618461][ T5863] peak_usb 1-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71)
[ 1139.669024][   T23] usb 6-1: USB disconnect, device number 3
[ 1139.717783][T28353] loop3: detected capacity change from 0 to 256
[ 1139.752083][ T5863] peak_usb: probe of 1-1:0.56 failed with error -71
[ 1139.793441][ T5863] usb 1-1: USB disconnect, device number 4
[ 1139.999158][T28357] loop4: detected capacity change from 0 to 4096
[ 1140.030097][T28359] netlink: 'syz.3.9952': attribute type 1 has an invalid length.
[ 1140.044471][T28359] netlink: 'syz.3.9952': attribute type 3 has an invalid length.
[ 1140.055757][T28359] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9952'.
[ 1140.084859][T28360] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1140.441423][T28366] netlink: 'syz.5.9955': attribute type 46 has an invalid length.
[ 1140.453651][T28365] loop4: detected capacity change from 0 to 1024
[ 1140.458941][T28366] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9955'.
[ 1140.606412][   T59] hfsplus: b-tree write err: -5, ino 4
[ 1141.067062][T28387] netlink: 11 bytes leftover after parsing attributes in process `syz.5.9963'.
[ 1141.202700][T28391] loop0: detected capacity change from 0 to 64
[ 1141.286522][T28391] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 1141.347901][T28391] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[ 1141.398363][T28397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9969'.
[ 1141.629923][T28405] loop0: detected capacity change from 0 to 256
[ 1141.647285][T28405] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1141.730352][T28407] netlink: zone id is out of range
[ 1141.815249][T28401] loop5: detected capacity change from 0 to 8192
[ 1142.100156][T28416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9978'.
[ 1142.184579][T28415] loop0: detected capacity change from 0 to 1764
[ 1142.781414][ T5863] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1142.996528][ T5863] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1142.996566][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1142.996589][ T5863] usb 5-1: Product: syz
[ 1142.996607][ T5863] usb 5-1: Manufacturer: syz
[ 1142.996624][ T5863] usb 5-1: SerialNumber: syz
[ 1143.002380][ T5863] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1143.036139][ T5863] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1143.286687][T28448] loop0: detected capacity change from 0 to 128
[ 1143.374959][T28448] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[ 1143.431334][T28448] FAT-fs (loop0): Filesystem has been set read-only
[ 1143.438336][T28448] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[ 1143.491434][T28448] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100)
[ 1143.644256][ T5816] usb 5-1: USB disconnect, device number 4
[ 1143.779419][T28458] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1143.931745][T28457] loop5: detected capacity change from 0 to 4096
[ 1143.945949][T28457] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1143.972796][T28457] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1144.039651][T28457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1144.062279][ T5863] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1144.100549][ T5863] ath9k_htc: Failed to initialize the device
[ 1144.148500][ T5816] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1144.527489][T28457] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[ 1144.621199][T28483] netlink: 'syz.4.10008': attribute type 15 has an invalid length.
[ 1144.629388][T28483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10008'.
[ 1144.723660][T28487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10009'.
[ 1144.738440][T27296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1144.996449][T28493] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13)
[ 1145.164869][T28499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10016'.
[ 1145.579518][T28513] loop4: detected capacity change from 0 to 128
[ 1146.403803][T28540] loop5: detected capacity change from 0 to 1024
[ 1146.932143][   T28] kauditd_printk_skb: 20 callbacks suppressed
[ 1146.932161][   T28] audit: type=1326 audit(2000000526.423:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28556 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1147.019897][   T28] audit: type=1326 audit(2000000526.453:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28556 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1147.078906][T28553] loop0: detected capacity change from 0 to 4096
[ 1147.112869][T28553] ntfs3: loop0: ino=3, Correct links count -> 2.
[ 1147.130076][   T28] audit: type=1326 audit(2000000526.463:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28556 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1147.208899][   T28] audit: type=1326 audit(2000000526.463:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28556 comm="syz.4.10044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1148.103323][T28592] loop5: detected capacity change from 0 to 512
[ 1148.216842][T28592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1148.255791][T28601] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10063'.
[ 1148.267408][T28601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1148.285521][T28592] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1148.408594][T27296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1149.091363][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10078'.
[ 1149.121842][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10078'.
[ 1149.174333][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10078'.
[ 1149.220977][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10078'.
[ 1149.234011][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10078'.
[ 1149.243521][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10078'.
[ 1149.253466][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10078'.
[ 1149.268318][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10078'.
[ 1149.940922][T23739] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1150.058869][   T28] audit: type=1326 audit(2000000529.543:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.3.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93b79aeb9 code=0x7ffc0000
[ 1150.122635][T28665] netlink: 'syz.5.10096': attribute type 1 has an invalid length.
[ 1150.131354][T23739] usb 1-1: Using ep0 maxpacket: 32
[ 1150.143415][T23739] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1150.153091][   T28] audit: type=1326 audit(2000000529.573:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.3.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93b79aeb9 code=0x7ffc0000
[ 1150.175551][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1150.175564][T23739] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1150.175591][T23739] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1150.175612][T23739] usb 1-1: config 1 has no interface number 0
[ 1150.175667][T23739] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1150.175695][T23739] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1150.175718][T23739] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1150.175764][T23739] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1150.175789][T23739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.269150][T23739] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[ 1150.340999][   T28] audit: type=1326 audit(2000000529.583:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.3.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ff93b79aeb9 code=0x7ffc0000
[ 1150.421137][   T28] audit: type=1326 audit(2000000529.583:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.3.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93b79aeb9 code=0x7ffc0000
[ 1150.443618][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1150.482613][T23739] snd_usb_pod 1-1:1.1: cannot start listening: -90
[ 1150.489447][T23739] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[ 1150.499275][   T28] audit: type=1326 audit(2000000529.583:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28660 comm="syz.3.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93b79aeb9 code=0x7ffc0000
[ 1150.533815][T23739] snd_usb_pod: probe of 1-1:1.1 failed with error -90
[ 1150.573520][T28671] __nla_validate_parse: 43 callbacks suppressed
[ 1150.573538][T28671] netlink: 13 bytes leftover after parsing attributes in process `syz.5.10099'.
