last executing test programs:

3m34.625765507s ago: executing program 3 (id=2125):
r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x8000)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x8, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0xffffffff, 0x9, 0xfeedcafe, 0x0, 0xffffff80, 0x0, 0x7}})

3m34.454147281s ago: executing program 3 (id=2127):
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="e2d36552b9d6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe020, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xa}}}}}}}, 0x0)

3m34.314738565s ago: executing program 3 (id=2128):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0x92, &(0x7f0000000140), &(0x7f0000000080)=0x4)

3m34.09687708s ago: executing program 3 (id=2130):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'macceltic'}}]}, 0x9, 0x610, &(0x7f0000000c80)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

3m33.776067738s ago: executing program 3 (id=2134):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000540))

3m33.183542282s ago: executing program 3 (id=2144):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000280)={0x28, 0x2, 0x0, {0x5, 0x6}}, 0x28)

3m32.686664765s ago: executing program 32 (id=2144):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000280)={0x28, 0x2, 0x0, {0x5, 0x6}}, 0x28)

4.430799241s ago: executing program 2 (id=5276):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4})

4.06053493s ago: executing program 2 (id=5283):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffc, 0x10000003, 0xfffffffa, 0x0, 0x4000000, {}, {0x0, 0x0, 0xfffc, 0x0, 0x4, 0x8}, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)

3.818000386s ago: executing program 2 (id=5286):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280000500030004"], 0x48}}, 0x0)

3.389773787s ago: executing program 2 (id=5292):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000380)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x9}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@nointegrity}, {@discard}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x21, 0x6182, &(0x7f0000001140)="$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")
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0)

3.048036525s ago: executing program 1 (id=5299):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)

2.763802622s ago: executing program 1 (id=5303):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10)

2.656791505s ago: executing program 0 (id=5304):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000100001000010026bd7000ffdbdf25726663343130362867656e657269632d67636d2d6165736e6929", @ANYRESDEC=r0], 0x100}, 0x1, 0x0, 0x0, 0x20004090}, 0x20004000)

2.505735708s ago: executing program 1 (id=5306):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x0, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0xfc, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x4}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xff, 0xff000000], [0x0, 0xff, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'ip6gretap0\x00', {0xff}, {}, 0x6, 0xcc, 0x5, 0x22}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420)

2.299916134s ago: executing program 0 (id=5310):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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")
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)

2.229115655s ago: executing program 1 (id=5311):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e004e740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0)

2.109007038s ago: executing program 1 (id=5313):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB='errors=continue,iocharset=macromanian,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nodiscard,discard=0x000000000000000\x00,discard=0x0000000000000006,quota,nointegrity,discard,noquota,iocharset=cp869,\x00'], 0x21, 0x6182, &(0x7f0000001140)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2.086249969s ago: executing program 2 (id=5314):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SEND(r0, 0xd0009411, &(0x7f0000000140)={{}, 0x0, 0x0, 0x0, 0x3})

2.016724391s ago: executing program 5 (id=5315):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0)

1.747007797s ago: executing program 5 (id=5317):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb}, 0x50)

1.658779579s ago: executing program 0 (id=5318):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.461280074s ago: executing program 4 (id=5320):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0)

1.438979085s ago: executing program 5 (id=5321):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x22, 0x0, &(0x7f0000000800)="00000000000000000000000008004500002800000000400600007f0000017f000001", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.23665997s ago: executing program 4 (id=5322):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x22, 0x4)

1.151069192s ago: executing program 4 (id=5323):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xc, 0x20e02)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000)

1.105793753s ago: executing program 0 (id=5324):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0xc, 0x1, 0xfffffffb}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8808}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000041}, 0x800)

865.127289ms ago: executing program 0 (id=5325):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0)

865.038869ms ago: executing program 4 (id=5326):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}, {0x0, 0x4000}], 0x2}, 0x804)

675.161984ms ago: executing program 1 (id=5327):
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
ioctl$CAPI_GET_ERRCODE(r0, 0x80044325, &(0x7f0000000080))

647.841114ms ago: executing program 4 (id=5328):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x421, 0x4, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x88a9ff9f, 0x26d2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, 0x48}}, 0xc080)

371.157501ms ago: executing program 5 (id=5329):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x7, 0x0, 0xffffffdb, 0x2, 0xf, 0x1fd, 0x1})

280.567934ms ago: executing program 2 (id=5330):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_delrule={0x28, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x28}}, 0x0)

223.870995ms ago: executing program 4 (id=5331):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xf, 0x7ffffffe}]})
sync()

222.856335ms ago: executing program 0 (id=5332):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0)

54.593989ms ago: executing program 5 (id=5333):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf0, 0x401, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232)

0s ago: executing program 5 (id=5334):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@test_dummy_encryption}, {@nojournal_checksum}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@test_dummy_encryption}, {@nodioread_nolock}]}, 0xff, 0x44f, &(0x7f0000000540)="$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")
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

kernel console output (not intermixed with test programs):

" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  413.264996][    C1] vkms_vblank_simulate: vblank timer overrun
[  413.388623][   T27] audit: type=1326 audit(1791927858.536:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.2.3403" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  413.520030][   T27] audit: type=1326 audit(1791927858.536:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.2.3403" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  413.627192][   T27] audit: type=1326 audit(1791927858.536:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.2.3403" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  413.719913][   T27] audit: type=1326 audit(1791927858.556:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.2.3403" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  413.815457][   T27] audit: type=1326 audit(1791927858.556:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.2.3403" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  413.923401][T12668] loop5: detected capacity change from 0 to 8
[  413.962349][   T27] audit: type=1326 audit(1791927858.536:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12647 comm="syz.2.3403" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  414.331990][ T3599] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  414.361259][T12680] loop5: detected capacity change from 0 to 256
[  414.404562][T12680] exfat: Deprecated parameter 'namecase'
[  414.423425][T12680] exfat: Deprecated parameter 'namecase'
[  414.450824][T12680] exfat: Deprecated parameter 'namecase'
[  414.496199][T12680] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  414.548663][ T3599] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.568354][ T3599] usb 3-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  414.588079][ T3599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.604982][ T3599] usb 3-1: Product: syz
[  414.619748][ T3599] usb 3-1: Manufacturer: syz
[  414.624454][ T3599] usb 3-1: SerialNumber: syz
[  414.646207][ T3599] usb 3-1: config 0 descriptor??
[  414.779502][T12688] loop0: detected capacity change from 0 to 256
[  414.862895][ T3599] cdc_subset: probe of 3-1:0.0 failed with error -22
[  415.048426][T12696] loop4: detected capacity change from 0 to 64
[  415.078242][ T3599] usb 3-1: USB disconnect, device number 50
[  415.765606][T12729] x_tables: duplicate underflow at hook 4
[  416.056212][T12741] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.083080][T12741] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.158493][T12746] netlink: 'syz.4.3451': attribute type 10 has an invalid length.
[  416.739898][T12764] loop2: detected capacity change from 0 to 256
[  417.207385][T12758] loop1: detected capacity change from 0 to 32768
[  417.373108][T12787] netlink: 'syz.5.3472': attribute type 11 has an invalid length.
[  417.392739][T12787] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3472'.
[  417.549615][T12782] loop2: detected capacity change from 0 to 4096
[  417.578273][T12793] x_tables: unsorted underflow at hook 4
[  417.590761][T12782] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  417.849911][T12801] xt_TCPMSS: Only works on TCP SYN packets
[  418.115111][T12808] loop4: detected capacity change from 0 to 256
[  418.193006][T12812] loop5: detected capacity change from 0 to 256
[  418.211371][T12808] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  418.650295][T12823] loop2: detected capacity change from 0 to 1024
[  418.719463][T12823] EXT4-fs: Ignoring removed oldalloc option
[  418.741751][T12823] EXT4-fs: Ignoring removed orlov option
[  418.800054][T12795] loop1: detected capacity change from 0 to 32768
[  418.833627][T12823] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  418.851753][T12823] ext4 filesystem being mounted at /666/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  419.073936][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  419.195722][T12843] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  419.296288][T12849] netlink: 292 bytes leftover after parsing attributes in process `syz.5.3499'.
[  419.424722][T12852] netlink: 'syz.4.3500': attribute type 9 has an invalid length.
[  419.453874][T12852] netlink: 'syz.4.3500': attribute type 7 has an invalid length.
[  419.499239][T12852] netlink: 'syz.4.3500': attribute type 8 has an invalid length.
[  419.535617][T12852] netlink: 'syz.4.3500': attribute type 13 has an invalid length.
[  419.825549][ T3599] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  419.840841][T12870] loop0: detected capacity change from 0 to 512
[  419.924972][T12870] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  419.944467][T12870] ext4 filesystem being mounted at /748/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  419.952332][T12865] loop4: detected capacity change from 0 to 4096
[  420.045682][ T3599] usb 3-1: Using ep0 maxpacket: 16
[  420.055715][T12865] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  420.072154][ T3599] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  420.098597][ T3599] usb 3-1: config 0 has no interface number 0
[  420.130986][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  420.136399][ T3599] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  420.202543][ T3599] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  420.244362][ T3599] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  420.268689][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  420.305438][ T3599] usb 3-1: Product: syz
[  420.309886][ T3599] usb 3-1: SerialNumber: syz
[  420.376370][ T3599] usb 3-1: config 0 descriptor??
[  420.401250][ T3599] cm109 3-1:0.8: invalid payload size 0, expected 4
[  420.456097][ T3599] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input20
[  420.484464][T12883] xt_hashlimit: size too large, truncated to 1048576
[  420.611601][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  420.829384][ T3599] usb 3-1: USB disconnect, device number 51
[  420.850025][ T3599] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  420.954955][T12868] loop5: detected capacity change from 0 to 32768
[  421.285642][T12897] delete_channel: no stack
[  421.861672][T12916] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3530'.
[  421.895525][T12916] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3530'.
[  421.942930][T12916] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3530'.
[  422.762311][T12945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'.
[  422.833714][T12945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'.
[  423.072886][T12957] hsr0: mtu greater than device maximum
[  423.471455][ T7502] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  423.675520][ T7502] usb 1-1: Using ep0 maxpacket: 8
[  423.686251][ T7502] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  423.711668][ T7502] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  423.741018][ T7502] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  423.775620][ T7502] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  423.810512][ T7502] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  423.842531][ T7502] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  423.872265][ T7502] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.903720][ T7502] usb 1-1: config 0 descriptor??
[  423.922766][T12961] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  424.394242][ T4284] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  424.405174][ T4588] usb 1-1: USB disconnect, device number 54
[  424.578444][T12981] loop5: detected capacity change from 0 to 4096
[  424.665734][T12981] ntfs3: loop5: ntfs_set_state r=3 failed, -22.
[  424.784495][    T9] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22.
[  424.810672][ T9626] ntfs3: loop5: ntfs_set_state r=3 failed, -22.
[  424.825797][ T9626] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  424.845547][ T9626] ntfs3: loop5: ntfs_set_state r=3 failed, -22.
[  424.856280][ T4320] ntfs3: loop5: ntfs3_write_inode r=3 failed, -22.
[  424.875134][ T9626] ntfs3: loop5: ntfs_evict_inode r=3 failed, -22.
[  424.922258][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3560'.
[  425.162500][T12978] nvme nvme0: failed to connect socket: -512
[  425.209429][T12976] loop4: detected capacity change from 0 to 40427
[  425.256396][T12976] F2FS-fs (loop4): invalid crc value
[  425.312123][T12976] F2FS-fs (loop4): Found nat_bits in checkpoint
[  425.501042][T12976] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  425.565415][   T14] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  425.765559][   T14] usb 1-1: Using ep0 maxpacket: 16
[  425.774794][   T14] usb 1-1: config 252 has an invalid interface number: 15 but max is 0
[  425.813776][   T14] usb 1-1: config 252 has no interface number 0
[  425.832125][   T14] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 16384, setting to 64
[  425.866186][   T14] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  425.895536][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.944201][   T14] usb 1-1: Product: syz
[  425.954323][   T14] usb 1-1: Manufacturer: syz
[  425.971646][   T14] usb 1-1: SerialNumber: syz
[  426.046370][   T14] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  426.121745][T13013] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  426.249355][ T4344] usb 1-1: Failed to submit usb control message: -71
[  426.249393][ T7677] usb 1-1: USB disconnect, device number 55
[  426.285413][ T4344] usb 1-1: unable to send the bmi data to the device: -71
[  426.306895][ T4344] usb 1-1: unable to get target info from device
[  426.313340][ T4344] usb 1-1: could not get target info (-71)
[  426.364715][ T4344] usb 1-1: could not probe fw (-71)
[  426.877421][T13045] loop5: detected capacity change from 0 to 2048
[  426.897391][T13049] loop1: detected capacity change from 0 to 64
[  427.003969][T13054] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  427.088242][T13056] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  427.310489][T13054] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  427.342593][T13054] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  427.399714][T13054] Remounting filesystem read-only
[  427.416235][T13064] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  427.443847][ T9626] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  427.485492][T13064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  427.593341][T13071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3598'.
[  428.031266][T13085] loop2: detected capacity change from 0 to 4096
[  428.076532][T13085] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  428.152881][T13085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  428.242289][   T27] audit: type=1326 audit(1791927873.676:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.0.3609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9f9e2d9 code=0x7ffc0000
[  428.312584][   T27] audit: type=1326 audit(1791927873.676:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.0.3609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9f9e2d9 code=0x7ffc0000
[  428.346813][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  428.355925][   T27] audit: type=1326 audit(1791927873.676:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.0.3609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9f9e2d9 code=0x7ffc0000
[  428.458074][   T27] audit: type=1326 audit(1791927873.676:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.0.3609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f4cf9f9e2d9 code=0x7ffc0000
[  428.515198][   T27] audit: type=1326 audit(1791927873.676:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.0.3609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9f9e2d9 code=0x7ffc0000
[  428.591942][   T27] audit: type=1326 audit(1791927873.676:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.0.3609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9f9e2d9 code=0x7ffc0000
[  428.680654][   T27] audit: type=1326 audit(1791927873.676:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.0.3609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf9f9e2d9 code=0x7ffc0000
[  428.747265][   T27] audit: type=1326 audit(1791927873.676:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.0.3609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4cf9f9e2d9 code=0x7ffc0000
[  428.840202][   T27] audit: type=1326 audit(1791927873.676:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13094 comm="syz.0.3609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4cf9f9e2d9 code=0x7ffc0000
[  429.053881][T13120] loop0: detected capacity change from 0 to 1764
[  429.089366][T13120] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  429.136485][T13120] iso9660: Corrupted directory entry in block 2 of inode 1920
[  429.404597][T13135] loop4: detected capacity change from 0 to 256
[  429.528865][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3629'.
[  429.557077][T13137] device vlan0 entered promiscuous mode
[  429.814752][T13147] nfs: Unknown parameter 'no'
[  429.885078][ T4323] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  430.077041][ T4323] usb 2-1: Using ep0 maxpacket: 16
[  430.098106][ T4323] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  430.121502][ T4323] usb 2-1: config 0 has no interface number 0
[  430.138127][ T4323] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  430.176827][ T4323] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  430.219024][ T4323] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  430.249898][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  430.276558][ T4323] usb 2-1: Product: syz
[  430.280823][ T4323] usb 2-1: SerialNumber: syz
[  430.324135][ T4323] usb 2-1: config 0 descriptor??
[  430.354316][ T4323] cm109 2-1:0.8: invalid payload size 0, expected 4
[  430.379356][ T4323] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input22
[  430.578876][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  430.727989][T13185] netlink: 'syz.2.3652': attribute type 1 has an invalid length.
[  430.808033][ T4323] usb 2-1: USB disconnect, device number 40
[  430.843125][ T4323] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  430.952680][T13187] nvme nvme0: failed to connect socket: -111
[  431.058133][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3655'.
[  431.119752][T13195] loop0: detected capacity change from 0 to 16
[  431.138801][T13195] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  431.674379][T13207] loop1: detected capacity change from 0 to 4096
[  431.981535][T13215] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  432.226792][T13223] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  432.279138][T13223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  432.632272][T13237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3676'.
[  432.662310][T13237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3676'.
[  432.712771][T13240] xt_l2tp: v2 doesn't support IP mode
[  432.958921][   T27] audit: type=1400 audit(1791927878.396:91): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=13246 comm="syz.5.3682"
[  433.122480][T13252] loop0: detected capacity change from 0 to 256
[  433.201809][T13255] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  433.251057][T13255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  433.269530][T13252] FAT-fs (loop0): Directory bread(block 64) failed
[  433.287714][T13252] FAT-fs (loop0): Directory bread(block 65) failed
[  433.294419][T13252] FAT-fs (loop0): Directory bread(block 66) failed
[  433.321929][T13252] FAT-fs (loop0): Directory bread(block 67) failed
[  433.345721][T13252] FAT-fs (loop0): Directory bread(block 68) failed
[  433.352726][T13252] FAT-fs (loop0): Directory bread(block 69) failed
[  433.371735][T13252] FAT-fs (loop0): Directory bread(block 70) failed
[  433.383103][T13252] FAT-fs (loop0): Directory bread(block 71) failed
[  433.415600][T13252] FAT-fs (loop0): Directory bread(block 72) failed
[  433.422267][T13252] FAT-fs (loop0): Directory bread(block 73) failed
[  433.555604][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  433.638158][T13264] netlink: 'syz.4.3690': attribute type 10 has an invalid length.
[  433.663126][T13264] device macvlan0 entered promiscuous mode
[  434.198347][T13287] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  434.501098][T13300] loop0: detected capacity change from 0 to 64
[  434.543798][T13291] nvme nvme0: failed to connect socket: -101
[  435.346469][T13298] loop2: detected capacity change from 0 to 32768
[  435.396556][T13298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.3705 (13298)
