last executing test programs:

22.936101542s ago: executing program 3 (id=10230):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000400)={0xe, @sliced={0x40, [0x7, 0x6, 0xfe00, 0x7, 0x1c00, 0x7, 0xfff, 0x4, 0xfff, 0x200, 0x4, 0x1, 0x9, 0x5, 0xfff0, 0x8, 0x3a0, 0xc5, 0x1, 0x80, 0xff, 0x7b5a, 0x4, 0xdfe5, 0x3ff, 0xfffc, 0x1, 0x200, 0x8, 0xa153, 0x8, 0x0, 0x90b7, 0x80, 0xe957, 0x0, 0x6, 0xfffa, 0x87, 0xfdb6, 0x0, 0x44, 0x8001, 0x8, 0x0, 0xf220, 0x1, 0x208a], 0x2af}})

22.748767613s ago: executing program 3 (id=10233):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

22.523257016s ago: executing program 3 (id=10237):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'ip_vti0\x00', 0x1000})

22.11930982s ago: executing program 3 (id=10241):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0xffffffd4, 0xa, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48)

21.969784688s ago: executing program 3 (id=10244):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="eae535d4c5cd41b584d3bdb8d3fb3e37666220165c8aec9c235bc9af137d4058a50551a5b228bbbcf6cd1275ef3732adfeaebdf711988cbe9d1da671f8bbaac371392e227f548006163fc9aaf3d55e97410ccacb7df3444c03ac4170da3fbc69ae1c8a590318a7a33a774debbcc54bb6d6025bc65458b94791d5a8bcd898b75cce569e2c6fd55928c5084aab22c8196fb436916cff76302fd8c4b69ca674271f5db630ffad103ad9286287759d0d5470d0b54f701a713e8803665b87799065f31bb0cff21d9c109c1fbfffb640facdacd569f158f694c34ffb4c405b186aa90e8be7b47c56e6e439ae953605d89c131c711ff56f0adb96e5ee0d269b4cfc9d089794f60bdd06e845b5ffdccfefee032ecfd92f6cba5920130f685e807f88de4a2e595ea37f39a92dcbaeb2de15dab62a5a199d4666578eb1707e88ebb0b98140fdb62d60005fd6721f18a2054b2ba2ed308813164f8dbc7e1d26a11a707adc6978a25cca2fca5d62e51794447f656b92f8372ebf98934a0bc057b901080da81ef02ccfa18a29c9b82c90fd38eb554b83428948f3608cd8fd5845bed25a0d96b146f09bd4cce20efc1ecc7bf64bd88e7a460b372a298cb776eb1d78cc334da71dc6056b2d1119cdad3af9092a42c184e9d487076399f0be65a442fdc06901089e6b5178ecb57aa4b98ff1f538696e8510551dbb5cbd36b125efa2a3e719f22b96eeec80a178dae9c894a7dd170419c33817baedfc132cde868a1c55192b9c8a332772fc40fed9f6fee1aea0e2001752caeb58afb55ea7c421cd0eb5e6ea301f8e2f6b68484849f5d3e7bd1b4aa865d2cd049dfc773bb4281f5f8dd2a3f1563c8cd3655dd9e391424151dadf7415afb242cb99b9b9541b6780beafc6a8c2c0bd109749dde1e8535040d8d2cda8393abaa6cdae24e13917e867d6d301f6f39619bcbd70acc747e093ef3c22f0b1a8b8a4d8bd11bc19c7102e11a8603d563507423c96d1653a42d02ff1ee390934927f037d2022cbbf86cb605e82e2b6e2c2fa1d523f72b47738f318836defed1f898271bdd4fcbe7863e5aa7c7e468d9bad908de3c6851c696df710da87771840f46e63fc4c3d5d9b13b663ed2fef2e56a8690cdee9e6ac0a9824c9fe458ad29614f9485f9c18caf2d5c229f24a220ab84daa26ddb2a0d4059b43e073b703148d82fe4d91ae24db7224df2ee4e10d596846466d6a62faa9da7d24f9dd1e3b5cc291f4840b6603d1173204a452a9b05a5efcf4f9e09c2a3c38f2fd49322e718ddc8278ea182a359043387705c0be61be7e62ba7bb85dfa0f24400f89087f78d84d2296844944d186fb55045eb016dd3d602c85211d7b19dbebe3247313283da5bcbba09a3a74c590fdce8cdbef49a73b11413a9df4aaefc356e94f838cef801ba2380d7e5fdc8865140311f071c82bc1482c2033b8ad70d08a5a71e1c949f93cd8743b0bd4eefdaf45f5246efcf800444c8e9b8c2a01b76b6eb4e0639ee7381971172c53e165f14946fb56896e40424a3b981d97b4b01504806d797bb9e3405a7326d2ba7bfa6efc923c4c68d0165aea2d80ae953c7e2ec6534d0da7c28bbe255d81097e84254ff7bd065caa84fa7455885e1b28ab7d6243d0f02903860049935a764ebfe5384bdf9ae0b71f1641e457780da2071a84937dd88d2e4aec7ddaab66e335887f555a724ad9692ee996521ccaa35e2358aea1ab6a8c9845af8af552520fdec7ecb635d230074aa532c3efe6677c79b1328451a779501eccb4c11750744cfce16ba2ced0fc6dd2b75a5ff1770f3851c93bcf8850adf496012d94b8dd6a00d1f9f0c96989979b89838a29875072e0b678a2a55338f21625165c350134d7cb9119ac4dcc77f13a153fe6819d1bdc6b357e93531a68813913daf65d2e62d4bd09da6bb16e8d686518f6faff70dc0804b4b6810117d8698a4d27f0482f9adf9be3aae179dbcad90ab1fbd6b1ba15cdc78ee7686bd15a8fe1cf5af00fcc0a6981a77ac5c3485518921a1b4ea90b02e0059c2c71850d517bddc12bd61a5571da765a34b53e5f06a2b8bb122bf9d642f1ad50a0eb7afe34ef6fd2474d25f314adbf276a895b80b8de6e31eaee5fe4544f4709bf6416f26ec52d517dd3a350cb68df6791dc671495e0f056de8b158095b32ec8b43f65b1f3110cf7da37d2383e99a5bd9a0e0d5684a5b15246170bd11909ef22ee740aa5556dbc0f9dacc8ce440c137bf0ec673651067ef1146004701376116986c49b10226141bea12f679c3f53eaea945b1bb92e6c922a85a2221f768ff4f1c188dc82f9e8d947e140f43c4950430f88a47fb15dcd8ef8491ff08d7b287b280eab99e44a7fba6d4fe20fcb2c2cfa1a6f4d59b51755e66a3d9a325a08a286185c2bdac8c8c2910ed3ff8e047f28b2bf1827e0829f8ec8459241300583f1880c96b2e405b253af5f7e9ee91e34c3fa2cd5c53a71bc3b4b1a5741c17a7b73c8e7d3e8ec9e51a90772b8eb38f23fcb9e07eff8b0f68d4f7d4d68bfb8fbc8d90be681166fe5ed220e3a425c65c0e678e8b7470a99d7fccc7a3be07189ee02e1f8c81549b0b8c0113ef602d10d5d2429e8b60fa5aaddd55cb86141609bae35c185c5ad743d0fb0a1244ba6d67755e46073f3d428926c0d9033f8180120deab78a4b42664e36b6723039457195bff897760ede28bf2661a95715dd20bc744ae2a06bcb12ef8b7a373f3a5557f20256446ba95d45b7810d68494f954d1802aa8986279adc368c2365168c0619bc8952ec6ac60840d9968302edb8809d36f6b0c83dc6941193fb8eb2adcef36db70cbe51fd533ee108eaedebc05ab363058feecfb51e294419695019d0ba50a660ecbe3fd1b43ac973141b7e4c423c062f63ad24468ca79740502716b10a823821429d53f34409cc0757587a5de21663c33a8b194c988a3c209cec76b9fc18805649d9cc109635271c968972f4328e561b562ad6c32a71b269718a303ae3635e5b06717152817a11589d3efa0f803d7bb560c08132827333ada867d1a870e2feb3a5e7851363fc333bb681018764aab63eb740978994f62ec3147d4d6a40e099ada0c50c1a5f6a8196549be226508055aef349c76af40596f6c9b7217423628bb6dc07d9382f6d4c87c962ec97bee6384ba3e2522b76ee8619093500a75bcc8fd0fb9bb5093650ec0ca9c867a22260e2668ecf46047e3df87f5d82d992a558e45fb852be616c030edf6aeeae70848403dc1166e6a16776e8660f90449f297224f667563850480f259f6a59039b1a3ea5488971b5e4bcbf380c527c937055dbf4f5a676bacc09f4dde33c50a1286f6024980df1064a9dc4b3f101b129fa1fc141e54f52d4b7322a0cb1c2567205016f5ede0794122fcaa2d11fa77f5fddb3a5f3c7b3d85f0cb6f32cd11d752f755687fb8d93d40711a4c8873ec7c794f0f781bb9c10f9df22fa8f40cca06a48c37e66ea4480fcdd686526be62915ebe36e0bdf7dafd3940f698469ecdc792ca6105a37499a19382247a85bb734e4ba325dd307be8444b5860f99f9dbc7aa28c26747c89041bde3c10c459406786e10792078a52f4bcc32aff61b3f5798cb5dc2927f260f70a41d8e5fc38498b02d0053a86ae408d2efdc1aca9a8508ef9128dfd1fc6a92ba72f940ee469a3111e2cf6c28e77e5a206db6f09139db812fa4e4cfe33c8d184e4763bd8e54e0e473346215b8905d101463dd2ca855747c81c7ffd6c2625e0b59273a9516ec96a5cd8d9078c974980a16b6b87563986ba287821cd41f417792e42dd24e796e313b9cd943f1b9dd6ee35676ff4ad46dbd52db83abbc78f5dad11b6e7bd09a4ace8c246d0a52c36dcb1f0c6025f6ed2868f4b918b6e4e645c63689b7e7bc369dbe44725993b3b43f4572a7136b6e610adc161f45fc307c0937f2338ebc4fd571852b229b80ccd071e1a29c927f88b8b45efa503691758125d29463e742e2ef508babf30ae39ff8bb3a94cfee379f84348c002fdef77b410bee9f47f8119388b3fc159b409b9d9c9af97a4b75c38ca5fc0665cd975df293370de64714cefdd470c1d05a5d3e0f257182889d7a2d797ebf42d6935d1c6b5ef8cd1e2783cef3a316dbd4768510f26ee5b1c481bcac3e1608458d4b5ec6411cb3c921a131140440561931ca51b92231de91d1f950d992eec74c6500a6ecc9e8bc26eec367dba82720accd6dee234db88c132ec649baeef23a16ebb18c8e5b68b95aac984d8322a01b39636baf16911e458242730ea8b22c686bd01bc451e91c34f81fafe88485bbe97ec99299940ca897c3f802d080ecf8ca7e5032c728b8b33f162ab26a6805db239b88103c19ff8160a28268f8f7ac66593c67251fb0f3fa3004d5ad08107f48e0ecc1e4e910554f49ca72e3fd7e212d828fc3c0c40203e4642a3a372f36cfd13a037fd4dd107d6b386659b379c4c41813c8599cb71fd08e4b80f22dbb088d3d0257f30493b1c4d54201a00e049d998d291ecb659e65e2eed9776b367afc9b84b03957701bcbef289b0eea8e5722a63e1bd748d5af209c5ebff7df185d0d68e7ceabbf9a63bba55946cd3b52a09383fd9b9d2d956dc4e5af16986c5600dfd0db89e0e478420557d001c3716350c3e6ba0bbec1e5888435d296d8666f455d22205ea407a95eb60bc68a184e95ae3259f3783c594d3e550c018369df677ea11a37c757a3bd3c19eb257f5e228ad760562e431754a0c620004548962c3a4fb42d49259dafc1b9d365323fa2ace81876728a24f70b06e1198d5f863bfd00a04d5393b3adb15f4191d374c607c7ccb6b7ef84303454b6655392a23dccca41f55cb314a3bfbb637f57178cc9df4fe0645a8dc1ca0386d1fb0ff2cfc3e149991f97264d893fba0b013c027ce753c3e1f907a2988b1507eecd0e5e26368155ff5c55f616ffec31a613be450ee048955a46d68c272aa53f1db6ce199e2765f4be20933799d96f13b3a65f33cb60da1929023ff5d820172c423f83210a992264a37854033cd43c88129fabb5146367d2b748d84be96dc3a4ad95279ec7ed78dcb57056597a9f46a948708b0e9915b22f28216d94554db2082f4b9782a5802bf6700ef9017168a68304b6573f46c78a0a3be302e096b4f5b87313a2ef9a2b5f51956d9e315b08ee89a59aeec225227f3ece808c451e1103df7887f944138af1b93235bc93121fb84591d065d5f245c035c238a1c30d510be5db14725148919e8d57f1e3a36ead8be870e2505e3c9935c4461741c4a8dc4dff7e0e042167a7228bf218c9d8dd9c0be9e5ff4a79968d8f34cfc3206e0ade5889e9c5e44c918ed3755063d4148e7f1da9d2ce7aa45b9fc873f85cb92160b8a4d5b219884d0c43cc1194259ec4a6127887470d2fabbc1983b1bcc51e931f131d1238333c09740b43802fc5b1c01a942c5d08693b81e59429cb7d49f454f517cddc160d563a243182083008f2481e35312b4b35a2688468f18f4733f4b40d2f298c0b88ec2ad51e2efa509905233e3bbb9e172a1e697ab379f500c8c791aa97623bc8faa7f0468e02e6bc6f9bc40c75b4c01b92731fc371ad7c90928bead62a74580bb2d0aa1d8972fa857766ebe8aa00cd9eae79a591ea3e87a5ce636dc865b992c98a6fafe478973665936ad477558dac400fe179e86e6fef41aa074d0812f0c14f3992edb76358d02a2b763512ca9abc0940dd711670deb4d9abf196de9106efa5e1c14a673de86193908206ab9f72afd6ef1b05355f06ad0b9bc83750bb196654566b56e13e6e820d12bc34920b45c3"], 0xfd, 0x200, &(0x7f00000002c0)="$eJzskr9rFEEUx7+zO3fuaUIOORBFEDVoLJLbbDT+KBRsDCoIohADgsfdJS5u/JE90DsOXKsUNoIiJIiFIElhIf4DLqiN2CgEuxBJnSKFjSSsvNm3mwnY28ynuO/NvLfvve/M3A4fhDsAbK5360AZhEQF338JSAAHhNpCw07VYb3MWuT4BSvVmPUP6+bJzvgEIPxDy6NWvKdxUJTRU/n9dQV19N3E6deX3v24WnixtHvt7UfKv3i9/QHiaKPvzav3z87P9ary4saEXseO9887VAjA843x5RW5165ktfxoiVoXkPFyEsKddwAMfR6cO+v2PrW4Ztju3KkFQXMmPPfEwppq9XO9W6c/twAkBPsbA6DnkP1FzqG9fRK4BsBGkudIbFFtTd+vhu3OoD9dm2pONe963sioe9x1T3jVST9ouvQLcDf1OZ8gSI8BoGsq0QhCxXdRbINzdmI7VIfmivK496XE45fQrRe1qxs4jHRb65fZylQgZluOmgPKKlk+Ajrah5HQdvtVFQllbAwCNi+GpTZf2stRgaFP94LGLMgbf7YAmdcYXkUhX3j6YuRU5hCzrP3YujFigXWVNXvR2UuVqoLF73kgAop4VGu1kiR5jMUeXPmWRmhvxivm/8qRfmDUtWxvN3fG/setGAwGg8FgMBgMBsN/4m8AAAD//4Hjlpw=")
open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)

20.819758626s ago: executing program 3 (id=10257):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x1, 0x0, 0x0)

4.729515174s ago: executing program 32 (id=10257):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x1, 0x0, 0x0)

