last executing test programs:

2m11.118600631s ago: executing program 2 (id=7274):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x8, 0x80000000)

2m10.797920079s ago: executing program 2 (id=7278):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pwritev(r0, &(0x7f00000007c0)=[{&(0x7f00000001c0)="95", 0x1}], 0x1, 0x147, 0x0)

2m10.4484156s ago: executing program 2 (id=7281):
r0 = fanotify_init(0x79, 0x101000)
write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x0, {0x0, 0x2, 0xfffffff7ffffffff}}, 0x47)

2m10.036266479s ago: executing program 2 (id=7286):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2m9.401392218s ago: executing program 2 (id=7295):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904"], 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x4b, 0x24, 0xd0, 0x20, 0xa2c, 0x8, 0xc7b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0}}]}}, 0x0)

2m7.015601698s ago: executing program 2 (id=7313):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="9d", 0x1}], 0x1, &(0x7f0000000580)=[@init={0x18, 0x84, 0x0, {0x7fff, 0x6, 0x0, 0x4}}], 0x18, 0x8d5}, 0x24000052)

2m6.184861785s ago: executing program 32 (id=7313):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="9d", 0x1}], 0x1, &(0x7f0000000580)=[@init={0x18, 0x84, 0x0, {0x7fff, 0x6, 0x0, 0x4}}], 0x18, 0x8d5}, 0x24000052)

3.344140748s ago: executing program 0 (id=8726):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2000)
ioctl$FE_GET_FRONTEND(r0, 0x80246f4d, &(0x7f0000000140)={0x0, 0x0, @ofdm})

3.084575577s ago: executing program 0 (id=8728):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x4, {0x7, 0x40, "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", 0xd0, 0x7, 0x0, 0x5, 0x7, 0x0, 0x2, 0x1}}}, 0x128)

3.024338309s ago: executing program 5 (id=8730):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x304}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000044}, 0x200088c0)

2.805256068s ago: executing program 0 (id=8733):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='sessionid\x00')
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2)

2.555326852s ago: executing program 0 (id=8737):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f0000000000)=0x5)

2.49614098s ago: executing program 5 (id=8738):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x1}}, 0x14)

2.296232362s ago: executing program 3 (id=8740):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]})

2.224040599s ago: executing program 1 (id=8742):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)

2.197214012s ago: executing program 0 (id=8743):
r0 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10001, 0x2, 0x2cf}, &(0x7f0000000440), &(0x7f0000000400), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1)

2.096061866s ago: executing program 5 (id=8744):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@getpolicy={0x58, 0x15, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast}}, [@XFRMA_IF_ID={0x8}]}, 0x58}}, 0x0)

1.908381998s ago: executing program 3 (id=8745):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x370, 0x0, 0xffffffff, 0x228, 0x228, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x87, 0x4e1c, 0x4e23, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x5}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)

1.879301757s ago: executing program 5 (id=8746):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x4000, 0x200, 0xa})

1.862332815s ago: executing program 0 (id=8747):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@resv_level}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4428, &(0x7f000000c300)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920b5, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1.838078282s ago: executing program 6 (id=8748):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x198, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@private=0xa010101, 0xffffffff, 0x32}, @in=@broadcast, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, {0xfffffffffffffffd, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2c}, [@algo_crypt={0x59, 0x2, {{'cbc(camellia)\x00'}, 0x88, "3ae0bd000b000000366a6a849a73904500"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x198}}, 0x44050)

1.83729073s ago: executing program 4 (id=8749):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd25, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x800)

1.746236881s ago: executing program 1 (id=8750):
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0)

1.609056071s ago: executing program 3 (id=8751):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0)
fcntl$setstatus(r0, 0x4, 0x2800)

1.511278662s ago: executing program 6 (id=8752):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={0x0, 0x11, 0xe6cbf506ccaf332c, @random="08d32bfb45c9"}, 0x10)

1.509879542s ago: executing program 5 (id=8753):
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400030080000900", 0x33a)

1.473882837s ago: executing program 4 (id=8754):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)

1.473123319s ago: executing program 1 (id=8755):
r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x0, 0x40080)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000180)=[{0x2, 0xb401, 0x59, &(0x7f00000000c0)="0cb474bb3ac0628c23a93a377e79eeba392feebcb8063652cddf208504b88e753dd78371fef693e4646ceee602fb2318d59de5d4f2de385df009477d7cd8017074299609da2767151e1bea4034c283b5e5394428a7fae13c2a"}, {0x2, 0x801, 0x42, &(0x7f0000000340)="604050c8bd3eeea371d4e60d701df9cb355cfe5e18d85c70a6d34a1a7c4596a50eb45cd8f2e8b71c252b45e57a850e9e52774abc5bb036ef36f741a6394b62fda449"}, {0x4, 0x1400, 0x0, 0x0}], 0x3})

1.291857417s ago: executing program 3 (id=8756):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.222963045s ago: executing program 6 (id=8757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000021c0)='%R', 0x0}, 0x20)

1.195133699s ago: executing program 1 (id=8758):
r0 = userfaultfd(0x80001)
read(r0, 0x0, 0x0)

1.144066612s ago: executing program 4 (id=8759):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/consoles\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020)

1.143639341s ago: executing program 5 (id=8760):
r0 = syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x245, &(0x7f0000000140)={[{@inode32}, {@noalign}, {@nodiscard}, {@norecovery}, {@nogrpid}, {@grpid}, {@nolargeio}, {@inode32}, {@bsdgroups}, {@dax_never}]}, 0x0, 0x97f1, &(0x7f0000012e00)="$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")
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0)

948.203203ms ago: executing program 6 (id=8761):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e28, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x0, 0x4}, &(0x7f0000000300)=0x90)

943.809588ms ago: executing program 1 (id=8762):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4002, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x5, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0)

886.548933ms ago: executing program 4 (id=8763):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1004000, &(0x7f0000000f40)={[{'noac,'}]})

740.168896ms ago: executing program 3 (id=8764):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

668.488384ms ago: executing program 6 (id=8765):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)

636.790783ms ago: executing program 1 (id=8766):
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x693, &(0x7f0000000980)="$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")
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)

552.135351ms ago: executing program 4 (id=8767):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000440)={0x5})

344.535514ms ago: executing program 3 (id=8768):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x17, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)

278.23882ms ago: executing program 4 (id=8769):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000340)=[{0x2b, '\x00', @buffer={"010d1de90c6171360aaf4716308a633fda925d1085c6b9f70f72ad6cc5f48537", 0x20}, 0xfffffff9}, {0xa, '\x00', @data, 0x7ff}, {0x22, '\x00', @st={0x4, [{0x3, @svalue=0x4}, {0x2, @svalue=0x775a}, {0x3, @uvalue=0xfff}, {0x1, @svalue=0xfffffffffffffff8}]}, 0x7fe}]})

0s ago: executing program 6 (id=8770):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x400000000000027c, &(0x7f0000000080)})

kernel console output (not intermixed with test programs):