[  435.444911][T13298] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  435.473365][T13298] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  435.530794][T13298] BTRFS info (device loop2): using free space tree
[  435.608314][T13343] netlink: 'syz.5.3726': attribute type 1 has an invalid length.
[  435.640492][T13343] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.3726'.
[  435.851222][T13298] BTRFS info (device loop2): enabling ssd optimizations
[  435.919062][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3731'.
[  435.938743][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3731'.
[  436.055694][ T4272] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  436.648581][T13388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3742'.
[  436.685552][T13388] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3742'.
[  437.201250][T13417] ecryptfs_parse_options: eCryptfs: unrecognized option [ecrypt456789abcdef]
[  437.232249][T13417] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  437.255037][T13417] Error parsing options; rc = [-22]
[  437.268645][T13419] netem: change failed
[  437.332342][T13421] cgroup: noprefix used incorrectly
[  438.329510][T13455] loop1: detected capacity change from 0 to 2048
[  438.359183][T13453] loop2: detected capacity change from 0 to 4096
[  438.390631][T13455] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  438.455583][T13455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  438.855507][ T7653] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  438.961507][T13476] cgroup: name respecified
[  439.050998][ T7653] usb 1-1: Using ep0 maxpacket: 32
[  439.059134][ T7653] usb 1-1: config 0 interface 0 has no altsetting 0
[  439.096656][ T7653] usb 1-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6
[  439.121113][ T7653] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.131944][ T7653] usb 1-1: Product: syz
[  439.143708][ T7653] usb 1-1: Manufacturer: syz
[  439.155626][ T7653] usb 1-1: SerialNumber: syz
[  439.169265][T13484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3788'.
[  439.184260][ T7653] usb 1-1: config 0 descriptor??
[  439.215647][T13484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3788'.
[  439.260460][T13484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3788'.
[  439.283681][T13489] vers=2.0 not permitted when mounting with smb3
[  439.283681][T13489] 
[  439.289217][T13484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3788'.
[  439.315201][T13489] CIFS: VFS: vers=2.0 not permitted when mounting with smb3
[  439.339460][T13484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3788'.
[  439.420154][ T7653] usb 1-1: USB disconnect, device number 56
[  439.792943][T13506] SET target dimension over the limit!
[  439.951004][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  439.957637][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  440.174103][T13491] loop5: detected capacity change from 0 to 40427
[  440.181466][T13518] loop4: detected capacity change from 0 to 1024
[  440.239399][T13491] F2FS-fs (loop5): invalid crc value
[  440.275369][T13491] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  440.298149][T13522] netlink: 'syz.2.3806': attribute type 1 has an invalid length.
[  440.539870][T13527] netlink: 'syz.2.3808': attribute type 1 has an invalid length.
[  440.553367][T13491] F2FS-fs (loop5): recover fsync data on readonly fs
[  440.594026][T13491] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  440.635271][T13491] F2FS-fs (loop5): switch extent_cache option is not allowed
[  440.816088][   T27] audit: type=1326 audit(1791927886.256:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.2.3812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  440.875523][   T27] audit: type=1326 audit(1791927886.256:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.2.3812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  440.951204][   T27] audit: type=1326 audit(1791927886.296:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.2.3812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  441.025707][   T27] audit: type=1326 audit(1791927886.296:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.2.3812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  441.108993][T13516] loop0: detected capacity change from 0 to 32768
[  441.125414][   T27] audit: type=1326 audit(1791927886.296:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.2.3812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  441.245154][   T27] audit: type=1326 audit(1791927886.346:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.2.3812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  441.328250][   T27] audit: type=1326 audit(1791927886.346:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.2.3812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  441.427719][   T27] audit: type=1326 audit(1791927886.356:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13534 comm="syz.2.3812" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  441.659558][T13554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  441.678925][T13556] loop2: detected capacity change from 0 to 512
[  441.716127][T13556] EXT4-fs (loop2): orphan cleanup on readonly fs
[  441.732642][T13556] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  441.750236][T13556] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  441.776086][T13556] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.3822: attempt to clear invalid blocks 2 len 1
[  441.857730][T13556] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3822: invalid indirect mapped block 1819239214 (level 0)
[  441.967905][T13556] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3822: invalid indirect mapped block 1819239214 (level 1)
[  442.026307][T13556] EXT4-fs (loop2): 1 truncate cleaned up
[  442.033299][T13556] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  442.095226][T13556] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  442.145529][T13556] EXT4-fs error (device loop2): __ext4_remount:6650: comm syz.2.3822: Abort forced by user
[  442.195060][T13556] EXT4-fs (loop2): Remounting filesystem read-only
[  442.215433][T13556] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  442.393871][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  443.076049][T13601] __nla_validate_parse: 5 callbacks suppressed
[  443.076069][T13601] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3842'.
[  443.186943][T13605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3843'.
[  443.367782][T13614] kAFS: unable to lookup cell '@G|'
[  443.962860][T13638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3856'.
[  444.052990][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3858'.
[  444.083655][T13643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3858'.
[  444.335702][T13645] loop4: detected capacity change from 0 to 4096
[  444.369197][T13645] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  444.495536][T13645] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  444.876171][T13677] TCP: TCP_TX_DELAY enabled
[  445.141501][T13690] loop0: detected capacity change from 0 to 512
[  445.511333][T13703] netlink: 'syz.4.3884': attribute type 10 has an invalid length.
[  445.553317][T13708] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  445.595282][T13703] team0: Port device dummy0 added
[  445.789061][T13716] netlink: 'syz.5.3888': attribute type 5 has an invalid length.
[  446.085540][ T7286] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  446.156215][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'.
[  446.287258][ T7286] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  446.300223][T13735] netlink: 'syz.5.3897': attribute type 1 has an invalid length.
[  446.325462][ T7286] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  446.339343][T13738] xt_l2tp: invalid flags combination: 4
[  446.361160][ T7286] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  446.376023][T13735] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3897'.
[  446.406800][ T7286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.445771][T13719] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  446.718120][ T7653] usb 1-1: USB disconnect, device number 57
[  447.869602][T13790] loop5: detected capacity change from 0 to 64
[  447.935161][T13790] syz.5.3918: attempt to access beyond end of device
[  447.935161][T13790] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64
[  448.006275][T13790] Buffer I/O error on dev loop5, logical block 512, async page read
[  448.017839][T13796] xt_hashlimit: max too large, truncated to 1048576
[  448.055116][T13790] syz.5.3918: attempt to access beyond end of device
[  448.055116][T13790] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64
[  448.132881][T13790] Buffer I/O error on dev loop5, logical block 56576, async page read
[  448.879873][T13835] loop4: detected capacity change from 0 to 256
[  449.246262][T13850] x_tables: duplicate underflow at hook 3
[  449.252978][T13852] loop4: detected capacity change from 0 to 512
[  449.373679][T13852] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  449.395481][ T7502] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  449.409765][T13852] ext4 filesystem being mounted at /768/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  449.472168][T13852] Quota error (device loop4): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[  449.521621][T13852] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  449.563052][T13852] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.3944: Failed to acquire dquot type 0
[  449.615427][ T7502] usb 3-1: Using ep0 maxpacket: 16
[  449.623129][ T7502] usb 3-1: unable to get BOS descriptor or descriptor too short
[  449.666770][ T7502] usb 3-1: config 4 has an invalid interface number: 127 but max is 0
[  449.705503][ T7502] usb 3-1: config 4 has no interface number 0
[  449.729991][ T4287] EXT4-fs (loop4): unmounting filesystem.
[  449.735507][ T7502] usb 3-1: config 4 interface 127 has no altsetting 0
[  449.746880][ T7502] usb 3-1: string descriptor 0 read error: -22
[  449.753176][ T7502] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48
[  449.795761][ T7502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.938687][T13871] x_tables: ip_tables: osf match: only valid for protocol 6
[  450.079631][ T6914] usb 3-1: USB disconnect, device number 52
[  450.133609][T13845] loop1: detected capacity change from 0 to 32768
[  450.355290][T13845] XFS (loop1): Mounting V5 Filesystem
[  450.551944][T13845] XFS (loop1): Ending clean mount
[  450.576423][T13902] loop0: detected capacity change from 0 to 128
[  450.621038][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  450.695641][T13902] FAT-fs (loop0): Filesystem has been set read-only
[  450.731134][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  450.778450][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  450.807062][ T4273] XFS (loop1): Unmounting Filesystem
[  450.846962][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  450.871434][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3960'.
[  450.910249][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  450.934353][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  450.962312][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.011049][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.032632][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.089214][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3962'.
[  451.124030][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.162140][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.206179][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.245251][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.264943][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.306144][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.331015][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.365597][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.394637][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.476478][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.509762][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.555221][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.577271][T13927] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3969'.
[  451.595522][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.624778][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.645726][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.675412][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.689004][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.705519][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.705638][ T6914] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  451.714096][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.805869][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.814581][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.870604][T13938] loop1: detected capacity change from 0 to 256
[  451.885577][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.894296][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.917847][ T6914] usb 3-1: unable to get BOS descriptor or descriptor too short
[  451.935001][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.944186][ T6914] usb 3-1: not running at top speed; connect to a high speed hub
[  451.968899][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  451.978873][T13942] bridge0: port 1(bridge_slave_0) entered forwarding state
[  451.998199][ T6914] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  452.015586][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.024275][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.048203][ T6914] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  452.088401][ T6914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.103174][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.122526][ T6914] usb 3-1: Product: syz
[  452.136821][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.147452][ T6914] usb 3-1: Manufacturer: syz
[  452.157568][ T6914] usb 3-1: SerialNumber: syz
[  452.174952][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.236133][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.244763][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.295638][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.304261][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.319651][T13948] bridge0: port 1(bridge_slave_0) entered disabled state
[  452.355405][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.394528][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.404658][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.415245][ T6914] usb 3-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  452.445085][ T6914] usb 3-1: found format II with max.bitrate = 512, frame size=20479
[  452.446665][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.481459][ T6914] usb 3-1: 1:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  452.500595][ T6914] usb 3-1: found format II with max.bitrate = 512, frame size=20479
[  452.508980][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.535452][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.556511][ T6914] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  452.565990][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.574599][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.630652][ T6914] usb 3-1: USB disconnect, device number 53
[  452.685685][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.705910][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.754203][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.783405][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.815736][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.832818][T13963] sctp: [Deprecated]: syz.5.3981 (pid 13963) Use of int in max_burst socket option deprecated.
[  452.832818][T13963] Use struct sctp_assoc_value instead
[  452.845038][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.876675][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.915977][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.924769][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.973152][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  452.992313][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.007892][T13967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3983'.