2.082559548s ago: executing program 1 (id=10612):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x200506, &(0x7f0000002040)=ANY=[@ANYRES16=0x0, @ANYBLOB="132b0d95dd8786d3856320fa6af87a94c11be7db8ba396dc7186f8a009b572405ea171077d6f91b83a4adb9fbc4abe1b8d82d9c33a0c82f90e3dfa494170be8a2015c288c29d1152e653f4897c032a50e12cf4945f912897e647dd0c0e2c8b3109fed7647ca9ad6049365d0a3a28d31da4281511ffe2f1fb98e26bfb29a98349f778ef68aa690f7532089eb08cda37633151204a6ef73dee29c6a8ec5f0479a83036f85a843918ab8ed2e12a24db269ba67a866bd6ba96900c1f76051147b4362a1f91b0e117477f809b468547c99eff01e47956cf94c91704a60e0a0bae05d360b24f57a2b0c5ada3428a953b615d32e55ec6", @ANYRES8], 0x1, 0x1235, &(0x7f0000000ac0)="$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")
truncate(&(0x7f0000000a80)='./file0\x00', 0x6e8)

1.831494953s ago: executing program 0 (id=10613):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=@polexpire={0xc0, 0x12, 0xc8dbc5159e5c15d1, 0x0, 0x0, {{{@in=@private, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0xc0}}, 0x0)

1.542884839s ago: executing program 0 (id=10625):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000020500160002000000040012"], 0x60}}, 0x0)

1.382138949s ago: executing program 4 (id=10616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)

1.372999749s ago: executing program 1 (id=10627):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14)

1.271559095s ago: executing program 4 (id=10618):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x14, 0x0, 0x8, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}]}, 0x50}}, 0x0)

1.237807287s ago: executing program 0 (id=10619):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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")
creat(&(0x7f0000000040)='./file0\x00', 0x0)

1.163548622s ago: executing program 1 (id=10620):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
readv(r0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)=""/18, 0x12}], 0x1)

1.108322635s ago: executing program 2 (id=10621):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect(r0, &(0x7f00000004c0)=@nfc={0x27, 0x0, 0x8, 0x6}, 0x80)

1.002278901s ago: executing program 1 (id=10622):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c7379735f696d6d757461626c6500007466383d302c73686f72746e616d653d77696ef4d6f8677a3d5554432c636865636b757466383d302c757466383d3118000000000000000000"], 0xfd, 0x2c7, &(0x7f0000000480)="$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")
mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe)

1.002140401s ago: executing program 4 (id=10623):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f0000002cc0))

926.704865ms ago: executing program 2 (id=10624):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0)

843.60911ms ago: executing program 2 (id=10626):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x2}, 0x8)

828.923501ms ago: executing program 2 (id=10628):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x55, 0xa, 0xdf7b7a5625e873df, "d9ea2466d8f9acb1ee54ecb0b00f11f11867b5302c11500e8b8152682b7afe20", 0x31303553})

701.688288ms ago: executing program 0 (id=10629):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000000380), 0x0)

658.318571ms ago: executing program 4 (id=10630):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000020500160002000000040012"], 0x60}}, 0x0)

559.507677ms ago: executing program 2 (id=10631):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

412.394026ms ago: executing program 0 (id=10632):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)

316.196461ms ago: executing program 4 (id=10633):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4, 0x95}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)

282.243703ms ago: executing program 1 (id=10634):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x1d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x3, 0xde, 0x100, 0x3, 0x40000000})

205.540617ms ago: executing program 2 (id=10635):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010405, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1, 0x61d0, &(0x7f0000016fc0)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000))

204.166497ms ago: executing program 0 (id=10636):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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")
quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

27.276528ms ago: executing program 1 (id=10637):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

0s ago: executing program 4 (id=10638):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000032000100000000000000000002"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x4000000)

kernel console output (not intermixed with test programs):