[ 1150.687373][T23739] usb 1-1: USB disconnect, device number 5
[ 1150.995249][T28681] loop4: detected capacity change from 0 to 4096
[ 1151.099266][T28681] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[ 1151.111303][T28681] ntfs3: loop4: Failed to load $Extend (-22).
[ 1151.118023][T28681] ntfs3: loop4: Failed to initialize $Extend.
[ 1151.625487][T28703] loop4: detected capacity change from 0 to 256
[ 1151.632353][T28702] netlink: 'syz.0.10114': attribute type 5 has an invalid length.
[ 1151.653894][T28703] exfat: Deprecated parameter 'namecase'
[ 1151.732148][T28703] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[ 1151.851278][T20387] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1152.043078][T20387] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[ 1152.065545][T20387] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1152.092988][T20387] usb 4-1: config 0 has no interface number 0
[ 1152.126422][T20387] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1152.129697][T28715] loop4: detected capacity change from 0 to 1024
[ 1152.161122][T20387] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1152.188826][T20387] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1152.210987][T20387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.219084][T20387] usb 4-1: Product: syz
[ 1152.228790][T28713] loop5: detected capacity change from 0 to 4096
[ 1152.251187][T20387] usb 4-1: Manufacturer: syz
[ 1152.261395][T20387] usb 4-1: SerialNumber: syz
[ 1152.293329][T20387] usb 4-1: config 0 descriptor??
[ 1152.312360][T28718] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1152.415116][   T11] hfsplus: b-tree write err: -5, ino 4
[ 1152.557712][T28713] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed
[ 1152.797294][   T23] usb 4-1: USB disconnect, device number 2
[ 1153.036876][T28728] loop5: detected capacity change from 0 to 4096
[ 1153.094307][T28728] ntfs3: loop5: ino=3, Correct links count -> 2.
[ 1153.430355][T28740] netlink: 'syz.5.10132': attribute type 21 has an invalid length.
[ 1153.439690][T28740] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10132'.
[ 1153.480438][T28740] netlink: 'syz.5.10132': attribute type 4 has an invalid length.
[ 1153.498601][T28740] netlink: 'syz.5.10132': attribute type 3 has an invalid length.
[ 1153.525172][T28740] netlink: 3 bytes leftover after parsing attributes in process `syz.5.10132'.
[ 1153.558681][T28742] loop3: detected capacity change from 0 to 1024
[ 1153.606933][T28742] hfsplus: bad catalog entry type
[ 1153.782016][   T11] hfsplus: b-tree write err: -5, ino 4
[ 1153.841168][T28746] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10136'.
[ 1153.994231][T28748] loop3: detected capacity change from 0 to 1024
[ 1154.185966][T28735] loop0: detected capacity change from 0 to 32768
[ 1154.255941][T28735] (syz.0.10129,28735,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1154.301195][T28735] (syz.0.10129,28735,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1154.386088][T28735] JBD2: Ignoring recovery information on journal
[ 1154.584804][T28735] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1155.013795][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[ 1155.537669][T28782] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1156.706332][T28819] loop5: detected capacity change from 0 to 65
[ 1156.736932][T28819] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[ 1156.785958][T28819] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[ 1157.661182][T28841] netlink: 'syz.5.10182': attribute type 21 has an invalid length.
[ 1157.669272][T28841] netlink: 'syz.5.10182': attribute type 6 has an invalid length.
[ 1157.710887][T28841] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10182'.
[ 1158.029765][T28849] loop3: detected capacity change from 0 to 512
[ 1158.037391][T28849] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1158.114049][T28849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1158.147775][T28849] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1158.204216][T28849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002]
[ 1158.280985][T28849] System zones: 0-1, 15-15, 18-18, 34-34
[ 1158.289886][T28849] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1158.340260][T28849] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[ 1158.364418][T28849] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1158.376954][T28827] loop4: detected capacity change from 0 to 40427
[ 1158.381902][T28849] EXT4-fs (loop3): Cannot turn on quotas: error -22
[ 1158.393893][T28849] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.10186: bg 0: block 40: padding at end of block bitmap is not set
[ 1158.441084][T28849] EXT4-fs (loop3): Remounting filesystem read-only
[ 1158.451138][T28827] F2FS-fs (loop4): invalid crc value
[ 1158.473741][T28849] EXT4-fs (loop3): 1 truncate cleaned up
[ 1158.514017][T28849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1158.733091][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1158.757626][T28827] F2FS-fs (loop4): Start checkpoint disabled!
[ 1158.776202][T28827] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 1158.825865][T28827] F2FS-fs (loop4): disabling checkpoint not compatible with read-only
[ 1159.405319][T28885] loop5: detected capacity change from 0 to 512
[ 1159.482749][T28885] EXT4-fs: Ignoring removed nobh option
[ 1159.633346][T28885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1159.727194][T28894] loop3: detected capacity change from 0 to 256
[ 1159.745824][T28885] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1159.866588][T28894] FAT-fs (loop3): Directory bread(block 64) failed
[ 1159.879275][T27296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1159.911027][T28894] FAT-fs (loop3): Directory bread(block 65) failed
[ 1159.940303][T28894] FAT-fs (loop3): Directory bread(block 66) failed
[ 1159.966071][T28894] FAT-fs (loop3): Directory bread(block 67) failed
[ 1159.985191][   T28] audit: type=1326 audit(2000000539.473:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1160.012206][T28894] FAT-fs (loop3): Directory bread(block 68) failed
[ 1160.051062][T28894] FAT-fs (loop3): Directory bread(block 69) failed
[ 1160.072965][T28894] FAT-fs (loop3): Directory bread(block 70) failed
[ 1160.091480][   T28] audit: type=1326 audit(2000000539.473:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1160.122334][T28894] FAT-fs (loop3): Directory bread(block 71) failed
[ 1160.139582][T28894] FAT-fs (loop3): Directory bread(block 72) failed
[ 1160.171500][T28894] FAT-fs (loop3): Directory bread(block 73) failed
[ 1160.182653][T28902] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 1160.191737][   T28] audit: type=1326 audit(2000000539.503:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1160.254148][   T28] audit: type=1326 audit(2000000539.503:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1160.280471][   T28] audit: type=1326 audit(2000000539.503:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1160.349438][   T28] audit: type=1326 audit(2000000539.553:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f515375b78e code=0x7ffc0000
[ 1160.389904][T28904] loop0: detected capacity change from 0 to 512
[ 1160.431087][   T28] audit: type=1326 audit(2000000539.553:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f515375b78e code=0x7ffc0000
[ 1160.501119][   T28] audit: type=1326 audit(2000000539.563:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f515375b78e code=0x7ffc0000
[ 1160.569204][   T28] audit: type=1326 audit(2000000539.563:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28897 comm="syz.4.10197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f515375b78e code=0x7ffc0000
[ 1160.812027][T28912] cgroup: release_agent respecified
[ 1160.944422][T28916] loop3: detected capacity change from 0 to 2048
[ 1160.978321][T28916] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1161.021011][T28918] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1162.108817][T28924] loop5: detected capacity change from 0 to 32768
[ 1162.198195][T28924] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[ 1162.236463][T28924] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list
[ 1162.341157][T28924] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1162.361075][T28924] OCFS2: Returning error to the calling process.