1: Product: syz
[  921.159082][ T5753] usb 6-1: Manufacturer: syz
[  921.192353][ T5753] usb 6-1: SerialNumber: syz
[  921.376898][T16221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  921.481562][    C1] raw-gadget.0 gadget.5: ignoring, device is not running
[  921.603565][ T5629] Bluetooth: hci4: command tx timeout
[  921.681270][ T5753] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71
[  921.716870][T16224] hsr_slave_0: left promiscuous mode
[  921.785896][ T5753] usb 6-1: USB disconnect, device number 119
[  921.830085][T16224] hsr_slave_1: left promiscuous mode
[  921.852936][T16224] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  921.896268][T16224] batman_adv: batadv0: Removing interface: batadv_slave_0
[  921.962148][T16224] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  921.980148][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  921.990278][T16224] batman_adv: batadv0: Removing interface: batadv_slave_1
[  922.026299][T16220] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  922.143223][T16224] veth0_macvtap: left promiscuous mode
[  922.163650][T16224] veth1_vlan: left promiscuous mode
[  922.177252][T16224] veth0_vlan: left promiscuous mode
[  922.207219][T23465] loop4: detected capacity change from 0 to 4096
[  922.264577][T23465] ntfs3(loop4): ino=19, mi_enum_attr
[  922.270423][T23465] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  922.437577][T11952] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  922.631112][T11952] usb 2-1: Using ep0 maxpacket: 8
[  922.663489][T11952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  922.690330][T11952] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  922.720940][T11952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.746023][T11952] usb 2-1: Product: syz
[  922.767059][T11952] usb 2-1: Manufacturer: syz
[  922.778356][T23473] binder: BC_ACQUIRE_RESULT not supported
[  922.785108][T11952] usb 2-1: SerialNumber: syz
[  922.797122][T23473] binder: 23472:23473 ioctl c0306201 200000000540 returned -22
[  922.819815][T11952] usb 2-1: config 0 descriptor??
[  922.849940][T11952] gspca_main: stk014-2.14.0 probing 05e1:0893
[  922.874222][T11952] usb 2-1: selecting invalid altsetting 1
[  923.066637][T11952] gspca_stk014: init reg: 0x00
[  923.079792][T11952] stk014 2-1:0.0: probe with driver stk014 failed with error -5
[  923.363206][T11952] usb 2-1: USB disconnect, device number 107
[  923.371748][T16224] team0 (unregistering): Port device team_slave_1 removed
[  923.460345][T16224] team0 (unregistering): Port device team_slave_0 removed
[  923.740406][ T5772] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  923.816698][ T5629] Bluetooth: hci4: command tx timeout
[  923.934291][ T5772] usb 1-1: Using ep0 maxpacket: 32
[  923.959693][ T5772] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  923.959743][ T5772] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  923.959788][ T5772] usb 1-1: config 0 interface 0 has no altsetting 0
[  923.964442][ T5772] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  924.018185][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.029946][ T5772] usb 1-1: Product: syz
[  924.034796][ T5772] usb 1-1: Manufacturer: syz
[  924.044994][ T5772] usb 1-1: SerialNumber: syz
[  924.074419][ T5772] usb 1-1: config 0 descriptor??
[  924.082609][T23458] netlink: 'syz.3.7378': attribute type 3 has an invalid length.
[  924.098946][T23458] netlink: 'syz.3.7378': attribute type 3 has an invalid length.
[  924.140559][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2
[  924.588230][ T5772] gs_usb 1-1:0.0: Couldn't get device config: (err=-71)
[  924.636061][ T5772] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  924.712264][ T5772] usb 1-1: USB disconnect, device number 124
[  924.757793][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  924.776785][T23526] netlink: 'syz.4.7407': attribute type 2 has an invalid length.
[  924.900712][T23534] loop3: detected capacity change from 0 to 128
[  924.919435][T23534] FAT-fs (loop3): Directory bread(block 524322) failed
[  924.952931][T23534] FAT-fs (loop3): Directory bread(block 524323) failed
[  924.960806][T23534] FAT-fs (loop3): Directory bread(block 524324) failed
[  924.967729][T23534] FAT-fs (loop3): Directory bread(block 524325) failed
[  924.975135][T23534] FAT-fs (loop3): Directory bread(block 524326) failed
[  924.982306][T23534] FAT-fs (loop3): Directory bread(block 524327) failed
[  924.989364][T23534] FAT-fs (loop3): Directory bread(block 524328) failed
[  924.998533][T23534] FAT-fs (loop3): Directory bread(block 524329) failed
[  925.055616][T23534] FAT-fs (loop3): Directory bread(block 524322) failed
[  925.118382][T23534] FAT-fs (loop3): Directory bread(block 524323) failed
[  925.171236][T23269] bridge0: port 1(bridge_slave_0) entered blocking state
[  925.181007][T23541] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  925.224085][T23269] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.249379][T23269] bridge_slave_0: entered allmulticast mode
[  925.300311][T23269] bridge_slave_0: entered promiscuous mode
[  925.329846][T23269] bridge0: port 2(bridge_slave_1) entered blocking state
[  925.380898][T23269] bridge0: port 2(bridge_slave_1) entered disabled state
[  925.412465][T23269] bridge_slave_1: entered allmulticast mode
[  925.456140][T23269] bridge_slave_1: entered promiscuous mode
[  925.492971][ T5772] usb 2-1: new full-speed USB device number 108 using dummy_hcd
[  925.688324][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  925.748233][ T5772] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  925.768062][T23269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  925.794609][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.816105][T23269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  925.833114][ T5772] usb 2-1: Product: syz
[  925.840991][ T5772] usb 2-1: Manufacturer: syz
[  925.871312][ T5772] usb 2-1: SerialNumber: syz
[  925.917160][ T5772] usb 2-1: config 0 descriptor??
[  925.944209][ T5772] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[  926.087736][T23269] team0: Port device team_slave_0 added
[  926.119709][T23269] team0: Port device team_slave_1 added
[  926.254116][ T5635] usb 2-1: USB disconnect, device number 108
[  926.434385][T23269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  926.474124][T23269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.487535][T23580] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  926.564697][T23269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  926.681046][T23269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  926.706582][T23269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  926.744421][T23590] netlink: 'syz.3.7430': attribute type 15 has an invalid length.
[  926.761662][T23590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7430'.
[  926.793759][T23269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  926.821820][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  927.050882][T23597] loop4: detected capacity change from 0 to 16
[  927.078189][T23597] erofs (device loop4): dirblkbits 7 isn't supported
[  927.095310][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1
[  927.187095][T23269] hsr_slave_0: entered promiscuous mode
[  927.215804][T23269] hsr_slave_1: entered promiscuous mode
[  927.235723][T23269] debugfs: 'hsr0' already exists in 'hsr'
[  927.249269][T23269] Cannot create hsr debugfs directory
[  927.417414][ T5635] usb 4-1: new low-speed USB device number 122 using dummy_hcd
[  927.492341][T16221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  927.602208][ T5635] usb 4-1: unable to get BOS descriptor or descriptor too short
[  927.645913][ T5635] usb 4-1: config 172 has an invalid interface number: 190 but max is 1
[  927.681927][ T5635] usb 4-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config
[  927.718468][ T5635] usb 4-1: config 172 has no interface number 1
[  927.743670][ T5635] usb 4-1: config 172 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  927.787939][ T5635] usb 4-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  927.856011][ T5635] usb 4-1: string descriptor 0 read error: -22
[  927.874317][ T5635] usb 4-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  927.908967][ T5635] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.988979][ T5635] gspca_main: finepix-2.14.0 probing 04cb:0127
[  928.183841][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  928.327487][ T5772] usb 4-1: USB disconnect, device number 122
[  928.408083][T23628] loop0: detected capacity change from 0 to 4096
[  928.491629][T23628] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  928.550264][T23628] __quota_error: 15 callbacks suppressed
[  928.550290][T23628] Quota error (device loop0): v2_read_file_info: Block with free entry 5 out of range (1, 0).
[  928.622366][T23628] EXT4-fs warning (device loop0): ext4_enable_quotas:7265: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  928.919328][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  929.179103][T23655] loop5: detected capacity change from 0 to 128
[  929.306801][T23269] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  929.412089][T23269] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  929.458254][T23662] xt_bpf: check failed: parse error
[  929.467460][T23269] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  929.510115][T23269] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  929.560454][T23269] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  929.651848][T23269] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  929.694391][T23269] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  929.751146][T23269] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  929.968625][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3
[  930.067163][ T5772] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  930.221014][T23269] 8021q: adding VLAN 0 to HW filter on device bond0
[  930.270293][ T5772] usb 5-1: Using ep0 maxpacket: 32
[  930.300076][ T5772] usb 5-1: config 139 has an invalid interface number: 49 but max is 0
[  930.326029][T23269] 8021q: adding VLAN 0 to HW filter on device team0
[  930.335443][ T5772] usb 5-1: config 139 has no interface number 0
[  930.354803][ T5772] usb 5-1: config 139 interface 49 has no altsetting 0
[  930.370343][T16224] bridge0: port 1(bridge_slave_0) entered blocking state
[  930.377550][T16224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  930.405719][ T5772] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75
[  930.421434][T23692] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  930.453097][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.483079][ T5772] usb 5-1: Product: syz
[  930.496155][ T5772] usb 5-1: Manufacturer: syz
[  930.503392][T16221] bridge0: port 2(bridge_slave_1) entered blocking state
[  930.510582][T16221] bridge0: port 2(bridge_slave_1) entered forwarding state
[  930.532588][ T5772] usb 5-1: SerialNumber: syz
[  930.810410][ T5629] Bluetooth: hci3: unexpected event for opcode 0x080c
[  930.845957][ T5772] radio-usb-si4713 5-1:139.49: Si4713 development board discovered: (10C4:8244)
[  930.912205][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  930.939174][ T5772] radio-usb-si4713 5-1:139.49: probe with driver radio-usb-si4713 failed with error -71
[  930.985651][ T5772] usbhid 5-1:139.49: couldn't find an input interrupt endpoint
[  931.032830][ T5772] usb 5-1: USB disconnect, device number 115
[  931.186323][T23681] loop1: detected capacity change from 0 to 32768
[  931.229694][T23681] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7465 (23681)
[  931.272183][T23710] loop5: detected capacity change from 0 to 256
[  931.315565][T23681] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  931.361380][T23681] BTRFS info (device loop1): using sha256 checksum algorithm
[  931.529003][T23690] loop3: detected capacity change from 0 to 32768
[  931.545499][T23690] BTRFS info: device /dev/loop3 (7:3) using temp-fsid b7d1c5cd-8795-4c09-86b7-387228249a19
[  931.567992][T23681] BTRFS info (device loop1): enabling ssd optimizations
[  931.619176][T23681] BTRFS info (device loop1): turning on async discard
[  931.627828][T23690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7468 (23690)
[  931.679922][T23681] BTRFS info (device loop1): enabling free space tree
[  931.783877][T23690] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  931.826182][T23735] loop5: detected capacity change from 0 to 136
[  931.848654][T23690] BTRFS info (device loop3): using sha256 checksum algorithm
[  931.925746][T23735] Attempt to read inode for relocated directory
[  932.131605][T23690] BTRFS info (device loop3): enabling ssd optimizations
[  932.161155][T23690] BTRFS info (device loop3): turning on async discard
[  932.178797][T23690] BTRFS info (device loop3): enabling free space tree
[  932.213762][ T5622] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  932.386035][T23761] syz_tun: entered allmulticast mode
[  932.392191][T23761] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  932.601313][ T5625] BTRFS info (device loop3): last unmount of filesystem b7d1c5cd-8795-4c09-86b7-387228249a19
[  932.968559][T23774] comedi comedi2: c6xdigio: I/O base address not correctly aligned
[  932.971562][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  933.306285][T23269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  933.365679][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4
[  933.647231][T16225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  933.664258][T16220] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  933.798739][T11952] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  934.010706][T11952] usb 4-1: Using ep0 maxpacket: 8
[  934.049279][T11952] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  934.123119][T11952] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  934.158793][T11952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.193572][T11952] usb 4-1: Product: syz
[  934.223686][T11952] usb 4-1: Manufacturer: syz
[  934.242755][T11952] usb 4-1: SerialNumber: syz
[  934.289352][T11952] usb 4-1: config 0 descriptor??
[  934.330848][T11952] gspca_main: stk014-2.14.0 probing 05e1:0893
[  934.346274][T11952] usb 4-1: selecting invalid altsetting 1
[  934.580989][T11952] gspca_stk014: init reg: 0x00
[  934.589586][T11952] stk014 4-1:0.0: probe with driver stk014 failed with error -5
[  934.666014][T23819] No control pipe specified
[  934.842012][ T5772] usb 4-1: USB disconnect, device number 123
[  935.021794][T23269] veth0_vlan: entered promiscuous mode
[  935.092187][T23269] veth1_vlan: entered promiscuous mode
[  935.854652][T23269] veth0_macvtap: entered promiscuous mode
[  935.931027][T23269] veth1_macvtap: entered promiscuous mode
[  935.957396][T23857] loop4: detected capacity change from 0 to 256
[  936.033451][T23269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  936.045775][T23859] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  936.086122][T23269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  936.165061][T16224] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  936.203760][T16224] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  936.247006][T16224] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  936.288055][T23865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7521'.
[  936.301557][T16224] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  936.637786][T23876] netlink: 'syz.3.7525': attribute type 10 has an invalid length.
[  936.694482][T23876] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  936.732186][T23876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  936.811161][T16224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  936.841701][T16224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  937.040100][T16224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  937.067327][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  937.076526][T16224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  937.221465][T23894] loop5: detected capacity change from 0 to 512
[  937.272127][T23894] EXT4-fs: Ignoring removed mblk_io_submit option
[  937.339525][T23894] EXT4-fs (loop5): orphan cleanup on readonly fs
[  937.373144][T23894] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[  937.445257][T23894] EXT4-fs error (device loop5): ext4_clear_blocks:874: inode #13: comm syz.5.7534: attempt to clear invalid blocks 2 len 1
[  937.536220][T23894] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  937.545976][T23894] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1314: group 0, 
[  937.555326][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  937.555363][    C0] EXT4-fs (loop5): initial error at time 906: ext4_clear_blocks:874: inode 13
[  937.555421][    C0] EXT4-fs (loop5): last error at time 906: ext4_clear_blocks:874: inode 13
[  937.588395][T23894] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  937.645940][T23909] loop1: detected capacity change from 0 to 64
[  937.715726][T23894] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.7534: invalid indirect mapped block 1819239214 (level 0)
[  937.768584][T23894] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  937.770432][T23894] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.7534: invalid indirect mapped block 1819239214 (level 1)
[  937.829893][T23894] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  937.833369][T23894] EXT4-fs (loop5): 1 truncate cleaned up
[  937.897268][T23912] geneve2: entered promiscuous mode
[  937.901333][T23894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  937.927913][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7542'.
[  938.212365][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.656940][T23932] netlink: 45 bytes leftover after parsing attributes in process `syz.4.7550'.
[  938.906398][T23899] loop0: detected capacity change from 0 to 32768
[  938.945930][T23899] xfs: Deprecated parameter 'attr2'
[  938.966587][T23899] XFS: attr2 mount option is deprecated.
[  938.989165][T23899] xfs: Deprecated parameter 'attr2'
[  939.015455][T23899] XFS: attr2 mount option is deprecated.
[  939.084229][T23950] comedi: No check for data length of config insn id 2009 is implemented
[  939.102349][T23950] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  939.118054][T23899] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  939.118497][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  939.128451][T23950] comedi: Assuming n=15 is correct
[  939.240459][T23899] XFS (loop0): Ending clean mount
[  939.283473][T23899] XFS (loop0): Quotacheck needed: Please wait.
[  939.489813][T23965] vlan0: entered promiscuous mode
[  939.575790][T23899] XFS (loop0): Quotacheck: Done.
[  939.802282][T16218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  939.814807][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  939.901674][ T5621] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  940.181502][T23987] loop5: detected capacity change from 0 to 256