[  453.035475][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.064577][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.095925][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.124614][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.155505][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.164154][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.220353][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.256444][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.265061][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.345650][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.361870][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.395527][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.404143][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.462902][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.473623][T13983] loop2: detected capacity change from 0 to 512
[  453.509683][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.542501][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.564598][T13983] EXT4-fs (loop2): Test dummy encryption mode enabled
[  453.572169][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.598972][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.615470][T13983] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  453.670997][T13902] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 550)
[  453.681340][T13983] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.3990: bad orphan inode 131083
[  453.702202][   T27] audit: type=1800 audit(1791927899.136:100): pid=13902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3957" name="file2" dev="loop0" ino=1048665 res=0 errno=0
[  453.764665][T13983] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  453.853091][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  454.217505][T13998] loop2: detected capacity change from 0 to 4096
[  454.279822][T13998] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  454.293323][T14006] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  454.351002][T14006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  454.365879][T14006] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  454.408489][T14006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  454.429536][T14006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  454.457361][T14006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  454.488757][T14006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  454.566365][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  454.656449][ T7512] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  454.895588][ T7512] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  454.934730][T14024] netlink: 'syz.1.4007': attribute type 1 has an invalid length.
[  454.969968][ T7286] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  455.004558][   T27] audit: type=1326 audit(1791927900.436:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.4.4008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  455.043781][T14026] loop4: detected capacity change from 0 to 512
[  455.061748][T14026] EXT4-fs: Ignoring removed oldalloc option
[  455.082955][   T27] audit: type=1326 audit(1791927900.436:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.4.4008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  455.144150][T14026] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.4008: invalid block
[  455.158097][   T27] audit: type=1326 audit(1791927900.476:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.4.4008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  455.171352][ T7286] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4
[  455.184234][   T27] audit: type=1326 audit(1791927900.476:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.4.4008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  455.218453][   T27] audit: type=1326 audit(1791927900.476:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.4.4008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13b2d9e042 code=0x7ffc0000
[  455.220667][T14026] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4008: invalid indirect mapped block 1024 (level 0)
[  455.242606][   T27] audit: type=1326 audit(1791927900.476:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.4.4008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f13b2d5eb0e code=0x7ffc0000
[  455.242653][   T27] audit: type=1326 audit(1791927900.476:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.4.4008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f13b2d9e107 code=0x7ffc0000
[  455.242692][   T27] audit: type=1326 audit(1791927900.476:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.4.4008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13b2d5eb0e code=0x7ffc0000
[  455.345716][ T7286] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 4
[  455.413489][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  455.448042][T14026] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4008: bg 0: block 35: padding at end of block bitmap is not set
[  455.464000][ T7286] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  455.495748][T14026] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  455.513959][ T7286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.527526][T14026] EXT4-fs (loop4): 1 truncate cleaned up
[  455.533278][T14026] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  455.542044][ T7286] usb 3-1: Product: syz
[  455.565499][ T7286] usb 3-1: Manufacturer: syz
[  455.570486][ T7286] usb 3-1: SerialNumber: syz
[  455.585430][   T27] audit: type=1326 audit(1791927900.476:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.4.4008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f13b2d9df6b code=0x7ffc0000
[  455.695891][   T27] audit: type=1326 audit(1791927900.496:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.4.4008" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f13b2d5eb0e code=0x7ffc0000
[  455.773805][ T4287] EXT4-fs (loop4): unmounting filesystem.
[  455.841604][ T7286] usb 3-1: Can't get UAC3 power state for id 10
[  455.876633][ T7286] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[  455.937569][ T7286] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  456.033688][ T7286] usb 3-1: USB disconnect, device number 54
[  456.195101][T14022] loop0: detected capacity change from 0 to 32768
[  456.244532][T14022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.4005 (14022)
[  456.319119][T14022] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  456.331559][ T4795] udevd[4795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  456.345601][T14022] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  456.380185][T14022] BTRFS info (device loop0): force clearing of disk cache
[  456.403156][ T4334] nvme nvme0: rdma_resolve_route failed (-110).
[  456.435565][T14022] BTRFS info (device loop0): enabling auto defrag
[  456.442121][T14022] BTRFS info (device loop0): max_inline at 0
[  456.483870][T14041] nvme nvme0: rdma connection establishment failed (-19)
[  456.492803][T14022] BTRFS info (device loop0): enabling disk space caching
[  456.545426][T14022] BTRFS info (device loop0): disk space caching is enabled
[  456.603570][T14051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4019'.
[  456.739480][T14059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4020'.
[  456.885522][T14022] BTRFS info (device loop0): enabling ssd optimizations
[  456.898073][T14022] BTRFS info (device loop0): rebuilding free space tree
[  456.921302][T14078] netlink: 'syz.4.4025': attribute type 2 has an invalid length.
[  456.943152][T14022] BTRFS info (device loop0): disabling free space tree
[  456.954319][T14022] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  456.984854][T14022] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  457.108402][T14082] netlink: 'syz.2.4026': attribute type 21 has an invalid length.
[  457.145962][T14082] netlink: 'syz.2.4026': attribute type 1 has an invalid length.
[  457.153781][T14082] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4026'.
[  457.306885][ T4319] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  457.396303][ T4280] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  457.442965][T14092] Unknown options in mask b7f2
[  457.741978][T14100] loop5: detected capacity change from 0 to 128
[  457.804186][ T4371] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 14 /dev/loop0 scanned by udevd (4371)
[  457.817466][T14100] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  457.837364][T14100] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  457.967767][ T9626] EXT4-fs (loop5): unmounting filesystem.
[  459.135056][T14156] kAFS: unable to lookup cell '.,'
[  459.326830][T14166] loop4: detected capacity change from 0 to 128
[  459.382173][T14166] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  459.738649][T14182] cgroup: none used incorrectly
[  460.307229][T14209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4087'.
[  460.486407][T14216] loop5: detected capacity change from 0 to 256
[  460.542519][T14218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4092'.
[  460.873741][T14226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  460.889497][T14230] loop4: detected capacity change from 0 to 256
[  460.932436][T14226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  460.946667][T14186] loop1: detected capacity change from 0 to 32768
[  460.971797][T14226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  460.996090][T14226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  461.014017][T14226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  461.025723][T14186] gfs2: can't find protocol lock_noloca=off
[  461.098649][T14226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  461.139561][T14226] infiniband syz0: set active
[  461.163414][T14226] infiniband syz0: set active
[  461.340763][ T7517] wg1 speed is unknown, defaulting to 1000
[  461.374798][ T4588] wg1 speed is unknown, defaulting to 1000
[  461.468287][T14236] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  461.717668][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4108'.
[  462.236050][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4120'.
[  462.333744][T14277] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready
[  462.350658][T14277] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready
[  463.102042][T14308] loop2: detected capacity change from 0 to 64
[  463.158843][T14310] dns_resolver: Unsupported content type (34)
[  463.438481][T14320] loop1: detected capacity change from 0 to 1024
[  463.839057][T14336] comedi: No check for data length of config insn id 4 is implemented
[  463.875489][T14336] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  463.915277][T14336] comedi: Assuming n=15 is correct
[  464.076827][T14344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4154'.
[  464.130905][T14344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4154'.
[  464.183714][T14348] netlink: 'syz.2.4156': attribute type 11 has an invalid length.
[  464.215084][T14348] netlink: 'syz.2.4156': attribute type 4 has an invalid length.
[  464.261243][T14352] overlayfs: workdir and upperdir must be separate subtrees
[  464.437710][T14360] netlink: 'syz.1.4162': attribute type 2 has an invalid length.
[  464.483794][T14360] netlink: 'syz.1.4162': attribute type 1 has an invalid length.
[  464.505756][T14360] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4162'.
[  464.540421][T14366] loop4: detected capacity change from 0 to 164
[  464.917051][T14379] sch_tbf: peakrate 2 is lower than or equals to rate 3604916063403629709 !
[  465.138060][T14387] loop5: detected capacity change from 0 to 512
[  465.232287][T14387] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  465.346104][ T9626] EXT4-fs (loop5): unmounting filesystem.
[  465.395228][T14394] loop4: detected capacity change from 0 to 128
[  465.431214][T14394] EXT4-fs (loop4): Test dummy encryption mode enabled
[  465.471191][T14394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  465.618710][T14401] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7)
[  465.629615][ T4287] EXT4-fs (loop4): unmounting filesystem.
[  465.728111][T14403] CIFS: bad ip= option (::.)
[  465.795543][ T7660] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  465.968706][T14411] overlayfs: conflicting options: userxattr,redirect_dir=follow
[  466.017371][ T7660] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  466.040513][ T7660] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  466.060358][ T7660] usb 6-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  466.073161][ T7660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.314036][ T7660] usb 6-1: NFC: Can't submit reader poweron cmd response -90
[  466.334650][ T7660] pn533_usb 6-1:1.0: NFC: Couldn't poweron the reader (error -90)
[  466.360099][ T7660] pn533_usb: probe of 6-1:1.0 failed with error -90
[  466.463999][T14425] device geneve3 entered promiscuous mode
[  466.545779][ T7286] usb 6-1: USB disconnect, device number 5
[  466.599342][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4193'.
[  466.613152][T14427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4193'.
[  466.982589][T14447] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4203'.
[  467.283735][T14461] loop5: detected capacity change from 0 to 16
[  467.299464][T14459] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl1: link becomes ready
[  467.312987][T14461] erofs: (device loop5): mounted with root inode @ nid 36.
[  467.398675][T14463] netlink: 676 bytes leftover after parsing attributes in process `syz.2.4211'.
[  467.480401][ T7517] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  467.675471][ T7517] usb 5-1: Using ep0 maxpacket: 16
[  467.683223][ T7517] usb 5-1: unable to get BOS descriptor or descriptor too short
[  467.706977][ T7517] usb 5-1: config 1 has an invalid interface number: 151 but max is 0
[  467.744432][T14471] loop0: detected capacity change from 0 to 256
[  467.745477][ T7517] usb 5-1: config 1 has no interface number 0
[  467.782094][ T7517] usb 5-1: config 1 interface 151 has no altsetting 0
[  467.802882][ T7517] usb 5-1: string descriptor 0 read error: -22
[  467.824572][ T7517] usb 5-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85
[  467.854200][ T7517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.908863][ T7517] gspca_main: pac7311-2.14.0 probing 093a:260e
[  467.936788][T14456] loop1: detected capacity change from 0 to 32768
[  468.029966][T14477] loop5: detected capacity change from 0 to 64
[  468.115207][T14477] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  468.322447][ T7517] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  468.347365][ T7517] pac7311: probe of 5-1:1.151 failed with error -71
[  468.394584][ T7517] usb 5-1: USB disconnect, device number 51
[  468.778838][T14499] syz.1.4229[14499] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  468.952175][T14505] loop2: detected capacity change from 0 to 2048
[  469.031525][T14513] netlink: 'syz.0.4234': attribute type 1 has an invalid length.
[  469.041074][T14507] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  469.042875][T14505] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  469.071997][T14507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  469.264120][T14518] loop5: detected capacity change from 0 to 16
[  469.287136][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  469.293509][T14518] erofs: (device loop5): mounted with root inode @ nid 36.
[  469.579588][T14532] tmpfs: Bad value for 'mpol'
[  469.859973][T14544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  470.591820][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4264'.
[  470.632677][T14533] loop0: detected capacity change from 0 to 40427
[  470.676959][T14533] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  470.709311][T14533] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  470.757747][T14533] F2FS-fs (loop0): invalid crc value
[  470.829038][T14533] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  470.852494][T14584] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  471.046374][T14533] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  471.053612][T14533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  471.194697][T14533] fscrypt (loop0, inode 3): Error -61 getting encryption context
[  471.342891][T14605] binder: 14603:14605 ioctl c00c620f 0 returned -14
[  471.781091][T14621] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4287'.
[  472.014808][T14630] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  472.029119][T14635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4290'.
[  472.381478][T14647] netlink: 'syz.0.4299': attribute type 1 has an invalid length.
[  472.389660][T14647] netlink: 'syz.0.4299': attribute type 3 has an invalid length.
[  472.406757][T14647] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4299'.
[  473.120490][T14677] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  473.284336][T14686] loop0: detected capacity change from 0 to 64