[ 1162.377919][T28924] (syz.5.10219,28924,1):ocfs2_find_leaf:1941 ERROR: status = -30
[ 1162.439353][T28924] (syz.5.10219,28924,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[ 1162.464985][T28924] (syz.5.10219,28924,1):ocfs2_get_clusters:624 ERROR: status = -30
[ 1162.491800][T28924] (syz.5.10219,28924,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[ 1162.537553][T28924] (syz.5.10219,28924,1):ocfs2_read_virt_blocks:995 ERROR: status = -30
[ 1162.581681][T28924] (syz.5.10219,28924,1):ocfs2_read_dir_block:511 ERROR: status = -30
[ 1162.589899][T28924] (syz.5.10219,28924,1):ocfs2_find_dir_space_el:3505 ERROR: status = -5
[ 1162.616805][T28924] (syz.5.10219,28924,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -5
[ 1162.661038][T28924] (syz.5.10219,28924,1):ocfs2_mknod:298 ERROR: status = -5
[ 1162.668434][T28924] (syz.5.10219,28924,1):ocfs2_mknod:502 ERROR: status = -5
[ 1162.737058][T28924] (syz.5.10219,28924,1):ocfs2_mkdir:659 ERROR: status = -5
[ 1162.909455][T27296] ocfs2: Unmounting device (7,5) on (node local)
[ 1162.938135][T28966] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1163.310607][T28977] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10244'.
[ 1163.395402][T28983] netlink: 'syz.3.10246': attribute type 3 has an invalid length.
[ 1164.048082][   T28] kauditd_printk_skb: 120 callbacks suppressed
[ 1164.048101][   T28] audit: type=1326 audit(2000000543.533:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29003 comm="syz.3.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93b79aeb9 code=0x7ffc0000
[ 1164.181185][   T28] audit: type=1326 audit(2000000543.533:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29003 comm="syz.3.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93b79aeb9 code=0x7ffc0000
[ 1164.241855][T29012] No such timeout policy "syz0"
[ 1164.280545][   T28] audit: type=1326 audit(2000000543.603:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29003 comm="syz.3.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff93b79aeb9 code=0x7ffc0000
[ 1164.363522][   T28] audit: type=1326 audit(2000000543.603:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29003 comm="syz.3.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93b79aeb9 code=0x7ffc0000
[ 1164.881028][   T28] audit: type=1326 audit(2000000544.363:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29033 comm="syz.4.10271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1164.931852][   T28] audit: type=1326 audit(2000000544.363:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29033 comm="syz.4.10271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1165.000951][   T28] audit: type=1326 audit(2000000544.363:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29033 comm="syz.4.10271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1165.072266][T29038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10273'.
[ 1165.111997][   T28] audit: type=1326 audit(2000000544.393:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29033 comm="syz.4.10271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1165.182625][   T28] audit: type=1326 audit(2000000544.393:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29033 comm="syz.4.10271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1165.241049][   T28] audit: type=1326 audit(2000000544.393:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29033 comm="syz.4.10271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f515379aeb9 code=0x7ffc0000
[ 1165.489867][T29053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10280'.
[ 1165.993362][T29073] loop5: detected capacity change from 0 to 256
[ 1166.012747][T29073] exfat: Deprecated parameter 'namecase'
[ 1166.018557][T29073] exfat: Deprecated parameter 'utf8'
[ 1166.086673][T29073] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1166.101186][ T5856] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1166.340452][ T5856] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1166.360922][ T5856] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1166.369696][ T5856] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1166.413488][ T5856] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1166.440916][ T5856] usb 4-1: config 1 has no interface number 1
[ 1166.450310][ T5856] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1166.518229][ T5856] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1166.539831][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1166.564069][ T5856] usb 4-1: Product: syz
[ 1166.568336][ T5856] usb 4-1: Manufacturer: syz
[ 1166.601019][ T5856] usb 4-1: SerialNumber: syz
[ 1166.637583][T29085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10296'.
[ 1166.821721][T29092] loop5: detected capacity change from 0 to 8
[ 1166.885696][ T5856] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[ 1166.909151][ T5856] usb 4-1: MIDIStreaming interface descriptor not found
[ 1167.016714][ T5856] usb 4-1: USB disconnect, device number 3
[ 1167.145690][T27279] udevd[27279]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1168.151046][T29133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10316'.
[ 1168.644053][T29151] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 1169.072095][T29163] cgroup: noprefix used incorrectly
[ 1169.448924][T29173] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.10337'.
[ 1169.617233][T29150] loop3: detected capacity change from 0 to 32768
[ 1169.711420][T29150] (syz.3.10324,29150,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1169.763999][T29150] (syz.3.10324,29150,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1169.902854][T29150] JBD2: Ignoring recovery information on journal
[ 1170.071744][T29150] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1170.503427][ T5776] ocfs2: Unmounting device (7,3) on (node local)
[ 1170.676434][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 1170.676454][   T28] audit: type=1326 audit(2000000550.153:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29206 comm="syz.5.10354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1170.720341][T29208] loop0: detected capacity change from 0 to 256
[ 1170.788948][   T28] audit: type=1326 audit(2000000550.203:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29206 comm="syz.5.10354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1170.811515][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1170.853889][T29208] FAT-fs (loop0): Directory bread(block 64) failed
[ 1170.860560][T29208] FAT-fs (loop0): Directory bread(block 65) failed
[ 1170.881255][T29211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10355'.