[  940.262257][T23992] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  941.180271][T24021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  941.470642][T24029] loop6: detected capacity change from 0 to 64
[  942.101124][T24056] loop5: detected capacity change from 0 to 256
[  942.300059][T24060] loop4: detected capacity change from 0 to 512
[  942.384027][T24060] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  942.397366][T24064] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7611'.
[  942.423028][T24064] unsupported nlmsg_type 40
[  942.432083][ T5788] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  942.443593][T24060] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  942.500642][T24060] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  942.543617][T24060] System zones: 0-2, 18-18, 34-35
[  942.612960][ T5788] usb 1-1: Using ep0 maxpacket: 32
[  942.626341][T24060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  942.626789][ T5788] usb 1-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[  942.648666][ T5788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.656740][ T5788] usb 1-1: Product: syz
[  942.661081][ T5788] usb 1-1: Manufacturer: syz
[  942.666009][ T5788] usb 1-1: SerialNumber: syz
[  942.687699][T24060] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  942.706809][ T5788] empeg 1-1:1.0: empeg converter detected
[  942.851856][T24071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7613'.
[  942.938884][ T5788] usb 1-1: empeg converter now attached to ttyUSB0
[  942.939368][   T30] audit: type=1326 audit(912.041:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24072 comm="syz.6.7615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5cb9ce59 code=0x7ffc0000
[  943.046511][   T30] audit: type=1326 audit(912.078:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24072 comm="syz.6.7615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5cb9ce59 code=0x7ffc0000
[  943.156353][   T30] audit: type=1326 audit(912.097:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24072 comm="syz.6.7615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fee5cb9ce59 code=0x7ffc0000
[  943.187533][T23360] usb 1-1: USB disconnect, device number 125
[  943.229383][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  943.238357][T24075] m>e5nè‹Ò: entered promiscuous mode
[  943.253252][   T30] audit: type=1326 audit(912.097:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24072 comm="syz.6.7615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5cb9ce59 code=0x7ffc0000
[  943.263461][T23360] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0
[  943.279331][   T30] audit: type=1326 audit(912.097:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24072 comm="syz.6.7615" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5cb9ce59 code=0x7ffc0000
[  943.411327][T23360] empeg 1-1:1.0: device disconnected
[  943.419521][T24083] Device name not specified.
[  943.419521][T24083] 
[  943.840954][T24095] bridge_slave_0: left allmulticast mode
[  943.855037][T24095] bridge_slave_0: left promiscuous mode
[  943.870931][T24095] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.929742][T24095] bridge_slave_1: left allmulticast mode
[  943.956985][T24095] bridge_slave_1: left promiscuous mode
[  943.978315][T24095] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.103249][T24095] bond0: (slave bond_slave_0): Releasing backup interface
[  944.122621][T24106] loop0: detected capacity change from 0 to 8
[  944.196091][T24106] SQUASHFS error: lzo decompression failed, data probably corrupt
[  944.210188][T24095] bond0: (slave bond_slave_1): Releasing backup interface
[  944.244581][T24106] SQUASHFS error: Failed to read block 0x0: -5
[  944.275089][T24106] SQUASHFS error: lzo decompression failed, data probably corrupt
[  944.340948][T24106] SQUASHFS error: Failed to read block 0x0: -5
[  944.375167][   T30] audit: type=1800 audit(913.379:106): pid=24106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7626" name="file2" dev="loop0" ino=3 res=0 errno=0
[  944.835996][T24101] loop4: detected capacity change from 0 to 32768
[  944.870283][T24101] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7625 (24101)
[  944.928297][T24101] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  944.946430][T24126] netlink: 'syz.6.7635': attribute type 1 has an invalid length.
[  944.954690][T24101] BTRFS info (device loop4): using sha256 checksum algorithm
[  944.962315][T24126] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7635'.
[  944.974151][T24126] netlink: 658 bytes leftover after parsing attributes in process `syz.6.7635'.
[  944.989329][T24126] netlink: 1 bytes leftover after parsing attributes in process `syz.6.7635'.
[  945.069185][T24101] BTRFS info (device loop4): enabling ssd optimizations
[  945.114685][T24101] BTRFS info (device loop4): turning on async discard
[  945.162725][T24101] BTRFS info (device loop4): enabling free space tree
[  945.275990][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  945.308445][T24095] team0: Port device team_slave_0 removed
[  945.371305][T24095] team0: Port device team_slave_1 removed
[  945.386511][T24095] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  945.408282][T24095] batman_adv: batadv0: Removing interface: batadv_slave_0
[  945.443383][T24095] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  945.465283][T24095] batman_adv: batadv0: Removing interface: batadv_slave_1
[  945.509412][T24095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  945.587446][ T5623] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  945.941205][T24159] 9p: Bad value for 'cache'
[  945.958533][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  945.969885][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  946.070438][T24165] vlan0: entered promiscuous mode
[  946.457140][T24177] kAFS: unable to lookup cell '/,'
[  946.914512][T24190] netlink: 'syz.0.7655': attribute type 1 has an invalid length.
[  947.129210][T24202] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  947.292902][ T5788] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  947.474659][ T5788] usb 7-1: Using ep0 maxpacket: 16
[  947.517399][ T5788] usb 7-1: config 5 has an invalid interface number: 168 but max is 0
[  947.547291][ T5788] usb 7-1: config 5 has no interface number 0
[  947.576237][ T5788] usb 7-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  947.641902][ T5788] usb 7-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024
[  947.690730][ T5788] usb 7-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3
[  947.741415][ T5788] usb 7-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid maxpacket 1280, setting to 1024
[  947.756447][ T5788] usb 7-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024
[  947.766898][ T5788] usb 7-1: config 5 interface 168 has no altsetting 0
[  947.822240][ T5788] usb 7-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58
[  947.858008][ T5788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.896476][ T5788] usb 7-1: Product: syz
[  947.931163][ T5788] usb 7-1: Manufacturer: syz
[  947.949118][ T5788] usb 7-1: SerialNumber: syz
[  947.990352][T24196] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  948.026524][T24196] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  948.303896][T24228] loop5: detected capacity change from 0 to 4096
[  948.335804][    C1] usb 7-1: NFC: Urb failure (status -71)
[  948.345704][    C1] usb 7-1: NFC: Urb failure (status -71)
[  948.357459][ T5788] usb 7-1: NFC: Unable to get FW version
[  948.387137][ T5788] pn533_usb 7-1:5.168: probe with driver pn533_usb failed with error -71
[  948.428945][ T5788] usb 7-1: USB disconnect, device number 2
[  948.504868][T24228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  948.530898][T24244] netlink: 'syz.3.7677': attribute type 21 has an invalid length.
[  948.590771][T24244] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7677'.
[  948.712437][T16225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  948.813994][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.377460][T24261] loop0: detected capacity change from 0 to 4096
[  949.785450][T24276] loop1: detected capacity change from 0 to 512
[  949.874301][T24276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  950.054355][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.285182][T18442] usb 1-1: new full-speed USB device number 126 using dummy_hcd
[  950.408138][T24253] loop4: detected capacity change from 0 to 32768
[  950.420763][T24288] bridge_slave_0: left allmulticast mode
[  950.443104][T24288] bridge_slave_0: left promiscuous mode
[  950.463574][T24253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7680 (24253)
[  950.469788][T24288] bridge0: port 1(bridge_slave_0) entered disabled state
[  950.504879][T18442] usb 1-1: config 0 has an invalid interface number: 104 but max is 1
[  950.536478][T18442] usb 1-1: config 0 has an invalid interface number: 104 but max is 1
[  950.540655][T24288] bridge_slave_1: left allmulticast mode
[  950.564993][T24253] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  950.586870][T18442] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  950.602704][T24288] bridge_slave_1: left promiscuous mode
[  950.612461][T24253] BTRFS info (device loop4): using sha256 checksum algorithm
[  950.623622][T18442] usb 1-1: config 0 has no interface number 0
[  950.637474][T24288] bridge0: port 2(bridge_slave_1) entered disabled state
[  950.664529][T18442] usb 1-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 12288, setting to 64
[  950.687807][T24295] loop3: detected capacity change from 0 to 16
[  950.695487][T24288] bond0: (slave bond_slave_0): Releasing backup interface
[  950.711844][T18442] usb 1-1: config 0 interface 104 has no altsetting 1
[  950.769766][T24295] erofs (device loop3): DAX unsupported by block device. Turning off DAX.
[  950.782144][T18442] usb 1-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  950.792124][T24288] bond0: (slave bond_slave_1): Releasing backup interface
[  950.807309][T18442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.817616][T18442] usb 1-1: Product: syz
[  950.822181][T18442] usb 1-1: Manufacturer: syz
[  950.827032][T18442] usb 1-1: SerialNumber: syz
[  950.835974][T18442] usb 1-1: config 0 descriptor??
[  950.850402][T18442] asix 1-1:0.104: probe with driver asix failed with error -22
[  950.882772][T24288] team0: Port device team_slave_0 removed
[  950.898533][T24274] loop6: detected capacity change from 0 to 32768
[  950.940400][T24253] BTRFS info (device loop4): enabling ssd optimizations
[  950.941601][T24274] BTRFS info: device /dev/loop6 (7:6) using temp-fsid 8cedbfb4-2411-42b3-845b-6ac6f25af357
[  950.949854][T24288] team0: Port device team_slave_1 removed
[  950.974356][T24253] BTRFS info (device loop4): turning on async discard
[  950.989507][T24274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7688 (24274)
[  951.006725][T24253] BTRFS info (device loop4): enabling free space tree
[  951.030802][T24288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  951.053611][T24274] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  951.066070][T24288] batman_adv: batadv0: Removing interface: batadv_slave_0
[  951.077344][T18442] usb 1-1: USB disconnect, device number 126
[  951.107936][T24274] BTRFS info (device loop6): using sha256 checksum algorithm
[  951.120595][T24288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  951.128008][T24288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  951.145085][T24288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  951.216593][T24294] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  951.281721][T24274] BTRFS info (device loop6): enabling ssd optimizations
[  951.322987][T24274] BTRFS info (device loop6): turning on async discard
[  951.350065][ T5623] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  951.360894][T24274] BTRFS info (device loop6): enabling free space tree
[  951.374821][T24295] erofs (device loop3): mounted with root inode @ nid 36.
[  951.441548][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  951.460562][T16220] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  951.578518][ T5629] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  951.597521][T24295] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  951.646561][T24295] erofs (device loop3): read error -117 @ 0 of nid 89
[  951.659658][T23269] BTRFS info (device loop6): last unmount of filesystem 8cedbfb4-2411-42b3-845b-6ac6f25af357
[  951.708373][   T30] audit: type=1800 audit(920.238:107): pid=24295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7693" name="file2" dev="loop3" ino=89 res=0 errno=0
[  952.115074][T16220] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  952.631209][T24354] usb usb9: usbfs: process 24354 (syz.0.7706) did not claim interface 0 before use
[  952.797328][T24357] netlink: 'syz.4.7707': attribute type 1 has an invalid length.
[  953.515346][T24376] tmpfs: Bad value for 'mpol'
[  953.997835][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7722'.
[  954.023427][T24388] loop3: detected capacity change from 0 to 4096
[  954.111066][T24388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  954.176533][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  954.276543][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.397796][T24410] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  954.881100][ T5753] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  955.038808][T24432] loop5: detected capacity change from 0 to 256
[  955.061153][ T5753] usb 7-1: Using ep0 maxpacket: 8
[  955.095768][ T5753] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  955.106299][T24436] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  955.128287][ T5753] usb 7-1: config 0 has no interface number 0
[  955.137992][T24432] FAT-fs (loop5): Directory bread(block 64) failed
[  955.156473][ T5753] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  955.160318][T24432] FAT-fs (loop5): Directory bread(block 65) failed
[  955.201463][ T5753] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  955.207943][T24432] FAT-fs (loop5): Directory bread(block 66) failed
[  955.251014][T24432] FAT-fs (loop5): Directory bread(block 67) failed
[  955.261182][ T5753] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  955.276418][T24432] FAT-fs (loop5): Directory bread(block 68) failed
[  955.305722][T24432] FAT-fs (loop5): Directory bread(block 69) failed
[  955.314219][ T5753] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  955.343259][T24432] FAT-fs (loop5): Directory bread(block 70) failed
[  955.355437][ T5753] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  955.386066][T24432] FAT-fs (loop5): Directory bread(block 71) failed
[  955.404311][ T5753] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  955.406972][T24440] netlink: 'syz.3.7744': attribute type 2 has an invalid length.
[  955.423294][ T5753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.433896][T24432] FAT-fs (loop5): Directory bread(block 72) failed
[  955.458858][T24432] FAT-fs (loop5): Directory bread(block 73) failed
[  955.478311][ T5753] usb 7-1: config 0 descriptor??
[  955.499501][T24440] netlink: 'syz.3.7744': attribute type 8 has an invalid length.
[  955.509180][ T5753] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  955.526529][T24440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7744'.
[  955.752336][T24418] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90
[  955.836322][T18442] usb 7-1: USB disconnect, device number 3
[  955.886251][T18442] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  956.203208][T24456] loop5: detected capacity change from 0 to 4096
[  956.254124][T24462] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  956.399980][T24460] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  956.427105][T24460] bridge1: left promiscuous mode
[  956.574138][T24467] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  957.087601][T24482] loop3: detected capacity change from 0 to 256
[  957.249078][T24482] FAT-fs (loop3): Directory bread(block 64) failed
[  957.271574][T24487] openvswitch: netlink: Multiple metadata blocks provided
[  957.282473][T24482] FAT-fs (loop3): Directory bread(block 65) failed
[  957.312911][T24482] FAT-fs (loop3): Directory bread(block 66) failed
[  957.344368][T24482] FAT-fs (loop3): Directory bread(block 67) failed
[  957.380548][T24482] FAT-fs (loop3): Directory bread(block 68) failed
[  957.423496][T24482] FAT-fs (loop3): Directory bread(block 69) failed
[  957.430380][T24453] loop1: detected capacity change from 0 to 32768
[  957.443057][T24482] FAT-fs (loop3): Directory bread(block 70) failed
[  957.468723][T24453] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  957.483566][T24482] FAT-fs (loop3): Directory bread(block 71) failed
[  957.514299][T24482] FAT-fs (loop3): Directory bread(block 72) failed
[  957.524576][T24482] FAT-fs (loop3): Directory bread(block 73) failed
[  957.587208][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  957.600155][T16221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  957.616843][T16220] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  957.751052][T24453] XFS (loop1): Ending clean mount
[  958.094758][T24509] loop6: detected capacity change from 0 to 4096
[  958.106988][T24516] loop4: detected capacity change from 0 to 64
[  958.128975][ T5622] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  958.555617][ T5753] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  958.790675][ T5753] usb 4-1: Using ep0 maxpacket: 16
[  958.805976][ T5753] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  958.824027][ T5753] usb 4-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config
[  958.862097][ T5753] usb 4-1: config 0 has no interface number 0
[  958.892978][ T5753] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  958.921002][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.958528][ T5753] usb 4-1: Product: syz
[  958.970200][ T5753] usb 4-1: Manufacturer: syz
[  958.978612][T24533] loop5: detected capacity change from 0 to 1024
[  958.986673][ T5753] usb 4-1: SerialNumber: syz
[  959.008764][ T5753] usb 4-1: config 0 descriptor??
[  959.059642][ T5753] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  959.078491][T24533] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  959.116879][ T5753] uvcvideo 4-1:0.105: No valid video chain found.
[  959.209659][T24533] EXT4-fs error (device loop5): ext4_empty_dir:3114: inode #11: block 623: comm syz.5.7786: Attempting to read directory block (623) that is past i_size (638464)
[  959.285549][T24541] loop4: detected capacity change from 0 to 16
[  959.313256][ T5788] usb 4-1: USB disconnect, device number 124
[  959.344644][T24541] erofs (device loop4): DAX unsupported by block device. Turning off DAX.