[  473.325507][T14686] hfs: unable to locate alternate MDB
[  473.331084][T14686] hfs: continuing without an alternate MDB
[  473.358315][T14687] netlink: 'syz.4.4319': attribute type 3 has an invalid length.
[  473.405254][T14687] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4319'.
[  473.549031][T14697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4324'.
[  473.641471][T14699] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4326'.
[  473.667570][T14699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4326'.
[  473.831729][T14706] loop1: detected capacity change from 0 to 1764
[  473.882776][T14706] iso9660: Corrupted directory entry in block 2 of inode 1920
[  474.419069][T14733] loop1: detected capacity change from 0 to 128
[  474.479008][T14733] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  474.533397][T14733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  474.551941][T14740] loop5: detected capacity change from 0 to 512
[  474.638597][T14740] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  475.041289][T14753] loop0: detected capacity change from 0 to 512
[  475.102826][T14755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4353'.
[  475.382520][T14761] loop2: detected capacity change from 0 to 1764
[  475.435031][T14765] loop0: detected capacity change from 0 to 1024
[  475.549565][T14765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  475.599894][T14774] loop1: detected capacity change from 0 to 256
[  475.611071][T14774] exfat: Deprecated parameter 'utf8'
[  475.616710][T14774] exfat: Deprecated parameter 'utf8'
[  475.622144][T14774] exfat: Deprecated parameter 'utf8'
[  475.628280][T14774] exfat: Deprecated parameter 'namecase'
[  475.692983][T14765] EXT4-fs error (device loop0): ext4_get_first_dir_block:3607: inode #11: comm syz.0.4357: directory missing '..'
[  475.717795][T14774] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  475.980910][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  477.171212][T14835] netlink: 'syz.4.4391': attribute type 3 has an invalid length.
[  477.338911][T14837] loop2: detected capacity change from 0 to 4096
[  477.373502][T14837] __ntfs_error: 13 callbacks suppressed
[  477.373520][T14837] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  477.489088][T14837] ntfs: volume version 3.1.
[  478.050279][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4400'.
[  478.520942][T14873] program syz.5.4409 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  479.118996][T14904] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4424'.
[  479.135904][T14905] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4425'.
[  479.144978][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4425'.
[  479.210644][T14910] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  479.330253][   T27] audit: type=1326 audit(479.270:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.5.4429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  479.353822][    C1] vkms_vblank_simulate: vblank timer overrun
[  479.435480][   T27] audit: type=1326 audit(479.300:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.5.4429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  479.459177][    C1] vkms_vblank_simulate: vblank timer overrun
[  479.530584][   T27] audit: type=1326 audit(479.300:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.5.4429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  479.554210][    C1] vkms_vblank_simulate: vblank timer overrun
[  479.635496][   T27] audit: type=1326 audit(479.310:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.5.4429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  479.659219][    C1] vkms_vblank_simulate: vblank timer overrun
[  479.673982][T14921] loop4: detected capacity change from 0 to 4096
[  479.746118][T14927] comedi comedi0: 8255: I/O port conflict (0x5,4)
[  479.764140][T14921] ntfs: volume version 3.1.
[  479.780912][   T27] audit: type=1326 audit(479.310:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.5.4429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  479.805288][    C1] vkms_vblank_simulate: vblank timer overrun
[  479.817042][T14927] comedi comedi0: 8255: I/O port conflict (0x4,4)
[  479.847646][T14927] comedi comedi0: 8255: I/O port conflict (0x6,4)
[  479.865708][T14927] comedi comedi0: 8255: I/O port conflict (0x7,4)
[  479.872329][T14927] comedi comedi0: 8255: I/O port conflict (0x7f,4)
[  479.891711][   T27] audit: type=1326 audit(479.310:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.5.4429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  479.935703][T14927] comedi comedi0: 8255: I/O port conflict (0x8,4)
[  479.949168][T14927] comedi comedi0: 8255: I/O port conflict (0x2,4)
[  479.965468][T14927] comedi comedi0: 8255: I/O port conflict (0x9,4)
[  479.978188][   T27] audit: type=1326 audit(479.310:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.5.4429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  480.012400][T14927] comedi comedi0: 8255: I/O port conflict (0x9,4)
[  480.105560][   T27] audit: type=1326 audit(479.310:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14913 comm="syz.5.4429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  480.182061][T14941] loop5: detected capacity change from 0 to 512
[  480.415543][ T7517] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  480.635659][T14956] loop1: detected capacity change from 0 to 1764
[  480.657253][ T7517] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  480.697006][ T7517] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea60, bcdDevice= 1.00
[  480.724551][T14963] loop4: detected capacity change from 0 to 256
[  480.735058][ T7517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.772184][ T7517] cp210x 3-1:1.0: cp210x converter detected
[  480.942330][T14966] ieee802154 phy0 wpan0: encryption failed: -22
[  480.980868][ T7517] usb 3-1: cp210x converter now attached to ttyUSB0
[  481.194760][ T4588] usb 3-1: USB disconnect, device number 55
[  481.231391][ T4588] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  481.260853][ T4588] cp210x 3-1:1.0: device disconnected
[  481.522517][   T27] audit: type=1326 audit(481.460:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14985 comm="syz.4.4464" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  481.630119][T14990] netlink: 'syz.5.4466': attribute type 29 has an invalid length.
[  481.639705][T14990] netlink: 'syz.5.4466': attribute type 29 has an invalid length.
[  481.832133][T15000] loop1: detected capacity change from 0 to 256
[  481.868355][T15000] exfat: Deprecated parameter 'utf8'
[  481.907391][T15000] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  482.164500][T14993] loop0: detected capacity change from 0 to 32768
[  482.195209][T14993] JBD2: Ignoring recovery information on journal
[  482.255508][T14993] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  482.503211][ T4280] ocfs2: Unmounting device (7,0) on (node local)
[  482.755868][T15023] ieee802154 phy0 wpan0: encryption failed: -90
[  482.786417][T15026] netlink: 320 bytes leftover after parsing attributes in process `syz.1.4482'.
[  483.242602][T15043] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready
[  483.261702][T15043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  483.309879][T15045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4492'.
[  483.348793][T15045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4492'.
[  483.530372][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4496'.
[  484.620141][T15111] loop4: detected capacity change from 0 to 512
[  484.657288][T15111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  484.731246][T15111] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.4524: bad orphan inode 131083
[  484.765131][T15111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  484.807276][T15111] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #2: block 13: comm syz.4.4524: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1
[  484.948742][ T4287] EXT4-fs (loop4): unmounting filesystem.
[  485.064080][T15124] loop0: detected capacity change from 0 to 8
[  485.139617][T15124] SQUASHFS error: lzo decompression failed, data probably corrupt
[  485.172884][T15124] SQUASHFS error: Failed to read block 0x91: -5
[  485.184507][T15124] SQUASHFS error: Unable to read metadata cache entry [8f]
[  485.233909][T15124] SQUASHFS error: Unable to read inode 0x11f
[  485.290573][T15101] loop1: detected capacity change from 0 to 32768
[  485.333494][T15101] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.4519 (15101)
[  485.380414][T15101] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  485.415581][T15101] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  485.445564][T15135] loop4: detected capacity change from 0 to 2048
[  485.465025][T15101] BTRFS info (device loop1): setting nodatacow, compression disabled
[  485.495459][T15101] BTRFS info (device loop1): disabling tree log
[  485.512033][T15135] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  485.532204][T15101] BTRFS info (device loop1): max_inline at 0
[  485.548059][T15101] BTRFS info (device loop1): using free space tree
[  485.623964][T15135] syz.4.4535: attempt to access beyond end of device
[  485.623964][T15135] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  485.645184][T15140] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  485.713484][T15135] syz.4.4535: attempt to access beyond end of device
[  485.713484][T15135] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  485.864090][T15135] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3)
[  486.037775][ T4273] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  486.038938][T15164] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (32)
[  486.141161][T15139] loop0: detected capacity change from 0 to 32768
[  486.205606][T15139] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4536 (15139)
[  486.528401][T15139] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  486.545619][T15139] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  486.564787][T15139] BTRFS info (device loop0): setting nodatasum
[  486.581162][T15170] loop4: detected capacity change from 0 to 128
[  486.605392][T15139] BTRFS info (device loop0): enabling auto defrag
[  486.622634][T15139] BTRFS info (device loop0): disabling tree log
[  486.668917][T15170] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  486.679397][T15139] BTRFS info (device loop0): using free space tree
[  486.998878][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4551'.
[  487.069124][T15139] BTRFS info (device loop0): enabling ssd optimizations
[  487.324002][ T4280] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  487.545688][T15216] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4558'.
[  487.859226][ T4371] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4371)
[  488.015498][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4566'.
[  488.075846][T15237] Cannot find add_set index 1 as target
[  488.332114][T15250] netlink: 'syz.0.4573': attribute type 13 has an invalid length.
[  488.365804][T15250] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4573'.
[  488.445497][T15250] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  488.530693][T15256] netlink: 'syz.4.4575': attribute type 32 has an invalid length.
[  488.798252][T15264] ecryptfs_parse_options: eCryptfs: unrecognized option [ecryptfs_fnek_siœÕsyz ]
[  488.852982][T15264] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes¬»)YJyptfs_ke
[  488.892998][T15264] Error parsing options; rc = [-22]
[  488.931215][T15269] loop2: detected capacity change from 0 to 2048
[  489.021826][T15272] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  489.047903][T15269] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=3096, name_len=5
[  489.111693][T15269] Remounting filesystem read-only
[  489.235936][T15279] loop4: detected capacity change from 0 to 512
[  489.298955][T15279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  489.325087][T15279] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  489.336419][T15282] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4589'.
[  489.375572][T15279] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  489.419799][T15279] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  489.469461][T15279] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  489.495451][T15279] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e042e01c, mo2=0000]
[  489.503389][T15279] EXT4-fs (loop4): failed to initialize system zone (-117)
[  489.573285][T15290] loop2: detected capacity change from 0 to 2048
[  489.592021][T15279] EXT4-fs (loop4): mount failed
[  489.604963][T15290] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  489.671473][T15290] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  490.018726][T15306] loop2: detected capacity change from 0 to 512
[  490.060575][T15301] loop0: detected capacity change from 0 to 4096
[  490.101477][T15301] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  490.131909][T15306] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  490.200091][T15306] __quota_error: 4 callbacks suppressed
[  490.200113][T15306] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  490.264095][T15306] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  490.312222][T15306] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.4600: Failed to acquire dquot type 0
[  490.464228][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  490.866645][T15335] autofs4:pid:15335:autofs_fill_super: called with bogus options
[  491.089261][T15350] loop0: detected capacity change from 0 to 256
[  491.616166][   T27] audit: type=1326 audit(491.560:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.5.4632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  491.686174][   T27] audit: type=1326 audit(491.590:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.5.4632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  491.709740][    C0] vkms_vblank_simulate: vblank timer overrun
[  491.750783][   T27] audit: type=1326 audit(491.590:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.5.4632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  491.807477][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4636'.
[  491.829017][   T27] audit: type=1326 audit(491.590:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15371 comm="syz.5.4632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  491.962731][T15385] cramfs: checking physical address 0x00000000268c3000 for linear cramfs image
[  492.005752][T15385] mtd0: Can't open blockdev
[  492.198421][T15400] loop4: detected capacity change from 0 to 8
[  492.265042][T15400] SQUASHFS error: xz decompression failed, data probably corrupt
[  492.295537][T15400] SQUASHFS error: Failed to read block 0x304: -5
[  492.334058][T15400] SQUASHFS error: Unable to read metadata cache entry [302]
[  492.358393][T15400] SQUASHFS error: Unable to read inode 0x11f
[  492.486483][T15410] netlink: 'syz.1.4650': attribute type 1 has an invalid length.
[  492.960308][T15436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4663'.
[  493.278128][T15450] netdevsim netdevsim2: Direct firmware load for þ failed with error -2
[  493.305594][T15450] netdevsim netdevsim2: Falling back to sysfs fallback for: þ
[  493.318717][T15454] tmpfs: Bad value for 'mpol'
[  493.485670][T15461] tmpfs: Bad value for 'mpol'
[  493.599468][   T27] audit: type=1400 audit(493.540:141): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=15465 comm="syz.1.4679"
[  494.305149][T15496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4694'.
[  494.339389][T15468] loop4: detected capacity change from 0 to 32768
[  494.346327][T15496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4694'.
[  494.379271][T15468] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.4681 (15468)
[  494.424119][T15468] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  494.444741][T15468] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  494.485576][ T7505] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  494.493765][T15468] BTRFS info (device loop4): enabling ssd optimizations
[  494.515464][T15468] BTRFS info (device loop4): not using ssd optimizations
[  494.535010][T15468] BTRFS info (device loop4): turning off barriers
[  494.564045][T15468] BTRFS info (device loop4): use no compression
[  494.602911][T15468] BTRFS info (device loop4): using free space tree