23642][ T4376] usb 1-1: selecting invalid altsetting 1
[  916.353766][ T4376] hub 1-1:4.0: Using single TT (err -22)
[  916.446809][T25135] openvswitch: netlink: Message has 4 unknown bytes.
[  916.530792][ T4376] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  916.538262][ T4376] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  916.605704][ T4376] usb 1-1: USB disconnect, device number 63
[  917.621444][T25181] loop2: detected capacity change from 0 to 8192
[  918.292175][T25207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9091'.
[  918.628104][T25217] loop4: detected capacity change from 0 to 2048
[  918.675024][T25217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  918.784010][T25193] loop0: detected capacity change from 0 to 32768
[  918.785761][T25217] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry where CRC length (0) does not match entry length (32)
[  918.952058][T25193] XFS (loop0): Mounting V5 Filesystem
[  919.080356][T25193] XFS (loop0): Ending clean mount
[  919.174279][T25193] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  919.374354][T25193] syz.0.9084 (25193) used greatest stack depth: 19440 bytes left
[  919.399991][ T4269] XFS (loop0): Unmounting Filesystem
[  920.541692][T25305] loop0: detected capacity change from 0 to 164
[  920.568705][T25305] iso9660: Corrupted directory entry in block 2 of inode 1920
[  920.767256][T25314] loop2: detected capacity change from 0 to 512
[  920.830179][T25318] JFS: discard option not supported on device
[  920.873142][T25314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  920.881785][T25318] Mount JFS Failure: -22
[  920.886295][T25318] jfs_mount failed w/return code = -22
[  921.140400][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  921.156290][T25329] loop3: detected capacity change from 0 to 16
[  921.223877][T25335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9146'.
[  921.228224][T25329] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  921.307114][T25329] cramfs: Error -3 while decompressing!
[  921.342225][T25329] cramfs: ffffffff96d8b1e8(27)->ffff888053a80000(4096)
[  921.349460][T25329] cramfs: Error -3 while decompressing!
[  921.389485][T25329] cramfs: ffffffff96d8b203(16)->ffff88805398c000(4096)
[  921.412029][T25329] cramfs: Error -3 while decompressing!
[  921.419763][T25329] cramfs: ffffffff96d8b1e8(27)->ffff888053a80000(4096)
[  921.435222][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  921.435237][   T26] audit: type=1800 audit(45497782.649:144): pid=25329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9145" name="file2" dev="loop3" ino=348 res=0 errno=0
[  921.479183][T25344] program syz.1.9153 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  921.509865][T25346] loop3: detected capacity change from 0 to 256
[  921.672680][   T22] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  921.876717][   T22] usb 3-1: Using ep0 maxpacket: 32
[  921.891763][   T22] usb 3-1: config 2 has an invalid interface number: 157 but max is 0
[  921.909459][   T22] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  921.935164][   T22] usb 3-1: config 2 has no interface number 0
[  921.951968][   T22] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  921.978649][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.003117][   T22] usb 3-1: Product: syz
[  922.017035][   T22] usb 3-1: Manufacturer: syz
[  922.031380][   T22] usb 3-1: SerialNumber: syz
[  922.038835][T25364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9161'.
[  922.048738][   T22] imon 3-1:2.157: unable to register, err -19
[  922.295203][ T7599] usb 3-1: USB disconnect, device number 24
[  922.468467][T25356] loop0: detected capacity change from 0 to 32768
[  922.519571][T25356] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  922.526657][T25374] loop4: detected capacity change from 0 to 512
[  922.569395][T25356] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  922.617463][T25356] (syz.0.9158,25356,1):ocfs2_read_blocks:239 ERROR: status = -12
[  922.627296][T25356] (syz.0.9158,25356,1):ocfs2_xattr_block_find:2835 ERROR: status = -12
[  922.783088][ T4269] ocfs2: Unmounting device (7,0) on (node local)
[  922.876409][T25366] loop1: detected capacity change from 0 to 32768
[  922.929598][T25366] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  922.962297][T25366] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  923.031051][T25366] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  923.058073][   T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  923.072892][   T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  923.208525][   T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms
[  923.210706][T25369] loop3: detected capacity change from 0 to 32768
[  923.264491][T25387] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9182'.
[  923.274234][   T22] gfs2: fsid=syz:syz.0: jid=0: Done
[  923.287641][T25369] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.9163 (25369)
[  923.289220][T25366] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  923.371683][T25369] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  923.433550][T25369] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  923.511388][T25369] BTRFS info (device loop3): using free space tree
[  923.794757][T25369] BTRFS info (device loop3): enabling ssd optimizations
[  924.109044][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9183'.
[  924.232388][ T4268] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  924.772972][ T4351] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  924.940289][T25451] set_capacity_and_notify: 1 callbacks suppressed
[  924.940306][T25451] loop1: detected capacity change from 0 to 2048
[  924.982662][T25451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  924.997158][ T4351] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  925.017120][ T4351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.046578][ T4351] usb 3-1: Product: syz
[  925.060597][T25457] loop3: detected capacity change from 0 to 256
[  925.067294][ T4351] usb 3-1: Manufacturer: syz
[  925.071926][ T4351] usb 3-1: SerialNumber: syz
[  925.117148][ T4351] usb 3-1: config 0 descriptor??
[  925.129605][ T4351] gspca_main: sq905c-2.14.0 probing 2770:9052
[  925.556653][ T4351] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[  925.573644][T25467] loop4: detected capacity change from 0 to 4096
[  925.581373][ T4351] sq905c 3-1:0.0: Reading version command failed
[  925.601963][ T4351] sq905c: probe of 3-1:0.0 failed with error -71
[  925.631997][ T4351] usb 3-1: USB disconnect, device number 25
[  925.707185][T25475] loop0: detected capacity change from 0 to 256
[  925.762659][ T4273] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  925.785014][ T4273] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  925.918280][T25481] netlink: 'syz.4.9210': attribute type 21 has an invalid length.
[  925.926261][T25481] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9210'.
[  926.104217][T25483] loop3: detected capacity change from 0 to 2048
[  926.116919][T25489] loop4: detected capacity change from 0 to 512
[  926.146715][T25483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  926.264252][T25489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  926.338490][T25498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9216'.
[  926.454854][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  926.514943][T25497] loop0: detected capacity change from 0 to 4096
[  926.544404][T25497] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  926.637524][T25497] ntfs3: loop0: Failed to load $Extend.
[  926.705821][T25509] loop1: detected capacity change from 0 to 1024
[  927.111310][   T46] hfsplus: b-tree write err: -5, ino 4
[  927.255915][T25524] loop0: detected capacity change from 0 to 512
[  927.358447][T25524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  927.496967][T25535] loop4: detected capacity change from 0 to 4096
[  927.518601][T25535] ntfs: volume version 3.1.
[  927.989842][T25548] xt_TCPMSS: Only works on TCP SYN packets
[  928.142542][   T46] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  928.146550][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  928.230268][T25550] FAT-fs (loop3): Directory bread(block 64) failed
[  928.251916][T25550] FAT-fs (loop3): Directory bread(block 65) failed
[  928.298197][T25550] FAT-fs (loop3): Directory bread(block 66) failed
[  928.349550][T25550] FAT-fs (loop3): Directory bread(block 67) failed
[  928.392437][T25550] FAT-fs (loop3): Directory bread(block 68) failed
[  928.431689][T25550] FAT-fs (loop3): Directory bread(block 69) failed
[  928.458695][T25550] FAT-fs (loop3): Directory bread(block 70) failed
[  928.466609][T25550] FAT-fs (loop3): Directory bread(block 71) failed
[  928.499855][T25550] FAT-fs (loop3): Directory bread(block 72) failed
[  928.516682][T25550] FAT-fs (loop3): Directory bread(block 73) failed
[  928.936850][T25572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  929.119226][T25563] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  929.142436][T25563] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  929.169899][T25563] (syz.1.9249,25563,0):ocfs2_read_blocks:239 ERROR: status = -12
[  929.177996][T25563] (syz.1.9249,25563,0):ocfs2_xattr_block_find:2835 ERROR: status = -12
[  929.229755][ T4267] ocfs2: Unmounting device (7,1) on (node local)
[  929.230891][T25582] netlink: 'syz.4.9256': attribute type 5 has an invalid length.
[  929.244111][T25582] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9256'.
[  929.336476][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  929.453154][T25590] netlink: 194488 bytes leftover after parsing attributes in process `syz.4.9258'.
[  929.494188][T25592] EXT4-fs: Ignoring removed mblk_io_submit option
[  929.554285][T25592] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  929.729986][T25592] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.9262: attempt to clear invalid blocks 2 len 1
[  929.818791][T25592] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  929.857110][T25599] Process accounting paused
[  929.863155][T25592] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.9262: invalid indirect mapped block 1819239214 (level 0)
[  929.912338][T25592] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.9262: invalid indirect mapped block 1819239214 (level 1)
[  929.971163][T25608] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9270'.
[  929.974771][T25592] EXT4-fs (loop3): 1 truncate cleaned up
[  929.984369][T25608] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9270'.
[  929.999088][T25601] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  930.021306][T25592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  930.122721][T25601] ntfs3: loop1: failed to convert "c46c" to cp869
[  930.272531][T25611] FAT-fs (loop0): Directory bread(block 64) failed
[  930.287106][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  930.294612][T25611] FAT-fs (loop0): Directory bread(block 65) failed
[  930.326484][T25611] FAT-fs (loop0): Directory bread(block 66) failed
[  930.385283][T25611] FAT-fs (loop0): Directory bread(block 67) failed
[  930.391935][T25611] FAT-fs (loop0): Directory bread(block 68) failed
[  930.476108][T25611] FAT-fs (loop0): Directory bread(block 69) failed
[  930.497261][T25611] FAT-fs (loop0): Directory bread(block 70) failed
[  930.533615][T25611] FAT-fs (loop0): Directory bread(block 71) failed
[  930.572721][T25611] FAT-fs (loop0): Directory bread(block 72) failed
[  930.593232][T25611] FAT-fs (loop0): Directory bread(block 73) failed
[  930.661788][T25625] netlink: 12296 bytes leftover after parsing attributes in process `syz.1.9278'.
[  930.720645][T25625] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9278'.
[  931.077679][T25645] set_capacity_and_notify: 8 callbacks suppressed
[  931.077696][T25645] loop0: detected capacity change from 0 to 64
[  931.371930][ T4351] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  931.383900][T25659] x_tables: unsorted entry at hook 3
[  931.582707][ T4351] usb 4-1: Using ep0 maxpacket: 32
[  931.589424][ T4351] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  931.615261][ T4351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.654329][ T4351] usb 4-1: config 0 descriptor??
[  931.666241][T25667] netlink: 12296 bytes leftover after parsing attributes in process `syz.2.9297'.
[  931.673237][ T4351] gspca_main: sq930x-2.14.0 probing 041e:403c
[  931.705200][T25667] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9297'.
[  931.848465][T25653] loop0: detected capacity change from 0 to 32768
[  931.891885][ T4351] gspca_sq930x: reg_r 001f failed -71
[  931.902385][ T4351] sq930x: probe of 4-1:0.0 failed with error -71
[  931.921416][T25653] (syz.0.9292,25653,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  931.951063][ T4351] usb 4-1: USB disconnect, device number 72
[  931.967947][T25653] (syz.0.9292,25653,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  932.026612][T25653] (syz.0.9292,25653,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  932.047493][T25653] JBD2: Ignoring recovery information on journal
[  932.150417][T25665] loop4: detected capacity change from 0 to 32768
[  932.207726][T25653] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  932.229690][T25665] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  932.294439][T25665] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  932.382105][T25663] loop1: detected capacity change from 0 to 32768
[  932.409933][T25665] (syz.4.9298,25665,0):ocfs2_read_blocks:239 ERROR: status = -12
[  932.420805][ T4269] ocfs2: Unmounting device (7,0) on (node local)
[  932.472860][T25665] (syz.4.9298,25665,0):ocfs2_xattr_block_find:2835 ERROR: status = -12
[  932.479717][T25663] XFS (loop1): Mounting V5 Filesystem
[  932.633516][ T4273] ocfs2: Unmounting device (7,4) on (node local)
[  932.636197][T25663] XFS (loop1): Ending clean mount
[  932.780703][T25663] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  932.851472][T25695] loop2: detected capacity change from 0 to 128
[  932.858591][ T4351] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  932.917156][T25697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9318'.
[  932.934268][T25695] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  932.975206][ T4267] XFS (loop1): Unmounting Filesystem
[  933.058082][ T4351] usb 1-1: Using ep0 maxpacket: 16
[  933.072969][ T4351] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  933.082311][T25695] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  933.116005][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.165924][ T4351] usb 1-1: Product: syz
[  933.179706][ T4351] usb 1-1: Manufacturer: syz
[  933.202337][ T4351] usb 1-1: SerialNumber: syz
[  933.233152][ T4351] usb 1-1: config 0 descriptor??
[  933.242891][ T4351] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  933.484219][    T7] usb 1-1: USB disconnect, device number 64
[  933.625119][T25718] loop3: detected capacity change from 0 to 164
[  934.237250][T25739] loop3: detected capacity change from 0 to 164
[  934.304247][T25739] Symlink component flag not implemented
[  934.336088][T25739] Symlink component flag not implemented (7)
[  934.855181][T25733] loop4: detected capacity change from 0 to 32768
[  934.880573][T25733] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.9323 (25733)
[  934.942729][T25733] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  934.961973][T25757] loop0: detected capacity change from 0 to 4096
[  934.972679][T25733] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  934.982851][    T7] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  935.002249][T25733] BTRFS info (device loop4): using free space tree
[  935.054889][T25757] ntfs: volume version 3.1.
[  935.198490][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  935.211814][    T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  935.232124][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  935.253006][    T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  935.265309][    T7] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  935.275259][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.336181][    T7] usb 2-1: config 0 descriptor??
[  935.406115][ T4365] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  935.464296][T25733] BTRFS info (device loop4): enabling ssd optimizations
[  935.609666][    T7] hdpvr 2-1:0.0: firmware version 0x88 dated _†=&ˆ}‰¡nDT,«²�öw#Ñð¸ÀÀúúÙOR»‚��îC‰”�f(
[  935.645182][    T7] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  935.835138][    T7] hdpvr 2-1:0.0: device init failed
[  935.841462][    T7] hdpvr: probe of 2-1:0.0 failed with error -12
[  935.866659][    T7] usb 2-1: USB disconnect, device number 61
[  935.890749][ T4273] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  936.216467][ T4351] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  936.431075][T25820] loop3: detected capacity change from 0 to 4096
[  936.437675][ T4351] usb 3-1: Using ep0 maxpacket: 32
[  936.444596][ T4351] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  936.474549][ T4351] usb 3-1: config 0 has no interface number 0
[  936.506766][ T4351] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  936.523185][T25820] ntfs: volume version 3.1.
[  936.543089][ T4351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.551182][ T4351] usb 3-1: Product: syz
[  936.583030][ T4351] usb 3-1: Manufacturer: syz
[  936.592812][T25824] loop1: detected capacity change from 0 to 47
[  936.612756][ T4351] usb 3-1: SerialNumber: syz
[  936.640198][ T4351] usb 3-1: config 0 descriptor??
[  936.669258][ T4351] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  936.706207][ T4351] usb 3-1: selecting invalid altsetting 1
[  936.711994][ T4351] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  936.749496][ T4351] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  936.765711][ T4365] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  936.798075][ T4351] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  936.851891][ T4351] usb 3-1: media controller created
[  936.911401][ T4351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  937.232545][ T4351] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  937.313689][T25844] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  937.318351][ T4351] usb 3-1: USB disconnect, device number 26
[  937.399800][T25818] loop0: detected capacity change from 0 to 32768
[  937.432463][T25818] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  937.440678][T25818] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  937.494645][ T4373] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  937.528073][T25850] binder: 25849:25850 ioctl c018620c 200000000700 returned -22
[  937.553847][T25818] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  937.580449][ T7754] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  937.603131][ T7754] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  937.656507][ T7754] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 49ms
[  937.686959][ T4373] usb 2-1: Using ep0 maxpacket: 16
[  937.706713][ T4373] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  937.719843][ T7754] gfs2: fsid=syz:syz.0: jid=0: Done
[  937.725123][T25818] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  937.740424][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.752551][ T4373] usb 2-1: Product: syz
[  937.757166][ T4373] usb 2-1: Manufacturer: syz
[  937.762640][ T4373] usb 2-1: SerialNumber: syz
[  937.776598][ T4373] usb 2-1: config 0 descriptor??
[  938.030447][ T4373] speedtch 2-1:0.0: speedtch_bind: data interface not found!
[  938.037876][ T4373] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  938.061339][T25818] gfs2: fsid=syz:syz.0: found 1 quota changes
[  938.264578][ T4373] usb 2-1: USB disconnect, device number 62
[  938.328404][ T4269] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  938.328404][ T4269]   inode = 11 2339
[  938.328404][ T4269]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  938.442193][ T4269] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  938.495014][ T4269] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:4269 [syz-executor] gfs2_quota_sync+0x32c/0x700
[  938.525852][ T4269] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000200 s:0 p:0