[  959.630476][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  959.723953][T16220] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  959.864659][T24541] erofs (device loop4): mounted with root inode @ nid 36.
[  960.002566][ T5629] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  960.015825][T24541] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  960.045767][T24541] erofs (device loop4): read error -117 @ 0 of nid 89
[  960.055618][   T30] audit: type=1800 audit(928.061:108): pid=24541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7789" name="file2" dev="loop4" ino=89 res=0 errno=0
[  960.084170][T18442] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  960.277981][T18442] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  960.311169][T18442] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  960.367496][T18442] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  960.407051][T18442] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  960.432354][T18442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.463373][T18442] usb 2-1: Product: syz
[  960.477797][T18442] usb 2-1: Manufacturer: syz
[  960.493272][T18442] usb 2-1: SerialNumber: syz
[  960.521519][T18442] usb 2-1: config 0 descriptor??
[  960.545786][T24549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  960.568843][T24549] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  960.595260][T18442] usb 2-1: ucan: probing device on interface #0
[  960.769339][T24577] loop0: detected capacity change from 0 to 256
[  960.848324][T24577] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[  961.112308][T18442] usb 2-1: ucan: failed to retrieve device info
[  961.145395][T18442] usb 2-1: ucan: probe failed; try to update the device firmware
[  961.218753][T18442] usb 2-1: USB disconnect, device number 109
[  961.694120][T24596] loop4: detected capacity change from 0 to 4096
[  962.105826][T24608] loop1: detected capacity change from 0 to 16
[  962.146350][T24608] erofs (device loop1): mounted with root inode @ nid 36.
[  962.176611][T24612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7824'.
[  962.229883][T24612] netlink: 312 bytes leftover after parsing attributes in process `syz.3.7824'.
[  962.273471][T24612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7824'.
[  962.418249][T24616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  962.490078][T24618] loop0: detected capacity change from 0 to 64
[  962.634045][T24622] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  963.027464][T24626] loop4: detected capacity change from 0 to 4096
[  963.057759][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  963.064574][T24626] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  963.074100][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  963.187721][T24626] ntfs3(loop4): ino=19, mi_enum_attr
[  963.206181][T24639] netlink: 'syz.3.7837': attribute type 22 has an invalid length.
[  963.228318][T24626] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  963.389422][T24604] loop5: detected capacity change from 0 to 32768
[  963.390522][T24604] xfs: Deprecated parameter 'attr2'
[  963.390552][T24604] XFS: attr2 mount option is deprecated.
[  963.390578][T24604] xfs: Deprecated parameter 'attr2'
[  963.390604][T24604] XFS: attr2 mount option is deprecated.
[  963.453731][T24604] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  963.524071][T24655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7840'.
[  963.536617][T24604] XFS (loop5): Ending clean mount
[  963.552227][T24604] XFS (loop5): Quotacheck needed: Please wait.
[  963.740936][T16225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  963.742312][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  963.743590][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  963.900649][T24604] XFS (loop5): Quotacheck: Done.
[  964.108485][ T5626] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  965.098942][T24688] loop6: detected capacity change from 0 to 256
[  965.106314][T24658] loop1: detected capacity change from 0 to 32768
[  965.135488][T24658] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7842 (24658)
[  965.178794][T24688] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d)
[  965.211155][T24658] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  965.245077][T24658] BTRFS info (device loop1): using sha256 checksum algorithm
[  965.302286][T24688] exFAT-fs (loop6): valid_size(150994954) is greater than size(10)
[  965.463240][T24658] BTRFS info (device loop1): enabling ssd optimizations
[  965.507993][T24658] BTRFS info (device loop1): turning on async discard
[  965.569511][T24658] BTRFS info (device loop1): enabling free space tree
[  965.672267][T24715] netlink: 'syz.5.7865': attribute type 12 has an invalid length.
[  965.709565][T24715] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7865'.
[  965.745102][T24716] loop4: detected capacity change from 0 to 1024
[  965.827614][T24716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  965.866114][ T5622] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  965.987515][T24722] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set
[  966.020512][T24716] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 623: comm syz.4.7862: Attempting to read directory block (623) that is past i_size (638464)
[  966.334181][T24686] loop3: detected capacity change from 0 to 40427
[  966.402201][T24686] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  966.418762][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  966.439797][T24686] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  966.493373][T24686] F2FS-fs (loop3): invalid crc_offset: 33558524
[  966.757434][T24741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7870'.
[  967.121354][T24686] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  967.282484][T24686] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  967.306460][T24686] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  967.317109][T24756] loop5: detected capacity change from 0 to 64
[  967.373597][T24756] MINIX-fs: mounting file system with errors, running fsck is recommended
[  967.409700][T24760] loop0: detected capacity change from 0 to 256
[  967.454673][T24756] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  967.860444][T24768] loop5: detected capacity change from 0 to 256
[  967.898239][   T30] audit: type=1326 audit(935.398:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24769 comm="syz.4.7888" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4d9ce59 code=0x7ffc0000
[  967.960091][T24768] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  968.034144][   T30] audit: type=1326 audit(935.398:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24769 comm="syz.4.7888" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4d9ce59 code=0x7ffc0000
[  968.157537][   T30] audit: type=1326 audit(935.436:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24769 comm="syz.4.7888" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f4bf4d9ce59 code=0x7ffc0000
[  968.216884][T24774] loop1: detected capacity change from 0 to 256
[  968.236059][T24774] exfat: Deprecated parameter 'namecase'
[  968.283467][T24774] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  968.292463][   T30] audit: type=1326 audit(935.436:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24769 comm="syz.4.7888" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bf4d9ce59 code=0x7ffc0000
[  968.388779][T24774] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  968.978413][T24797] loop0: detected capacity change from 0 to 256
[  969.000731][T24798] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  969.126471][T16225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  969.150346][T24797] FAT-fs (loop0): Directory bread(block 64) failed
[  969.166578][T24797] FAT-fs (loop0): Directory bread(block 65) failed
[  969.197496][T24797] FAT-fs (loop0): Directory bread(block 66) failed
[  969.228160][T24797] FAT-fs (loop0): Directory bread(block 67) failed
[  969.255625][T24797] FAT-fs (loop0): Directory bread(block 68) failed
[  969.289438][T24797] FAT-fs (loop0): Directory bread(block 69) failed
[  969.338539][T24797] FAT-fs (loop0): Directory bread(block 70) failed
[  969.364296][T24797] FAT-fs (loop0): Directory bread(block 71) failed
[  969.386988][T24797] FAT-fs (loop0): Directory bread(block 72) failed
[  969.408843][T24797] FAT-fs (loop0): Directory bread(block 73) failed
[  969.900509][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  969.902811][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  970.221303][T24834] loop0: detected capacity change from 0 to 256
[  970.248474][T24834] exfat: Deprecated parameter 'utf8'
[  970.298411][T24834] exfat: Deprecated parameter 'utf8'
[  970.346958][T24834] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  970.732325][T24844] loop6: detected capacity change from 0 to 4096
[  970.806522][T24851] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  970.823809][T24850] kAFS: unable to lookup cell 't,ýÕÚÜoúú±(/'
[  970.859132][T24844] NILFS error (device loop6): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  970.933683][T24844] Remounting filesystem read-only
[  971.029501][T24859] loop3: detected capacity change from 0 to 16
[  971.054678][T24859] erofs (device loop3): mounted with root inode @ nid 36.
[  971.120068][T24859] erofs (device loop3): compressed inode (nid 83) is invalid in a plain filesystem
[  971.206793][T23269] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer
[  971.533960][T24875] loop4: detected capacity change from 0 to 128
[  971.945739][T24889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7944'.
[  971.981629][T24891] loop6: detected capacity change from 0 to 512
[  972.029703][T24891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  972.167633][T24898] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  972.226079][   T30] audit: type=1800 audit(939.450:113): pid=24898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7947" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  972.442804][T24906] kAFS: No cell specified
[  972.502331][T23269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  972.828672][T24914] set_capacity_and_notify: 1 callbacks suppressed
[  972.828701][T24914] loop6: detected capacity change from 0 to 256
[  973.053595][T24918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7958'.
[  973.056256][T24914] FAT-fs (loop6): Directory bread(block 64) failed
[  973.114983][T24914] FAT-fs (loop6): Directory bread(block 65) failed
[  973.146614][T24914] FAT-fs (loop6): Directory bread(block 66) failed
[  973.175737][T24914] FAT-fs (loop6): Directory bread(block 67) failed
[  973.209930][T24914] FAT-fs (loop6): Directory bread(block 68) failed
[  973.235064][T24914] FAT-fs (loop6): Directory bread(block 69) failed
[  973.265542][T24914] FAT-fs (loop6): Directory bread(block 70) failed
[  973.304558][T24914] FAT-fs (loop6): Directory bread(block 71) failed
[  973.328773][T24914] FAT-fs (loop6): Directory bread(block 72) failed
[  973.363839][T24914] FAT-fs (loop6): Directory bread(block 73) failed
[  973.372787][T24925] netlink: 'syz.3.7963': attribute type 28 has an invalid length.
[  973.428861][T24929] netlink: 'syz.1.7964': attribute type 1 has an invalid length.
[  973.471639][T24930] bridge0: port 1(bridge_slave_0) entered disabled state
[  973.794731][T24904] loop5: detected capacity change from 0 to 32768
[  973.820833][T24938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7969'.
[  974.334134][T24946] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  974.400466][T24946] vxcan3: left promiscuous mode
[  974.850137][T24967] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7983'.
[  974.964588][T24970] openvswitch: netlink: Message has 4 unknown bytes.
[  975.384866][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  975.502219][T24990] loop1: detected capacity change from 0 to 256
[  975.689498][T24990] FAT-fs (loop1): Directory bread(block 64) failed
[  975.719973][T24990] FAT-fs (loop1): Directory bread(block 65) failed
[  975.760265][T24990] FAT-fs (loop1): Directory bread(block 66) failed
[  975.787182][T24990] FAT-fs (loop1): Directory bread(block 67) failed
[  975.826560][T24990] FAT-fs (loop1): Directory bread(block 68) failed
[  975.848709][T24990] FAT-fs (loop1): Directory bread(block 69) failed
[  975.875361][T24990] FAT-fs (loop1): Directory bread(block 70) failed
[  975.894900][T24990] FAT-fs (loop1): Directory bread(block 71) failed
[  975.927327][T24990] FAT-fs (loop1): Directory bread(block 72) failed
[  975.952040][T24990] FAT-fs (loop1): Directory bread(block 73) failed
[  976.051249][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  976.278706][   T30] audit: type=1800 audit(943.231:114): pid=24990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7995" name="bus" dev="loop1" ino=1048674 res=0 errno=0
[  976.648622][T25019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8009'.
[  977.556930][T25048] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  977.602168][T25046] veth0_to_team: left promiscuous mode
[  977.634362][T25046] xfrm0: left promiscuous mode
[  977.714159][T25046] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[  977.746540][T25046] bridge1: left promiscuous mode
[  978.039619][T25020] loop4: detected capacity change from 0 to 32768
[  978.106408][T25020] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  978.147131][T25075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8035'.
[  978.192585][T25075] netlink: 'syz.0.8035': attribute type 1 has an invalid length.
[  978.244004][T25020] XFS (loop4): Ending clean mount
[  978.255833][T25075] netlink: 'syz.0.8035': attribute type 2 has an invalid length.
[  978.303450][T25075] netlink: 112 bytes leftover after parsing attributes in process `syz.0.8035'.
[  978.443370][T25083] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8037'.
[  978.495311][T25083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  978.671770][ T5623] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  978.967073][T25089] bond2: entered promiscuous mode
[  979.097811][T25101] loop4: detected capacity change from 0 to 128
[  979.542332][T25112] loop3: detected capacity change from 0 to 16
[  979.583541][T25112] erofs (device loop3): mounted with root inode @ nid 36.
[  979.692147][T25112] erofs (device loop3): readahead error at folio 2 @ nid 89
[  979.704248][T25112] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89
[  979.747753][T25112] erofs (device loop3): readahead error at folio 1 @ nid 89
[  979.784937][T25112] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89
[  979.826440][T25112] erofs (device loop3): readahead error at folio 0 @ nid 89
[  979.858931][T25112] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89
[  979.895648][T25112] erofs (device loop3): bogus lookback distance 1 @ lcn 0 of nid 89
[  979.940196][T25112] erofs (device loop3): read error -117 @ 0 of nid 89
[  979.977673][   T30] audit: type=1800 audit(946.693:115): pid=25112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8050" name="file2" dev="loop3" ino=89 res=0 errno=0
[  980.077656][T25096] loop6: detected capacity change from 0 to 32768
[  980.115847][T25096] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8045 (25096)
[  980.154342][T16225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  980.154342][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  980.207952][T25096] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  980.237947][T25096] BTRFS info (device loop6): using sha256 checksum algorithm
[  980.310848][T25099] loop5: detected capacity change from 0 to 32768
[  980.356502][T25099] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  980.390685][T25099] JBD2: Ignoring recovery information on journal
[  980.418854][T25096] BTRFS info (device loop6): enabling ssd optimizations
[  980.494020][T25096] BTRFS info (device loop6): turning on async discard
[  980.520374][T25096] BTRFS info (device loop6): enabling free space tree
[  980.605208][T25099] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  980.714347][T25146] xt_time: invalid argument - start or stop time greater than 23:59:59
[  980.788701][T23269] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  980.838618][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  980.989164][T25113] loop4: detected capacity change from 0 to 32768
[  981.070349][T25113] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[  981.181736][T25113] JBD2: Ignoring recovery information on journal
[  981.279671][T25113] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  981.338300][T25113] JBD2: bad block at offset 32
[  981.373663][T25113] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  981.511908][ T5626] ocfs2: Unmounting device (7,5) on (node local)
[  981.672186][T25166] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8069'.
[  981.883694][ T5623] ocfs2: Unmounting device (7,4) on (node local)
[  982.204529][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  982.237087][ T5753] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  982.267820][T25174] loop1: detected capacity change from 0 to 736
[  982.449388][ T5753] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  982.480076][ T5753] usb 7-1: config 0 has no interface number 0
[  982.517306][ T5753] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  982.574781][ T5753] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  982.627132][ T5753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.671324][ T5753] usb 7-1: Product: syz
[  982.678830][T25158] loop0: detected capacity change from 0 to 32768
[  982.693078][ T5753] usb 7-1: Manufacturer: syz
[  982.707771][ T5753] usb 7-1: SerialNumber: syz
[  982.713903][T25158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8066 (25158)
[  982.718952][T25185] netlink: 'syz.1.8076': attribute type 10 has an invalid length.
[  982.755946][ T5753] usb 7-1: config 0 descriptor??
[  982.784454][T25185] veth1_macvtap: left promiscuous mode
[  982.792572][T25158] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  982.816114][ T5753] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[  982.832618][T25158] BTRFS info (device loop0): using sha256 checksum algorithm
[  982.989985][T25201] mmap: syz.4.8079 (25201): VmData 50044928 exceed data ulimit 1024. Update limits or use boot option ignore_rlimit_data.
[  983.040016][T25204] netlink: 88 bytes leftover after parsing attributes in process `syz.3.8081'.
[  983.074033][T25158] BTRFS info (device loop0): enabling ssd optimizations
[  983.091232][T25158] BTRFS info (device loop0): turning on async discard
[  983.125347][T25158] BTRFS info (device loop0): enabling free space tree
[  983.340832][ T5753] usb 7-1: USB disconnect, device number 4
[  983.430376][ T5753] yurex 7-1:0.50: USB YUREX #0 now disconnected