[  494.697226][ T7505] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  494.714456][ T7505] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  494.724952][ T7505] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  494.742215][ T7505] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  494.763639][ T7505] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  494.774346][ T7505] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.926844][T15522] loop1: detected capacity change from 0 to 4096
[  494.936298][T15522] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  495.062015][T15522] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  495.105425][T15522] ntfs3: loop1: Inode r=b is not in use!
[  495.111418][T15522] ntfs3: loop1: Failed to load $Extend.
[  495.204490][T15494] loop2: detected capacity change from 0 to 32768
[  495.239735][ T7505] usb 6-1: USB disconnect, device number 6
[  495.313019][ T4287] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  495.362042][T15494] JBD2: Ignoring recovery information on journal
[  495.617088][T15530] loop1: detected capacity change from 0 to 4096
[  495.649160][T15494] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  495.649790][T15530] EXT4-fs (loop1): Unsupported encryption level 59
[  496.056099][T15542] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4706'.
[  496.115577][T15542] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4706'.
[  496.195178][ T4272] ocfs2: Unmounting device (7,2) on (node local)
[  496.425040][   T27] audit: type=1326 audit(496.360:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.4710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  496.504610][   T27] audit: type=1326 audit(496.400:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.4710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  496.585498][   T27] audit: type=1326 audit(496.400:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.4710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  496.670371][   T27] audit: type=1326 audit(496.410:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.4710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  496.758972][   T27] audit: type=1326 audit(496.410:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.4710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  496.821370][   T27] audit: type=1326 audit(496.410:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.4710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  496.911231][   T27] audit: type=1326 audit(496.410:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.4710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  497.013070][   T27] audit: type=1326 audit(496.410:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15549 comm="syz.5.4710" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  497.548352][T15589] loop2: detected capacity change from 0 to 24
[  497.612086][T15589] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  497.675475][T15589] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  497.751729][T15589] romfs: read error for inode 0x70040
[  498.157709][T15606] loop2: detected capacity change from 0 to 4096
[  498.204683][T15606] EXT4-fs (loop2): Unsupported encryption level 59
[  498.960224][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'.
[  498.975477][T15650] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  499.000123][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'.
[  499.011716][T15647] loop2: detected capacity change from 0 to 1024
[  499.019687][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'.
[  499.039451][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'.
[  499.061617][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'.
[  499.081670][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4755'.
[  499.083889][T15647] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  499.110377][T15650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  499.140158][T15650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  499.157487][T15650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  499.201534][T15647] hfsplus: filesystem is marked journaled, leaving read-only.
[  499.216978][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  499.267048][ T4322] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  499.339355][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  499.428316][ T7510] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  499.948259][T15675] loop5: detected capacity change from 0 to 2048
[  499.999769][ T7653] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  500.012766][T15679] loop2: detected capacity change from 0 to 512
[  500.022159][T15679] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  500.059661][T15675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  500.062995][T15679] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  500.146510][T15679] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  500.154681][T15679] System zones: 0-2, 18-18, 34-35
[  500.181709][T15679] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  500.190236][ T7653] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  500.190297][ T7653] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  500.198263][ T7653] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40
[  500.218588][ T7653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.235373][ T7653] usb 2-1: Product: syz
[  500.239663][ T7653] usb 2-1: Manufacturer: syz
[  500.244303][ T7653] usb 2-1: SerialNumber: syz
[  500.355491][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  500.486499][ T7653] usb 2-1: unit 5 not found!
[  500.491283][ T7653] usb 2-1: unit 0 not found!
[  500.557574][ T7653] usb 2-1: USB disconnect, device number 41
[  500.616968][ T4457] udevd[4457]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  500.740489][T15700] __nla_validate_parse: 76 callbacks suppressed
[  500.740509][T15700] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4777'.
[  500.928714][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4780'.
[  501.008385][T15713] netlink: 798 bytes leftover after parsing attributes in process `syz.5.4784'.
[  501.164857][T15717] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4786'.
[  501.388903][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  501.395538][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  501.395561][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  501.635063][T15742] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4798'.
[  501.639278][T15743] loop2: detected capacity change from 0 to 64
[  501.784934][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4800'.
[  501.838937][T15749] loop0: detected capacity change from 0 to 256
[  501.876254][T15749] exfat: Deprecated parameter 'namecase'
[  501.882041][T15749] exfat: Deprecated parameter 'utf8'
[  501.921096][T15749] exfat: Deprecated parameter 'namecase'
[  501.966143][T15749] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  502.009043][T15749] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  502.278184][T15760] loop5: detected capacity change from 0 to 4096
[  502.325858][T15760] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  502.441433][T15760] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  502.495707][T15770] netem: change failed
[  502.765232][T15780] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  503.094619][T15798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4824'.
[  503.363141][T15811] loop2: detected capacity change from 0 to 512
[  503.431411][T15811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  503.431924][T15816] loop4: detected capacity change from 0 to 8
[  503.580155][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  503.845740][T15832] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  503.892725][T15828] loop5: detected capacity change from 0 to 4096
[  503.905910][T15832] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  503.973642][T15828] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  504.018689][T15828] ntfs3: loop5: Failed to load $Extend.
[  504.193058][T15832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  504.242098][T15832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  504.275754][T15832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  504.360525][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4850'.
[  504.375193][T15850] netlink: 'syz.1.4848': attribute type 5 has an invalid length.
[  504.385726][T15849] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  504.424836][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4850'.
[  504.458675][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4850'.
[  504.496756][T15849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  504.518991][T15849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  504.560157][T15849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  504.838454][T15866] netlink: 'syz.1.4858': attribute type 3 has an invalid length.
[  505.119949][T15880] netlink: 'syz.5.4865': attribute type 7 has an invalid length.
[  505.549857][T15898] loop2: detected capacity change from 0 to 2048
[  505.587198][T15898] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  505.645464][T15898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  505.660492][T15904] loop1: detected capacity change from 0 to 512
[  505.714749][T15898] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field
[  505.779767][T15904] FAT-fs (loop1): Directory bread(block 2080) failed
[  505.815517][T15904] FAT-fs (loop1): Directory bread(block 2081) failed
[  505.842777][T15904] FAT-fs (loop1): Directory bread(block 2082) failed
[  505.865521][T15904] FAT-fs (loop1): Directory bread(block 2083) failed
[  505.872345][T15904] FAT-fs (loop1): Directory bread(block 2084) failed
[  505.938543][T15904] FAT-fs (loop1): Directory bread(block 2085) failed
[  505.965573][T15904] FAT-fs (loop1): Directory bread(block 2086) failed
[  505.998153][T15904] FAT-fs (loop1): Directory bread(block 2087) failed
[  506.157969][T15912] loop0: detected capacity change from 0 to 4096
[  506.239267][T15912] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  506.285842][T15912] ntfs3: loop0: Failed to load $Extend.
[  506.336605][T15888] loop4: detected capacity change from 0 to 32768
[  506.341843][T15918] __nla_validate_parse: 77 callbacks suppressed
[  506.341887][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4884'.
[  506.446271][T15888] JBD2: Ignoring recovery information on journal
[  506.459142][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4884'.
[  506.541673][T15921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4885'.
[  506.604851][T15888] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  506.705775][T15924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4886'.
[  506.725094][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4886'.
[  506.903903][T15910] loop5: detected capacity change from 0 to 32768
[  506.971024][ T4287] ocfs2: Unmounting device (7,4) on (node local)
[  506.995807][T15910] 
[  506.995807][T15910]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  506.995807][T15910] 
[  507.051505][T15910] ialloc: diAlloc returned -5!
[  507.061955][T15932] loop2: detected capacity change from 0 to 64
[  507.194963][ T9626] 
[  507.194963][ T9626]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  507.194963][ T9626] 
[  507.225763][ T9626] 
[  507.225763][ T9626]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  507.225763][ T9626] 
[  507.838107][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4903'.
[  507.862021][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  507.893066][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4903'.
[  507.915817][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4903'.
[  507.925191][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4903'.
[  507.961291][ T7509] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  507.996506][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4903'.
[  508.028234][T15968] CIFS: VFS: Malformed UNC in devname
[  508.037338][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  508.057440][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  508.104515][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  508.127731][T15958] bridge0: port 1(bridge_slave_0) entered blocking state
[  508.134950][T15958] bridge0: port 1(bridge_slave_0) entered forwarding state
[  508.159818][ T7509] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  508.174863][ T7509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.202530][ T7509] usb 2-1: config 0 descriptor??
[  508.243088][T15958] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready
[  508.315889][T15977] loop2: detected capacity change from 0 to 512
[  508.333521][T15977] EXT4-fs: Ignoring removed i_version option
[  508.362242][T15977] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  508.402431][T15977] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  508.424598][ T7509] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  508.450881][ T7509] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  508.470051][T15977] EXT4-fs (loop2): orphan cleanup on readonly fs
[  508.482551][T15977] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.4912: bad orphan inode 12
[  508.493114][ T4322] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  508.520458][T15977] ext4_test_bit(bit=11, block=1) = 0
[  508.529656][T15977] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  508.633236][ T7509] [drm:udl_init] *ERROR* Selecting channel failed
[  508.681899][ T7509] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  508.704016][ T7509] [drm] Initialized udl on minor 2
[  508.720771][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  508.727371][ T7509] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  508.737845][ T4322] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  508.746953][ T7509] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  508.755806][ T4322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.792558][ T7509] usb 2-1: USB disconnect, device number 42
[  508.809023][ T4322] usb 1-1: config 0 has no interface number 0
[  508.825248][ T4322] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  508.851200][ T7505] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  508.867925][ T4322] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  508.884960][ T7505] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  508.903487][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.932528][ T7505] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  508.941142][ T4322] usb 1-1: Product: syz
[  508.951091][ T4322] usb 1-1: Manufacturer: syz
[  508.961227][ T4322] usb 1-1: SerialNumber: syz
[  509.020752][ T4322] usb 1-1: config 0 descriptor??
[  509.061646][ T4322] radio-si470x 1-1:0.35: could not find interrupt in endpoint
[  509.076159][ T4322] radio-si470x: probe of 1-1:0.35 failed with error -5
[  509.243629][ T4322] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  509.453537][ T4322] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71)
[  509.476354][ T7510] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  509.498269][ T4322] radio-raremono 1-1:0.35: V4L2 device registered as radio48
[  509.519558][ T4322] usb 1-1: USB disconnect, device number 58
[  509.535696][ T4322] radio-raremono 1-1:0.35: Thanko's Raremono disconnected
[  509.595563][ T7509] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  509.712825][ T7510] usb 6-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98
[  509.732323][ T7510] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.751889][ T7510] usb 6-1: config 0 descriptor??
[  509.773055][ T7510] pwc: Creative Labs Webcam 5 detected.
[  509.787567][ T7509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  509.804562][ T7509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  509.835622][ T7509] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  509.854877][ T7509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  509.906979][ T7509] usb 2-1: config 0 descriptor??
[  509.912978][T16006] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  509.929958][ T7509] hub 2-1:0.0: bad descriptor, ignoring hub
[  509.945407][ T7509] hub: probe of 2-1:0.0 failed with error -5
[  510.090112][T16029] loop2: detected capacity change from 0 to 8
[  510.180907][ T7510] pwc: send_video_command error -71
[  510.186458][ T7510] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  510.224631][ T7510] Philips webcam: probe of 6-1:0.0 failed with error -71
[  510.261944][ T7510] usb 6-1: USB disconnect, device number 7
[  510.270363][T16033] device ip6tnl1 entered promiscuous mode
[  510.295619][ T7509] usb 2-1: USB disconnect, device number 43
[  510.410576][T16039] loop2: detected capacity change from 0 to 512
[  510.437019][T16039] EXT4-fs: Ignoring removed bh option