[ 1170.890498][   T28] audit: type=1326 audit(2000000550.213:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29206 comm="syz.5.10354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1170.921593][T29208] FAT-fs (loop0): Directory bread(block 66) failed
[ 1170.928666][T29208] FAT-fs (loop0): Directory bread(block 67) failed
[ 1170.977709][T29208] FAT-fs (loop0): Directory bread(block 68) failed
[ 1170.984963][   T28] audit: type=1326 audit(2000000550.213:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29206 comm="syz.5.10354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1171.007418][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1171.023086][T29208] FAT-fs (loop0): Directory bread(block 69) failed
[ 1171.051677][T29208] FAT-fs (loop0): Directory bread(block 70) failed
[ 1171.071168][T29208] FAT-fs (loop0): Directory bread(block 71) failed
[ 1171.077944][T29208] FAT-fs (loop0): Directory bread(block 72) failed
[ 1171.136234][T29208] FAT-fs (loop0): Directory bread(block 73) failed
[ 1171.650363][T29229] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10362'.
[ 1171.661784][T29227] overlayfs: failed to resolve 'smackfsdef=&:': -2
[ 1171.684707][T29229] netlink: 'syz.0.10362': attribute type 1 has an invalid length.
[ 1172.191054][   T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1172.377821][T29253] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1172.388917][T29253] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[ 1172.397804][   T23] usb 6-1: Using ep0 maxpacket: 16
[ 1172.418942][   T23] usb 6-1: config 127 has an invalid interface number: 102 but max is 2
[ 1172.438733][   T23] usb 6-1: config 127 has no interface number 2
[ 1172.447283][T29253] overlayfs: missing 'lowerdir'
[ 1172.453351][   T23] usb 6-1: config 127 interface 0 has no altsetting 0
[ 1172.478787][   T23] usb 6-1: config 127 interface 1 has no altsetting 0
[ 1172.488653][   T23] usb 6-1: config 127 interface 102 has no altsetting 0
[ 1172.512111][   T23] usb 6-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d
[ 1172.545561][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1172.557901][T29256] loop3: detected capacity change from 0 to 256
[ 1172.572940][   T23] usb 6-1: Product: syz
[ 1172.577201][   T23] usb 6-1: Manufacturer: syz
[ 1172.602291][   T23] usb 6-1: SerialNumber: syz
[ 1172.891404][   T23] usb 6-1: selecting invalid altsetting 0
[ 1172.897237][   T23] usb 6-1: Could not set interface, error -22
[ 1172.924826][   T23] usb 6-1: selecting invalid altsetting 0
[ 1172.930658][   T23] usb 6-1: Could not set interface, error -22
[ 1172.998156][   T23] usb 6-1: USB disconnect, device number 4
[ 1173.245595][T29274] delete_channel: no stack
[ 1173.844856][T29291] geneve3: entered promiscuous mode
[ 1173.873050][T29293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10394'.
[ 1174.130984][T29302] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1174.255683][T29306] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.10400'.
[ 1174.927078][T29331] loop0: detected capacity change from 0 to 1024
[ 1174.960420][T29331] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1174.984567][T29331] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1175.009388][T29331] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1175.025980][T29331] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1175.062896][T29331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1175.072021][   T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1175.268090][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1175.295332][T29345] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10417'.
[ 1175.336317][   T23] usb 6-1: config 0 has an invalid interface number: 83 but max is 0
[ 1175.355095][   T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1175.401139][   T23] usb 6-1: config 0 has no interface number 0
[ 1175.431604][   T23] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[ 1175.480931][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.524268][   T23] usb 6-1: config 0 descriptor??
[ 1175.533440][   T23] ttusbir 6-1:0.83: cannot find expected altsetting
[ 1175.542973][T29347] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[ 1175.770319][   T23] usb 6-1: USB disconnect, device number 5
[ 1176.077160][   T28] audit: type=1326 audit(2000000555.563:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.0.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8829f9aeb9 code=0x7ffc0000
[ 1176.118402][   T28] audit: type=1326 audit(2000000555.563:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.0.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8829f9aeb9 code=0x7ffc0000
[ 1176.141021][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1176.161187][   T28] audit: type=1326 audit(2000000555.603:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.0.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f8829f9aeb9 code=0x7ffc0000
[ 1176.214369][   T28] audit: type=1326 audit(2000000555.603:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.0.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8829f9aeb9 code=0x7ffc0000
[ 1176.302295][   T28] audit: type=1326 audit(2000000555.603:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29365 comm="syz.0.10427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8829f9aeb9 code=0x7ffc0000
[ 1176.325120][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1176.591326][T29378] netlink: 'syz.5.10433': attribute type 6 has an invalid length.
[ 1176.799507][T29381] loop0: detected capacity change from 0 to 4096
[ 1177.506737][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.513210][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.589994][T29382] loop3: detected capacity change from 0 to 32768
[ 1177.637485][T29382] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.10435 (29382)
[ 1177.697459][T29382] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1177.750418][T29382] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1177.794202][T29382] BTRFS info (device loop3): force zlib compression, level 3
[ 1177.812817][T29382] BTRFS info (device loop3): turning on flush-on-commit
[ 1177.819963][T29382] BTRFS info (device loop3): max_inline at 4096
[ 1177.868275][T29382] BTRFS info (device loop3): using free space tree
[ 1177.878141][T29410] comedi comedi4: bad chanlist[0]=0x00000008 chan=8 range length=2
[ 1177.951034][T29412] netlink: 'syz.4.10450': attribute type 1 has an invalid length.
[ 1178.113936][T29382] BTRFS info (device loop3): enabling ssd optimizations
[ 1178.159369][T29434] netlink: 'syz.5.10453': attribute type 21 has an invalid length.
[ 1178.167724][T29434] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10453'.
[ 1178.178590][T29434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10453'.
[ 1178.183950][T29382] BTRFS info (device loop3): auto enabling async discard
[ 1178.361779][    C1] sd 0:0:1:0: [sda] tag#2594 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[ 1178.372361][    C1] sd 0:0:1:0: [sda] tag#2594 CDB: Read(6) 08 00 00 00 03 44
[ 1178.462253][ T5776] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1178.594981][T29444] cgroup: name respecified
[ 1178.915190][T27276] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop3 scanned by udevd (27276)
[ 1178.972417][T29455] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10462'.