[  938.558472][ T4269] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  938.603468][ T4269] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  938.632591][ T4269] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  938.656443][ T4269] gfs2: fsid=syz:syz.0: File system withdrawn
[  938.670519][ T4269] CPU: 0 PID: 4269 Comm: syz-executor Not tainted syzkaller #0
[  938.678124][ T4269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  938.688203][ T4269] Call Trace:
[  938.691496][ T4269]  <TASK>
[  938.694439][ T4269]  dump_stack_lvl+0x188/0x24e
[  938.699151][ T4269]  ? kobject_uevent_env+0x35f/0x8a0
[  938.704377][ T4269]  ? show_regs_print_info+0x12/0x12
[  938.709602][ T4269]  ? load_image+0x400/0x400
[  938.714135][ T4269]  ? kobject_uevent_env+0x35f/0x8a0
[  938.719366][ T4269]  gfs2_withdraw+0x1398/0x16c0
[  938.724167][ T4269]  ? gfs2_lm+0x240/0x240
[  938.728441][ T4269]  ? gfs2_consist_inode_i+0xf1/0x110
[  938.733749][ T4269]  gfs2_inode_refresh+0xb64/0xfd0
[  938.738805][ T4269]  ? gfs2_inode_metasync+0xf0/0xf0
[  938.743958][ T4269]  ? gfs2_glock_nq+0xcf0/0x14e0
[  938.748837][ T4269]  gfs2_instantiate+0x15e/0x210
[  938.753713][ T4269]  gfs2_glock_wait+0x1d0/0x2a0
[  938.758520][ T4269]  do_sync+0x4bf/0xc40
[  938.762621][ T4269]  ? gfs2_quota_sync+0x32c/0x700
[  938.767590][ T4269]  ? slot_put+0x1e0/0x1e0
[  938.771937][ T4269]  ? gfs2_quota_sync+0x32c/0x700
[  938.776882][ T4269]  ? do_raw_spin_unlock+0x11d/0x230
[  938.782085][ T4269]  gfs2_quota_sync+0x32c/0x700
[  938.786855][ T4269]  gfs2_sync_fs+0x48/0xb0
[  938.791184][ T4269]  sync_filesystem+0xe6/0x220
[  938.795862][ T4269]  generic_shutdown_super+0x6b/0x340
[  938.801148][ T4269]  kill_block_super+0x7c/0xe0
[  938.805852][ T4269]  deactivate_locked_super+0x93/0xf0
[  938.811133][ T4269]  cleanup_mnt+0x42c/0x4b0
[  938.815544][ T4269]  ? lockdep_hardirqs_on+0x94/0x140
[  938.820742][ T4269]  task_work_run+0x1d0/0x260
[  938.825329][ T4269]  ? task_work_cancel+0x220/0x220
[  938.830364][ T4269]  ? exit_to_user_mode_loop+0x3b/0x110
[  938.835825][ T4269]  exit_to_user_mode_loop+0xe6/0x110
[  938.841112][ T4269]  exit_to_user_mode_prepare+0xee/0x180
[  938.846655][ T4269]  syscall_exit_to_user_mode+0x16/0x40
[  938.852112][ T4269]  do_syscall_64+0x58/0xa0
[  938.856524][ T4269]  ? clear_bhb_loop+0x60/0xb0
[  938.861198][ T4269]  ? clear_bhb_loop+0x60/0xb0
[  938.865889][ T4269]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  938.871777][ T4269] RIP: 0033:0x7fd24fb9c117
[  938.876192][ T4269] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  938.895791][ T4269] RSP: 002b:00007fff1ec00418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  938.904199][ T4269] RAX: 0000000000000000 RBX: 00007fd24fc0471f RCX: 00007fd24fb9c117
[  938.912241][ T4269] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1ec004d0
[  938.920204][ T4269] RBP: 00007fff1ec004d0 R08: 00007fff1ec014d0 R09: 00000000ffffffff
[  938.928168][ T4269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1ec01560
[  938.936128][ T4269] R13: 00007fd24fc0471f R14: 00000000000e2bad R15: 00007fff1ec015a0
[  938.944208][ T4269]  </TASK>
[  938.947297][    C0] vkms_vblank_simulate: vblank timer overrun
[  939.038778][ T4269] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  939.063914][ T4269] CPU: 0 PID: 4269 Comm: syz-executor Not tainted syzkaller #0
[  939.071510][ T4269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  939.081583][ T4269] Call Trace:
[  939.084875][ T4269]  <TASK>
[  939.087822][ T4269]  dump_stack_lvl+0x188/0x24e
[  939.092529][ T4269]  ? gfs2_assert_warn_i+0xc3/0x2c0
[  939.097664][ T4269]  ? show_regs_print_info+0x12/0x12
[  939.102890][ T4269]  ? load_image+0x400/0x400
[  939.107420][ T4269]  ? do_raw_spin_unlock+0x11d/0x230
[  939.112648][ T4269]  gfs2_assert_warn_i+0x18f/0x2c0
[  939.117703][ T4269]  gfs2_quota_cleanup+0x4b4/0x6a0
[  939.122757][ T4269]  gfs2_put_super+0x22f/0x8c0
[  939.127464][ T4269]  ? gfs2_evict_inode+0x11d0/0x11d0
[  939.132686][ T4269]  generic_shutdown_super+0x130/0x340
[  939.138085][ T4269]  kill_block_super+0x7c/0xe0
[  939.142789][ T4269]  deactivate_locked_super+0x93/0xf0
[  939.148099][ T4269]  cleanup_mnt+0x42c/0x4b0
[  939.152533][ T4269]  ? lockdep_hardirqs_on+0x94/0x140
[  939.157760][ T4269]  task_work_run+0x1d0/0x260
[  939.162375][ T4269]  ? task_work_cancel+0x220/0x220
[  939.167425][ T4269]  ? exit_to_user_mode_loop+0x3b/0x110
[  939.172907][ T4269]  exit_to_user_mode_loop+0xe6/0x110
[  939.178212][ T4269]  exit_to_user_mode_prepare+0xee/0x180
[  939.183786][ T4269]  syscall_exit_to_user_mode+0x16/0x40
[  939.189256][ T4269]  do_syscall_64+0x58/0xa0
[  939.193694][ T4269]  ? clear_bhb_loop+0x60/0xb0
[  939.198384][ T4269]  ? clear_bhb_loop+0x60/0xb0
[  939.203076][ T4269]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  939.208993][ T4269] RIP: 0033:0x7fd24fb9c117
[  939.213420][ T4269] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  939.233043][ T4269] RSP: 002b:00007fff1ec00418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  939.241485][ T4269] RAX: 0000000000000000 RBX: 00007fd24fc0471f RCX: 00007fd24fb9c117
[  939.249475][ T4269] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1ec004d0
[  939.257466][ T4269] RBP: 00007fff1ec004d0 R08: 00007fff1ec014d0 R09: 00000000ffffffff
[  939.265469][ T4269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1ec01560
[  939.273457][ T4269] R13: 00007fd24fc0471f R14: 00000000000e2bad R15: 00007fff1ec015a0
[  939.281454][ T4269]  </TASK>
[  939.284530][    C0] vkms_vblank_simulate: vblank timer overrun
[  939.806550][T25924] libceph: resolve '00' (ret=-3): failed
[  940.120013][T25932] futex_wake_op: syz.3.9402 tries to shift op by 32; fix this program
[  940.216780][T25939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9406'.
[  940.566213][T25958] loop1: detected capacity change from 0 to 512
[  941.014744][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  941.021139][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  941.568069][T25999] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9436'.
[  941.641286][T25972] loop3: detected capacity change from 0 to 32768
[  941.687813][T25972] (syz.3.9423,25972,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  941.756053][T25972] (syz.3.9423,25972,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  941.797957][T26008] CIFS: VFS: Malformed UNC in devname
[  941.809308][T26010] loop1: detected capacity change from 0 to 256
[  941.821039][T25972] (syz.3.9423,25972,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  941.902873][T25972] JBD2: Ignoring recovery information on journal
[  942.020751][T25972] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  942.085015][T26019] overlayfs: missing 'workdir'
[  942.286778][ T4268] ocfs2: Unmounting device (7,3) on (node local)
[  942.458499][T26031] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9451'.
[  942.480941][T26033] futex_wake_op: syz.0.9453 tries to shift op by 32; fix this program
[  943.543136][T26051] loop1: detected capacity change from 0 to 32768
[  943.583895][T26051] (syz.1.9460,26051,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  943.636307][T26051] (syz.1.9460,26051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  943.724686][T26051] (syz.1.9460,26051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  943.742417][T26088] loop4: detected capacity change from 0 to 256
[  943.764007][T26051] JBD2: Ignoring recovery information on journal
[  943.906880][T26088] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  943.972636][T26051] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  944.269202][ T4267] ocfs2: Unmounting device (7,1) on (node local)
[  944.271952][T26103] loop4: detected capacity change from 0 to 512
[  944.681884][T26119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9491'.
[  944.906736][T26121] loop3: detected capacity change from 0 to 4096
[  944.962860][T26121] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  944.996835][T26121] ntfs3: loop3: Failed to load $Extend.
[  945.034316][T26129] loop2: detected capacity change from 0 to 1024
[  945.490060][T26108] loop0: detected capacity change from 0 to 32768
[  945.529935][T26108] XFS: noikeep mount option is deprecated.
[  945.680336][T26108] XFS (loop0): Mounting V5 Filesystem
[  945.799137][T26108] XFS (loop0): invalid iclog size (4096 bytes), using lsunit (32768 bytes)
[  945.855918][T26125] loop1: detected capacity change from 0 to 32768
[  945.867519][T26108] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  945.892588][T26125] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  945.940097][T26125] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  945.968091][T26108] XFS (loop0): Starting recovery (logdev: internal)
[  946.010671][T26125] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  946.027504][T26108] XFS (loop0): Ending recovery (logdev: internal)
[  946.046719][ T4373] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  946.055637][ T4373] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  946.087489][T26155] loop2: detected capacity change from 0 to 4096
[  946.164113][ T4373] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 101ms
[  946.189767][ T4373] gfs2: fsid=syz:syz.0: jid=0: Done
[  946.189803][ T4269] XFS (loop0): Unmounting Filesystem
[  946.195010][T26125] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  946.552045][T26163] netlink: 'syz.3.9511': attribute type 3 has an invalid length.
[  946.559837][T26163] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9511'.
[  946.616027][T26125] gfs2: fsid=syz:syz.0: found 1 quota changes
[  946.665728][T26139] loop4: detected capacity change from 0 to 32768
[  946.942248][T26139] XFS (loop4): Mounting V5 Filesystem
[  946.957907][ T4267] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  946.957907][ T4267]   inode = 11 2339
[  946.957907][ T4267]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 464
[  947.116158][ T4267] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  947.132016][T26139] XFS (loop4): Ending clean mount
[  947.136407][ T4267] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:4267 [syz-executor] gfs2_quota_sync+0x32c/0x700
[  947.169181][ T4267] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000001 s:0 p:0
[  947.191014][ T4267] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  947.228102][ T4267] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  947.237681][ T3598] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  947.246045][ T4273] XFS (loop4): Unmounting Filesystem
[  947.263642][ T4267] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  947.281643][ T4267] gfs2: fsid=syz:syz.0: File system withdrawn
[  947.292175][ T4267] CPU: 1 PID: 4267 Comm: syz-executor Not tainted syzkaller #0
[  947.299766][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  947.309847][ T4267] Call Trace:
[  947.313132][ T4267]  <TASK>
[  947.316070][ T4267]  dump_stack_lvl+0x188/0x24e
[  947.320764][ T4267]  ? kobject_uevent_env+0x35f/0x8a0
[  947.325979][ T4267]  ? show_regs_print_info+0x12/0x12
[  947.331200][ T4267]  ? load_image+0x400/0x400
[  947.335726][ T4267]  ? kobject_uevent_env+0x35f/0x8a0
[  947.340952][ T4267]  gfs2_withdraw+0x1398/0x16c0
[  947.345741][ T4267]  ? gfs2_lm+0x240/0x240
[  947.349998][ T4267]  ? gfs2_consist_inode_i+0xf1/0x110
[  947.355305][ T4267]  gfs2_inode_refresh+0xb64/0xfd0
[  947.360353][ T4267]  ? gfs2_inode_metasync+0xf0/0xf0
[  947.365658][ T4267]  ? gfs2_glock_nq+0xcf0/0x14e0
[  947.370530][ T4267]  gfs2_instantiate+0x15e/0x210
[  947.375577][ T4267]  gfs2_glock_wait+0x1d0/0x2a0
[  947.380361][ T4267]  do_sync+0x4bf/0xc40
[  947.384459][ T4267]  ? gfs2_quota_sync+0x32c/0x700
[  947.389429][ T4267]  ? slot_put+0x1e0/0x1e0
[  947.393789][ T4267]  ? gfs2_quota_sync+0x32c/0x700
[  947.398754][ T4267]  ? do_raw_spin_unlock+0x11d/0x230
[  947.403980][ T4267]  gfs2_quota_sync+0x32c/0x700
[  947.408772][ T4267]  gfs2_sync_fs+0x48/0xb0
[  947.413126][ T4267]  sync_filesystem+0xe6/0x220
[  947.417830][ T4267]  generic_shutdown_super+0x6b/0x340
[  947.423141][ T4267]  kill_block_super+0x7c/0xe0
[  947.427847][ T4267]  deactivate_locked_super+0x93/0xf0
[  947.433148][ T4267]  cleanup_mnt+0x42c/0x4b0
[  947.437752][ T4267]  ? lockdep_hardirqs_on+0x94/0x140
[  947.442974][ T4267]  task_work_run+0x1d0/0x260
[  947.447586][ T4267]  ? task_work_cancel+0x220/0x220
[  947.452627][ T4267]  ? exit_to_user_mode_loop+0x3b/0x110
[  947.458099][ T4267]  exit_to_user_mode_loop+0xe6/0x110
[  947.463398][ T4267]  exit_to_user_mode_prepare+0xee/0x180
[  947.468985][ T4267]  syscall_exit_to_user_mode+0x16/0x40
[  947.474466][ T4267]  do_syscall_64+0x58/0xa0
[  947.478901][ T4267]  ? clear_bhb_loop+0x60/0xb0
[  947.483593][ T4267]  ? clear_bhb_loop+0x60/0xb0
[  947.488289][ T4267]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  947.494196][ T4267] RIP: 0033:0x7fa22079c117
[  947.498629][ T4267] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  947.518258][ T4267] RSP: 002b:00007ffdbb303198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  947.526689][ T4267] RAX: 0000000000000000 RBX: 00007fa22080471f RCX: 00007fa22079c117
[  947.534675][ T4267] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbb303250
[  947.542655][ T4267] RBP: 00007ffdbb303250 R08: 00007ffdbb304250 R09: 00000000ffffffff
[  947.550640][ T4267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbb3042e0
[  947.558623][ T4267] R13: 00007fa22080471f R14: 00000000000e4b1a R15: 00007ffdbb304320
[  947.566625][ T4267]  </TASK>
[  947.570992][ T7754] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  947.598634][ T4267] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  947.621485][ T4267] CPU: 1 PID: 4267 Comm: syz-executor Not tainted syzkaller #0
[  947.629090][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  947.639180][ T4267] Call Trace:
[  947.642473][ T4267]  <TASK>
[  947.645416][ T4267]  dump_stack_lvl+0x188/0x24e
[  947.650124][ T4267]  ? gfs2_assert_warn_i+0xc3/0x2c0
[  947.655264][ T4267]  ? show_regs_print_info+0x12/0x12
[  947.660490][ T4267]  ? load_image+0x400/0x400
[  947.665019][ T4267]  ? do_raw_spin_unlock+0x11d/0x230
[  947.670235][ T4267]  gfs2_assert_warn_i+0x18f/0x2c0
[  947.675285][ T4267]  gfs2_quota_cleanup+0x4b4/0x6a0
[  947.680340][ T4267]  gfs2_put_super+0x22f/0x8c0
[  947.685067][ T4267]  ? gfs2_evict_inode+0x11d0/0x11d0
[  947.686329][T26181] loop2: detected capacity change from 0 to 32768
[  947.690271][ T4267]  generic_shutdown_super+0x130/0x340
[  947.702064][ T4267]  kill_block_super+0x7c/0xe0
[  947.706758][ T4267]  deactivate_locked_super+0x93/0xf0
[  947.709174][T26181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.9515 (26181)
[  947.712049][ T4267]  cleanup_mnt+0x42c/0x4b0
[  947.728739][ T4267]  ? lockdep_hardirqs_on+0x94/0x140
[  947.733975][ T4267]  task_work_run+0x1d0/0x260
[  947.738597][ T4267]  ? task_work_cancel+0x220/0x220
[  947.743647][ T4267]  ? exit_to_user_mode_loop+0x3b/0x110
[  947.749133][ T4267]  exit_to_user_mode_loop+0xe6/0x110
[  947.754432][ T4267]  exit_to_user_mode_prepare+0xee/0x180
[  947.759993][ T4267]  syscall_exit_to_user_mode+0x16/0x40
[  947.765453][ T4267]  do_syscall_64+0x58/0xa0
[  947.769886][ T4267]  ? clear_bhb_loop+0x60/0xb0
[  947.774570][ T4267]  ? clear_bhb_loop+0x60/0xb0
[  947.779277][ T4267]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  947.785200][ T4267] RIP: 0033:0x7fa22079c117
[  947.789614][ T4267] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  947.809236][ T4267] RSP: 002b:00007ffdbb303198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  947.817662][ T4267] RAX: 0000000000000000 RBX: 00007fa22080471f RCX: 00007fa22079c117
[  947.825732][ T4267] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbb303250
[  947.833708][ T4267] RBP: 00007ffdbb303250 R08: 00007ffdbb304250 R09: 00000000ffffffff
[  947.841691][ T4267] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbb3042e0
[  947.849663][ T4267] R13: 00007fa22080471f R14: 00000000000e4b1a R15: 00007ffdbb304320
[  947.857643][ T4267]  </TASK>
[  947.896571][T26181] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  947.907326][ T3598] usb 4-1: Using ep0 maxpacket: 16
[  947.927382][T26181] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  947.943410][ T3598] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  947.958579][ T3598] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  947.967985][T26181] BTRFS info (device loop2): using free space tree
[  947.995426][ T3598] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  948.005206][ T7754] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  948.019358][ T7754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.035480][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  948.047983][ T7754] usb 1-1: config 0 descriptor??
[  948.057082][ T3598] usb 4-1: Product: syz
[  948.061269][ T3598] usb 4-1: Manufacturer: syz
[  948.073838][ T7754] pwc: Philips SPC 900NC USB webcam detected.
[  948.089222][ T3598] usb 4-1: SerialNumber: syz
[  948.172758][T26181] BTRFS info (device loop2): enabling ssd optimizations
[  948.281024][   T26] audit: type=1326 audit(45497807.765:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22079aeb9 code=0x7ffc0000
[  948.336391][ T3598] usb 4-1: 0:2 : does not exist
[  948.360637][ T3598] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  948.387858][   T26] audit: type=1326 audit(45497807.765:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fa22079aeb9 code=0x7ffc0000
[  948.436673][ T3598] usb 4-1: USB disconnect, device number 73
[  948.444275][   T26] audit: type=1326 audit(45497807.765:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26196 comm="syz.1.9516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22079aeb9 code=0x7ffc0000
[  948.467126][ T4280] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  948.530450][ T7754] pwc: send_video_command error -71
[  948.535739][ T7754] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  948.559827][ T7754] Philips webcam: probe of 1-1:0.0 failed with error -71
[  948.577116][ T7754] usb 1-1: USB disconnect, device number 65
[  948.707302][ T4261] udevd[4261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  949.000859][T26215] loop2: detected capacity change from 0 to 2048
[  949.021526][T26215] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  949.043049][T26215] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  949.097058][T26215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  949.585272][   T26] audit: type=1326 audit(45497808.981:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.4.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743479aeb9 code=0x7ffc0000
[  949.664656][   T26] audit: type=1326 audit(45497808.981:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.4.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743479aeb9 code=0x7ffc0000
[  949.741324][   T26] audit: type=1326 audit(45497809.046:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.4.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f743475b78e code=0x7ffc0000
[  949.816081][   T26] audit: type=1326 audit(45497809.046:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.4.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f743479c1d7 code=0x7ffc0000
[  949.925625][   T26] audit: type=1326 audit(45497809.046:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.4.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f743479aeb9 code=0x7ffc0000
[  950.041847][   T26] audit: type=1326 audit(45497809.046:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.4.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f743479c1d7 code=0x7ffc0000
[  950.152285][   T26] audit: type=1326 audit(45497809.046:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26235 comm="syz.4.9533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f743475b78e code=0x7ffc0000
[  950.168675][T26260] loop3: detected capacity change from 0 to 128
[  950.613227][T26277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  951.105837][T26301] loop2: detected capacity change from 0 to 2048
[  951.158705][T26301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  951.952673][T26345] ipt_CLUSTERIP: bad local_nodes[1] 0
[  952.038893][T26347] device bridge1 entered promiscuous mode
[  952.266301][T26360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9595'.
[  952.318397][T26360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9595'.
[  952.344024][T26360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9595'.
[  952.535772][T26373] netlink: 'syz.0.9601': attribute type 1 has an invalid length.