[  983.459473][ T5621] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  984.111526][T25230] xfrm0: entered promiscuous mode
[  984.666468][T25247] loop6: detected capacity change from 0 to 64
[  985.650354][T25280] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8115'.
[  985.770869][T25243] loop1: detected capacity change from 0 to 32768
[  985.801629][T25243] xfs: Deprecated parameter 'attr2'
[  985.835791][T25243] XFS: attr2 mount option is deprecated.
[  985.843968][T25243] xfs: Deprecated parameter 'attr2'
[  985.859441][T25243] XFS: attr2 mount option is deprecated.
[  985.897231][T25243] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  985.958307][T25243] XFS (loop1): Ending clean mount
[  986.002099][T25243] XFS (loop1): Quotacheck needed: Please wait.
[  986.170711][T25300] loop6: detected capacity change from 0 to 16
[  986.210892][T25300] erofs (device loop6): mounted with root inode @ nid 36.
[  986.308969][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  986.318961][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  986.399991][T25243] XFS (loop1): Quotacheck: Done.
[  986.722681][ T5622] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  986.730670][T25316] loop3: detected capacity change from 0 to 256
[  986.796977][T25311] Process accounting resumed
[  986.991720][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  988.049356][ T5753] usb 4-1: new full-speed USB device number 125 using dummy_hcd
[  988.054752][T25312] loop5: detected capacity change from 0 to 32768
[  988.093334][T25312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8126 (25312)
[  988.168543][T25312] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  988.207758][T25312] BTRFS info (device loop5): using sha256 checksum algorithm
[  988.258224][ T5753] usb 4-1: config 8 has an invalid interface number: 223 but max is 0
[  988.302437][ T5753] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  988.329866][T25351] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.362520][T16231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  988.373486][T25351] xfrm0: left promiscuous mode
[  988.397844][ T5753] usb 4-1: config 8 has no interface number 0
[  988.399248][T25351] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  988.411848][T25312] BTRFS info (device loop5): enabling ssd optimizations
[  988.424582][T25312] BTRFS info (device loop5): turning on async discard
[  988.425789][T25351] bridge1: left promiscuous mode
[  988.431450][T25312] BTRFS info (device loop5): enabling free space tree
[  988.437061][ T5753] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  988.514814][T25351] bond2: left promiscuous mode
[  988.547696][ T5753] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  988.594569][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.602080][T25312] BTRFS warning (device loop5): can't clear the incompat:0,default_subvol feature bits while mounted
[  988.638553][ T5753] usb 4-1: Product: syz
[  988.658089][ T5753] usb 4-1: Manufacturer: syz
[  988.674686][ T5753] usb 4-1: SerialNumber: syz
[  988.847516][ T5626] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  988.926520][T25380] qrtr: Invalid version 0
[  989.011222][ T5753] usb 4-1: USB disconnect, device number 125
[  989.069361][T25382] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8153'.
[  989.124535][T25382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8153'.
[  989.301084][T25389] loop6: detected capacity change from 0 to 512
[  989.339117][T25389] EXT4-fs (loop6): blocks per group (8192) and clusters per group (2304) inconsistent
[  989.416851][ T5788] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  989.616908][ T5788] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  989.657374][ T5788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.696718][ T5788] usb 2-1: Product: syz
[  989.715049][ T5788] usb 2-1: Manufacturer: syz
[  989.738273][ T5788] usb 2-1: SerialNumber: syz
[  989.765676][ T5788] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  989.811997][T23360] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  989.911493][T25400] openvswitch: netlink: Unknown nsh attribute 0
[  990.060637][T25402] x_tables: ip_tables: icmp match: only valid for protocol 1
[  990.267261][T25410] netlink: 'syz.5.8165': attribute type 11 has an invalid length.
[  990.297827][T25404] loop3: detected capacity change from 0 to 4096
[  990.351928][T25412] netlink: 'syz.0.8166': attribute type 1 has an invalid length.
[  990.443973][T25412] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8166'.
[  990.576597][T25416] MTD: Couldn't look up './file0': -15
[  991.066608][ T5753] usb 2-1: USB disconnect, device number 110
[  991.083219][T23360] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  991.095123][T23360] ath9k_htc: Failed to initialize the device
[  991.118142][ T5753] usb 2-1: ath9k_htc: USB layer deinitialized
[  991.689755][T25436] netlink: 'syz.3.8178': attribute type 2 has an invalid length.
[  991.721177][T25436] netlink: 'syz.3.8178': attribute type 1 has an invalid length.
[  991.730729][T25433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8177'.
[  991.771558][T25433] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8177'.
[  991.964870][T25442] x_tables: ip_tables: icmp match: only valid for protocol 1
[  991.975601][T25444] netlink: 'syz.0.8182': attribute type 12 has an invalid length.
[  992.309375][T25455] loop1: detected capacity change from 0 to 164
[  992.464362][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  992.475619][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  992.717577][T25469] netlink: 'syz.6.8195': attribute type 1 has an invalid length.
[  992.753981][T25469] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8195'.
[  993.167460][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  993.196841][T25483] x_tables: ip_tables: icmp match: only valid for protocol 1
[  993.726222][T25508] netlink: 'syz.4.8211': attribute type 1 has an invalid length.
[  993.763814][T25508] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8211'.
[  994.143787][T25523] x_tables: ip_tables: icmp match: only valid for protocol 1
[  994.166259][T25525] loop6: detected capacity change from 0 to 256
[  994.173517][    T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  994.211229][T25525] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  994.348701][    T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  994.366650][T25529] loop0: detected capacity change from 0 to 764
[  994.386611][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.428758][    T9] usb 4-1: Product: syz
[  994.445247][T25529] Symlink component flag not implemented
[  994.446383][    T9] usb 4-1: Manufacturer: syz
[  994.486995][    T9] usb 4-1: SerialNumber: syz
[  994.498555][T25529] Symlink component flag not implemented (122)
[  994.514493][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  994.530151][    T9] usb 4-1: config 0 descriptor??
[  994.569222][    T9] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  994.777417][   T30] audit: type=1326 audit(960.543:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25539 comm="syz.5.8228" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab619ce59 code=0x7ffc0000
[  994.895404][   T30] audit: type=1326 audit(960.543:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25539 comm="syz.5.8228" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab619ce59 code=0x7ffc0000
[  994.962975][   T30] audit: type=1326 audit(960.580:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25539 comm="syz.5.8228" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f4ab619ce59 code=0x7ffc0000
[  995.016102][    T9] gspca_sunplus: reg_w_riv err -71
[  995.023898][    T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  995.039444][T25549] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8230'.
[  995.055668][    T9] usb 4-1: USB disconnect, device number 126
[  995.068284][   T30] audit: type=1326 audit(960.580:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25539 comm="syz.5.8228" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ab619ce59 code=0x7ffc0000
[  995.094628][T25549] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8230'.
[  995.105538][T25549] netlink: 'syz.1.8230': attribute type 1 has an invalid length.
[  995.289508][T25554] loop4: detected capacity change from 0 to 256
[  995.614192][T25563] loop0: detected capacity change from 0 to 2048
[  995.698118][T25563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  996.129789][T25579] Cannot find del_set index 2 as target
[  996.334202][T25584] loop1: detected capacity change from 0 to 2048
[  996.365719][T25584] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  996.391778][T25588] loop6: detected capacity change from 0 to 512
[  996.444451][T25590] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  996.446556][T25588] EXT4-fs warning (device loop6): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  996.479642][T25584] syz.1.8250: attempt to access beyond end of device
[  996.479642][T25584] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  996.503513][T25588] EXT4-fs warning (device loop6): dx_probe:848: Enable large directory feature to access it
[  996.516064][T25584] syz.1.8250: attempt to access beyond end of device
[  996.516064][T25584] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[  996.531202][T25584] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0)
[  996.546293][T25594] syz.5.8253 (25594): /proc/25592/oom_adj is deprecated, please use /proc/25592/oom_score_adj instead.
[  996.569772][T25588] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.8252: Corrupt directory, running e2fsck is recommended
[  996.596777][T25588] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  996.620259][T25588] EXT4-fs error (device loop6): ext4_iget_extra_inode:5127: inode #15: comm syz.6.8252: corrupted in-inode xattr: invalid ea_ino
[  996.633893][T25588] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  996.637659][T25588] EXT4-fs error (device loop6): ext4_orphan_get:1400: comm syz.6.8252: couldn't read orphan inode 15 (err -117)
[  996.647235][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  996.647271][    C1] EXT4-fs (loop6): initial error at time 962: ext4_iget_extra_inode:5127: inode 15
[  996.647328][    C1] EXT4-fs (loop6): last error at time 962: ext4_iget_extra_inode:5127: inode 15
[  996.732296][T25588] loop6: lost filesystem error report for type 5 error -117
[  996.745264][T25588] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  996.933635][T25588] EXT4-fs error (device loop6): ext4_xattr_set_entry:1672: inode #2: comm syz.6.8252: corrupted xattr entries
[  997.167537][T23269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  997.698880][T18442] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  997.719762][T25627] loop4: detected capacity change from 0 to 256
[  997.894578][T18442] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[  997.945752][T18442] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  997.989943][T18442] usb 7-1: config 0 interface 0 has no altsetting 0
[  998.020429][T25598] loop3: detected capacity change from 0 to 32768
[  998.052082][T18442] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  998.053122][T25598] xfs: Deprecated parameter 'attr2'
[  998.072230][T18442] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  998.101043][T18442] usb 7-1: Product: syz
[  998.124556][T18442] usb 7-1: Manufacturer: syz
[  998.129556][T25598] XFS: attr2 mount option is deprecated.
[  998.139916][T18442] usb 7-1: SerialNumber: syz
[  998.146572][T25598] xfs: Deprecated parameter 'attr2'
[  998.161889][T25598] XFS: attr2 mount option is deprecated.
[  998.172002][T18442] usb 7-1: config 0 descriptor??
[  998.197794][T18442] hub 7-1:0.0: bad descriptor, ignoring hub
[  998.208074][T25635] syz_tun: left allmulticast mode
[  998.236071][T18442] hub 7-1:0.0: probe with driver hub failed with error -5
[  998.240154][T25598] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  998.268724][T18442] usb 7-1: selecting invalid altsetting 0
[  998.316343][T25609] loop1: detected capacity change from 0 to 32768
[  998.366081][T25635] xfrm0: left allmulticast mode
[  998.392471][T25609] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  998.408729][T25598] XFS (loop3): Ending clean mount
[  998.432368][T25609] JBD2: Ignoring recovery information on journal
[  998.433026][T25598] XFS (loop3): Quotacheck needed: Please wait.
[  998.459060][T18442] usb 7-1: USB disconnect, device number 5
[  998.563593][ T5867] udevd[5867]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  998.626470][T25635] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  998.631563][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  998.644778][T16225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  998.678598][T25609] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  998.852098][T25598] XFS (loop3): Quotacheck: Done.
[  998.864180][T25635] 8021q: adding VLAN 0 to HW filter on device bond2
[  998.911205][T16218] bridge0: port 1(bridge_slave_0) entered blocking state
[  998.918484][T16218] bridge0: port 1(bridge_slave_0) entered forwarding state
[  999.108147][ T5625] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  999.165045][ T5622] ocfs2: Unmounting device (7,1) on (node local)
[  999.327070][T25661] loop0: detected capacity change from 0 to 24
[  999.359616][T25661] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  999.403752][T25661] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  999.550705][T25661] VFS: Lookup of 'file0' in romfs loop0 would have caused loop
[  999.882270][T25669] netlink: 'syz.1.8279': attribute type 39 has an invalid length.
[ 1000.077406][T25669] hsr_slave_0 (unregistering): left promiscuous mode
[ 1000.172462][T25680] loop3: detected capacity change from 0 to 2048
[ 1000.219084][T25680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1000.622099][T25696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8297'.
[ 1000.651536][T25693] loop6: detected capacity change from 0 to 2048
[ 1000.658435][T25696] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8297'.
[ 1000.708691][T25693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1001.005212][T25705] loop5: detected capacity change from 0 to 764
[ 1001.085322][T25705] Symlink component flag not implemented
[ 1001.105428][T25705] Symlink component flag not implemented (122)
[ 1001.118151][    T9] usb 2-1: new full-speed USB device number 111 using dummy_hcd
[ 1001.269816][T25713] loop3: detected capacity change from 0 to 16
[ 1001.306807][T25713] erofs (device loop3): mounted with root inode @ nid 36.
[ 1001.327165][    T9] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[ 1001.349697][    T9] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1001.389292][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1001.398741][T25713] erofs (device loop3): readahead error at folio 0 @ nid 89
[ 1001.430514][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1001.439822][T25713] erofs (device loop3): read error -117 @ 0 of nid 89
[ 1001.457100][    T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1001.486238][   T30] audit: type=1800 audit(966.822:120): pid=25713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8304" name="file2" dev="loop3" ino=89 res=0 errno=0
[ 1001.506019][    T9] usb 2-1: Product: syz
[ 1001.523617][    T9] usb 2-1: Manufacturer: syz
[ 1001.547341][T25719] exfat: Deprecated parameter 'namecase'
[ 1001.551209][    T9] usb 2-1: SerialNumber: syz
[ 1001.561256][T25689] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[ 1001.582284][    T9] usb 2-1: config 0 descriptor??
[ 1001.624428][T25689] JBD2: Ignoring recovery information on journal
[ 1001.640724][    T9] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1001.694819][T25719] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf3765126, utbl_chksum : 0xe619d30d)
[ 1001.730243][    T9] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1001.788935][T25689] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1001.804892][    T9] usb 2-1: selecting invalid altsetting 0
[ 1001.809489][T25725] set match dimension is over the limit!
[ 1002.104665][    T9] usb 2-1: USB disconnect, device number 111
[ 1002.225023][ T5623] ocfs2: Unmounting device (7,4) on (node local)
[ 1002.342321][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1002.660454][T25744] set_capacity_and_notify: 2 callbacks suppressed
[ 1002.660482][T25744] loop3: detected capacity change from 0 to 1024
[ 1002.826783][T25744] hfsplus: found bad thread record in catalog
[ 1002.852450][T25744] hfsplus: found bad thread record in catalog
[ 1002.903165][T25753] loop6: detected capacity change from 0 to 16
[ 1002.915402][T25744] hfsplus: found bad thread record in catalog
[ 1002.940156][T25753] erofs (device loop6): mounted with root inode @ nid 36.
[ 1002.998184][T25753] erofs (device loop6): readahead error at folio 0 @ nid 89
[ 1003.040670][T25753] erofs (device loop6): read error -117 @ 0 of nid 89
[ 1003.061427][   T30] audit: type=1800 audit(968.301:121): pid=25753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8322" name="file2" dev="loop6" ino=89 res=0 errno=0
[ 1003.104540][T25755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8316'.
[ 1003.169584][T16231] hfsplus: found bad thread record in catalog
[ 1003.349943][T25763] loop3: detected capacity change from 0 to 512
[ 1003.381611][T25763] EXT4-fs: Ignoring removed i_version option
[ 1003.396929][T25766] loop5: detected capacity change from 0 to 64
[ 1003.440865][T25763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1003.791842][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1004.110563][T25782] loop3: detected capacity change from 0 to 1024
[ 1004.208878][T25782] overlay: filesystem on ./file0 not supported
[ 1004.265035][T25786] loop4: detected capacity change from 0 to 4096
[ 1004.293880][T25786] EXT4-fs: Ignoring removed bh option
[ 1004.375419][T25786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1004.643707][T25757] loop0: detected capacity change from 0 to 32768
[ 1004.682355][T25757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8325 (25757)
[ 1004.694591][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1004.706801][T25757] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1004.706851][T25757] BTRFS info (device loop0): using sha256 checksum algorithm
[ 1004.785540][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1004.786160][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1004.789587][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1004.836567][T25803] loop5: detected capacity change from 0 to 4096
[ 1004.868945][T23360] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1004.988213][T25757] BTRFS info (device loop0): enabling ssd optimizations
[ 1005.017174][T25821] loop3: detected capacity change from 0 to 512