[ 1179.191188][ T5856] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1179.289144][T29461] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[ 1179.423228][ T5856] usb 4-1: config 160 has an invalid interface number: 200 but max is 0
[ 1179.440926][ T5856] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config
[ 1179.472094][ T5856] usb 4-1: config 160 has no interface number 0
[ 1179.490965][ T5856] usb 4-1: config 160 interface 200 has no altsetting 0
[ 1179.523529][ T5856] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[ 1179.550989][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.559150][ T5856] usb 4-1: Product: syz
[ 1179.573760][ T5856] usb 4-1: Manufacturer: syz
[ 1179.578556][ T5856] usb 4-1: SerialNumber: syz
[ 1179.851648][ T5856] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[ 1179.858749][ T5856] usb 4-1: MIDIStreaming interface descriptor not found
[ 1180.073642][ T5856] usb 4-1: USB disconnect, device number 4
[ 1180.254164][T27279] udevd[27279]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1180.989349][T29502] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10484'.
[ 1181.256945][T29512] netlink: 'syz.0.10488': attribute type 1 has an invalid length.
[ 1181.439894][T29516] loop3: detected capacity change from 0 to 64
[ 1181.539962][T29516] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 1181.587845][T29488] loop4: detected capacity change from 0 to 32768
[ 1181.639122][T29488] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1181.829836][ T5816] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x196/0x260, xfs_agf block 0x1 
[ 1181.850952][ T5816] XFS (loop4): Unmount and run xfs_repair
[ 1181.856770][ T5816] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[ 1181.867012][ T5816] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00  XAGF............
[ 1181.878459][ T5816] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01  ................
[ 1181.914717][ T5816] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[ 1181.930008][ T5816] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00  ................
[ 1181.939645][ T5816] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[ 1181.957133][ T5816] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01  ................
[ 1181.976182][ T5816] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1181.995753][ T5816] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1182.021602][T29488] XFS (loop4): metadata I/O error in "xfs_read_agf+0x294/0x590" at daddr 0x1 len 1 error 74
[ 1182.041174][T29488] XFS (loop4): Error -117 reserving per-AG metadata reserve pool.
[ 1182.061266][T29488] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x25e/0x2d0 (fs/xfs/xfs_fsops.c:592).  Shutting down filesystem.
[ 1182.092422][T29488] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[ 1182.137402][T29488] XFS (loop4): Ending clean mount
[ 1182.152874][T29488] XFS (loop4): Failed to initialize disk quotas.
[ 1182.181371][T29488] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1182.417112][T29542] ipt_ECN: cannot use operation on non-tcp rule
[ 1182.444135][T29540] loop0: detected capacity change from 0 to 2048
[ 1182.480624][   T28] audit: type=1800 audit(2000000561.953:470): pid=29516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10491" name="file1" dev="loop3" ino=5 res=0 errno=0
[ 1182.575429][T29540] Alternate GPT is invalid, using primary GPT.
[ 1182.601225][T29540]  loop0: p1 p2 p3
[ 1182.605114][T29540] loop0: partition table partially beyond EOD, truncated
[ 1183.200384][T27458] udevd[27458]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[ 1183.247294][T27280] udevd[27280]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[ 1183.276887][T27276] udevd[27276]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[ 1183.343409][T29557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1183.910113][T29576] ±ÿ: renamed from team_slave_1
[ 1184.347909][T29590] loop3: detected capacity change from 0 to 8
[ 1184.431260][T29590] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1184.439206][T29590] SQUASHFS error: Failed to read block 0x144: -5
[ 1184.478963][T29590] SQUASHFS error: Unable to read metadata cache entry [142]
[ 1184.505023][T29590] SQUASHFS error: Unable to read directory block [142:26]
[ 1184.897331][T29607] loop0: detected capacity change from 0 to 512
[ 1184.931176][T29607] FAT-fs (loop0): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1)
[ 1185.505154][   T28] audit: type=1326 audit(2000000564.993:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.5.10542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1185.600666][   T28] audit: type=1326 audit(2000000564.993:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.5.10542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1185.700877][   T28] audit: type=1326 audit(2000000565.023:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.5.10542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1185.763269][T29634] loop5: detected capacity change from 0 to 64
[ 1185.787189][   T28] audit: type=1326 audit(2000000565.023:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29627 comm="syz.5.10542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47219aeb9 code=0x7ffc0000
[ 1186.104589][T29642] netlink: 'syz.3.10549': attribute type 24 has an invalid length.
[ 1186.231058][T29644] netlink: 'syz.0.10550': attribute type 3 has an invalid length.
[ 1186.245848][T29644] netlink: 'syz.0.10550': attribute type 1 has an invalid length.
[ 1186.357513][T29648] loop3: detected capacity change from 0 to 1024
[ 1186.587857][T29654] geneve4: entered promiscuous mode
[ 1186.785350][T29662] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1187.248291][T29674] netlink: 'syz.0.10572': attribute type 4 has an invalid length.
[ 1187.267318][T29672] loop4: detected capacity change from 0 to 2048
[ 1187.342029][T29672] Alternate GPT is invalid, using primary GPT.
[ 1187.348404][T29672]  loop4: p1 p2 p3
[ 1187.380993][T29672] loop4: partition table partially beyond EOD, truncated
[ 1187.747278][T29664] loop3: detected capacity change from 0 to 32768
[ 1187.783960][T27276] udevd[27276]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 1187.797456][T28230] udevd[28230]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[ 1187.812552][T27280] udevd[27280]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[ 1187.848328][T29664] (syz.3.10560,29664,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1187.902656][T29664] (syz.3.10560,29664,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1187.980737][T29664] JBD2: Ignoring recovery information on journal
[ 1188.184893][T29664] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1188.516131][T29701] loop4: detected capacity change from 0 to 256
[ 1188.539038][T29701] exfat: Deprecated parameter 'utf8'
[ 1188.571562][T29701] exfat: Deprecated parameter 'namecase'
[ 1188.630648][T29701] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x8fca712e, utbl_chksum : 0xe619d30d)
[ 1188.848843][ T5776] ocfs2: Unmounting device (7,3) on (node local)
[ 1189.162302][ T5816] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[ 1189.382765][ T5816] usb 6-1: config index 0 descriptor too short (expected 69, got 36)
[ 1189.400917][ T5816] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1189.472864][ T5816] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[ 1189.482331][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1189.510252][ T5816] usb 6-1: Product: syz
[ 1189.526559][ T5816] usb 6-1: Manufacturer: syz
[ 1189.535993][ T5816] usb 6-1: SerialNumber: syz
[ 1189.572276][ T5816] usb 6-1: config 0 descriptor??