[  952.898830][T26391] loop4: detected capacity change from 0 to 256
[  952.957549][T26391] exfat: Deprecated parameter 'utf8'
[  952.963039][T26391] exfat: Deprecated parameter 'utf8'
[  953.048764][T26391] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  953.071134][T26399] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  953.460335][T26404] loop0: detected capacity change from 0 to 4096
[  953.550492][T26404] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  953.599512][T26404] ntfs3: loop0: Failed to load $Extend.
[  954.131658][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  954.131673][   T26] audit: type=1326 audit(45497813.237:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae8f9aeb9 code=0x7ffc0000
[  954.208434][   T26] audit: type=1326 audit(45497813.274:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f9ae8f9aeb9 code=0x7ffc0000
[  954.274108][   T26] audit: type=1326 audit(45497813.274:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae8f9aeb9 code=0x7ffc0000
[  954.310234][   T26] audit: type=1326 audit(45497813.274:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26440 comm="syz.3.9636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae8f9aeb9 code=0x7ffc0000
[  954.421001][ T8328] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  954.622690][ T8328] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959
[  954.642333][ T8328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  954.681391][ T8328] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  954.715345][ T8328] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  954.743364][ T8328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.762211][T26466] netlink: 'syz.1.9646': attribute type 10 has an invalid length.
[  954.770547][ T8328] usb 3-1: Product: syz
[  954.781793][ T8328] usb 3-1: Manufacturer: syz
[  954.797364][ T8328] usb 3-1: SerialNumber: syz
[  954.804761][   T26] audit: type=1326 audit(45497813.873:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.9647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae8f9aeb9 code=0x7ffc0000
[  954.808776][T26466] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.836825][T26466] bridge0: port 1(bridge_slave_0) entered disabled state
[  954.848310][ T8328] usb 3-1: config 0 descriptor??
[  954.855638][T26439] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  954.865321][   T26] audit: type=1326 audit(45497813.892:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.9647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f9ae8f9aeb9 code=0x7ffc0000
[  954.937503][   T26] audit: type=1326 audit(45497813.892:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.9647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae8f9aeb9 code=0x7ffc0000
[  955.006375][   T26] audit: type=1326 audit(45497813.892:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26467 comm="syz.3.9647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae8f9aeb9 code=0x7ffc0000
[  955.100279][ T8328] usb 3-1: USB disconnect, device number 27
[  955.293651][T26482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9654'.
[  955.390343][T26460] loop0: detected capacity change from 0 to 32768
[  955.503462][T26460] XFS (loop0): Mounting V5 Filesystem
[  955.733107][T26460] XFS (loop0): Ending clean mount
[  955.919542][ T4269] XFS (loop0): Unmounting Filesystem
[  955.952941][T26516] loop3: detected capacity change from 0 to 256
[  956.370793][T26524] loop3: detected capacity change from 0 to 2048
[  956.428781][T26524] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  956.465833][T26524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  956.529449][   T26] audit: type=1326 audit(45497815.482:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26531 comm="syz.4.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743479aeb9 code=0x7ffc0000
[  956.551843][    C1] vkms_vblank_simulate: vblank timer overrun
[  956.563320][T26530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  956.681767][   T26] audit: type=1326 audit(45497815.529:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26531 comm="syz.4.9676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743479aeb9 code=0x7ffc0000
[  956.989406][T26548] loop0: detected capacity change from 0 to 512
[  957.028928][T26548] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  957.085111][T26548] EXT4-fs (loop0): orphan cleanup on readonly fs
[  957.107428][T26548] EXT4-fs error (device loop0): mb_free_blocks:1826: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  957.163973][T26548] EXT4-fs (loop0): Remounting filesystem read-only
[  957.176206][ T7602] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  957.184950][T26548] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #11: comm syz.0.9683: corrupted inode contents
[  957.253732][T26548] EXT4-fs (loop0): Remounting filesystem read-only
[  957.281985][T26548] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #11: comm syz.0.9683: mark_inode_dirty error
[  957.329175][T26548] EXT4-fs (loop0): Remounting filesystem read-only
[  957.348424][T26548] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.9683: invalid indirect mapped block 327680 (level 0)
[  957.357347][T26563] netlink: 'syz.2.9690': attribute type 10 has an invalid length.
[  957.380845][ T7602] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad
[  957.395556][T26548] EXT4-fs (loop0): Remounting filesystem read-only
[  957.400427][ T7602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.405651][T26548] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #11: comm syz.0.9683: corrupted inode contents
[  957.415407][T26563] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  957.434129][ T7602] usb 4-1: config 0 descriptor??
[  957.439417][T26548] EXT4-fs (loop0): Remounting filesystem read-only
[  957.445127][T26563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  957.446312][T26548] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  957.476139][T26548] EXT4-fs (loop0): Remounting filesystem read-only
[  957.482950][T26548] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #11: comm syz.0.9683: corrupted inode contents
[  957.507975][T26548] EXT4-fs (loop0): Remounting filesystem read-only
[  957.514545][T26548] EXT4-fs error (device loop0): ext4_truncate:4318: inode #11: comm syz.0.9683: mark_inode_dirty error
[  957.534563][T26552] loop1: detected capacity change from 0 to 32768
[  957.543746][T26548] EXT4-fs (loop0): Remounting filesystem read-only
[  957.545420][T26552] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.9684 (26552)
[  957.563731][T26548] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  957.591546][T26548] EXT4-fs (loop0): Remounting filesystem read-only
[  957.613398][T26552] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  957.614034][T26548] EXT4-fs (loop0): 1 truncate cleaned up
[  957.626885][T26552] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  957.631887][T26548] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  957.652988][T26552] BTRFS info (device loop1): using free space tree
[  957.681996][ T7602] snd-usb-hiface: probe of 4-1:0.0 failed with error -22
[  957.823936][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  957.928888][ T7597] usb 4-1: USB disconnect, device number 74
[  957.930571][T26590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9694'.
[  957.939829][T26552] BTRFS info (device loop1): enabling ssd optimizations
[  958.188888][ T4267] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  958.447712][T26602] loop0: detected capacity change from 0 to 64
[  958.568372][ T4261] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (4261)
[  958.886604][ T4373] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  959.102476][ T4373] usb 5-1: Using ep0 maxpacket: 16
[  959.115780][ T4373] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  959.156696][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  959.199506][ T4373] usb 5-1: Product: syz
[  959.209352][ T4373] usb 5-1: Manufacturer: syz
[  959.213985][ T4373] usb 5-1: SerialNumber: syz
[  959.253387][ T4373] usb 5-1: config 0 descriptor??
[  959.485806][ T4373] speedtch 5-1:0.0: speedtch_bind: wrong device class 68
[  959.492886][ T4373] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  959.567173][T26608] loop1: detected capacity change from 0 to 32768
[  959.599331][T26608] XFS: noikeep mount option is deprecated.
[  959.664741][T26639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9715'.
[  959.685067][T26608] XFS (loop1): Mounting V5 Filesystem
[  959.735663][   T41] usb 5-1: USB disconnect, device number 75
[  959.811114][T26608] XFS (loop1): invalid iclog size (4096 bytes), using lsunit (32768 bytes)
[  959.829147][T26608] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  959.882379][T26608] XFS (loop1): Starting recovery (logdev: internal)
[  959.938238][T26608] XFS (loop1): Ending recovery (logdev: internal)
[  960.212638][ T4267] XFS (loop1): Unmounting Filesystem
[  960.498577][T26669] ipt_REJECT: ECHOREPLY no longer supported.
[  961.159638][T26695] netlink: 'syz.4.9740': attribute type 10 has an invalid length.
[  961.189559][T26695] bridge0: port 2(bridge_slave_1) entered disabled state
[  961.197049][T26695] bridge0: port 1(bridge_slave_0) entered disabled state
[  961.203438][T26699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9742'.
[  961.422724][T26702] netlink: 'syz.0.9743': attribute type 21 has an invalid length.
[  961.649482][T26713] qrtr: Invalid version 0
[  961.694303][T26681] loop2: detected capacity change from 0 to 32768
[  961.758079][T26681] XFS: noikeep mount option is deprecated.
[  961.830984][T26726] loop4: detected capacity change from 0 to 256
[  961.879563][T26728] mkiss: ax0: crc mode is auto.
[  961.919340][T26681] XFS (loop2): Mounting V5 Filesystem
[  961.949106][T26726] FAT-fs (loop4): Directory bread(block 64) failed
[  961.987315][T26726] FAT-fs (loop4): Directory bread(block 65) failed
[  961.994126][T26726] FAT-fs (loop4): Directory bread(block 66) failed
[  962.018623][T26726] FAT-fs (loop4): Directory bread(block 67) failed
[  962.036864][T26728] Process accounting resumed
[  962.053518][T26681] XFS (loop2): invalid iclog size (4096 bytes), using lsunit (32768 bytes)
[  962.072725][T26726] FAT-fs (loop4): Directory bread(block 68) failed
[  962.083402][T26726] FAT-fs (loop4): Directory bread(block 69) failed
[  962.098422][T26681] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  962.114606][T26726] FAT-fs (loop4): Directory bread(block 70) failed
[  962.155733][T26726] FAT-fs (loop4): Directory bread(block 71) failed
[  962.166610][T26726] FAT-fs (loop4): Directory bread(block 72) failed
[  962.201797][T26681] XFS (loop2): Starting recovery (logdev: internal)
[  962.223007][T26726] FAT-fs (loop4): Directory bread(block 73) failed
[  962.266812][T26681] XFS (loop2): Ending recovery (logdev: internal)
[  962.286316][T26741] netlink: 'syz.1.9758': attribute type 21 has an invalid length.
[  962.294266][T26739] netlink: 'syz.3.9759': attribute type 4 has an invalid length.
[  962.337935][T26740] loop0: detected capacity change from 0 to 2048
[  962.373459][T26740] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  962.419698][T26740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  962.496580][ T4280] XFS (loop2): Unmounting Filesystem
[  962.918960][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  962.918975][   T26] audit: type=1326 audit(45497821.459:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.4.9767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743479aeb9 code=0x7ffc0000
[  962.994558][T26759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9769'.
[  963.003691][   T26] audit: type=1326 audit(45497821.515:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.4.9767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f743479aeb9 code=0x7ffc0000
[  963.094443][   T26] audit: type=1326 audit(45497821.515:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.4.9767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743479aeb9 code=0x7ffc0000
[  963.179057][   T26] audit: type=1326 audit(45497821.515:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26754 comm="syz.4.9767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743479aeb9 code=0x7ffc0000
[  963.287981][T26769] netlink: 'syz.2.9763': attribute type 1 has an invalid length.
[  963.390169][T26773] comedi comedi0: dac02: I/O port conflict (0x3,8)
[  963.403217][   T26] audit: type=1326 audit(45497821.908:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26774 comm="syz.0.9776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24fb9aeb9 code=0x7ffc0000
[  963.480188][   T26] audit: type=1326 audit(45497821.908:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26774 comm="syz.0.9776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd24fb9aeb9 code=0x7ffc0000
[  963.558875][   T26] audit: type=1326 audit(45497821.908:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26774 comm="syz.0.9776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24fb9aeb9 code=0x7ffc0000
[  963.607939][   T26] audit: type=1326 audit(45497821.908:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26774 comm="syz.0.9776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24fb9aeb9 code=0x7ffc0000
[  963.794905][T26792] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.9785'.
[  963.815127][ T8328] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[  963.838811][T26792] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  963.985726][T26797] loop4: detected capacity change from 0 to 4096
[  964.021869][ T8328] usb 2-1: unable to get BOS descriptor or descriptor too short
[  964.027626][T26797] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  964.046596][ T8328] usb 2-1: not running at top speed; connect to a high speed hub
[  964.085303][T26797] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  964.112593][ T8328] usb 2-1: config 106 has an invalid interface number: 8 but max is 0
[  964.125407][T26797] ntfs: volume version 3.1.
[  964.138704][T26805] loop0: detected capacity change from 0 to 512
[  964.140269][ T8328] usb 2-1: config 106 has no interface number 0
[  964.147536][T26807] loop2: detected capacity change from 0 to 24
[  964.159434][T26797] syz.4.9787: attempt to access beyond end of device
[  964.159434][T26797] loop4: rw=0, sector=36178056, nr_sectors = 4 limit=4096
[  964.163754][ T8328] usb 2-1: config 106 interface 8 has no altsetting 0
[  964.190068][T26807] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  964.200591][T26807] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  964.210467][T26797] syz.4.9787: attempt to access beyond end of device
[  964.210467][T26797] loop4: rw=0, sector=36178060, nr_sectors = 4 limit=4096
[  964.234411][ T8328] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd
[  964.256447][T26807] VFS: Lookup of 'file0' in romfs loop2 would have caused loop
[  964.272577][ T8328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.292816][ T8328] usb 2-1: Product: syz
[  964.303954][ T8328] usb 2-1: Manufacturer: syz
[  964.308922][ T8328] usb 2-1: SerialNumber: syz
[  964.310608][T26805] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  964.354687][T26797] syz.4.9787: attempt to access beyond end of device
[  964.354687][T26797] loop4: rw=0, sector=36178056, nr_sectors = 4 limit=4096
[  964.421592][T26797] syz.4.9787: attempt to access beyond end of device
[  964.421592][T26797] loop4: rw=0, sector=36178060, nr_sectors = 4 limit=4096
[  964.533112][T26814] netlink: 193 bytes leftover after parsing attributes in process `syz.2.9794'.
[  964.549062][ T8328] kalmia 2-1:106.8 (unnamed net_device) (uninitialized): Error sending init packet. Status -22
[  964.588951][ T8328] kalmia: probe of 2-1:106.8 failed with error -22
[  964.631373][ T8328] usb 2-1: USB disconnect, device number 63
[  964.647740][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  964.765415][T26820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9797'.
[  965.490495][T26856] loop0: detected capacity change from 0 to 512
[  965.612022][T26856] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  965.745744][T26866] netlink: 'syz.1.9819': attribute type 4 has an invalid length.
[  965.761094][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  966.391889][T26898] netlink: 'syz.3.9835': attribute type 1 has an invalid length.
[  966.610407][T26910] kAFS: unable to lookup cell '@mTsyz0'
[  966.808475][T26920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9845'.
[  966.899768][T26924] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9848'.
[  967.099754][T26934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9853'.
[  967.144395][T26934] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  967.194167][T26934] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  967.236531][T26934] device bridge2 entered promiscuous mode
[  967.253400][T26939] netlink: 'syz.2.9854': attribute type 21 has an invalid length.
[  967.289838][T26939] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9854'.
[  967.348304][T26945] loop3: detected capacity change from 0 to 512
[  967.396405][T26945] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  967.445560][T26945] EXT4-fs (loop3): orphan cleanup on readonly fs
[  967.472749][T26945] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.9857: inode #15: comm syz.3.9857: iget: illegal inode #
[  967.572359][T26945] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.9857: couldn't read orphan inode 15 (err -117)
[  967.651440][T26945] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  967.663462][ T8328] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  967.682221][T26945] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  967.720289][T26945] EXT4-fs (loop3): re-mounted. Quota mode: none.
[  967.864688][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  967.875852][ T8328] usb 5-1: Using ep0 maxpacket: 8
[  967.882852][ T8328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  967.918284][ T8328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  967.949959][ T8328] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  967.973484][ T8328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  968.018573][ T8328] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  968.061153][ T8328] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  968.074389][ T8328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.109485][ T8328] usb 5-1: config 0 descriptor??
[  968.126782][T26947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  968.587717][ T8328] usb 5-1: USB disconnect, device number 76
[  968.593975][ T4283] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  968.755753][T27004] xt_CT: You must specify a L4 protocol and not use inversions on it
[  969.549264][T27042] netlink: 'syz.2.9905': attribute type 21 has an invalid length.
[  969.582980][T27044] loop1: detected capacity change from 0 to 256
[  969.625282][T27044] FAT-fs (loop1): Directory bread(block 64) failed
[  969.675789][T27044] FAT-fs (loop1): Directory bread(block 65) failed
[  969.682476][T27044] FAT-fs (loop1): Directory bread(block 66) failed
[  969.717431][T27044] FAT-fs (loop1): Directory bread(block 67) failed
[  969.740483][T27044] FAT-fs (loop1): Directory bread(block 68) failed
[  969.758923][T27044] FAT-fs (loop1): Directory bread(block 69) failed
[  969.787430][T27044] FAT-fs (loop1): Directory bread(block 70) failed
[  969.801695][T27044] FAT-fs (loop1): Directory bread(block 71) failed
[  969.823075][T27044] FAT-fs (loop1): Directory bread(block 72) failed
[  969.829677][T27044] FAT-fs (loop1): Directory bread(block 73) failed
[  970.791112][T27096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9931'.
[  970.809601][T27096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9931'.
[  971.419305][T27125] loop3: detected capacity change from 0 to 1024
[  971.477648][T27129] xt_cgroup: invalid path, errno=-2
[  971.573625][T17833] hfsplus: b-tree write err: -5, ino 4
[  971.868884][T27145] tmpfs: Bad value for 'mpol'
[  971.904859][T27150] (unnamed net_device) (uninitialized): option ad_select: invalid value (105)
[  972.135875][T27160] ip6t_srh: unknown srh match flags  4000
[  972.575049][T27177] loop2: detected capacity change from 0 to 1024
[  972.643490][T27177] hfsplus: failed to load root directory
[  973.092113][T27200] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9980'.