[  510.444864][T16039] EXT4-fs: Ignoring removed mblk_io_submit option
[  510.464856][T16039] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  510.510392][T16039] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  510.533042][T16039] EXT4-fs (loop2): orphan cleanup on readonly fs
[  510.553264][T16039] Quota error (device loop2): v2_read_file_info: Free block number 117440512 out of range (1, 6).
[  510.582098][T16039] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  510.608745][T16039] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  510.624663][T16039] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.4942: Invalid block bitmap block 0 in block_group 0
[  510.665547][T16039] EXT4-fs (loop2): Remounting filesystem read-only
[  510.682474][T16039] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  510.726789][T16039] EXT4-fs (loop2): Remounting filesystem read-only
[  510.749214][T16039] EXT4-fs (loop2): 1 orphan inode deleted
[  510.755044][T16039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  510.807130][T16052] loop0: detected capacity change from 0 to 64
[  510.878111][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  511.039332][T16060] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  511.109865][T16060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  511.128648][T16060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  511.138701][T16060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  511.167369][T16060] infiniband syz0: set active
[  511.221102][ T7510] wg1 speed is unknown, defaulting to 1000
[  511.262998][T16066] x_tables: ip_tables: icmp match: only valid for protocol 1
[  511.655065][T16084] loop4: detected capacity change from 0 to 512
[  511.741399][T16084] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  511.806626][T16084] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[  511.814916][T16084] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #13: comm syz.4.4964: iget: bad i_size value: 12154757448730
[  511.892014][T16084] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.4964: couldn't read orphan inode 13 (err -117)
[  511.925039][T16084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  511.987965][T16084] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  511.995936][T16094] __nla_validate_parse: 156 callbacks suppressed
[  511.995958][T16094] netlink: 364 bytes leftover after parsing attributes in process `syz.2.4968'.
[  512.107351][ T4287] EXT4-fs (loop4): unmounting filesystem.
[  512.344186][T16064] loop5: detected capacity change from 0 to 40427
[  512.388440][T16102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4972'.
[  512.388756][T16064] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  512.442856][T16064] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  512.464315][T16102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4972'.
[  512.484517][T16064] F2FS-fs (loop5): invalid crc_offset: 33558524
[  512.526225][T16064] F2FS-fs (loop5): Found nat_bits in checkpoint
[  512.711728][T16064] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  512.721458][T16064] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  512.856261][   T27] audit: type=1800 audit(512.800:150): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4953" name="bus" dev="loop5" ino=10 res=0 errno=0
[  512.908490][T16092] loop0: detected capacity change from 0 to 32768
[  512.963135][T16092] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.4966 (16092)
[  513.028113][T16092] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  513.059735][T16092] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  513.079991][T16092] BTRFS info (device loop0): using free space tree
[  513.276284][T16092] BTRFS info (device loop0): enabling ssd optimizations
[  513.467580][ T4280] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  513.645448][ T7653] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  513.835411][ T7653] usb 5-1: Using ep0 maxpacket: 8
[  513.850802][ T7653] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  513.914433][ T7653] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8
[  513.942743][ T7653] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  513.976930][ T7653] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  514.005690][ T7653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.044304][ T7653] usb 5-1: Product: syz
[  514.054444][ T7653] usb 5-1: Manufacturer: syz
[  514.071838][ T7653] usb 5-1: SerialNumber: syz
[  514.099484][T16143] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  514.325559][ T7653] usb 5-1: MIDIStreaming interface descriptor not found
[  514.339802][T16162] loop1: detected capacity change from 0 to 4096
[  514.422873][ T7653] usb 5-1: USB disconnect, device number 52
[  514.681750][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  515.275665][ T7653] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  515.465622][ T7653] usb 3-1: Using ep0 maxpacket: 16
[  515.477868][ T7653] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  515.508423][ T7653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.538876][ T7653] usb 3-1: Product: syz
[  515.543145][ T7653] usb 3-1: Manufacturer: syz
[  515.575345][ T7653] usb 3-1: SerialNumber: syz
[  515.592337][ T7653] r8152-cfgselector 3-1: config 0 descriptor??
[  515.825877][ T7653] usbip-host 3-1: 3-1 is not in match_busid table... skip!
[  516.045545][ T7653] usb 3-1: USB disconnect, device number 56
[  516.135103][T16211] loop5: detected capacity change from 0 to 32768
[  516.223181][T16233] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.249306][T16211] XFS (loop5): Mounting V5 Filesystem
[  516.255154][T16233] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  516.402780][T16211] XFS (loop5): Ending clean mount
[  516.426153][T16211] XFS (loop5): Quotacheck needed: Please wait.
[  516.506188][T16211] XFS (loop5): Quotacheck: Done.
[  516.678550][ T9626] XFS (loop5): Unmounting Filesystem
[  516.817005][T16262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5036'.
[  516.871131][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5036'.
[  516.924001][T16262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5036'.
[  516.993449][   T27] audit: type=1326 audit(516.930:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16265 comm="syz.1.5039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faada59e2d9 code=0x7ffc0000
[  517.025723][T16268] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5038'.
[  517.122141][   T27] audit: type=1326 audit(517.000:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16265 comm="syz.1.5039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7faada59e2d9 code=0x7ffc0000
[  517.235404][   T27] audit: type=1326 audit(517.000:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16265 comm="syz.1.5039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faada59e2d9 code=0x7ffc0000
[  517.330855][   T27] audit: type=1326 audit(517.000:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16265 comm="syz.1.5039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faada59e2d9 code=0x7ffc0000
[  517.391835][T16276] loop2: detected capacity change from 0 to 256
[  517.537387][T16282] loop0: detected capacity change from 0 to 128
[  518.135464][ T7512] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  518.335435][ T7512] usb 3-1: Using ep0 maxpacket: 16
[  518.342618][ T7512] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  518.361244][ T7512] usb 3-1: config 0 has no interface number 0
[  518.381509][ T7512] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  518.407251][ T7512] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  518.434111][ T7512] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  518.452763][ T7512] usb 3-1: Product: syz
[  518.462897][ T7512] usb 3-1: SerialNumber: syz
[  518.503443][ T7512] usb 3-1: config 0 descriptor??
[  518.520537][ T7512] cm109 3-1:0.8: invalid payload size 208, expected 4
[  518.543565][ T7512] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input23
[  518.555722][T16318] loop4: detected capacity change from 0 to 64
[  518.684030][   T27] audit: type=1800 audit(518.620:155): pid=16318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5064" name="file2" dev="loop4" ino=6 res=0 errno=0
[  518.724304][T16318] Trying to free block not in datazone
[  518.973877][    C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  518.982778][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  518.991644][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  519.005417][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  519.012607][ T7512] usb 3-1: USB disconnect, device number 57
[  519.027015][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  519.034037][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  519.044800][ T7512] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  519.517277][T16348] loop5: detected capacity change from 0 to 4096
[  519.566687][T16348] EXT4-fs: inline encryption not supported
[  519.603916][T16348] EXT4-fs (loop5): Test dummy encryption mode enabled
[  519.664790][T16348] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  519.716325][T16348] System zones: 0-5
[  519.773255][T16348] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  519.939421][T16366] x_tables: unsorted underflow at hook 2
[  519.984749][ T9626] EXT4-fs (loop5): unmounting filesystem.
[  520.148059][T16373] netlink: 'syz.5.5088': attribute type 4 has an invalid length.
[  520.161115][T16373] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5088'.
[  520.305478][ T7653] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  520.428165][T16362] loop0: detected capacity change from 0 to 40427
[  520.456835][T16362] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  520.464718][T16362] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  520.496349][T16362] F2FS-fs (loop0): invalid crc_offset: 33558524
[  520.517763][ T7653] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  520.539387][T16362] F2FS-fs (loop0): Found nat_bits in checkpoint
[  520.565902][ T7653] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  520.607788][ T7653] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  520.635408][ T7653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.667402][ T7653] usb 3-1: Product: syz
[  520.671703][ T7653] usb 3-1: Manufacturer: syz
[  520.702825][ T7653] usb 3-1: SerialNumber: syz
[  520.720986][ T7653] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  520.735361][T16362] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  520.745405][T16362] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  520.767037][ T7653] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  520.767037][ T7653]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  520.893979][   T27] audit: type=1326 audit(520.830:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16401 comm="syz.4.5100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  520.996697][   T27] audit: type=1326 audit(520.900:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16401 comm="syz.4.5100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  521.101749][   T27] audit: type=1326 audit(520.900:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16401 comm="syz.4.5100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  521.180973][T16408] loop1: detected capacity change from 0 to 512
[  521.188945][   T27] audit: type=1800 audit(520.900:159): pid=16362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5083" name="bus" dev="loop0" ino=10 res=0 errno=0
[  521.215273][ T7653] ums-sddr09: probe of 3-1:1.0 failed with error -5
[  521.251597][ T7653] usb 3-1: USB disconnect, device number 58
[  521.274688][   T27] audit: type=1326 audit(520.900:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16401 comm="syz.4.5100" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  521.335769][T16408] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  521.428046][T16408] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.5103: verity file corrupted; can't find descriptor
[  521.465591][ T7660] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  521.506868][T16408] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[  521.592391][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  521.655733][ T7660] usb 6-1: Using ep0 maxpacket: 8
[  521.663528][ T7660] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  521.744998][ T7660] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8
[  521.765977][ T7660] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  521.816149][ T7660] usb 6-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  521.837089][ T7660] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.845162][ T7660] usb 6-1: Product: syz
[  521.878745][ T7660] usb 6-1: Manufacturer: syz
[  521.883526][ T7660] usb 6-1: SerialNumber: syz
[  521.903128][T16406] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  522.128091][ T7660] usb 6-1: MIDIStreaming interface descriptor not found
[  522.178825][T16434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5115'.
[  522.197741][ T7660] usb 6-1: USB disconnect, device number 8
[  522.214489][T16434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5115'.
[  522.277633][T16434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5115'.
[  522.456551][T16438] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  522.487106][ T4795] udevd[4795]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  522.651140][T16445] loop0: detected capacity change from 0 to 512
[  522.686677][T16445] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  522.758462][T16451] netlink: 'syz.4.5122': attribute type 29 has an invalid length.
[  522.776295][T16445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  522.821217][T16451] netlink: 'syz.4.5122': attribute type 29 has an invalid length.
[  522.993627][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  523.519893][T16470] netlink: 'syz.5.5131': attribute type 1 has an invalid length.
[  523.764880][T16474] loop4: detected capacity change from 0 to 4096
[  523.790094][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  523.790110][   T27] audit: type=1326 audit(523.730:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.5.5136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  523.884816][T16474] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  523.914436][   T27] audit: type=1326 audit(523.770:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.5.5136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  523.975506][   T27] audit: type=1326 audit(523.770:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.5.5136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  524.066566][   T27] audit: type=1326 audit(523.770:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.5.5136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  524.145418][   T27] audit: type=1326 audit(523.770:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.5.5136" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4223b9e2d9 code=0x7ffc0000
[  524.180568][T16496] loop0: detected capacity change from 0 to 1024
[  524.249491][T16496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  524.291902][T16496] EXT4-fs error (device loop0): ext4_get_first_dir_block:3596: inode #11: comm syz.0.5141: directory missing '.'
[  524.333756][T16502] netlink: 'syz.4.5144': attribute type 1 has an invalid length.
[  524.341812][T16502] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5144'.
[  524.451992][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  524.622947][T16509] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  524.683495][T16513] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  525.191903][T16537] loop0: detected capacity change from 0 to 512
[  525.283470][T16537] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.5162: bad orphan inode 15
[  525.338315][T16537] ext4_test_bit(bit=14, block=5) = 0
[  525.343801][T16537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  525.424636][T16548] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5165'.
[  525.440279][T16537] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  525.478497][T16537] EXT4-fs error (device loop0): ext4_free_inode:355: comm syz.0.5162: bit already cleared for inode 13
[  525.588534][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  525.797657][T16564] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5175'.
[  525.983329][T16573] loop2: detected capacity change from 0 to 256
[  526.201812][ T4371] I/O error, dev loop2, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  526.334076][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5186'.