[ 1189.603840][ T5816] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[ 1189.993247][ T5816] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[ 1190.000706][ T5816] gspca_pac7302: probe of 6-1:0.0 failed with error -71
[ 1190.063130][ T5816] usb 6-1: USB disconnect, device number 6
[ 1190.335701][T29751] ubi0: attaching mtd0
[ 1190.351088][T29751] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042)
[ 1190.645432][T29761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10607'.
[ 1190.739117][T29767] loop5: detected capacity change from 0 to 16
[ 1190.781610][T29767] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1191.130925][T20387] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1191.329372][T20387] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1191.358606][T20387] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1191.416473][T20387] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1191.449295][T20387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.468492][T20387] usb 6-1: Product: syz
[ 1191.473620][T20387] usb 6-1: Manufacturer: syz
[ 1191.478282][T20387] usb 6-1: SerialNumber: syz
[ 1191.505351][T20387] rtl8150 6-1:1.0: couldn't find required endpoints
[ 1191.513213][T20387] rtl8150: probe of 6-1:1.0 failed with error -5
[ 1191.694552][T29793] netlink: 292 bytes leftover after parsing attributes in process `syz.4.10623'.
[ 1191.751113][T24510] usb 6-1: USB disconnect, device number 7
[ 1191.945108][T29799] loop0: detected capacity change from 0 to 512
[ 1192.020453][T29799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1192.086949][T29799] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[ 1192.230267][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1192.248549][T29785] loop3: detected capacity change from 0 to 32768
[ 1192.374889][T29785] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1192.489887][T29817] loop0: detected capacity change from 0 to 2048
[ 1192.513919][T29817] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1192.538514][T29819] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1192.701446][T29785] XFS (loop3): Ending clean mount
[ 1192.821496][T29785] XFS (loop3): Quotacheck needed: Please wait.
[ 1193.008672][T29785] XFS (loop3): Quotacheck: Done.
[ 1193.336736][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1194.453281][T29867] loop5: detected capacity change from 0 to 512
[ 1194.483126][T29867] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1194.547855][T29867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002]
[ 1194.571242][T29867] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1194.588280][T29867] EXT4-fs error (device loop5): ext4_orphan_get:1424: comm syz.5.10654: bad orphan inode 267
[ 1194.606650][T29867] EXT4-fs (loop5): Remounting filesystem read-only
[ 1194.617749][T29867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[ 1194.650869][ T5816] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1194.717267][T29874] loop0: detected capacity change from 0 to 1024
[ 1194.719836][T29872] netlink: 'syz.3.10656': attribute type 1 has an invalid length.
[ 1194.732282][T29874] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1194.752772][T29867] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.10654: dx entry: limit 0 != root limit 125
[ 1194.768173][T29874] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1194.783616][T29872] netlink: 'syz.3.10656': attribute type 1 has an invalid length.
[ 1194.792084][T29867] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.10654: Corrupt directory, running e2fsck is recommended
[ 1194.803412][T29874] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1194.807116][T29872] netlink: 180 bytes leftover after parsing attributes in process `syz.3.10656'.
[ 1194.834172][T29874] EXT4-fs error (device loop0): ext4_free_blocks:6692: comm syz.0.10657: Freeing blocks not in datazone - block = 0, count = 4096
[ 1194.877724][ T5816] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1194.888059][T29874] EXT4-fs (loop0): 1 orphan inode deleted
[ 1194.912959][T29874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1194.931457][ T5816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1194.939557][ T5816] usb 5-1: Product: syz
[ 1194.944384][T24577] Bluetooth: hci4: command 0x0406 tx timeout
[ 1194.966580][ T5816] usb 5-1: Manufacturer: syz
[ 1194.972866][ T5816] usb 5-1: SerialNumber: syz
[ 1194.995875][ T5816] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1195.044027][T27296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[ 1195.079312][   T23] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1195.227386][T29879] netlink: 'syz.3.10660': attribute type 46 has an invalid length.
[ 1195.262759][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1195.468367][T29883] Timeout policy `syz1' can only be used by L3 protocol number 24582
[ 1195.638148][T24510] usb 5-1: USB disconnect, device number 5
[ 1195.850236][T29893] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10666'.
[ 1195.882779][T29893] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10666'.
[ 1195.921009][T29893] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10666'.
[ 1195.949531][T29893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10666'.
[ 1196.144073][T29901] netlink: 'syz.3.10670': attribute type 33 has an invalid length.
[ 1196.168414][T29901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10670'.
[ 1196.221869][   T23] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 1196.229027][   T23] ath9k_htc: Failed to initialize the device
[ 1196.270083][T24510] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1196.402979][T29909] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10674'.
[ 1196.526701][T29913] loop3: detected capacity change from 0 to 64
[ 1197.106282][T29935] overlayfs: conflicting options: userxattr,redirect_dir=on
[ 1197.174540][T29937] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1197.313060][T29941] netlink: 'syz.0.10690': attribute type 3 has an invalid length.
[ 1198.156541][T29971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10704'.
[ 1198.180983][T29971] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10704'.
[ 1198.200195][T29971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10704'.
[ 1198.211349][T29971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10704'.
[ 1198.384302][T29977] dvmrp0: entered allmulticast mode
[ 1199.301142][T30007] loop5: detected capacity change from 0 to 4096
[ 1199.340518][T30007] ntfs3: loop5: ino=3, Correct links count -> 2.