[  973.599136][T27227] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  973.622311][T27227] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  973.653745][T27227] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  973.678786][T27227] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  973.734913][T27234] loop3: detected capacity change from 0 to 512
[  973.759134][T27235] netlink: 'syz.0.9994': attribute type 20 has an invalid length.
[  973.767028][T27235] IPv6: NLM_F_CREATE should be specified when creating new route
[  973.772476][   T41] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  973.897056][T27234] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  973.945873][T27234] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:337: inode #15: comm syz.3.9993: verity file corrupted; can't find descriptor
[  973.995646][   T41] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  974.011455][T27234] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  974.017955][   T41] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  974.083039][   T41] usb 5-1: config 220 has no interface number 2
[  974.111749][   T41] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  974.170908][ T4268] EXT4-fs (loop3): unmounting filesystem.
[  974.174687][   T41] usb 5-1: config 220 interface 0 has no altsetting 0
[  974.214224][   T41] usb 5-1: config 220 interface 76 has no altsetting 0
[  974.257505][   T41] usb 5-1: config 220 interface 1 has no altsetting 0
[  974.304361][   T41] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  974.346632][   T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.354804][   T41] usb 5-1: Product: syz
[  974.388507][   T41] usb 5-1: Manufacturer: syz
[  974.393245][   T41] usb 5-1: SerialNumber: syz
[  974.540751][T27264] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10005'.
[  974.601894][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10005'.
[  974.686652][   T41] usb 5-1: selecting invalid altsetting 0
[  974.703773][   T41] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  974.735707][   T41] usb 5-1: No valid video chain found.
[  974.736417][T27271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10006'.
[  974.787203][T27274] loop2: detected capacity change from 0 to 256
[  974.806441][   T41] usb 5-1: selecting invalid altsetting 0
[  974.812225][   T41] usbtest: probe of 5-1:220.1 failed with error -22
[  974.844658][   T41] usb 5-1: USB disconnect, device number 77
[  974.955933][T27274] FAT-fs (loop2): Directory bread(block 64) failed
[  974.962533][T27274] FAT-fs (loop2): Directory bread(block 65) failed
[  975.018639][T27274] FAT-fs (loop2): Directory bread(block 66) failed
[  975.025302][T27274] FAT-fs (loop2): Directory bread(block 67) failed
[  975.051917][T27274] FAT-fs (loop2): Directory bread(block 68) failed
[  975.058494][T27274] FAT-fs (loop2): Directory bread(block 69) failed
[  975.084785][T27274] FAT-fs (loop2): Directory bread(block 70) failed
[  975.099573][T27274] FAT-fs (loop2): Directory bread(block 71) failed
[  975.121372][T27284] loop0: detected capacity change from 0 to 1024
[  975.123117][T27274] FAT-fs (loop2): Directory bread(block 72) failed
[  975.148112][T27274] FAT-fs (loop2): Directory bread(block 73) failed
[  975.163558][T27284] EXT4-fs: Ignoring removed orlov option
[  975.181495][T27284] EXT4-fs (loop0): Test dummy encryption mode enabled
[  975.273526][T27284] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  975.744427][T27284] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  975.762575][T27305] netlink: 196 bytes leftover after parsing attributes in process `syz.4.10017'.
[  975.813727][T27305] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  975.860341][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  975.903407][T27309] loop3: detected capacity change from 0 to 64
[  976.437167][T27331] netlink: 'syz.0.10028': attribute type 10 has an invalid length.
[  976.483353][T27331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10028'.
[  976.492478][T27331] netlink: 'syz.0.10028': attribute type 10 has an invalid length.
[  976.591177][T27331] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10028'.
[  976.822978][T27349] netlink: 'syz.2.10037': attribute type 10 has an invalid length.
[  977.008671][T27359] loop4: detected capacity change from 0 to 256
[  977.055706][T27349] team0 (unregistering): Port device team_slave_0 removed
[  977.102670][T27362] loop1: detected capacity change from 0 to 164
[  977.135878][T27349] team0 (unregistering): Port device team_slave_1 removed
[  977.207516][T27365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10043'.
[  977.220957][ T3598] usb 4-1: new low-speed USB device number 75 using dummy_hcd
[  977.425899][ T3598] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  977.446054][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  977.464612][T27374] loop0: detected capacity change from 0 to 256
[  977.488093][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  977.509529][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  977.558179][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  977.560109][T27376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10047'.
[  977.610555][ T3598] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  977.623354][T27374] FAT-fs (loop0): Directory bread(block 64) failed
[  977.654024][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  977.664166][T27374] FAT-fs (loop0): Directory bread(block 65) failed
[  977.681245][T27374] FAT-fs (loop0): Directory bread(block 66) failed
[  977.687818][T27374] FAT-fs (loop0): Directory bread(block 67) failed
[  977.704441][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  977.755094][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  977.766500][T27374] FAT-fs (loop0): Directory bread(block 68) failed
[  977.791825][T27374] FAT-fs (loop0): Directory bread(block 69) failed
[  977.801604][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  977.812552][T27374] FAT-fs (loop0): Directory bread(block 70) failed
[  977.819118][T27374] FAT-fs (loop0): Directory bread(block 71) failed
[  977.842177][ T3598] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  977.849617][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  977.860000][T27374] FAT-fs (loop0): Directory bread(block 72) failed
[  977.866634][T27374] FAT-fs (loop0): Directory bread(block 73) failed
[  977.881509][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  977.927073][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  977.983993][ T3598] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  978.040350][T27393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10053'.
[  978.066116][ T3598] usb 4-1: string descriptor 0 read error: -22
[  978.072394][ T3598] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  978.088417][T27393] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  978.113282][ T3598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.144332][T27393] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  978.177920][ T3598] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  978.208777][T27393] device bridge2 entered promiscuous mode
[  978.327830][T27400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10057'.
[  978.364334][ T3598] usb 4-1: USB disconnect, device number 75
[  979.273748][T27441] netlink: 'syz.2.10073': attribute type 46 has an invalid length.
[  979.281943][T27441] netlink: 'syz.2.10073': attribute type 19 has an invalid length.
[  979.334806][T27441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10073'.
[  979.347777][T27448] loop4: detected capacity change from 0 to 256
[  979.464774][T27448] FAT-fs (loop4): Directory bread(block 64) failed
[  979.513715][T27448] FAT-fs (loop4): Directory bread(block 65) failed
[  979.522920][T27451] device netdevsim0 entered promiscuous mode
[  979.530950][T27448] FAT-fs (loop4): Directory bread(block 66) failed
[  979.559196][T27448] FAT-fs (loop4): Directory bread(block 67) failed
[  979.562758][T27451] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  979.573576][T27448] FAT-fs (loop4): Directory bread(block 68) failed
[  979.593133][T27410] loop1: detected capacity change from 0 to 32768
[  979.643913][T27448] FAT-fs (loop4): Directory bread(block 69) failed
[  979.655685][T27410] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  979.664357][T27448] FAT-fs (loop4): Directory bread(block 70) failed
[  979.679781][T27448] FAT-fs (loop4): Directory bread(block 71) failed
[  979.690591][T27448] FAT-fs (loop4): Directory bread(block 72) failed
[  979.700128][T27448] FAT-fs (loop4): Directory bread(block 73) failed
[  979.917592][T27410] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1
[  980.046671][T27410] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  980.049775][T27461] loop2: detected capacity change from 0 to 4096
[  980.073653][T27410] OCFS2: File system is now read-only.
[  980.089156][T27410] (syz.1.10071,27410,0):ocfs2_search_chain:1761 ERROR: status = -30
[  980.128695][T27410] (syz.1.10071,27410,0):ocfs2_search_chain:1871 ERROR: status = -30
[  980.166143][T27410] (syz.1.10071,27410,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  980.235962][T27410] (syz.1.10071,27410,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  980.244614][T27410] (syz.1.10071,27410,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  980.266721][T27410] (syz.1.10071,27410,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  980.279850][T27410] (syz.1.10071,27410,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  980.292673][T27410] (syz.1.10071,27410,0):ocfs2_mknod:385 ERROR: status = -30
[  980.302906][T27470] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value
[  980.319039][T27410] (syz.1.10071,27410,0):ocfs2_mknod:502 ERROR: status = -30
[  980.324109][T27474] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10087'.
[  980.339151][T27410] (syz.1.10071,27410,0):ocfs2_create:676 ERROR: status = -30
[  980.446926][ T4267] (syz-executor,4267,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  980.491945][ T4267] ocfs2: Unmounting device (7,1) on (node local)
[  980.510082][T27475] xt_CT: No such helper "snmp_trap"
[  980.863228][T27491] netlink: 'syz.1.10089': attribute type 10 has an invalid length.
[  981.019265][T27500] 9pnet_fd: Insufficient options for proto=fd
[  981.109091][T27491] team0 (unregistering): Port device team_slave_0 removed
[  981.143868][T27491] team0 (unregistering): Port device team_slave_1 removed
[  981.206295][T27502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10100'.
[  981.367845][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  981.367861][   T26] audit: type=1326 audit(45497838.708:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27513 comm="syz.2.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[  981.410147][   T26] audit: type=1326 audit(45497838.708:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27513 comm="syz.2.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[  981.476008][   T26] audit: type=1326 audit(45497838.717:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27513 comm="syz.2.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[  981.527005][   T26] audit: type=1326 audit(45497838.717:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27513 comm="syz.2.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[  981.582403][   T26] audit: type=1326 audit(45497838.717:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27513 comm="syz.2.10106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[  981.583044][T27524] ip6t_srh: unknown srh invflags 4000
[  981.636944][ T8328] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  981.724473][T27530] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  981.793569][T27534] netlink: 'syz.0.10116': attribute type 3 has an invalid length.
[  981.876424][ T8328] usb 4-1: Using ep0 maxpacket: 8
[  981.885612][ T8328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  981.933868][ T8328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  981.949378][ T8328] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  981.959519][ T8328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  981.970835][ T8328] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  981.981895][ T8328] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  981.991009][ T8328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.027546][ T8328] usb 4-1: config 0 descriptor??
[  982.033380][T27512] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  982.225174][   T41] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  982.440712][   T41] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  982.464425][   T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  982.502160][   T41] usb 3-1: config 0 descriptor??
[  982.509044][   T41] cp210x 3-1:0.0: cp210x converter detected
[  982.622720][ T4283] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  982.622975][ T7754] usb 4-1: USB disconnect, device number 76
[  982.677056][T27563] loop4: detected capacity change from 0 to 128
[  982.679155][T27565] loop0: detected capacity change from 0 to 512
[  982.744259][   T41] usb 3-1: cp210x converter now attached to ttyUSB0
[  982.770052][T27563] FAT-fs (loop4): Directory bread(block 414) failed
[  982.776726][T27563] FAT-fs (loop4): Directory bread(block 415) failed
[  982.794185][T27563] FAT-fs (loop4): Directory bread(block 416) failed
[  982.801869][T27563] FAT-fs (loop4): Directory bread(block 417) failed
[  982.808866][T27563] FAT-fs (loop4): Directory bread(block 418) failed
[  982.816203][T27563] FAT-fs (loop4): Directory bread(block 419) failed
[  982.818044][T27565] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  982.832044][T27563] FAT-fs (loop4): Directory bread(block 420) failed
[  982.848405][T27563] FAT-fs (loop4): Directory bread(block 421) failed
[  982.855234][T27565] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  982.881142][T27563] FAT-fs (loop4): Directory bread(block 414) failed
[  982.889093][T27565] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.10131: Failed to acquire dquot type 1
[  982.914840][T27563] FAT-fs (loop4): Directory bread(block 415) failed
[  982.925026][T27565] EXT4-fs (loop0): 1 truncate cleaned up
[  982.931354][T27565] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  982.974050][T27565] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  983.003352][ T7754] usb 3-1: USB disconnect, device number 28
[  983.012083][ T7754] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  983.026429][T27565] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  983.037358][ T7754] cp210x 3-1:0.0: device disconnected
[  983.044432][T27565] EXT4-fs error (device loop0): ext4_acquire_dquot:6835: comm syz.0.10131: Failed to acquire dquot type 1
[  983.140302][T27575] loop4: detected capacity change from 0 to 1024
[  983.188880][ T4269] EXT4-fs (loop0): unmounting filesystem.
[  983.426288][T17833] hfsplus: b-tree write err: -5, ino 4
[  983.721272][T27599] netlink: 'syz.4.10143': attribute type 10 has an invalid length.
[  983.728898][T27600] loop0: detected capacity change from 0 to 256
[  983.823461][T27600] FAT-fs (loop0): Directory bread(block 64) failed
[  983.890013][T27600] FAT-fs (loop0): Directory bread(block 65) failed
[  983.908180][T27600] FAT-fs (loop0): Directory bread(block 66) failed
[  983.923615][T27599] team0 (unregistering): Port device team_slave_0 removed
[  983.928068][T27600] FAT-fs (loop0): Directory bread(block 67) failed
[  983.936064][T27604] delete_channel: no stack
[  983.948435][T27600] FAT-fs (loop0): Directory bread(block 68) failed
[  983.967262][T27600] FAT-fs (loop0): Directory bread(block 69) failed
[  983.974179][T27600] FAT-fs (loop0): Directory bread(block 70) failed
[  983.997252][T27600] FAT-fs (loop0): Directory bread(block 71) failed
[  983.998182][T27599] team0 (unregistering): Port device team_slave_1 removed
[  984.020170][T27600] FAT-fs (loop0): Directory bread(block 72) failed
[  984.031187][T27600] FAT-fs (loop0): Directory bread(block 73) failed
[  984.207132][ T4373] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  984.418854][ T4373] usb 4-1: Using ep0 maxpacket: 8
[  984.443977][ T4373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  984.470150][ T4373] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  984.509069][ T4373] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  984.526825][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.538931][T27622] xt_TPROXY: Can be used only with -p tcp or -p udp
[  984.555662][ T4373] usb 4-1: Product: syz
[  984.559875][ T4373] usb 4-1: Manufacturer: syz
[  984.575470][ T4373] usb 4-1: SerialNumber: syz
[  984.601554][ T4373] usb 4-1: config 0 descriptor??
[  984.700160][T27610] loop2: detected capacity change from 0 to 32768
[  984.739699][T27610] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  984.781339][T27610] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1
[  984.928902][T27610] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  984.938786][T27610] OCFS2: File system is now read-only.
[  984.960883][T27610] (syz.2.10150,27610,1):ocfs2_search_chain:1761 ERROR: status = -30
[  984.988123][T27610] (syz.2.10150,27610,1):ocfs2_search_chain:1871 ERROR: status = -30
[  985.019174][T27610] (syz.2.10150,27610,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  985.045666][T27610] (syz.2.10150,27610,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  985.076200][ T4373] usb 4-1: USB disconnect, device number 77
[  985.096001][T27610] (syz.2.10150,27610,1):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  985.133121][T27610] (syz.2.10150,27610,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  985.142043][T27642] loop0: detected capacity change from 0 to 256
[  985.175753][T27610] (syz.2.10150,27610,1):ocfs2_mknod_locked:639 ERROR: status = -30
[  985.184658][T27610] (syz.2.10150,27610,1):ocfs2_mknod:385 ERROR: status = -30
[  985.205508][T27610] (syz.2.10150,27610,1):ocfs2_mknod:502 ERROR: status = -30
[  985.223013][T27610] (syz.2.10150,27610,1):ocfs2_create:676 ERROR: status = -30
[  985.293047][ T4280] (syz-executor,4280,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  985.372237][ T4280] ocfs2: Unmounting device (7,2) on (node local)
[  985.573077][T27656] loop4: detected capacity change from 0 to 128
[  985.822597][T27666] loop4: detected capacity change from 0 to 64
[  985.873631][T27666] syz.4.10178: attempt to access beyond end of device
[  985.873631][T27666] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  985.928735][T27666] Buffer I/O error on dev loop4, logical block 134217734, async page read
[  986.040793][T27674] netlink: 'syz.3.10182': attribute type 1 has an invalid length.
[  986.227874][T27680] loop4: detected capacity change from 0 to 2048
[  986.305396][T27680] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  986.341183][T27680] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #12: block 2: comm syz.4.10186: lblock 0 mapped to illegal pblock 2 (length 1)
[  986.432908][T27697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10193'.
[  986.443493][T27697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10193'.
[  986.452852][T27697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10193'.
[  986.564168][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  986.688229][ T8328] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  986.831823][ T4351] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  986.906708][ T8328] usb 4-1: Using ep0 maxpacket: 32
[  986.914322][ T8328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  986.938399][ T8328] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  986.961393][ T8328] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  986.970737][ T8328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  986.979230][ T8328] usb 4-1: Product: syz
[  986.983958][ T8328] usb 4-1: Manufacturer: syz
[  986.988633][ T8328] usb 4-1: SerialNumber: syz
[  986.996145][ T8328] usb 4-1: config 0 descriptor??
[  987.015027][ T8328] usb 4-1: no audio or video endpoints found
[  987.049754][ T4351] usb 3-1: Using ep0 maxpacket: 8
[  987.058580][ T4351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  987.080259][ T4351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  987.101043][ T4351] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  987.118063][T27726] loop4: detected capacity change from 0 to 256