[  527.122406][   T27] audit: type=1326 audit(527.060:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16626 comm="syz.4.5205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  527.133546][T16628] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  527.208546][   T27] audit: type=1326 audit(527.100:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16626 comm="syz.4.5205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  527.268411][T16631] loop5: detected capacity change from 0 to 256
[  527.285214][   T27] audit: type=1326 audit(527.100:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16626 comm="syz.4.5205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  527.308791][    C0] vkms_vblank_simulate: vblank timer overrun
[  527.353181][   T27] audit: type=1326 audit(527.100:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16626 comm="syz.4.5205" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b2d9e2d9 code=0x7ffc0000
[  527.376708][    C0] vkms_vblank_simulate: vblank timer overrun
[  527.403948][T16636] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5208'.
[  527.440557][T16636] bridge: RTM_NEWNEIGH with invalid state 0x1
[  528.055361][   T27] audit: type=1326 audit(527.990:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16661 comm="syz.2.5222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160139e2d9 code=0x7ffc0000
[  528.118100][T16637] loop0: detected capacity change from 0 to 32768
[  528.164691][T16637] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  528.164691][T16637] 
[  528.214263][T16637] ERROR: (device loop0): remounting filesystem as read-only
[  528.249844][T16637] ERROR: (device loop0): jfs_unlink: 
[  528.249844][T16637] 
[  528.319415][T16670] loop2: detected capacity change from 0 to 512
[  528.408265][ T4280] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt
[  528.408265][ T4280] 
[  528.438303][T16670] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.5226: bad orphan inode 15
[  528.490128][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  528.555629][T16670] ext4_test_bit(bit=14, block=5) = 0
[  528.561057][T16670] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  528.567629][T16673] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  528.649086][T16670] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  528.727651][T16670] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.5226: bit already cleared for inode 13
[  528.955821][ T4272] EXT4-fs (loop2): unmounting filesystem.
[  529.120664][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5240'.
[  529.133469][T16699] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5240'.
[  529.166565][T16699] netlink: 'syz.4.5240': attribute type 1 has an invalid length.
[  529.579898][T16720] syz.2.5250 (16720): /proc/16720/oom_adj is deprecated, please use /proc/16720/oom_score_adj instead.
[  529.723364][T16687] delete_channel: no stack
[  530.272188][T16752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5266'.
[  530.308905][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5266'.
[  530.525948][T16764] loop5: detected capacity change from 0 to 736
[  531.016674][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5281'.
[  531.028354][T16783] loop4: detected capacity change from 0 to 1024
[  531.118038][T16783] hfsplus: invalid file type 0177755 for inode 17
[  531.148839][T16780] loop1: detected capacity change from 0 to 4096
[  531.191609][T16780] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  531.346288][T16780] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  531.362501][T16780] ntfs3: loop1: Failed to load $Extend.
[  531.382153][T16794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5287'.
[  531.425470][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5287'.
[  531.440771][T16780] ntfs3: loop1: no free space to extend mft
[  532.081617][T16819] loop1: detected capacity change from 0 to 512
[  532.469820][T16829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5304'.
[  532.666460][T16836] xt_cgroup: path and classid specified
[  532.709004][T16842] netlink: 'syz.4.5307': attribute type 11 has an invalid length.
[  532.737164][T16808] loop2: detected capacity change from 0 to 32768
[  532.837936][T16808] read_mapping_page failed!
[  532.860732][T16808] ERROR: (device loop2): txCommit: 
[  532.860732][T16808] 
[  533.034922][T16848] loop0: detected capacity change from 0 to 4096
[  533.160303][T16848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  533.397301][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  534.055855][T16852] loop1: detected capacity change from 0 to 32768
[  534.074686][T16856] loop2: detected capacity change from 0 to 32768
[  534.129238][T16856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5314 (16856)
[  534.182877][T16856] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  534.233473][T16856] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  534.270309][T16856] BTRFS info (device loop2): using free space tree
[  534.326709][T16883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5325'.
[  534.335946][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5325'.
[  534.533850][T16856] BTRFS info (device loop2): enabling ssd optimizations
[  534.644869][ T4273] read_mapping_page failed!
[  534.677642][ T4273] ERROR: (device loop1): txCommit: 
[  534.677642][ T4273] 
[  534.726635][ T4273] read_mapping_page failed!
[  534.731270][ T4273] ERROR: (device loop1): txCommit: 
[  534.731270][ T4273] 
[  534.784871][ T4272] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  534.917480][  T107] ERROR: (device loop1): diFree: numfree > numinos
[  534.917480][  T107] 
[  535.122157][T16910] loop5: detected capacity change from 0 to 512
[  535.187605][T16910] EXT4-fs (loop5): Test dummy encryption mode enabled
[  535.194480][T16910] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  535.206748][    C0] vkms_vblank_simulate: vblank timer overrun
[  535.233895][T16910] ==================================================================
[  535.242060][T16910] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e80
[  535.249213][T16910] Read of size 8 at addr ffff888072719310 by task syz.5.5334/16910
[  535.257235][T16910] 
[  535.259582][T16910] CPU: 1 PID: 16910 Comm: syz.5.5334 Not tainted syzkaller #0
[  535.267068][T16910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  535.277166][T16910] Call Trace:
[  535.280471][T16910]  <TASK>
[  535.283433][T16910]  dump_stack_lvl+0x188/0x24e
[  535.288174][T16910]  ? __lock_acquire+0x7ea0/0x7ea0
[  535.293237][T16910]  ? show_regs_print_info+0x12/0x12
[  535.298478][T16910]  ? load_image+0x410/0x410
[  535.303011][T16910]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  535.308506][T16910]  ? __virt_addr_valid+0x188/0x540
[  535.313689][T16910]  ? __virt_addr_valid+0x467/0x540
[  535.318833][T16910]  ? __ext4_iget+0x2bb/0x3e80
[  535.323533][T16910]  print_report+0xa8/0x210
[  535.327981][T16910]  kasan_report+0x10b/0x140
[  535.332598][T16910]  ? __ext4_iget+0x2bb/0x3e80
[  535.337306][T16910]  __ext4_iget+0x2bb/0x3e80
[  535.341867][T16910]  ? apply_workqueue_attrs+0x180/0x180
[  535.347433][T16910]  ? ext4_get_projid+0x140/0x140
[  535.352411][T16910]  ext4_fill_super+0x614c/0x78f0
[  535.357455][T16910]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  535.364210][T16910]  ? set_blocksize+0x1d0/0x470
[  535.369030][T16910]  ? sb_set_blocksize+0xa5/0xe0
[  535.374003][T16910]  get_tree_bdev+0x3e6/0x610
[  535.378645][T16910]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  535.384944][T16910]  vfs_get_tree+0x88/0x270
[  535.389410][T16910]  do_new_mount+0x247/0xa40
[  535.393959][T16910]  __se_sys_mount+0x2e3/0x3d0
[  535.398671][T16910]  ? __x64_sys_mount+0xc0/0xc0
[  535.403466][T16910]  ? lockdep_hardirqs_on+0x94/0x140
[  535.408698][T16910]  ? __x64_sys_mount+0x1c/0xc0
[  535.413501][T16910]  do_syscall_64+0x4c/0xa0
[  535.417949][T16910]  ? clear_bhb_loop+0x60/0xb0
[  535.422660][T16910]  ? clear_bhb_loop+0x60/0xb0
[  535.427391][T16910]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.433404][T16910] RIP: 0033:0x7f4223b9f54a
[  535.437841][T16910] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.457479][T16910] RSP: 002b:00007f4224b13e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  535.465920][T16910] RAX: ffffffffffffffda RBX: 00007f4224b13ee0 RCX: 00007f4223b9f54a
[  535.473922][T16910] RDX: 00002000000002c0 RSI: 00002000000000c0 RDI: 00007f4224b13ea0
[  535.481928][T16910] RBP: 00002000000002c0 R08: 00007f4224b13ee0 R09: 000000000001001a
[  535.489944][T16910] R10: 000000000001001a R11: 0000000000000246 R12: 00002000000000c0
[  535.497943][T16910] R13: 00007f4224b13ea0 R14: 000000000000044f R15: 0000200000000140
[  535.505950][T16910]  </TASK>
[  535.508995][T16910] 
[  535.511336][T16910] Allocated by task 5910:
[  535.515676][T16910]  kasan_set_track+0x4b/0x70
[  535.520305][T16910]  __kasan_slab_alloc+0x6b/0x80
[  535.525187][T16910]  slab_post_alloc_hook+0x4b/0x490
[  535.530332][T16910]  kmem_cache_alloc_lru+0x182/0x2e0
[  535.535563][T16910]  reiserfs_alloc_inode+0x26/0xc0
[  535.540708][T16910]  iget5_locked+0x9e/0x260
[  535.545153][T16910]  reiserfs_fill_super+0x105d/0x20e0
[  535.550469][T16910]  mount_bdev+0x28a/0x3c0
[  535.554827][T16910]  legacy_get_tree+0xe6/0x180
[  535.559628][T16910]  vfs_get_tree+0x88/0x270
[  535.564081][T16910]  do_new_mount+0x247/0xa40
[  535.568608][T16910]  __se_sys_mount+0x2e3/0x3d0
[  535.573308][T16910]  do_syscall_64+0x4c/0xa0
[  535.577757][T16910]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.583672][T16910] 
[  535.586022][T16910] Last potentially related work creation:
[  535.591758][T16910]  kasan_save_stack+0x3a/0x60
[  535.596482][T16910]  __kasan_record_aux_stack+0xb2/0xc0
[  535.601900][T16910]  call_rcu+0x14f/0x950
[  535.606194][T16910]  evict+0x810/0x8b0
[  535.610121][T16910]  reiserfs_fill_super+0x12da/0x20e0
[  535.615427][T16910]  mount_bdev+0x28a/0x3c0
[  535.619781][T16910]  legacy_get_tree+0xe6/0x180
[  535.624483][T16910]  vfs_get_tree+0x88/0x270
[  535.628923][T16910]  do_new_mount+0x247/0xa40
[  535.633451][T16910]  __se_sys_mount+0x2e3/0x3d0
[  535.638155][T16910]  do_syscall_64+0x4c/0xa0
[  535.642611][T16910]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.648534][T16910] 
[  535.650880][T16910] The buggy address belongs to the object at ffff888072718d40
[  535.650880][T16910]  which belongs to the cache reiser_inode_cache of size 1568
[  535.665652][T16910] The buggy address is located 1488 bytes inside of
[  535.665652][T16910]  1568-byte region [ffff888072718d40, ffff888072719360)
[  535.679219][T16910] 
[  535.681561][T16910] The buggy address belongs to the physical page:
[  535.688007][T16910] page:ffffea0001c9c600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888072719a80 pfn:0x72718
[  535.699484][T16910] head:ffffea0001c9c600 order:3 compound_mapcount:0 compound_pincount:0
[  535.707845][T16910] memcg:ffff888023c6a201
[  535.712137][T16910] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  535.720178][T16910] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888147a8e500
[  535.728800][T16910] raw: ffff888072719a80 000000008013000f 00000001ffffffff ffff888023c6a201
[  535.737403][T16910] page dumped because: kasan: bad access detected
[  535.743851][T16910] page_owner tracks the page as allocated
[  535.749585][T16910] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5744, tgid 5743 (syz.2.642), ts 148834129151, free_ts 121463339220
[  535.774017][T16910]  post_alloc_hook+0x173/0x1a0
[  535.778824][T16910]  get_page_from_freelist+0x206b/0x2180
[  535.784398][T16910]  __alloc_pages+0x1ec/0x4f0
[  535.789024][T16910]  alloc_slab_page+0x5d/0x180
[  535.793732][T16910]  new_slab+0x87/0x2d0
[  535.797824][T16910]  ___slab_alloc+0xbc5/0x1240
[  535.802540][T16910]  kmem_cache_alloc_lru+0x104/0x2e0
[  535.807783][T16910]  reiserfs_alloc_inode+0x26/0xc0
[  535.812856][T16910]  iget5_locked+0x9e/0x260
[  535.817314][T16910]  reiserfs_fill_super+0x105d/0x20e0
[  535.822665][T16910]  mount_bdev+0x28a/0x3c0
[  535.827034][T16910]  legacy_get_tree+0xe6/0x180
[  535.831773][T16910]  vfs_get_tree+0x88/0x270
[  535.836230][T16910]  do_new_mount+0x247/0xa40
[  535.840948][T16910]  __se_sys_mount+0x2e3/0x3d0
[  535.845664][T16910]  do_syscall_64+0x4c/0xa0
[  535.850114][T16910] page last free stack trace:
[  535.854823][T16910]  free_unref_page_prepare+0x8e5/0x9e0
[  535.860413][T16910]  free_unref_page+0x2e/0x3f0
[  535.865129][T16910]  qlist_free_all+0x76/0xe0
[  535.869672][T16910]  kasan_quarantine_reduce+0x144/0x160
[  535.875170][T16910]  __kasan_slab_alloc+0x1e/0x80
[  535.880048][T16910]  slab_post_alloc_hook+0x4b/0x490
[  535.885184][T16910]  kmem_cache_alloc_bulk+0x3ba/0x4e0
[  535.890490][T16910]  mas_alloc_nodes+0x449/0x880
[  535.895275][T16910]  mas_preallocate+0x162/0x3b0
[  535.900068][T16910]  do_mas_align_munmap+0x239/0x12d0
[  535.905298][T16910]  do_mas_munmap+0x240/0x2b0
[  535.909923][T16910]  __vm_munmap+0x1aa/0x2d0
[  535.914371][T16910]  __x64_sys_munmap+0x5c/0x70
[  535.919074][T16910]  do_syscall_64+0x4c/0xa0
[  535.923514][T16910]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.929429][T16910] 
[  535.931778][T16910] Memory state around the buggy address:
[  535.937424][T16910]  ffff888072719200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  535.945506][T16910]  ffff888072719280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  535.953580][T16910] >ffff888072719300: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  535.961658][T16910]                          ^
[  535.966262][T16910]  ffff888072719380: fc fc fc fc fc fc fc fc fc fc fc fc 00 00 00 00
[  535.974339][T16910]  ffff888072719400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  535.982416][T16910] ==================================================================
[  536.055611][T16910] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  536.062883][T16910] CPU: 0 PID: 16910 Comm: syz.5.5334 Not tainted syzkaller #0
[  536.070386][T16910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  536.080511][T16910] Call Trace:
[  536.083828][T16910]  <TASK>
[  536.086802][T16910]  dump_stack_lvl+0x188/0x24e
[  536.091528][T16910]  ? memcpy+0x3c/0x60
[  536.095548][T16910]  ? show_regs_print_info+0x12/0x12
[  536.100794][T16910]  ? load_image+0x410/0x410
[  536.105346][T16910]  panic+0x2d3/0x710
[  536.109288][T16910]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  536.115484][T16910]  ? bpf_jit_dump+0xd0/0xd0
[  536.120041][T16910]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  536.126062][T16910]  ? _raw_spin_unlock+0x40/0x40
[  536.130960][T16910]  check_panic_on_warn+0x80/0xa0
[  536.136036][T16910]  ? __ext4_iget+0x2bb/0x3e80
[  536.140756][T16910]  end_report+0x66/0x110
[  536.145049][T16910]  kasan_report+0x118/0x140
[  536.149620][T16910]  ? __ext4_iget+0x2bb/0x3e80
[  536.154346][T16910]  __ext4_iget+0x2bb/0x3e80
[  536.158896][T16910]  ? apply_workqueue_attrs+0x180/0x180
[  536.164381][T16910]  ? ext4_get_projid+0x140/0x140
[  536.169350][T16910]  ext4_fill_super+0x614c/0x78f0
[  536.174335][T16910]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  536.180615][T16910]  ? set_blocksize+0x1d0/0x470
[  536.185406][T16910]  ? sb_set_blocksize+0xa5/0xe0
[  536.190294][T16910]  get_tree_bdev+0x3e6/0x610
[  536.194905][T16910]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  536.201168][T16910]  vfs_get_tree+0x88/0x270
[  536.205619][T16910]  do_new_mount+0x247/0xa40
[  536.210149][T16910]  __se_sys_mount+0x2e3/0x3d0
[  536.214849][T16910]  ? __x64_sys_mount+0xc0/0xc0
[  536.219637][T16910]  ? lockdep_hardirqs_on+0x94/0x140
[  536.224874][T16910]  ? __x64_sys_mount+0x1c/0xc0
[  536.229666][T16910]  do_syscall_64+0x4c/0xa0
[  536.234102][T16910]  ? clear_bhb_loop+0x60/0xb0
[  536.238806][T16910]  ? clear_bhb_loop+0x60/0xb0
[  536.243524][T16910]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  536.249445][T16910] RIP: 0033:0x7f4223b9f54a
[  536.253879][T16910] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  536.273513][T16910] RSP: 002b:00007f4224b13e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  536.281955][T16910] RAX: ffffffffffffffda RBX: 00007f4224b13ee0 RCX: 00007f4223b9f54a
[  536.289963][T16910] RDX: 00002000000002c0 RSI: 00002000000000c0 RDI: 00007f4224b13ea0
[  536.297963][T16910] RBP: 00002000000002c0 R08: 00007f4224b13ee0 R09: 000000000001001a
[  536.306052][T16910] R10: 000000000001001a R11: 0000000000000246 R12: 00002000000000c0
[  536.314044][T16910] R13: 00007f4224b13ea0 R14: 000000000000044f R15: 0000200000000140
[  536.322049][T16910]  </TASK>
[  536.325812][T16910] Kernel Offset: disabled
[  536.330168][T16910] Rebooting in 86400 seconds..