[ 1005.048288][T25821] EXT4-fs warning (device loop3): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 1005.049127][T25757] BTRFS info (device loop0): turning on async discard
[ 1005.059899][T25821] EXT4-fs warning (device loop3): dx_probe:848: Enable large directory feature to access it
[ 1005.059936][T25821] EXT4-fs warning (device loop3): dx_probe:933: inode #2: comm syz.3.8348: Corrupt directory, running e2fsck is recommended
[ 1005.095139][T25821] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[ 1005.169649][T25821] EXT4-fs error (device loop3): ext4_iget_extra_inode:5127: inode #15: comm syz.3.8348: corrupted in-inode xattr: invalid ea_ino
[ 1005.233866][T25757] BTRFS info (device loop0): enabling free space tree
[ 1005.249598][T25821] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1005.250169][T25821] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.8348: couldn't read orphan inode 15 (err -117)
[ 1005.259444][    C1] EXT4-fs (loop3): error count since last fsck: 1
[ 1005.259478][    C1] EXT4-fs (loop3): initial error at time 970: ext4_iget_extra_inode:5127: inode 15
[ 1005.259534][    C1] EXT4-fs (loop3): last error at time 970: ext4_iget_extra_inode:5127: inode 15
[ 1005.321131][T23360] usb 2-1: too many configurations: 72, using maximum allowed: 8
[ 1005.376297][T23360] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[ 1005.392614][T25821] loop3: lost filesystem error report for type 5 error -117
[ 1005.400047][T23360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.432522][T25821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1005.455168][T23360] usb 2-1: config 0 descriptor??
[ 1005.477039][T25757] BTRFS warning (device loop0): can't clear the incompat:0,default_subvol feature bits while mounted
[ 1005.522163][T23360] rndis_host 2-1:0.0: rndis: master #0/ffff88803793a000 slave #1/0000000000000000
[ 1005.569632][T25821] EXT4-fs error (device loop3): ext4_xattr_set_entry:1672: inode #2: comm syz.3.8348: corrupted xattr entries
[ 1005.679879][ T5621] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1005.864685][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1005.872435][T23360] usb 2-1: USB disconnect, device number 112
[ 1005.989935][T25838] loop5: detected capacity change from 0 to 4096
[ 1006.068776][T25838] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 1006.195387][T25847] netlink: 'syz.3.8358': attribute type 39 has an invalid length.
[ 1006.243587][T25849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1006.250938][T25849] IPv6: NLM_F_CREATE should be set when creating new route
[ 1006.258285][T25849] IPv6: NLM_F_CREATE should be set when creating new route
[ 1006.365068][T25847] hsr_slave_0 (unregistering): left promiscuous mode
[ 1007.248761][T25870] EXT4-fs warning (device loop1): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[ 1007.268672][T25870] EXT4-fs warning (device loop1): dx_probe:848: Enable large directory feature to access it
[ 1007.379448][T25870] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.8372: Corrupt directory, running e2fsck is recommended
[ 1007.464699][T25870] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[ 1007.497200][T25870] EXT4-fs error (device loop1): ext4_iget_extra_inode:5127: inode #15: comm syz.1.8372: corrupted in-inode xattr: invalid ea_ino
[ 1007.561230][T25870] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1007.561688][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1007.577420][    C0] EXT4-fs (loop1): initial error at time 972: ext4_iget_extra_inode:5127: inode 15
[ 1007.586805][    C0] EXT4-fs (loop1): last error at time 972: ext4_iget_extra_inode:5127: inode 15
[ 1007.605243][T25870] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.8372: couldn't read orphan inode 15 (err -117)
[ 1007.647226][T25870] loop1: lost filesystem error report for type 5 error -117
[ 1007.650918][T25870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1007.793700][T25889] usb usb7: usbfs: process 25889 (syz.5.8379) did not claim interface 0 before use
[ 1007.837343][T25870] EXT4-fs error (device loop1): ext4_xattr_set_entry:1672: inode #2: comm syz.1.8372: corrupted xattr entries
[ 1008.102138][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1008.881381][T25924] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1009.041204][T25931] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1009.123412][T25930] set_capacity_and_notify: 1 callbacks suppressed
[ 1009.123440][T25930] loop5: detected capacity change from 0 to 1024
[ 1009.198108][T25930] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[ 1009.234905][T25936] loop4: detected capacity change from 0 to 512
[ 1009.255396][T25930] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[ 1009.312488][T25930] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[ 1009.383581][T25930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1009.566678][T25930] EXT4-fs (loop5): ext4_remount: Checksum for group 0 failed (62631!=20869)
[ 1009.796835][   T30] audit: type=1326 audit(974.599:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.0.8410" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881139ce59 code=0x7ffc0000
[ 1009.799427][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1009.827074][T25950] loop4: detected capacity change from 0 to 1024
[ 1009.845178][T25947] loop6: detected capacity change from 0 to 4096
[ 1009.863837][T25947] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[ 1009.887249][   T30] audit: type=1326 audit(974.646:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.0.8410" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881139ce59 code=0x7ffc0000
[ 1009.932044][T25950] hfsplus: found bad thread record in catalog
[ 1009.951757][T25950] hfsplus: found bad thread record in catalog
[ 1009.973915][T25950] hfsplus: found bad thread record in catalog
[ 1009.982395][   T30] audit: type=1326 audit(974.646:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.0.8410" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f881139ce59 code=0x7ffc0000
[ 1010.056293][T25947] ntfs3(loop6): ino=19, mi_enum_attr
[ 1010.079858][T25947] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[ 1010.112008][   T30] audit: type=1326 audit(974.646:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.0.8410" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881139ce59 code=0x7ffc0000
[ 1010.161880][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1010.186835][T25957] SET target dimension over the limit!
[ 1010.198034][   T30] audit: type=1326 audit(974.646:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.0.8410" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881139ce59 code=0x7ffc0000
[ 1010.235522][T25955] loop0: detected capacity change from 0 to 1024
[ 1010.273666][T16225] hfsplus: found bad thread record in catalog
[ 1010.281166][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1010.292222][T25947] ntfs3(loop6): failed to convert "c46c" to macgreek
[ 1010.320184][T25915] loop3: detected capacity change from 0 to 32768
[ 1010.348241][T25947] ntfs3(loop6): ino=20, mi_enum_attr
[ 1010.432385][T25915] JBD2: Ignoring recovery information on journal
[ 1010.492200][   T30] audit: type=1800 audit(975.244:127): pid=25955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8413" name="file1" dev="loop0" ino=20 res=0 errno=0
[ 1010.627432][T25915] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1010.934581][T16225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1010.984807][T25974] loop4: detected capacity change from 0 to 64
[ 1011.244536][ T5625] ocfs2: Unmounting device (7,3) on (node local)
[ 1011.314403][T25983] loop0: detected capacity change from 0 to 64
[ 1011.388619][T23360] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1011.569815][T23360] usb 2-1: Using ep0 maxpacket: 8
[ 1011.593622][T23360] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1011.636587][T23360] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[ 1011.662363][T23360] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1011.710302][T23360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1011.757190][T23360] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[ 1011.782990][T23360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.821701][T23360] usb 2-1: Product: syz
[ 1011.838932][T23360] usb 2-1: Manufacturer: syz
[ 1011.856494][T23360] usb 2-1: SerialNumber: syz
[ 1011.883207][T23360] usb 2-1: config 0 descriptor??
[ 1011.905540][T23360] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1011.921715][T23360] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1011.986719][T23360] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input58
[ 1012.102173][T25996] loop4: detected capacity change from 0 to 4096
[ 1012.251685][T25996] ntfs3(loop4): ino=19, mi_enum_attr
[ 1012.251735][T25996] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1012.357152][   T30] audit: type=1800 audit(976.994:128): pid=25996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8431" name="file1" dev="loop4" ino=30 res=0 errno=0
[ 1012.369140][T23360] usb 2-1: USB disconnect, device number 113
[ 1012.369334][    C0] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -19
[ 1012.407740][ T5887] udevd[5887]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[ 1013.077726][T26017] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[ 1013.095663][T26026] loop3: detected capacity change from 0 to 64
[ 1013.151802][T26017] bond3 (unregistering): Released all slaves
[ 1013.458090][T26030] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[ 1013.666345][T16218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1014.079327][T26049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8455'.
[ 1014.217760][T26024] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1014.236617][T26052] SQUASHFS error: Failed to read block 0x1ec: -5
[ 1014.323346][T26052] SQUASHFS error: Unable to read metadata cache entry [1ea]
[ 1014.342866][T26024] XFS (loop6): Ending clean mount
[ 1014.680210][T23269] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1015.937879][T26119] netlink: 'syz.1.8485': attribute type 1 has an invalid length.
[ 1015.979222][T26111] set_capacity_and_notify: 3 callbacks suppressed
[ 1015.979248][T26111] loop0: detected capacity change from 0 to 4096
[ 1016.083711][T26111] ntfs3(loop0): ino=19, mi_enum_attr
[ 1016.109903][T26111] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 1016.217334][   T30] audit: type=1800 audit(980.607:129): pid=26111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8481" name="file1" dev="loop0" ino=30 res=0 errno=0
[ 1016.404493][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1016.416091][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1016.441425][T26129] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1016.846473][T26147] trusted_key: encrypted_key: hex blob is missing
[ 1016.876165][T26148] sctp: [Deprecated]: syz.4.8499 (pid 26148) Use of int in max_burst socket option deprecated.
[ 1016.876165][T26148] Use struct sctp_assoc_value instead
[ 1016.938842][T26156] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8500'.
[ 1016.938987][T26155] No source specified
[ 1017.092378][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1017.179231][T23360] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1017.243520][T26162] loop6: detected capacity change from 0 to 2048
[ 1017.273593][T26162] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[ 1017.307795][T26162] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1017.322878][T26161] loop4: detected capacity change from 0 to 4096
[ 1017.365033][T26161] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 1017.377489][T23360] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[ 1017.419968][T23360] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1017.474362][T23360] usb 4-1: config 0 has no interface number 0
[ 1017.476730][T26161] ntfs3(loop4): ino=19, mi_enum_attr
[ 1017.510032][T23360] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1017.521378][T26161] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1017.575606][T23360] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1017.613639][T23360] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1017.643619][T26161] ntfs3(loop4): failed to convert "c46c" to macgreek
[ 1017.684910][T23360] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1017.717196][T23360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.731433][T26161] ntfs3(loop4): ino=20, mi_enum_attr
[ 1017.752637][T23360] usb 4-1: Product: syz
[ 1017.772355][T23360] usb 4-1: Manufacturer: syz
[ 1017.787791][T26170] loop5: detected capacity change from 0 to 4096
[ 1017.794872][T23360] usb 4-1: SerialNumber: syz
[ 1017.806990][T23360] usb 4-1: config 0 descriptor??
[ 1017.887657][T26170] ntfs3(loop5): ino=19, mi_enum_attr
[ 1017.930597][T26170] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1018.012975][    T9] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 1018.054585][   T30] audit: type=1800 audit(982.328:130): pid=26170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8509" name="file1" dev="loop5" ino=30 res=0 errno=0
[ 1018.226772][    T9] usb 1-1: Using ep0 maxpacket: 32
[ 1018.252217][    T9] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[ 1018.276319][    T9] usb 1-1: config 0 has no interface number 0
[ 1018.298057][    T9] usb 1-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1018.316195][T26187] netlink: 'syz.6.8516': attribute type 26 has an invalid length.
[ 1018.322139][T23360] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1018.330246][    T9] usb 1-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1018.382890][T23360] usb 4-1: USB disconnect, device number 127
[ 1018.385614][    T9] usb 1-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27
[ 1018.438094][    T9] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1018.525859][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1018.566692][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1018.593176][    T9] usb 1-1: Product: syz
[ 1018.607750][    T9] usb 1-1: Manufacturer: syz
[ 1018.621539][    T9] usb 1-1: SerialNumber: syz
[ 1018.648676][    T9] usb 1-1: config 0 descriptor??
[ 1018.670787][T26175] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1018.727422][    T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input60
[ 1018.752673][ T4973] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[ 1019.145626][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1019.162802][    T9] usb 1-1: USB disconnect, device number 127
[ 1019.168974][    C0] bcm5974 1-1:0.119: trackpad urb failed: -19
[ 1019.930618][T26232] loop4: detected capacity change from 0 to 512
[ 1020.079486][T26236] loop0: detected capacity change from 0 to 256
[ 1020.119579][T26236] exfat: Deprecated parameter 'utf8'
[ 1020.155222][T26236] exfat: Deprecated parameter 'utf8'
[ 1020.227594][T26236] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[ 1020.329239][T26242] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[ 1020.381480][T26244] netlink: 'syz.3.8547': attribute type 2 has an invalid length.
[ 1020.406380][ T5753] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1020.600064][ T5753] usb 7-1: Using ep0 maxpacket: 8
[ 1020.624655][ T5753] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1020.660421][ T5753] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[ 1020.686309][T26217] loop1: detected capacity change from 0 to 32768
[ 1020.703088][ T5753] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1020.745128][ T5753] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[ 1020.783559][T26217] JBD2: Ignoring recovery information on journal
[ 1020.791835][ T5753] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1020.828968][ T5753] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1020.864838][ T5753] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[ 1020.874891][ T5753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.895783][ T5753] usb 7-1: Product: syz
[ 1020.917533][ T5753] usb 7-1: Manufacturer: syz
[ 1020.932751][ T5753] usb 7-1: SerialNumber: syz
[ 1020.946030][T26217] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1020.996136][ T5753] usb 7-1: config 0 descriptor??
[ 1021.014952][T26240] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1021.326932][ T5622] ocfs2: Unmounting device (7,1) on (node local)
[ 1021.966627][ T5635] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1022.078449][T26285] netlink: 'syz.6.8565': attribute type 8 has an invalid length.
[ 1022.166128][   T30] audit: type=1400 audit(986.175:131): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26286 comm="syz.3.8566"
[ 1022.230919][ T5635] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1022.265384][ T5635] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1022.296034][ T5635] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1022.331890][ T5635] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1022.447966][T26262] loop5: detected capacity change from 0 to 32768
[ 1022.488606][T26262] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8555 (26262)
[ 1022.549823][T26298] netlink: 'syz.6.8571': attribute type 2 has an invalid length.
[ 1022.558167][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1022.571636][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1022.588814][T26262] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1022.606023][T26262] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1022.630759][ T5753] rc_core: IR keymap rc-snapstream-firefly not found
[ 1022.650234][ T5753] Registered IR keymap rc-empty
[ 1022.664933][ T5753] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[ 1022.742922][T26300] loop1: detected capacity change from 0 to 1024
[ 1022.762657][ T5753] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input61
[ 1022.805524][T26262] BTRFS info (device loop5): enabling ssd optimizations
[ 1022.860226][ T5753] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input62
[ 1022.864222][T26262] BTRFS info (device loop5): turning on async discard
[ 1022.903443][   T30] audit: type=1800 audit(986.867:132): pid=26300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8572" name="file1" dev="loop1" ino=20 res=0 errno=0
[ 1022.933028][T26262] BTRFS info (device loop5): enabling free space tree
[ 1022.966501][ T5753] usb 7-1: USB disconnect, device number 6
[ 1022.972440][    C1] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[ 1023.027110][ T4973] ati_remote 7-1:0.0: ati_remote_open: usb_submit_urb failed!
[ 1023.182646][ T5626] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1023.241447][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1023.495954][ T5635] stv0680 1-1:4.0: STV(e): camera ping failed!!
[ 1023.716004][ T5635] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[ 1023.749029][ T5635] stv0680 1-1:4.0: last error: 90,  command = 0xeb
[ 1023.800506][ T5635] usb 1-1: USB disconnect, device number 2
[ 1024.212129][T26347] netlink: 'syz.5.8588': attribute type 39 has an invalid length.