[  987.123006][ T4351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  987.149719][ T4351] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  987.157693][T27726] exfat: Deprecated parameter 'utf8'
[  987.166500][T27726] exfat: Deprecated parameter 'namecase'
[  987.167631][ T4351] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  987.195943][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  987.212753][ T4351] usb 3-1: config 0 descriptor??
[  987.233361][T27726] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  987.243950][T27699] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  987.289838][ T4351] usb 4-1: USB disconnect, device number 78
[  987.502169][T27734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10211'.
[  987.650354][T27738] FAT-fs (loop0): "posix" option is obsolete, not supported now
[  987.767521][ T4351] usb 3-1: USB disconnect, device number 29
[  987.773719][ T4283] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  988.210036][T27760] netlink: 'syz.4.10224': attribute type 1 has an invalid length.
[  988.400904][T27766] set_capacity_and_notify: 2 callbacks suppressed
[  988.400920][T27766] loop4: detected capacity change from 0 to 512
[  988.563282][T27766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  988.682357][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  988.933977][T27756] loop0: detected capacity change from 0 to 32768
[  988.976298][T27756] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  988.996169][T27756] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1
[  989.013820][T27756] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  989.024154][T27756] OCFS2: File system is now read-only.
[  989.029758][T27756] (syz.0.10222,27756,0):ocfs2_search_chain:1761 ERROR: status = -30
[  989.038134][T27756] (syz.0.10222,27756,0):ocfs2_search_chain:1871 ERROR: status = -30
[  989.073147][T27756] (syz.0.10222,27756,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  989.082382][T27756] (syz.0.10222,27756,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  989.091477][T27756] (syz.0.10222,27756,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  989.100635][T27756] (syz.0.10222,27756,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  989.109250][T27756] (syz.0.10222,27756,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  989.117242][T27756] (syz.0.10222,27756,0):ocfs2_mknod:385 ERROR: status = -30
[  989.125397][T27756] (syz.0.10222,27756,0):ocfs2_mknod:502 ERROR: status = -30
[  989.133150][ T7754] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  989.133267][T27756] (syz.0.10222,27756,0):ocfs2_create:676 ERROR: status = -30
[  989.193017][ T4269] (syz-executor,4269,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  989.211621][ T4269] ocfs2: Unmounting device (7,0) on (node local)
[  989.243422][T27797] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  989.252721][T27797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  989.297437][T27797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  989.314088][T27797] device bridge_slave_0 left promiscuous mode
[  989.320436][T27797] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.333434][ T7754] usb 2-1: Using ep0 maxpacket: 32
[  989.366661][ T7754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  989.399562][T27797] device bridge_slave_1 left promiscuous mode
[  989.406881][T27797] bridge0: port 2(bridge_slave_1) entered disabled state
[  989.421659][ T7754] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  989.449028][T27800] loop3: detected capacity change from 0 to 8
[  989.452547][ T7754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.495907][ T7754] usb 2-1: Product: syz
[  989.500148][ T7754] usb 2-1: Manufacturer: syz
[  989.515238][ T7754] usb 2-1: SerialNumber: syz
[  989.529155][ T7754] usb 2-1: config 0 descriptor??
[  989.546503][T27800] SQUASHFS error: Failed to read block 0x106: -5
[  989.547324][ T7754] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  989.580574][T27797] bond0: (slave bond_slave_0): Releasing backup interface
[  989.599231][T27797] bond0: (slave bond_slave_1): Releasing backup interface
[  989.618984][T27797] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  989.626962][T27797] batman_adv: batadv0: Removing interface: batadv_slave_0
[  989.638595][T27797] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  989.646519][T27797] batman_adv: batadv0: Removing interface: batadv_slave_1
[  989.760991][ T7754] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  989.768028][ T7754] quatech2: probe of 2-1:0.0 failed with error -8
[  989.787786][ T4351] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  989.998089][ T7754] usb 2-1: USB disconnect, device number 64
[  990.017779][ T4351] usb 1-1: Using ep0 maxpacket: 8
[  990.030824][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  990.044440][T27821] loop4: detected capacity change from 0 to 2048
[  990.062185][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  990.079319][ T4351] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  990.089340][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  990.108327][ T4351] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  990.122572][ T4351] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  990.132804][T27822] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  990.156689][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  990.168673][T27821] syz.4.10252: attempt to access beyond end of device
[  990.168673][T27821] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  990.186295][T27821] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  990.187463][ T4351] usb 1-1: config 0 descriptor??
[  990.209748][T27821] syz.4.10252: attempt to access beyond end of device
[  990.209748][T27821] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  990.226567][T27804] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  990.233105][T27821] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  990.247188][T27821] NILFS (loop4): error -5 truncating bmap (ino=16)
[  990.400146][   T26] audit: type=1800 audit(45497847.164:200): pid=27800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10244" name="file2" dev="loop3" ino=6 res=0 errno=0
[  990.601375][T27832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10258'.
[  990.627326][T27832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10258'.
[  990.736585][T27836] device bridge3 entered promiscuous mode
[  990.750457][ T4351] usb 1-1: USB disconnect, device number 66
[  990.756656][ T4283] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  990.771127][T27838] loop2: detected capacity change from 0 to 64
[  991.252548][T27858] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10271'.
[  991.396589][ T4351] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  991.507626][T27865] loop4: detected capacity change from 0 to 8192
[  991.552226][T27865] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  991.578393][T27865] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  991.590167][T27865] REISERFS (device loop4): using ordered data mode
[  991.597654][T27865] reiserfs: using flush barriers
[  991.616630][T27865] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  991.642680][ T4351] usb 2-1: Using ep0 maxpacket: 8
[  991.653760][ T4351] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping
[  991.666113][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  991.677985][T27865] REISERFS (device loop4): checking transaction log (loop4)
[  991.688315][ T4351] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[  991.698464][ T4351] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3
[  991.706971][ T4351] usb 2-1: Product: syz
[  991.711234][ T4351] usb 2-1: Manufacturer: syz
[  991.715845][ T4351] usb 2-1: SerialNumber: syz
[  991.729848][ T4351] usb 2-1: config 0 descriptor??
[  991.740352][ T4351] smsusb:smsusb_probe: board id=2, interface number 0
[  991.754383][ T4351] smsusb:smsusb_probe: Device initialized with return code -19
[  991.902423][T27865] REISERFS (device loop4): Using tea hash to sort names
[  991.922841][T27865] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  992.000189][ T4351] usb 2-1: USB disconnect, device number 65
[  992.207931][T27885] loop0: detected capacity change from 0 to 64
[  992.751587][T27902] cgroup: Unknown subsys name 'pcr'
[  992.925574][ T4351] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  993.060060][T27917] loop2: detected capacity change from 0 to 128
[  993.067672][T27917] EXT4-fs (loop2): Test dummy encryption mode enabled
[  993.097702][T27917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  993.117021][T27917] EXT4-fs (loop2): re-mounted. Quota mode: none.
[  993.121055][T27921] loop0: detected capacity change from 0 to 64
[  993.142380][ T4351] usb 2-1: Using ep0 maxpacket: 8
[  993.153955][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  993.165345][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  993.175494][ T4351] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  993.186092][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  993.197502][ T4351] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  993.207640][ T4351] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  993.216971][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.218836][ T4351] usb 2-1: config 0 descriptor??
[  993.224503][T27897] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  993.288496][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  993.736944][ T4283] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  993.748279][ T4373] usb 2-1: USB disconnect, device number 66
[  993.939289][T27947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10312'.
[  994.249736][T27961] Process accounting paused
[  994.597019][T27979] netlink: 'syz.2.10327': attribute type 1 has an invalid length.
[  995.380850][   T26] audit: type=1326 audit(45497851.822:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.2.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[  995.432701][   T26] audit: type=1326 audit(45497851.822:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.2.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[  995.512973][   T26] audit: type=1326 audit(45497851.878:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.2.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[  995.614299][   T26] audit: type=1326 audit(45497851.878:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.2.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[  995.706516][   T26] audit: type=1326 audit(45497851.878:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.2.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[  995.969329][T28049] libceph: resolve 'c0' (ret=-3): failed
[  996.042407][T28052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10363'.
[  996.078724][T28052] netlink: 'syz.0.10363': attribute type 2 has an invalid length.
[  996.502514][   T26] audit: type=1326 audit(45497852.870:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28073 comm="syz.0.10374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24fb9aeb9 code=0x7ffc0000
[  996.551823][   T26] audit: type=1326 audit(45497852.870:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28073 comm="syz.0.10374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd24fb9aeb9 code=0x7ffc0000
[  996.600958][   T26] audit: type=1326 audit(45497852.870:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28073 comm="syz.0.10374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd24fb9aeb9 code=0x7ffc0000
[  996.651165][T28081] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  996.720717][T28083] loop1: detected capacity change from 0 to 256
[  996.803730][T28087] loop4: detected capacity change from 0 to 64
[  997.010015][T28093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10383'.
[  997.442375][T28117] fuse: Bad value for 'fd'
[  997.863280][T28139] loop2: detected capacity change from 0 to 64
[  997.944674][   T41] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  998.158837][   T41] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  998.186988][   T41] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  998.217333][   T41] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  998.237386][   T41] usb 5-1: config 1 has no interface number 1
[  998.248206][   T41] usb 5-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  998.268101][T28151] loop2: detected capacity change from 0 to 128
[  998.281392][   T41] usb 5-1: config 1 interface 105 has no altsetting 0
[  998.296765][   T41] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  998.310332][T28153] loop1: detected capacity change from 0 to 128
[  998.318826][T28151] EXT4-fs (loop2): Test dummy encryption mode enabled
[  998.319816][   T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.377438][T28151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  998.403418][   T41] usb 5-1: Product: syz
[  998.412131][T28153] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  998.437209][   T41] usb 5-1: Manufacturer: syz
[  998.442119][T28153] FAT-fs (loop1): Filesystem has been set read-only
[  998.485325][   T41] usb 5-1: SerialNumber: syz
[  998.500125][T28143] loop0: detected capacity change from 0 to 32768
[  998.526313][ T4280] EXT4-fs (loop2): unmounting filesystem.
[  998.535767][T28143] XFS (loop0): Mounting V5 Filesystem
[  998.564607][T28143] XFS (loop0): Ending clean mount
[  998.599281][T28143] XFS (loop0): Quotacheck needed: Please wait.
[  998.659989][T28143] XFS (loop0): Quotacheck: Done.
[  998.725207][   T41] aqc111: probe of 5-1:1.105 failed with error -22
[  998.772003][ T4269] XFS (loop0): Unmounting Filesystem
[  998.876420][T28171] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  998.954464][ T4351] usb 5-1: USB disconnect, device number 78
[  999.068950][T28179] netlink: 'syz.1.10421': attribute type 12 has an invalid length.
[  999.946077][T28219] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1000.593984][T28247] cgroup: Unknown subsys name 'pcr'
[ 1000.994403][T28268] netlink: 'syz.1.10465': attribute type 46 has an invalid length.
[ 1001.035677][T28268] netlink: 'syz.1.10465': attribute type 19 has an invalid length.
[ 1001.069386][T28268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10465'.
[ 1001.177018][T28275] loop2: detected capacity change from 0 to 128
[ 1001.253506][T28275] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 1001.262054][T28275] FAT-fs (loop2): Filesystem has been set read-only
[ 1001.391495][T28286] loop2: detected capacity change from 0 to 136
[ 1001.439386][T28286] Attempt to read inode for relocated directory
[ 1001.488789][ T4351] usb 1-1: new low-speed USB device number 67 using dummy_hcd
[ 1001.521631][T28290] futex_wake_op: syz.4.10476 tries to shift op by 32; fix this program
[ 1001.694085][ T4351] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1001.712256][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1001.731804][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1001.780423][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1001.799406][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1001.814842][ T4351] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1001.822950][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1001.850770][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1001.860786][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1001.877805][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1001.890402][T28304] loop4: detected capacity change from 0 to 128
[ 1001.921294][ T4351] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[ 1001.936693][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1001.948344][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1001.974509][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1001.987612][T28304] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[ 1001.998579][T28304] FAT-fs (loop4): Filesystem has been set read-only
[ 1002.007624][ T4351] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1002.059264][ T4351] usb 1-1: string descriptor 0 read error: -22
[ 1002.065568][ T4351] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1002.087142][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.166369][ T4351] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1002.230842][T28314] loop1: detected capacity change from 0 to 128
[ 1002.262905][T28314] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1002.295061][T28314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1002.443662][ T4373] usb 1-1: USB disconnect, device number 67
[ 1002.471603][ T4267] EXT4-fs (loop1): unmounting filesystem.
[ 1002.716650][T28333] xt_CT: No such helper "snmp_trap"
[ 1002.981541][T28350] ip6t_srh: unknown srh invflags 4000
[ 1003.136360][T28356] loop4: detected capacity change from 0 to 64
[ 1003.819110][ T3598] usb 5-1: new low-speed USB device number 79 using dummy_hcd
[ 1004.013071][ T3598] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1004.021001][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1004.053563][   T26] audit: type=1326 audit(45497859.932:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28397 comm="syz.2.10527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[ 1004.084437][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1004.116019][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1004.147942][T28396] loop0: detected capacity change from 0 to 4096
[ 1004.148683][   T26] audit: type=1326 audit(45497859.932:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28397 comm="syz.2.10527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[ 1004.158908][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1004.189249][   T26] audit: type=1326 audit(45497859.932:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28397 comm="syz.2.10527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[ 1004.217223][ T3598] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1004.232144][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1004.243222][   T26] audit: type=1326 audit(45497859.932:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28397 comm="syz.2.10527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[ 1004.287484][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1004.300259][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1004.315004][   T26] audit: type=1326 audit(45497859.932:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28397 comm="syz.2.10527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8bb79aeb9 code=0x7ffc0000
[ 1004.337711][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1004.363201][ T3598] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[ 1004.376281][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[ 1004.390757][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1004.403984][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 1004.425587][ T3598] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1004.438566][T28406] xt_hashlimit: max too large, truncated to 1048576
[ 1004.471854][ T3598] usb 5-1: string descriptor 0 read error: -22
[ 1004.478123][ T3598] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1004.504105][ T3598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1004.544763][ T3598] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1004.687778][T28415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10535'.
[ 1004.817367][ T4351] usb 5-1: USB disconnect, device number 79
[ 1004.860604][T28423] 9pnet_fd: Insufficient options for proto=fd
[ 1005.253141][T28441] loop1: detected capacity change from 0 to 512
[ 1005.331853][T28441] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1005.347615][T28441] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1005.358032][T28441] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.10558: Failed to acquire dquot type 1
[ 1005.371634][T28449] libceph: resolve 'c0' (ret=-3): failed
[ 1005.376573][T28441] EXT4-fs (loop1): 1 truncate cleaned up
[ 1005.383298][T28441] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1005.447980][T28450] delete_channel: no stack
[ 1005.505908][T28441] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[ 1005.544366][T28441] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1005.605710][T28441] EXT4-fs error (device loop1): ext4_acquire_dquot:6835: comm syz.1.10558: Failed to acquire dquot type 1
[ 1005.696449][T28459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10566'.