[ 1200.002692][T30030] loop5: detected capacity change from 0 to 256
[ 1200.035383][T30030] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x6f4cd389, utbl_chksum : 0xe619d30d)
[ 1200.518094][T30044] overlayfs: missing 'lowerdir'
[ 1200.891529][T30024] loop0: detected capacity change from 0 to 32768
[ 1200.937951][T30052] loop4: detected capacity change from 0 to 4096
[ 1200.973515][   T28] audit: type=1800 audit(2000000580.453:475): pid=30024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10737" name="file1" dev="loop0" ino=4 res=0 errno=0
[ 1201.007001][T30052] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[ 1201.045150][T30052] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[ 1201.124210][T30052] ntfs: volume version 3.1.
[ 1201.181412][T30052] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[ 1201.250527][T30052] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[ 1201.280187][T30058] ip6t_REJECT: ECHOREPLY is not supported
[ 1201.302154][T30052] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[ 1201.465791][T30052] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net.
[ 1201.571116][T30052] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[ 1201.610912][T30052] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[ 1201.702330][T30064] ip6t_srh: unknown srh invflags 4449
[ 1202.297093][T30056] loop0: detected capacity change from 0 to 32768
[ 1202.417255][T30084] __nla_validate_parse: 1 callbacks suppressed
[ 1202.417284][T30084] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.10760'.
[ 1202.442210][   T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1202.666083][   T23] usb 4-1: too many configurations: 25, using maximum allowed: 8
[ 1202.688029][   T23] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[ 1202.708608][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1202.742148][   T23] usb 4-1: config 0 descriptor??
[ 1202.762373][T30091] loop5: detected capacity change from 0 to 8
[ 1202.762835][   T23] pwc: Creative Labs Webcam Pro Ex detected.
[ 1202.812797][   T23] pwc: Warning: more than 1 configuration available.
[ 1202.841892][T30091] SQUASHFS error: Failed to read block 0x636: -5
[ 1202.848507][T30091] SQUASHFS error: Unable to read metadata cache entry [634]
[ 1202.892049][T30091] SQUASHFS error: Unable to read metadata cache entry [634]
[ 1202.899504][T30091] SQUASHFS error: Unable to read directory block [629:0]
[ 1202.956017][   T23] pwc: Failed to set LED on/off time (-71)
[ 1202.981115][   T23] pwc: send_video_command error -71
[ 1202.987049][   T23] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1203.020201][   T23] Philips webcam: probe of 4-1:0.0 failed with error -71
[ 1203.074314][   T23] usb 4-1: USB disconnect, device number 5
[ 1203.105664][   T29] INFO: task syz-executor:5768 blocked for more than 143 seconds.
[ 1203.115341][   T29]       Not tainted syzkaller #0
[ 1203.120356][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1203.134667][   T29] task:syz-executor    state:D stack:21608 pid:5768  ppid:1      flags:0x00004004
[ 1203.156902][T30096] netlink: 'syz.4.10767': attribute type 1 has an invalid length.
[ 1203.166020][   T29] Call Trace:
[ 1203.170164][   T29]  <TASK>
[ 1203.184551][   T29]  __schedule+0x1553/0x45a0
[ 1203.196052][   T29]  ? asan.module_dtor+0x20/0x20
[ 1203.215111][   T29]  ? mark_lock+0x94/0x320
[ 1203.228772][   T29]  ? lock_chain_count+0x20/0x20
[ 1203.245566][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1203.262940][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1203.276247][   T29]  schedule+0xbd/0x170
[ 1203.286142][   T29]  io_schedule+0x80/0xd0
[ 1203.295094][   T29]  folio_wait_bit_common+0x714/0xfa0
[ 1203.306343][   T29]  ? folio_wait_bit+0x30/0x30
[ 1203.316285][   T29]  ? filemap_get_entry+0x379/0x3f0
[ 1203.326527][   T29]  ? _compound_head+0x120/0x120
[ 1203.337554][   T29]  ? find_lock_entries+0xc3e/0xfe0
[ 1203.344442][   T29]  __filemap_get_folio+0xbc/0xbb0
[ 1203.355673][   T29]  truncate_inode_pages_range+0x46b/0xfb0
[ 1203.368136][   T29]  ? mapping_evict_folio+0x510/0x510
[ 1203.378513][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1203.392223][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1203.403435][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1203.414518][   T29]  evict+0x4dd/0x8d0
[ 1203.423257][   T29]  ? proc_nr_inodes+0x230/0x230
[ 1203.434465][   T29]  ? do_raw_spin_unlock+0x121/0x230
[ 1203.446680][   T29]  ? do_raw_spin_unlock+0x121/0x230
[ 1203.452552][   T29]  evict_inodes+0x606/0x6a0
[ 1203.463350][   T29]  ? clear_inode+0x150/0x150
[ 1203.474214][   T29]  generic_shutdown_super+0x97/0x2b0
[ 1203.488867][   T29]  kill_block_super+0x44/0x90
[ 1203.510993][   T29]  deactivate_locked_super+0x97/0x100
[ 1203.516485][   T29]  cleanup_mnt+0x43b/0x4d0
[ 1203.530970][   T29]  task_work_run+0x1d4/0x260
[ 1203.535691][   T29]  ? task_work_cancel+0x220/0x220
[ 1203.550933][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1203.556515][   T29]  exit_to_user_mode_loop+0xe6/0x110
[ 1203.570995][   T29]  exit_to_user_mode_prepare+0xee/0x180
[ 1203.579416][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[ 1203.586463][   T29]  do_syscall_64+0x61/0xa0
[ 1203.619219][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1203.624492][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1203.629262][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1203.636025][   T29] RIP: 0033:0x7fc07c79c117
[ 1203.640521][   T29] RSP: 002b:00007ffe0df6d5a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1203.649634][   T29] RAX: 0000000000000000 RBX: 00007fc07c80471f RCX: 00007fc07c79c117
[ 1203.658190][   T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0df6d660
[ 1203.666838][   T29] RBP: 00007ffe0df6d660 R08: 00007ffe0df6e660 R09: 00000000ffffffff
[ 1203.677038][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0df6e6f0
[ 1203.686538][   T29] R13: 00007fc07c80471f R14: 00000000001018b4 R15: 00007ffe0df6e730
[ 1203.695825][   T29]  </TASK>
[ 1203.709420][   T29] 
[ 1203.709420][   T29] Showing all locks held in the system:
[ 1203.741301][   T29] 1 lock held by khungtaskd/29:
[ 1203.746341][   T29]  #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1203.766812][   T29] 1 lock held by klogd/5128:
[ 1203.771540][   T29]  #0: ffff8880b8f3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[ 1203.782215][   T29] 2 locks held by getty/5526:
[ 1203.787064][   T29]  #0: ffff88814dc980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1203.797272][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[ 1203.807692][   T29] 1 lock held by syz-executor/5768:
[ 1203.813310][   T29]  #0: ffff88814365e0e0 (&type->s_umount_key#88){++++}-{3:3}, at: deactivate_super+0xa4/0xe0
[ 1203.823883][   T29] 3 locks held by kworker/u4:5/18330:
[ 1203.829440][   T29] 1 lock held by syz.1.9452/27184:
[ 1203.834759][   T29]  #0: ffff88814365e0e0 (&type->s_umount_key#88){++++}-{3:3}, at: super_lock+0x17f/0x3a0
[ 1203.844853][   T29] 3 locks held by syz-executor/27296:
[ 1203.850609][   T29] 
[ 1203.853565][   T29] =============================================
[ 1203.853565][   T29] 
[ 1203.871779][   T29] NMI backtrace for cpu 0
[ 1203.876206][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1203.883558][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1203.893713][   T29] Call Trace:
[ 1203.897047][   T29]  <TASK>
[ 1203.900024][   T29]  dump_stack_lvl+0x18c/0x250
[ 1203.904776][   T29]  ? show_regs_print_info+0x20/0x20
[ 1203.910051][   T29]  ? load_image+0x400/0x400
[ 1203.914640][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 1203.919650][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1203.925877][   T29]  ? _printk+0xde/0x130
[ 1203.930136][   T29]  ? load_image+0x400/0x400
[ 1203.934712][   T29]  ? load_image+0x400/0x400
[ 1203.939278][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1203.945415][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1203.951474][   T29]  watchdog+0xf3d/0xf80
[ 1203.955715][   T29]  ? watchdog+0x1e1/0xf80
[ 1203.960097][   T29]  kthread+0x2fa/0x390
[ 1203.964252][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1203.969320][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1203.973955][   T29]  ret_from_fork+0x48/0x80
[ 1203.978411][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1203.983051][   T29]  ret_from_fork_asm+0x11/0x20
[ 1203.987959][   T29]  </TASK>
[ 1203.992091][   T29] Sending NMI from CPU 0 to CPUs 1:
[ 1203.997422][    C1] NMI backtrace for cpu 1
[ 1203.997440][    C1] CPU: 1 PID: 19393 Comm: kworker/u4:8 Not tainted syzkaller #0
[ 1203.997457][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1203.997468][    C1] Workqueue: events_unbound nsim_dev_trap_report_work
[ 1203.997491][    C1] RIP: 0010:do_raw_spin_unlock+0x61/0x230
[ 1203.997518][    C1] Code: 4e ad de 0f 85 ed 00 00 00 48 89 df be 04 00 00 00 e8 a3 c4 75 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 6e 01 00 00 <83> 3b 00 0f 84 e4 00 00 00 4c 8d 73 10 4d 89 f5 49 c1 ed 03 43 80
[ 1203.997533][    C1] RSP: 0018:ffffc900040a7a08 EFLAGS: 00000046
[ 1203.997546][    C1] RAX: 0000000000000000 RBX: ffff88801868a800 RCX: ffffffff8169791d
[ 1203.997559][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801868a800
[ 1203.997569][    C1] RBP: ffffc900040a7ad0 R08: ffff88801868a803 R09: 1ffff110030d1500
[ 1203.997582][    C1] R10: dffffc0000000000 R11: ffffed10030d1501 R12: dffffc0000000000
[ 1203.997594][    C1] R13: 0000000000000003 R14: ffff88801868a804 R15: 1ffff92000814f48
[ 1203.997606][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1203.997620][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1203.997631][    C1] CR2: 00007fc4720708c0 CR3: 000000000cf32000 CR4: 00000000003506e0
[ 1203.997647][    C1] Call Trace:
[ 1203.997653][    C1]  <TASK>
[ 1203.997663][    C1]  _raw_spin_unlock_irqrestore+0x79/0x120
[ 1203.997684][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1203.997702][    C1]  ? __lock_acquire+0x7d40/0x7d40
[ 1203.997725][    C1]  try_to_wake_up+0x70a/0x1190
[ 1203.997747][    C1]  kick_pool+0x320/0x420
[ 1203.997767][    C1]  process_scheduled_works+0x7c8/0x15d0
[ 1203.997805][    C1]  ? assign_work+0x430/0x430
[ 1203.997828][    C1]  ? assign_work+0x3d0/0x430
[ 1203.997851][    C1]  worker_thread+0xa55/0xfc0
[ 1203.997872][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1203.997891][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1203.997906][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1203.997935][    C1]  kthread+0x2fa/0x390
[ 1203.997950][    C1]  ? pr_cont_work+0x560/0x560
[ 1203.997971][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1203.997987][    C1]  ret_from_fork+0x48/0x80
[ 1203.998008][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1203.998024][    C1]  ret_from_fork_asm+0x11/0x20
[ 1203.998055][    C1]  </TASK>
[ 1204.241373][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1204.248327][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1204.255663][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1204.265776][   T29] Call Trace:
[ 1204.269093][   T29]  <TASK>
[ 1204.272164][   T29]  dump_stack_lvl+0x18c/0x250
[ 1204.276912][   T29]  ? show_regs_print_info+0x20/0x20
[ 1204.282185][   T29]  ? load_image+0x400/0x400
[ 1204.286846][   T29]  panic+0x2dc/0x730
[ 1204.290795][   T29]  ? schedule_preempt_disabled+0x20/0x20
[ 1204.296495][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1204.301061][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1204.306665][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1204.312892][   T29]  watchdog+0xf7c/0xf80
[ 1204.317105][   T29]  ? watchdog+0x1e1/0xf80
[ 1204.321584][   T29]  kthread+0x2fa/0x390
[ 1204.325701][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1204.330785][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1204.335414][   T29]  ret_from_fork+0x48/0x80
[ 1204.339854][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1204.344461][   T29]  ret_from_fork_asm+0x11/0x20
[ 1204.349280][   T29]  </TASK>
[ 1204.352964][   T29] Kernel Offset: disabled
[ 1204.357322][   T29] Rebooting in 86400 seconds..