[ 1024.316760][T26347] hsr_slave_0 (unregistering): left promiscuous mode
[ 1024.459444][T26351] QAT: failed to copy from user cfg_data.
[ 1024.776452][T26355] loop3: detected capacity change from 0 to 1024
[ 1024.815084][T26361] overlayfs: conflicting options: userxattr,metacopy=on
[ 1024.949453][   T30] audit: type=1800 audit(988.785:133): pid=26355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8592" name="file1" dev="loop3" ino=20 res=0 errno=0
[ 1025.290891][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1025.482551][ T5788] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1025.618779][T26377] netlink: 'syz.4.8603': attribute type 8 has an invalid length.
[ 1025.674579][ T5788] usb 7-1: Using ep0 maxpacket: 16
[ 1025.698436][ T5788] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1025.741878][ T5788] usb 7-1: config 1 has an invalid interface number: 93 but max is 0
[ 1025.776923][ T5788] usb 7-1: config 1 has no interface number 0
[ 1025.795630][ T5788] usb 7-1: config 1 interface 93 has no altsetting 0
[ 1025.835227][ T5788] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=56.2a
[ 1025.864892][T26383] loop5: detected capacity change from 0 to 2048
[ 1025.866786][ T5788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.920159][ T5788] usb 7-1: Product: syz
[ 1025.936075][T26387] netlink: 'syz.4.8608': attribute type 2 has an invalid length.
[ 1025.952572][ T5788] usb 7-1: Manufacturer: syz
[ 1025.959412][T26383] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1025.978836][ T5788] usb 7-1: SerialNumber: syz
[ 1025.999391][T26357] loop1: detected capacity change from 0 to 32768
[ 1026.082853][T26357] JBD2: Ignoring recovery information on journal
[ 1026.245730][T26390] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1026.260267][ T5788] option 7-1:1.93: GSM modem (1-port) converter detected
[ 1026.313414][ T5788] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0
[ 1026.361022][T26357] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1026.391460][ T5788] usb 7-1: USB disconnect, device number 7
[ 1026.500820][T26394] loop3: detected capacity change from 0 to 512
[ 1026.516258][ T5788] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[ 1026.575339][ T5788] option 7-1:1.93: device disconnected
[ 1026.623279][T26394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1027.073838][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1027.257955][ T5622] ocfs2: Unmounting device (7,1) on (node local)
[ 1027.442955][T26405] bond1: entered promiscuous mode
[ 1027.489309][T26405] bond1: entered allmulticast mode
[ 1027.518542][T26405] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1027.639777][T26406] vti0: entered promiscuous mode
[ 1027.643357][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8619'.
[ 1027.665125][T26406] vti0: entered allmulticast mode
[ 1028.699682][T26444] loop6: detected capacity change from 0 to 1024
[ 1028.712615][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1028.723931][T16213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1028.730067][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[ 1029.083715][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1029.287946][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1029.302858][    T9] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1029.333529][    T9] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[ 1029.360739][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1029.394431][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1029.407571][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1029.436567][ T5767] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[ 1029.444793][    T9] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[ 1029.478170][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.508627][    T9] usb 4-1: Product: syz
[ 1029.528026][    T9] usb 4-1: Manufacturer: syz
[ 1029.544018][    T9] usb 4-1: SerialNumber: syz
[ 1029.568135][    T9] usb 4-1: config 0 descriptor??
[ 1029.581910][T26433] loop4: detected capacity change from 0 to 32768
[ 1029.606567][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1029.633348][    T9] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1029.647096][ T5767] usb 2-1: config index 0 descriptor too short (expected 86, got 68)
[ 1029.662443][ T5767] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1029.683802][    T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input63
[ 1029.712542][T26433] JBD2: Ignoring recovery information on journal
[ 1029.739452][ T5767] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1029.827724][ T5767] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 1029.883997][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1029.910527][ T5767] usb 2-1: SerialNumber: syz
[ 1029.943741][T26433] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1029.986988][ T5767] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 1030.012892][T26445] loop5: detected capacity change from 0 to 32768
[ 1030.018688][ T5354] usb 4-1: USB disconnect, device number 2
[ 1030.031975][ T5767] usb-storage 2-1:1.0: USB Mass Storage device detected
[ 1030.073318][T26445] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[ 1030.088066][ T5767] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 1030.138499][T26445] JBD2: Ignoring recovery information on journal
[ 1030.154109][ T5767] scsi host1: usb-storage 2-1:1.0
[ 1030.332562][T26445] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1030.604303][ T5623] ocfs2: Unmounting device (7,4) on (node local)
[ 1030.762986][T16225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1030.892528][ T5626] ocfs2: Unmounting device (7,5) on (node local)
[ 1031.475650][T26499] netlink: 'syz.4.8657': attribute type 21 has an invalid length.
[ 1031.723831][ T5753] usb 2-1: USB disconnect, device number 114
[ 1032.161765][ T5767] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 1032.353425][ T5767] usb 6-1: Using ep0 maxpacket: 8
[ 1032.375215][ T5767] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1032.404912][ T5767] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[ 1032.428374][T26517] geneve2: left promiscuous mode
[ 1032.438289][ T5767] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1032.482366][ T5767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1032.532100][ T5767] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[ 1032.569506][ T5767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.600111][ T5767] usb 6-1: Product: syz
[ 1032.615217][ T5767] usb 6-1: Manufacturer: syz
[ 1032.634075][ T5767] usb 6-1: SerialNumber: syz
[ 1032.662641][ T5767] usb 6-1: config 0 descriptor??
[ 1032.687214][ T5767] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1032.703975][ T5767] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1032.761807][ T5767] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input64
[ 1033.022160][T26538] loop1: detected capacity change from 0 to 2048
[ 1033.037785][T18442] usb 6-1: USB disconnect, device number 120
[ 1033.038041][T26539] loop4: detected capacity change from 0 to 4096
[ 1033.055659][T26538] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1033.142563][T26545] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1033.258327][T26539] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[ 1033.331120][T26539] Remounting filesystem read-only
[ 1033.844507][   T30] audit: type=1326 audit(997.105:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26564 comm="syz.3.8690" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48d99ce59 code=0x7ffc0000
[ 1033.972484][   T30] audit: type=1326 audit(997.133:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26564 comm="syz.3.8690" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48d99ce59 code=0x7ffc0000
[ 1034.087219][   T30] audit: type=1326 audit(997.142:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26564 comm="syz.3.8690" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fc48d99ce59 code=0x7ffc0000
[ 1034.153863][   T30] audit: type=1326 audit(997.142:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26564 comm="syz.3.8690" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48d99ce59 code=0x7ffc0000
[ 1034.258983][   T30] audit: type=1326 audit(997.142:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26564 comm="syz.3.8690" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc48d99ce59 code=0x7ffc0000
[ 1034.442168][T26582] loop0: detected capacity change from 0 to 512
[ 1034.474521][T26582] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1034.513499][T26582] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1034.580110][T26582] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.8695: bad orphan inode 131083
[ 1034.625052][T26582] loop0: lost filesystem error report for type 5 error -117
[ 1034.656616][T26582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1034.815829][T26582] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.8695: Logical block already allocated
[ 1034.867746][T16218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1034.879551][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1034.994745][T26562] loop1: detected capacity change from 0 to 40427
[ 1035.023299][T26562] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 1035.038497][T26598] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16)
[ 1035.059470][T26562] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1035.090330][T26562] F2FS-fs (loop1): invalid crc value
[ 1035.100011][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1035.215549][T26603] loop6: detected capacity change from 0 to 1024
[ 1035.250108][ T5354] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 1035.370499][T26608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8708'.
[ 1035.442059][ T5354] usb 6-1: Using ep0 maxpacket: 16
[ 1035.469714][T26562] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1035.475962][ T5354] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1035.481384][T26603] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1035.516719][T26562] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1035.527316][T26603] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1035.527746][ T5354] usb 6-1: config 1 has an invalid interface number: 93 but max is 0
[ 1035.550482][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1035.566580][T26562] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1035.596191][ T5354] usb 6-1: config 1 has no interface number 0
[ 1035.625538][ T5354] usb 6-1: config 1 interface 93 has no altsetting 0
[ 1035.648367][ T5753] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1035.678140][ T5354] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0203, bcdDevice=56.2a
[ 1035.714551][ T5354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.741949][ T5354] usb 6-1: Product: syz
[ 1035.746338][ T5354] usb 6-1: Manufacturer: syz
[ 1035.757156][ T5354] usb 6-1: SerialNumber: syz
[ 1035.859814][ T5753] usb 1-1: Using ep0 maxpacket: 8
[ 1035.862532][T26615] nftables ruleset with unbound chain
[ 1035.887670][ T5753] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1035.924249][ T5753] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1035.964902][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1036.009529][ T5753] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1036.046049][ T5354] option 6-1:1.93: GSM modem (1-port) converter detected
[ 1036.065899][ T5753] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1036.090495][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1036.101857][ T5354] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0
[ 1036.127662][ T5753] usb 1-1: Product: syz
[ 1036.152502][ T5753] usb 1-1: Manufacturer: syz
[ 1036.164295][ T5354] usb 6-1: USB disconnect, device number 121
[ 1036.184744][ T5753] usb 1-1: SerialNumber: syz
[ 1036.227457][ T5753] usb 1-1: config 0 descriptor??
[ 1036.237510][ T5354] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[ 1036.287704][ T5354] option 6-1:1.93: device disconnected
[ 1036.491288][ T5767] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1036.494998][ T5753] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71
[ 1036.529587][ T5753] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5
[ 1036.582833][ T5753] usb 1-1: USB disconnect, device number 3
[ 1036.705148][ T5767] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1036.721099][ T5767] usb 4-1: config 114 has an invalid interface number: 240 but max is 0
[ 1036.747942][ T5767] usb 4-1: config 114 has no interface number 0
[ 1036.765097][ T5767] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[ 1036.786862][ T5767] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[ 1036.820140][ T5767] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[ 1036.833220][ T5767] usb 4-1: config 114 interface 240 has no altsetting 0
[ 1036.860692][ T5767] usb 4-1: string descriptor 0 read error: -22
[ 1036.872846][ T5767] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[ 1036.905275][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.926146][T16224] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1036.960431][T26622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1036.980617][T26622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1036.999466][ T5767] ir_usb 4-1:114.240: IR Dongle converter detected
[ 1037.043199][T26636] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[ 1037.260224][ T5767] usb 4-1: IR Dongle converter now attached to ttyUSB0
[ 1037.401460][T26626] loop4: detected capacity change from 0 to 32768
[ 1037.554694][ T5354] usb 4-1: USB disconnect, device number 3
[ 1037.644053][ T5354] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[ 1037.681259][ T5354] ir_usb 4-1:114.240: device disconnected
[ 1037.738638][T26651] loop6: detected capacity change from 0 to 256
[ 1037.787131][T26653] bridge4: entered promiscuous mode
[ 1037.823200][T26653] bridge4: entered allmulticast mode
[ 1038.459873][T26671] loop4: detected capacity change from 0 to 256
[ 1038.495040][T26674] comedi comedi2: ni_at_a2150: I/O base address or length out of range
[ 1038.538767][T26679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8741'.
[ 1039.240594][T26701] netlink: 'syz.5.8753': attribute type 3 has an invalid length.
[ 1040.083177][T26724] loop6: detected capacity change from 0 to 64
[ 1040.152815][T26724] hfs: unable to locate alternate MDB
[ 1040.192190][T26726] loop1: detected capacity change from 0 to 1024
[ 1040.198678][T26724] hfs: continuing without an alternate MDB
[ 1040.276886][   T30] audit: type=1800 audit(1003.122:139): pid=26724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8765" name="file1" dev="loop6" ino=22 res=0 errno=0
[ 1040.318827][T26686] loop0: detected capacity change from 0 to 32768
[ 1040.347976][T16218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1040.388395][T26726] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1040.414823][T26686] JBD2: Ignoring recovery information on journal
[ 1040.426036][T26726] hfsplus: request for non-existent node 33423360 in B*Tree
[ 1040.552040][T16218] 
[ 1040.554401][T16218] ======================================================
[ 1040.561413][T16218] WARNING: possible circular locking dependency detected
[ 1040.568434][T16218] syzkaller #0 Tainted: G             L     
[ 1040.574410][T16218] ------------------------------------------------------
[ 1040.581429][T16218] kworker/u8:10/16218 is trying to acquire lock:
[ 1040.587756][T16218] ffff888078e5d870 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0
[ 1040.598547][T16218] 
[ 1040.598547][T16218] but task is already holding lock:
[ 1040.605991][T16218] ffff88802619e0a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330
[ 1040.615543][T16218] 
[ 1040.615543][T16218] which lock already depends on the new lock.
[ 1040.615543][T16218] 
[ 1040.625936][T16218] 
[ 1040.625936][T16218] the existing dependency chain (in reverse order) is:
[ 1040.634939][T16218] 
[ 1040.634939][T16218] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}:
[ 1040.643068][T16218]        __mutex_lock+0x1a4/0x1b10
[ 1040.648187][T16218]        hfs_find_init+0x273/0x330
[ 1040.653311][T16218]        hfs_ext_read_extent+0x19d/0x9d0
[ 1040.658969][T16218]        hfs_extend_file+0x4ff/0xcf0
[ 1040.664282][T16218]        hfs_bmap_reserve+0x2ab/0x3a0
[ 1040.669676][T16218]        hfs_cat_create+0x348/0x980
[ 1040.674899][T16218]        hfs_mkdir+0x7d/0x100
[ 1040.679599][T16218]        vfs_mkdir+0x361/0x850
[ 1040.684388][T16218]        filename_mkdirat+0x48b/0x5e0
[ 1040.689775][T16218]        __x64_sys_mkdirat+0x89/0xc0
[ 1040.695070][T16218]        do_syscall_64+0x10b/0xf80
[ 1040.700185][T16218]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1040.706608][T16218] 
[ 1040.706608][T16218] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}:
[ 1040.715838][T16218]        __lock_acquire+0x14b8/0x2630
[ 1040.721230][T16218]        lock_acquire+0x1b1/0x370
[ 1040.726266][T16218]        __mutex_lock+0x1a4/0x1b10
[ 1040.731385][T16218]        hfs_extend_file+0xa6/0xcf0
[ 1040.736612][T16218]        hfs_bmap_reserve+0x2ab/0x3a0
[ 1040.742005][T16218]        __hfs_ext_write_extent+0x3c4/0x510
[ 1040.747924][T16218]        hfs_ext_write_extent+0x1b7/0x200
[ 1040.753668][T16218]        hfs_write_inode+0xce/0xab0
[ 1040.758869][T16218]        __writeback_single_inode+0xcd4/0x1350
[ 1040.765057][T16218]        writeback_sb_inodes+0x766/0x1c60
[ 1040.770810][T16218]        wb_writeback+0x1bf/0xb90
[ 1040.775860][T16218]        wb_workfn+0x14f/0xc00
[ 1040.780654][T16218]        process_one_work+0xa0e/0x1980
[ 1040.786126][T16218]        worker_thread+0x5ef/0xe50
[ 1040.791255][T16218]        kthread+0x370/0x450
[ 1040.795857][T16218]        ret_from_fork+0x72b/0xd50
[ 1040.800986][T16218]        ret_from_fork_asm+0x1a/0x30
[ 1040.806296][T16218] 
[ 1040.806296][T16218] other info that might help us debug this:
[ 1040.806296][T16218] 
[ 1040.816513][T16218]  Possible unsafe locking scenario:
[ 1040.816513][T16218] 
[ 1040.823951][T16218]        CPU0                    CPU1
[ 1040.829310][T16218]        ----                    ----
[ 1040.834666][T16218]   lock(&tree->tree_lock#2/1);
[ 1040.839550][T16218]                                lock(&HFS_I(tree->inode)->extents_lock);
[ 1040.848057][T16218]                                lock(&tree->tree_lock#2/1);
[ 1040.855456][T16218]   lock(&HFS_I(tree->inode)->extents_lock);
[ 1040.861448][T16218] 
[ 1040.861448][T16218]  *** DEADLOCK ***
[ 1040.861448][T16218] 
[ 1040.869581][T16218] 3 locks held by kworker/u8:10/16218:
[ 1040.875032][T16218]  #0: ffff88801eabb940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1040.885827][T16218]  #1: ffffc90009427d08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1040.897720][T16218]  #2: ffff88802619e0a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330
[ 1040.907718][T16218] 
[ 1040.907718][T16218] stack backtrace:
[ 1040.913609][T16218] CPU: 0 UID: 0 PID: 16218 Comm: kworker/u8:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1040.913661][T16218] Tainted: [L]=SOFTLOCKUP
[ 1040.913674][T16218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1040.913700][T16218] Workqueue: writeback wb_workfn (flush-7:6)
[ 1040.913765][T16218] Call Trace:
[ 1040.913777][T16218]  <TASK>
[ 1040.913789][T16218]  dump_stack_lvl+0x100/0x190
[ 1040.913827][T16218]  print_circular_bug.cold+0x178/0x1c7
[ 1040.913888][T16218]  check_noncircular+0x146/0x160
[ 1040.913933][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.913984][T16218]  __lock_acquire+0x14b8/0x2630
[ 1040.914031][T16218]  ? __pfx_stack_trace_save+0x10/0x10
[ 1040.914069][T16218]  lock_acquire+0x1b1/0x370
[ 1040.914110][T16218]  ? hfs_extend_file+0xa6/0xcf0
[ 1040.914168][T16218]  ? __pfx___might_resched+0x10/0x10
[ 1040.914218][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.914261][T16218]  ? add_lock_to_list+0x99/0x110
[ 1040.914296][T16218]  __mutex_lock+0x1a4/0x1b10
[ 1040.914331][T16218]  ? hfs_extend_file+0xa6/0xcf0
[ 1040.914387][T16218]  ? hfs_extend_file+0xa6/0xcf0
[ 1040.914445][T16218]  ? hfs_write_inode+0xce/0xab0
[ 1040.914477][T16218]  ? __writeback_single_inode+0xcd4/0x1350
[ 1040.914536][T16218]  ? __pfx___mutex_lock+0x10/0x10
[ 1040.914572][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.914615][T16218]  ? lock_acquire+0x1b1/0x370
[ 1040.914661][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.914704][T16218]  ? trace_contention_end+0x122/0x170
[ 1040.914752][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.914799][T16218]  ? hfs_extend_file+0xa6/0xcf0
[ 1040.914854][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.914897][T16218]  hfs_extend_file+0xa6/0xcf0
[ 1040.914959][T16218]  ? __pfx_hfs_extend_file+0x10/0x10
[ 1040.915015][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.915065][T16218]  hfs_bmap_reserve+0x2ab/0x3a0
[ 1040.915122][T16218]  __hfs_ext_write_extent+0x3c4/0x510
[ 1040.915178][T16218]  ? hfs_find_init+0x273/0x330
[ 1040.915218][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.915265][T16218]  hfs_ext_write_extent+0x1b7/0x200
[ 1040.915322][T16218]  ? __pfx_hfs_ext_write_extent+0x10/0x10
[ 1040.915384][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.915428][T16218]  ? __mpage_writepages+0x1a8/0x210
[ 1040.915463][T16218]  ? __pfx___mpage_writepages+0x10/0x10
[ 1040.915501][T16218]  hfs_write_inode+0xce/0xab0
[ 1040.915536][T16218]  ? __pfx_hfs_write_inode+0x10/0x10
[ 1040.915569][T16218]  ? __lock_acquire+0x4a5/0x2630
[ 1040.915624][T16218]  ? __writeback_single_inode+0x454/0x1350
[ 1040.915681][T16218]  ? __writeback_single_inode+0x454/0x1350
[ 1040.915738][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.915787][T16218]  __writeback_single_inode+0xcd4/0x1350
[ 1040.915849][T16218]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1040.915911][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.915954][T16218]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1040.916006][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.916052][T16218]  writeback_sb_inodes+0x766/0x1c60
[ 1040.916120][T16218]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1040.916176][T16218]  ? wakeup_preempt_fair+0x630/0x1050
[ 1040.916260][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.916303][T16218]  ? rcu_is_watching+0x12/0xc0
[ 1040.916356][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.916398][T16218]  ? queue_io+0x287/0x540
[ 1040.916447][T16218]  wb_writeback+0x1bf/0xb90
[ 1040.916508][T16218]  ? __pfx_wb_writeback+0x10/0x10
[ 1040.916570][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.916614][T16218]  ? mark_held_locks+0x40/0x70
[ 1040.916655][T16218]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1040.916710][T16218]  wb_workfn+0x14f/0xc00
[ 1040.916767][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.916810][T16218]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1040.916867][T16218]  ? __pfx_wb_workfn+0x10/0x10
[ 1040.916929][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.916974][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.917019][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.917063][T16218]  ? rcu_is_watching+0x12/0xc0
[ 1040.917114][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.917161][T16218]  process_one_work+0xa0e/0x1980
[ 1040.917215][T16218]  ? __pfx_process_one_work+0x10/0x10
[ 1040.917258][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.917309][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.917355][T16218]  worker_thread+0x5ef/0xe50
[ 1040.917407][T16218]  ? kthread+0x13a/0x450
[ 1040.917444][T16218]  ? __pfx_worker_thread+0x10/0x10
[ 1040.917486][T16218]  kthread+0x370/0x450
[ 1040.917524][T16218]  ? __pfx_kthread+0x10/0x10
[ 1040.917564][T16218]  ret_from_fork+0x72b/0xd50
[ 1040.917607][T16218]  ? __pfx_ret_from_fork+0x10/0x10
[ 1040.917651][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1040.917694][T16218]  ? __switch_to+0x800/0x1100
[ 1040.917745][T16218]  ? __switch_to_asm+0x39/0x70
[ 1040.917801][T16218]  ? __pfx_kthread+0x10/0x10
[ 1040.917844][T16218]  ret_from_fork_asm+0x1a/0x30
[ 1040.917905][T16218]  </TASK>
[ 1041.485638][T16225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1041.503792][T26714] loop5: detected capacity change from 0 to 32768
[ 1041.512003][T16218] hfs: new node 0 already hashed?
[ 1041.517664][T16218] ------------[ cut here ]------------
[ 1041.523146][T16218] 1
[ 1041.523161][T16218] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#0: kworker/u8:10/16218
[ 1041.536045][T16218] Modules linked in:
[ 1041.539962][T16218] CPU: 0 UID: 0 PID: 16218 Comm: kworker/u8:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1041.551225][T16218] Tainted: [L]=SOFTLOCKUP
[ 1041.555585][T16218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1041.560702][T26686] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1041.565832][T16218] Workqueue: writeback wb_workfn (flush-7:6)
[ 1041.581122][T16218] RIP: 0010:hfs_bnode_create.cold+0x41/0x49
[ 1041.587376][T16218] Code: 85 51 65 0a e9 97 43 d1 01 e8 2b 21 e1 00 4c 89 f7 e8 73 51 65 0a e8 1e 21 e1 00 89 ee 48 c7 c7 40 e9 d1 8b e8 b0 df fa ff 90 <0f> 0b 90 e9 99 46 d1 01 e8 02 21 e1 00 e8 2d 5b 4d 00 e9 f5 48 d1
[ 1041.607663][T16218] RSP: 0018:ffffc90009427020 EFLAGS: 00010282
[ 1041.613765][T16218] RAX: 000000000000001f RBX: ffff888076f72300 RCX: 0000000000000000
[ 1041.622848][T16218] RDX: 000000000000001f RSI: ffffffff81e72d69 RDI: fffff52001284df5
[ 1041.623646][T26714] XFS (loop5): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[ 1041.631359][T16218] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1041.652650][T16218] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000
[ 1041.660649][T16218] R13: ffff88802619e000 R14: ffff88802619e0d8 R15: 0000000000000000
[ 1041.668672][T16218] FS:  0000000000000000(0000) GS:ffff88812436b000(0000) knlGS:0000000000000000
[ 1041.677787][T16218] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1041.684550][T16218] CR2: 00007f4ab6185b00 CR3: 00000000830af000 CR4: 0000000000350ef0
[ 1041.692567][T16218] Call Trace:
[ 1041.695888][T16218]  <TASK>
[ 1041.698829][T16218]  ? _raw_spin_unlock+0x28/0x50
[ 1041.703855][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.706685][T16223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1041.709610][T16218]  ? hfs_bnode_put+0x208/0x480
[ 1041.724913][T16218]  hfs_bmap_alloc+0x5a7/0x6b0
[ 1041.729673][T16218]  ? __pfx_hfs_bmap_alloc+0x10/0x10
[ 1041.734907][T16218]  ? __asan_memcpy+0x3c/0x60
[ 1041.739573][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.745238][T16218]  ? hfs_bnode_read.part.0+0x298/0x330
[ 1041.750775][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.756626][T16218]  ? folio_mark_accessed+0xf3/0x1040
[ 1041.761989][T16218]  hfs_btree_inc_height.isra.0+0xff/0x820
[ 1041.767791][T16218]  ? rcu_is_watching+0x12/0xc0
[ 1041.772597][T16218]  ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10
[ 1041.778990][T16218]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1041.784380][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.790212][T16218]  ? _raw_spin_unlock+0x28/0x50
[ 1041.795105][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.800805][T16218]  ? hfs_bnode_put+0x208/0x480
[ 1041.805624][T16218]  hfs_brec_insert+0x8ba/0xc20
[ 1041.810492][T16218]  ? __pfx_hfs_brec_insert+0x10/0x10
[ 1041.815822][T16218]  ? hfs_bmap_reserve+0x2c5/0x3a0
[ 1041.820913][T16218]  __hfs_ext_write_extent+0x3ef/0x510
[ 1041.826370][T16218]  ? hfs_find_init+0x273/0x330
[ 1041.831169][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.836887][T16218]  hfs_ext_write_extent+0x1b7/0x200
[ 1041.842149][T16218]  ? __pfx_hfs_ext_write_extent+0x10/0x10
[ 1041.847961][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.853661][T16218]  ? __mpage_writepages+0x1a8/0x210
[ 1041.858886][T16218]  ? __pfx___mpage_writepages+0x10/0x10
[ 1041.864665][T16218]  hfs_write_inode+0xce/0xab0
[ 1041.869371][T16218]  ? __pfx_hfs_write_inode+0x10/0x10
[ 1041.874719][T16218]  ? __lock_acquire+0x4a5/0x2630
[ 1041.879712][T16218]  ? __writeback_single_inode+0x454/0x1350
[ 1041.885629][T16218]  ? __writeback_single_inode+0x454/0x1350
[ 1041.891636][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.897471][T16218]  __writeback_single_inode+0xcd4/0x1350
[ 1041.903160][T16218]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1041.909359][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.915120][T16218]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1041.920390][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.926065][T16218]  writeback_sb_inodes+0x766/0x1c60
[ 1041.931363][T16218]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1041.937059][T16218]  ? wakeup_preempt_fair+0x630/0x1050
[ 1041.942558][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.948224][T16218]  ? rcu_is_watching+0x12/0xc0
[ 1041.953057][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.958721][T16218]  ? queue_io+0x287/0x540
[ 1041.963170][T16218]  wb_writeback+0x1bf/0xb90
[ 1041.967727][T16218]  ? __pfx_wb_writeback+0x10/0x10
[ 1041.972993][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.978745][T16218]  ? mark_held_locks+0x40/0x70
[ 1041.983584][T16218]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1041.988826][T16218]  wb_workfn+0x14f/0xc00
[ 1041.993121][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1041.998796][T16218]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1042.004808][T16218]  ? __pfx_wb_workfn+0x10/0x10
[ 1042.009602][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.015419][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.021093][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.026791][T16218]  ? rcu_is_watching+0x12/0xc0
[ 1042.031602][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.037311][T16218]  process_one_work+0xa0e/0x1980
[ 1042.042288][T16218]  ? __pfx_process_one_work+0x10/0x10
[ 1042.047736][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.053406][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.059077][T16218]  worker_thread+0x5ef/0xe50
[ 1042.063711][T16218]  ? kthread+0x13a/0x450
[ 1042.068038][T16218]  ? __pfx_worker_thread+0x10/0x10
[ 1042.073180][T16218]  kthread+0x370/0x450
[ 1042.077308][T16218]  ? __pfx_kthread+0x10/0x10
[ 1042.082108][T16218]  ret_from_fork+0x72b/0xd50
[ 1042.086723][T16218]  ? __pfx_ret_from_fork+0x10/0x10
[ 1042.091897][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.097613][T16218]  ? __switch_to+0x800/0x1100
[ 1042.102549][T16218]  ? __switch_to_asm+0x39/0x70
[ 1042.107350][T16218]  ? __pfx_kthread+0x10/0x10
[ 1042.112112][T16218]  ret_from_fork_asm+0x1a/0x30
[ 1042.116913][T16218]  </TASK>
[ 1042.120026][T16218] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1042.127323][T16218] CPU: 0 UID: 0 PID: 16218 Comm: kworker/u8:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1042.138523][T16218] Tainted: [L]=SOFTLOCKUP
[ 1042.142834][T16218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1042.152888][T16218] Workqueue: writeback wb_workfn (flush-7:6)
[ 1042.158925][T16218] Call Trace:
[ 1042.162200][T16218]  <TASK>
[ 1042.165131][T16218]  dump_stack_lvl+0x100/0x190
[ 1042.169822][T16218]  vpanic+0x552/0x970
[ 1042.173816][T16218]  ? __pfx_vpanic+0x10/0x10
[ 1042.178333][T16218]  ? lock_release+0x245/0x310
[ 1042.183035][T16218]  panic+0xd1/0xe0
[ 1042.186764][T16218]  ? __pfx_panic+0x10/0x10
[ 1042.191197][T16218]  ? check_panic_on_warn+0x1f/0x90
[ 1042.196338][T16218]  check_panic_on_warn.cold+0x19/0x34
[ 1042.201727][T16218]  ? hfs_bnode_create.cold+0x41/0x49
[ 1042.207028][T16218]  __warn.cold+0x191/0x328
[ 1042.211457][T16218]  __report_bug+0x296/0x3d0
[ 1042.216000][T16218]  ? hfs_bnode_create.cold+0x41/0x49
[ 1042.221308][T16218]  ? __pfx___report_bug+0x10/0x10
[ 1042.226455][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.232113][T16218]  ? preempt_schedule_thunk+0x16/0x30
[ 1042.237523][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.243175][T16218]  ? preempt_count_add+0x76/0x150
[ 1042.248229][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.253882][T16218]  ? __wake_up_klogd+0xe2/0x140
[ 1042.258759][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.264413][T16218]  ? vprintk_emit+0x1c9/0x6b0
[ 1042.269126][T16218]  ? __pfx_vprintk_emit+0x10/0x10
[ 1042.274191][T16218]  ? hfs_bnode_create.cold+0x41/0x49
[ 1042.279496][T16218]  report_bug+0xb2/0x220
[ 1042.283774][T16218]  ? hfs_bnode_create.cold+0x41/0x49
[ 1042.289079][T16218]  handle_bug+0x16a/0x2a0
[ 1042.293431][T16218]  exc_invalid_op+0x17/0x50
[ 1042.297948][T16218]  asm_exc_invalid_op+0x1a/0x20
[ 1042.302899][T16218] RIP: 0010:hfs_bnode_create.cold+0x41/0x49
[ 1042.308818][T16218] Code: 85 51 65 0a e9 97 43 d1 01 e8 2b 21 e1 00 4c 89 f7 e8 73 51 65 0a e8 1e 21 e1 00 89 ee 48 c7 c7 40 e9 d1 8b e8 b0 df fa ff 90 <0f> 0b 90 e9 99 46 d1 01 e8 02 21 e1 00 e8 2d 5b 4d 00 e9 f5 48 d1
[ 1042.328439][T16218] RSP: 0018:ffffc90009427020 EFLAGS: 00010282
[ 1042.334516][T16218] RAX: 000000000000001f RBX: ffff888076f72300 RCX: 0000000000000000
[ 1042.342580][T16218] RDX: 000000000000001f RSI: ffffffff81e72d69 RDI: fffff52001284df5
[ 1042.350555][T16218] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 1042.358527][T16218] R10: 0000000080000000 R11: 77656e203a736668 R12: dffffc0000000000
[ 1042.366589][T16218] R13: ffff88802619e000 R14: ffff88802619e0d8 R15: 0000000000000000
[ 1042.374577][T16218]  ? vprintk_emit+0x1c9/0x6b0
[ 1042.379386][T16218]  ? _raw_spin_unlock+0x28/0x50
[ 1042.384274][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.389929][T16218]  ? hfs_bnode_put+0x208/0x480
[ 1042.394727][T16218]  hfs_bmap_alloc+0x5a7/0x6b0
[ 1042.399444][T16218]  ? __pfx_hfs_bmap_alloc+0x10/0x10
[ 1042.404667][T16218]  ? __asan_memcpy+0x3c/0x60
[ 1042.409306][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.414961][T16218]  ? hfs_bnode_read.part.0+0x298/0x330
[ 1042.420445][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.426096][T16218]  ? folio_mark_accessed+0xf3/0x1040
[ 1042.431411][T16218]  hfs_btree_inc_height.isra.0+0xff/0x820
[ 1042.437202][T16218]  ? rcu_is_watching+0x12/0xc0
[ 1042.441999][T16218]  ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10
[ 1042.448362][T16218]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1042.453591][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.459244][T16218]  ? _raw_spin_unlock+0x28/0x50
[ 1042.464118][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.469770][T16218]  ? hfs_bnode_put+0x208/0x480
[ 1042.474561][T16218]  hfs_brec_insert+0x8ba/0xc20
[ 1042.479359][T16218]  ? __pfx_hfs_brec_insert+0x10/0x10
[ 1042.484672][T16218]  ? hfs_bmap_reserve+0x2c5/0x3a0
[ 1042.489727][T16218]  __hfs_ext_write_extent+0x3ef/0x510
[ 1042.495128][T16218]  ? hfs_find_init+0x273/0x330
[ 1042.499905][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.505557][T16218]  hfs_ext_write_extent+0x1b7/0x200
[ 1042.510784][T16218]  ? __pfx_hfs_ext_write_extent+0x10/0x10
[ 1042.516536][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.522187][T16218]  ? __mpage_writepages+0x1a8/0x210
[ 1042.527398][T16218]  ? __pfx___mpage_writepages+0x10/0x10
[ 1042.532972][T16218]  hfs_write_inode+0xce/0xab0
[ 1042.537660][T16218]  ? __pfx_hfs_write_inode+0x10/0x10
[ 1042.542954][T16218]  ? __lock_acquire+0x4a5/0x2630
[ 1042.547922][T16218]  ? __writeback_single_inode+0x454/0x1350
[ 1042.553760][T16218]  ? __writeback_single_inode+0x454/0x1350
[ 1042.559639][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.565300][T16218]  __writeback_single_inode+0xcd4/0x1350
[ 1042.571009][T16218]  ? __pfx___writeback_single_inode+0x10/0x10
[ 1042.577142][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.582793][T16218]  ? do_raw_spin_unlock+0x145/0x1e0
[ 1042.588026][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.593682][T16218]  writeback_sb_inodes+0x766/0x1c60
[ 1042.598945][T16218]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1042.604610][T16218]  ? wakeup_preempt_fair+0x630/0x1050
[ 1042.610040][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.615691][T16218]  ? rcu_is_watching+0x12/0xc0
[ 1042.620482][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.626133][T16218]  ? queue_io+0x287/0x540
[ 1042.630489][T16218]  wb_writeback+0x1bf/0xb90
[ 1042.635031][T16218]  ? __pfx_wb_writeback+0x10/0x10
[ 1042.640090][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.645741][T16218]  ? mark_held_locks+0x40/0x70
[ 1042.650524][T16218]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1042.655752][T16218]  wb_workfn+0x14f/0xc00
[ 1042.660028][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.665681][T16218]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1042.671520][T16218]  ? __pfx_wb_workfn+0x10/0x10
[ 1042.676318][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.681969][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.687621][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.693270][T16218]  ? rcu_is_watching+0x12/0xc0
[ 1042.698058][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.703713][T16218]  process_one_work+0xa0e/0x1980
[ 1042.708685][T16218]  ? __pfx_process_one_work+0x10/0x10
[ 1042.714081][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.719740][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.725401][T16218]  worker_thread+0x5ef/0xe50
[ 1042.730023][T16218]  ? kthread+0x13a/0x450
[ 1042.734280][T16218]  ? __pfx_worker_thread+0x10/0x10
[ 1042.739409][T16218]  kthread+0x370/0x450
[ 1042.743499][T16218]  ? __pfx_kthread+0x10/0x10
[ 1042.748106][T16218]  ret_from_fork+0x72b/0xd50
[ 1042.752715][T16218]  ? __pfx_ret_from_fork+0x10/0x10
[ 1042.757845][T16218]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1042.763495][T16218]  ? __switch_to+0x800/0x1100
[ 1042.768202][T16218]  ? __switch_to_asm+0x39/0x70
[ 1042.772992][T16218]  ? __pfx_kthread+0x10/0x10
[ 1042.777598][T16218]  ret_from_fork_asm+0x1a/0x30
[ 1042.782396][T16218]  </TASK>
[ 1042.785629][T16218] Kernel Offset: disabled
[ 1042.790030][T16218] Rebooting in 86400 seconds..