[ 1005.709595][ T4267] EXT4-fs (loop1): unmounting filesystem.
[ 1005.719283][T28461] loop2: detected capacity change from 0 to 256
[ 1005.779504][T28461] FAT-fs (loop2): Directory bread(block 64) failed
[ 1005.801864][T28461] FAT-fs (loop2): Directory bread(block 65) failed
[ 1005.812294][T28461] FAT-fs (loop2): Directory bread(block 66) failed
[ 1005.854088][T28461] FAT-fs (loop2): Directory bread(block 67) failed
[ 1005.860761][T28461] FAT-fs (loop2): Directory bread(block 68) failed
[ 1005.889621][T28461] FAT-fs (loop2): Directory bread(block 69) failed
[ 1005.927727][T28461] FAT-fs (loop2): Directory bread(block 70) failed
[ 1005.934323][T28461] FAT-fs (loop2): Directory bread(block 71) failed
[ 1005.966302][T28461] FAT-fs (loop2): Directory bread(block 72) failed
[ 1005.989336][T28461] FAT-fs (loop2): Directory bread(block 73) failed
[ 1006.254253][T28457] loop4: detected capacity change from 0 to 32768
[ 1006.347970][T28457] XFS (loop4): Mounting V5 Filesystem
[ 1006.465868][T28457] XFS (loop4): Ending clean mount
[ 1006.519304][T28457] XFS (loop4): Quotacheck needed: Please wait.
[ 1006.631056][T28457] XFS (loop4): Quotacheck: Done.
[ 1006.697770][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1006.705230][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1006.724957][ T4273] XFS (loop4): Unmounting Filesystem
[ 1007.448330][T23004] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1007.460351][T23004] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1007.470551][T23004] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1007.478426][T23004] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1007.486033][T23004] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1007.497040][T23004] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1007.637219][T28521] wg1 speed is unknown, defaulting to 1000
[ 1007.785664][ T4373] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1007.906521][T28521] chnl_net:caif_netlink_parms(): no params data found
[ 1007.992158][ T4373] usb 3-1: config 4 has an invalid interface number: 28 but max is 0
[ 1008.009365][ T4373] usb 3-1: config 4 has no interface number 0
[ 1008.024858][ T4373] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a
[ 1008.034391][ T4373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1008.043970][ T4373] usb 3-1: Product: syz
[ 1008.048279][ T4373] usb 3-1: Manufacturer: syz
[ 1008.053234][ T4373] usb 3-1: SerialNumber: syz
[ 1008.063056][ T4373] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.28/input/input60
[ 1008.102705][T28553] loop4: detected capacity change from 0 to 64
[ 1008.145207][T28521] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1008.213464][T28521] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1008.257620][T28521] device bridge_slave_0 entered promiscuous mode
[ 1008.283504][ T3623] bcm5974 3-1:4.28: could not read from device
[ 1008.300038][T28521] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1008.301847][ T4373] bcm5974 3-1:4.28: could not read from device
[ 1008.307133][T28521] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1008.308184][T28521] device bridge_slave_1 entered promiscuous mode
[ 1008.383595][ T3623] bcm5974 3-1:4.28: could not read from device
[ 1008.401444][T28561] netlink: 'syz.4.10596': attribute type 1 has an invalid length.
[ 1008.414563][ T4373] input: failed to attach handler mousedev to device input60, error: -5
[ 1008.416675][T28521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1008.440168][ T3623] bcm5974 3-1:4.28: could not read from device
[ 1008.443118][ T4373] usb 3-1: USB disconnect, device number 30
[ 1008.461437][T28521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1008.480850][ T3623] bcm5974 3-1:4.28: could not read from device
[ 1008.586060][T28521] team0: Port device team_slave_0 added
[ 1008.623940][T28521] team0: Port device team_slave_1 added
[ 1008.684187][T28521] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1008.713732][T28521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1008.821309][T28521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1008.853825][T28521] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1008.861490][T28521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1008.903208][T28521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1008.943174][T28577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10605'.
[ 1008.982986][T28577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10605'.
[ 1009.038474][T28577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10605'.
[ 1009.116092][T28585] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.10617'.
[ 1009.178431][T28521] device hsr_slave_0 entered promiscuous mode
[ 1009.187187][T28521] device hsr_slave_1 entered promiscuous mode
[ 1009.215482][T28521] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1009.257449][T28521] Cannot create hsr debugfs directory
[ 1009.321578][T28593] sctp: [Deprecated]: syz.0.10611 (pid 28593) Use of int in maxseg socket option.
[ 1009.321578][T28593] Use struct sctp_assoc_value instead
[ 1009.416825][T28591] loop1: detected capacity change from 0 to 8192
[ 1009.485430][T28591] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1009.518068][T28595] netlink: 176 bytes leftover after parsing attributes in process `syz.0.10613'.
[ 1009.571143][T28591] FAT-fs (loop1): error, clusters badly computed (1 != 0)
[ 1009.578325][T28591] FAT-fs (loop1): Filesystem has been set read-only
[ 1009.641371][T28591] FAT-fs (loop1): error, clusters badly computed (2 != 1)
[ 1009.656514][T28591] FAT-fs (loop1): error, clusters badly computed (3 != 2)
[ 1009.663789][T28591] FAT-fs (loop1): error, clusters badly computed (4 != 3)
[ 1009.688282][ T4283] Bluetooth: hci5: command 0x0409 tx timeout
[ 1009.838963][T28601] netlink: 'syz.0.10625': attribute type 5 has an invalid length.
[ 1009.860510][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10625'.
[ 1009.874969][T28521] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1009.888545][T28587] loop2: detected capacity change from 0 to 32768
[ 1009.904529][T28521] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1009.971274][T28521] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1009.996031][T28587] ERROR: (device loop2): diAllocAG: numfree > numinos
[ 1009.996031][T28587] 
[ 1010.020066][T28521] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1010.060777][T28587] ERROR: (device loop2): remounting filesystem as read-only
[ 1010.093275][T28587] ialloc: diAlloc returned -5!
[ 1010.241692][T28610] loop0: detected capacity change from 0 to 2048
[ 1010.340238][T28610] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1010.360118][T28610] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #12: block 2: comm syz.0.10619: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1010.490335][T28627] loop1: detected capacity change from 0 to 128
[ 1010.503225][T28521] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1010.554657][T28627] FAT-fs (loop1): Directory bread(block 414) failed
[ 1010.578278][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1010.586110][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1010.612880][ T4269] EXT4-fs (loop0): unmounting filesystem.
[ 1010.624271][T28627] FAT-fs (loop1): Directory bread(block 415) failed
[ 1010.678472][T28521] 8021q: adding VLAN 0 to HW filter on device team0
[ 1010.696617][T28627] FAT-fs (loop1): Directory bread(block 416) failed
[ 1010.717032][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1010.728954][T28627] FAT-fs (loop1): Directory bread(block 417) failed
[ 1010.735621][T28627] FAT-fs (loop1): Directory bread(block 418) failed
[ 1010.748861][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1010.767787][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.774979][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1010.804450][T28627] FAT-fs (loop1): Directory bread(block 419) failed
[ 1010.828011][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1010.835758][T28627] FAT-fs (loop1): Directory bread(block 420) failed
[ 1010.854444][T28634] netlink: 'syz.4.10630': attribute type 5 has an invalid length.
[ 1010.863063][T28634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10630'.
[ 1010.871089][T28627] FAT-fs (loop1): Directory bread(block 421) failed
[ 1010.885254][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1010.895865][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1010.916565][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1010.923785][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1010.933101][T28627] FAT-fs (loop1): Directory bread(block 414) failed
[ 1010.942860][T28627] FAT-fs (loop1): Directory bread(block 415) failed
[ 1010.954046][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1010.975963][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1011.053296][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1011.092159][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1011.132751][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1011.142956][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1011.163231][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1011.187703][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1011.202046][T28648] loop0: detected capacity change from 0 to 512
[ 1011.211829][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1011.255229][T17833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1011.271822][T17833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1011.317767][T28521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1011.341380][T28648] ==================================================================
[ 1011.349490][T28648] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e40
[ 1011.356539][T28648] Read of size 8 at addr ffff88806896bad0 by task syz.0.10636/28648
[ 1011.364535][T28648] 
[ 1011.366867][T28648] CPU: 0 PID: 28648 Comm: syz.0.10636 Not tainted syzkaller #0
[ 1011.374425][T28648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1011.384497][T28648] Call Trace:
[ 1011.387784][T28648]  <TASK>
[ 1011.390720][T28648]  dump_stack_lvl+0x188/0x24e
[ 1011.395424][T28648]  ? __lock_acquire+0x7d10/0x7d10
[ 1011.400473][T28648]  ? show_regs_print_info+0x12/0x12
[ 1011.405695][T28648]  ? load_image+0x400/0x400
[ 1011.410216][T28648]  ? _raw_spin_lock_irqsave+0xbc/0x100
[ 1011.415698][T28648]  ? __virt_addr_valid+0x188/0x540
[ 1011.420837][T28648]  ? __virt_addr_valid+0x465/0x540
[ 1011.425968][T28648]  ? __ext4_iget+0x2bb/0x3e40
[ 1011.430658][T28648]  print_report+0xa8/0x210
[ 1011.435092][T28648]  kasan_report+0x10b/0x140
[ 1011.439625][T28648]  ? __ext4_iget+0x2bb/0x3e40
[ 1011.444326][T28648]  __ext4_iget+0x2bb/0x3e40
[ 1011.448853][T28648]  ? apply_workqueue_attrs+0x180/0x180
[ 1011.454332][T28648]  ? ext4_get_projid+0x140/0x140
[ 1011.459284][T28648]  ? mb_cache_create+0x42f/0x530
[ 1011.464244][T28648]  ext4_fill_super+0x60c1/0x7dc0
[ 1011.469198][T28648]  ? bdev_name+0x2c1/0x3f0
[ 1011.473643][T28648]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 1011.479911][T28648]  ? set_blocksize+0x1d0/0x470
[ 1011.484700][T28648]  ? sb_set_blocksize+0xa5/0xe0
[ 1011.489581][T28648]  get_tree_bdev+0x3f1/0x610
[ 1011.494197][T28648]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 1011.500464][T28648]  vfs_get_tree+0x88/0x270
[ 1011.504895][T28648]  do_new_mount+0x24a/0xa40
[ 1011.509418][T28648]  __se_sys_mount+0x2e3/0x3d0
[ 1011.514115][T28648]  ? __x64_sys_mount+0xc0/0xc0
[ 1011.518984][T28648]  ? lockdep_hardirqs_on+0x94/0x140
[ 1011.524205][T28648]  ? __x64_sys_mount+0x1c/0xc0
[ 1011.528993][T28648]  do_syscall_64+0x4c/0xa0
[ 1011.533434][T28648]  ? clear_bhb_loop+0x60/0xb0
[ 1011.538121][T28648]  ? clear_bhb_loop+0x60/0xb0
[ 1011.542810][T28648]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1011.548716][T28648] RIP: 0033:0x7fd24fb9c14a
[ 1011.553140][T28648] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1011.572759][T28648] RSP: 002b:00007fd250a05e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1011.581198][T28648] RAX: ffffffffffffffda RBX: 00007fd250a05ee0 RCX: 00007fd24fb9c14a
[ 1011.589188][T28648] RDX: 00002000000004c0 RSI: 00002000000008c0 RDI: 00007fd250a05ea0
[ 1011.597174][T28648] RBP: 00002000000004c0 R08: 00007fd250a05ee0 R09: 0000000001008490
[ 1011.605169][T28648] R10: 0000000001008490 R11: 0000000000000246 R12: 00002000000008c0
[ 1011.613151][T28648] R13: 00007fd250a05ea0 R14: 00000000000004eb R15: 0000200000000a40
[ 1011.614998][T28646] loop2: detected capacity change from 0 to 32768
[ 1011.621127][T28648]  </TASK>
[ 1011.621137][T28648] 
[ 1011.621141][T28648] Allocated by task 16802:
[ 1011.621150][T28648]  kasan_set_track+0x4b/0x70
[ 1011.621177][T28648]  __kasan_slab_alloc+0x6b/0x80
[ 1011.621200][T28648]  slab_post_alloc_hook+0x4b/0x480
[ 1011.651814][T28648]  kmem_cache_alloc_lru+0x11a/0x2e0
[ 1011.656997][T28648]  reiserfs_alloc_inode+0x26/0xc0
[ 1011.662009][T28648]  iget5_locked+0x9e/0x260
[ 1011.666416][T28648]  reiserfs_fill_super+0x11d3/0x23b0
[ 1011.671688][T28648]  mount_bdev+0x287/0x3c0
[ 1011.676000][T28648]  legacy_get_tree+0xe6/0x180
[ 1011.680660][T28648]  vfs_get_tree+0x88/0x270
[ 1011.685062][T28648]  do_new_mount+0x24a/0xa40
[ 1011.689556][T28648]  __se_sys_mount+0x2e3/0x3d0
[ 1011.694231][T28648]  do_syscall_64+0x4c/0xa0
[ 1011.698742][T28648]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1011.704724][T28648] 
[ 1011.707042][T28648] Last potentially related work creation:
[ 1011.712752][T28648]  kasan_save_stack+0x3a/0x60
[ 1011.717439][T28648]  __kasan_record_aux_stack+0xb2/0xc0
[ 1011.722813][T28648]  call_rcu+0x14f/0x990
[ 1011.726974][T28648]  evict+0x834/0x8d0
[ 1011.730871][T28648]  reiserfs_fill_super+0x1475/0x23b0
[ 1011.736156][T28648]  mount_bdev+0x287/0x3c0
[ 1011.740480][T28648]  legacy_get_tree+0xe6/0x180
[ 1011.745153][T28648]  vfs_get_tree+0x88/0x270
[ 1011.749563][T28648]  do_new_mount+0x24a/0xa40
[ 1011.754060][T28648]  __se_sys_mount+0x2e3/0x3d0
[ 1011.758729][T28648]  do_syscall_64+0x4c/0xa0
[ 1011.763140][T28648]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1011.769024][T28648] 
[ 1011.771350][T28648] Second to last potentially related work creation:
[ 1011.777928][T28648]  kasan_save_stack+0x3a/0x60
[ 1011.782613][T28648]  __kasan_record_aux_stack+0xb2/0xc0
[ 1011.788006][T28648]  call_rcu+0x14f/0x990
[ 1011.792166][T28648]  evict+0x834/0x8d0
[ 1011.796055][T28648]  reiserfs_fill_super+0x1475/0x23b0
[ 1011.801341][T28648]  mount_bdev+0x287/0x3c0
[ 1011.805665][T28648]  legacy_get_tree+0xe6/0x180
[ 1011.810336][T28648]  vfs_get_tree+0x88/0x270
[ 1011.814746][T28648]  do_new_mount+0x24a/0xa40
[ 1011.819241][T28648]  __se_sys_mount+0x2e3/0x3d0
[ 1011.823906][T28648]  do_syscall_64+0x4c/0xa0
[ 1011.828326][T28648]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1011.834321][T28648] 
[ 1011.836839][T28648] The buggy address belongs to the object at ffff88806896b500
[ 1011.836839][T28648]  which belongs to the cache reiser_inode_cache of size 1568
[ 1011.851614][T28648] The buggy address is located 1488 bytes inside of
[ 1011.851614][T28648]  1568-byte region [ffff88806896b500, ffff88806896bb20)
[ 1011.865052][T28648] 
[ 1011.867364][T28648] The buggy address belongs to the physical page:
[ 1011.873758][T28648] page:ffffea0001a25a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806896ea00 pfn:0x68968
[ 1011.885200][T28648] head:ffffea0001a25a00 order:3 compound_mapcount:0 compound_pincount:0
[ 1011.893509][T28648] memcg:ffff88802f1eaa01
[ 1011.897730][T28648] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1011.905714][T28648] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff8880185c5280
[ 1011.914283][T28648] raw: ffff88806896ea00 0000000080130006 00000001ffffffff ffff88802f1eaa01
[ 1011.922847][T28648] page dumped because: kasan: bad access detected
[ 1011.929260][T28648] page_owner tracks the page as allocated
[ 1011.934965][T28648] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4901, tgid 4900 (syz.2.231), ts 84686893676, free_ts 82987177949
[ 1011.959175][T28648]  post_alloc_hook+0x173/0x1a0
[ 1011.963952][T28648]  get_page_from_freelist+0x1a1e/0x1ab0
[ 1011.969500][T28648]  __alloc_pages+0x1ec/0x4f0
[ 1011.974096][T28648]  alloc_slab_page+0x5d/0x160
[ 1011.978865][T28648]  new_slab+0x87/0x2c0
[ 1011.982927][T28648]  ___slab_alloc+0xbc6/0x1240
[ 1011.987604][T28648]  kmem_cache_alloc_lru+0x1ae/0x2e0
[ 1011.992807][T28648]  reiserfs_alloc_inode+0x26/0xc0
[ 1011.997853][T28648]  iget5_locked+0x9e/0x260
[ 1012.002280][T28648]  reiserfs_fill_super+0x11d3/0x23b0
[ 1012.007572][T28648]  mount_bdev+0x287/0x3c0
[ 1012.011896][T28648]  legacy_get_tree+0xe6/0x180
[ 1012.016570][T28648]  vfs_get_tree+0x88/0x270
[ 1012.020985][T28648]  do_new_mount+0x24a/0xa40
[ 1012.025487][T28648]  __se_sys_mount+0x2e3/0x3d0
[ 1012.030153][T28648]  do_syscall_64+0x4c/0xa0
[ 1012.034565][T28648] page last free stack trace:
[ 1012.039244][T28648]  free_unref_page_prepare+0x8b4/0x9a0
[ 1012.044696][T28648]  free_unref_page+0x2e/0x3f0
[ 1012.049363][T28648]  qlist_free_all+0x76/0xe0
[ 1012.053864][T28648]  kasan_quarantine_reduce+0x144/0x160
[ 1012.059311][T28648]  __kasan_slab_alloc+0x1e/0x80
[ 1012.064157][T28648]  slab_post_alloc_hook+0x4b/0x480
[ 1012.069277][T28648]  kmem_cache_alloc+0x123/0x2f0
[ 1012.074116][T28648]  getname_flags+0xb7/0x500
[ 1012.078620][T28648]  __x64_sys_unlink+0x38/0x50
[ 1012.083289][T28648]  do_syscall_64+0x4c/0xa0
[ 1012.087703][T28648]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1012.093672][T28648] 
[ 1012.096000][T28648] Memory state around the buggy address:
[ 1012.101629][T28648]  ffff88806896b980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1012.109690][T28648]  ffff88806896ba00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1012.117743][T28648] >ffff88806896ba80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1012.125800][T28648]                                                  ^
[ 1012.132465][T28648]  ffff88806896bb00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[ 1012.140526][T28648]  ffff88806896bb80: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00
[ 1012.148593][T28648] ==================================================================
[ 1012.157479][T23004] Bluetooth: hci5: command 0x041b tx timeout
[ 1012.210629][T28646] 
[ 1012.210629][T28646]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1012.210629][T28646] 
[ 1012.254892][ T3598] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1012.262627][T28648] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1012.269835][T28648] CPU: 1 PID: 28648 Comm: syz.0.10636 Not tainted syzkaller #0
[ 1012.277394][T28648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1012.287472][T28648] Call Trace:
[ 1012.290759][T28648]  <TASK>
[ 1012.293699][T28648]  dump_stack_lvl+0x188/0x24e
[ 1012.298403][T28648]  ? memcpy+0x3c/0x60
[ 1012.302401][T28648]  ? show_regs_print_info+0x12/0x12
[ 1012.307620][T28648]  ? load_image+0x400/0x400
[ 1012.312135][T28648]  panic+0x2e5/0x730
[ 1012.316045][T28648]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1012.322217][T28648]  ? bpf_jit_dump+0xd0/0xd0
[ 1012.326772][T28648]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 1012.332767][T28648]  ? _raw_spin_unlock+0x40/0x40
[ 1012.337638][T28648]  check_panic_on_warn+0x80/0xa0
[ 1012.342596][T28648]  ? __ext4_iget+0x2bb/0x3e40
[ 1012.347293][T28648]  end_report+0x66/0x110
[ 1012.351559][T28648]  kasan_report+0x118/0x140
[ 1012.356086][T28648]  ? __ext4_iget+0x2bb/0x3e40
[ 1012.360792][T28648]  __ext4_iget+0x2bb/0x3e40
[ 1012.365321][T28648]  ? apply_workqueue_attrs+0x180/0x180
[ 1012.370794][T28648]  ? ext4_get_projid+0x140/0x140
[ 1012.375745][T28648]  ? mb_cache_create+0x42f/0x530
[ 1012.380708][T28648]  ext4_fill_super+0x60c1/0x7dc0
[ 1012.385667][T28648]  ? bdev_name+0x2c1/0x3f0
[ 1012.390106][T28648]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 1012.396373][T28648]  ? set_blocksize+0x1d0/0x470
[ 1012.401150][T28648]  ? sb_set_blocksize+0xa5/0xe0
[ 1012.406013][T28648]  get_tree_bdev+0x3f1/0x610
[ 1012.410615][T28648]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[ 1012.416877][T28648]  vfs_get_tree+0x88/0x270
[ 1012.421317][T28648]  do_new_mount+0x24a/0xa40
[ 1012.425842][T28648]  __se_sys_mount+0x2e3/0x3d0
[ 1012.430535][T28648]  ? __x64_sys_mount+0xc0/0xc0
[ 1012.435317][T28648]  ? lockdep_hardirqs_on+0x94/0x140
[ 1012.440545][T28648]  ? __x64_sys_mount+0x1c/0xc0
[ 1012.445347][T28648]  do_syscall_64+0x4c/0xa0
[ 1012.449778][T28648]  ? clear_bhb_loop+0x60/0xb0
[ 1012.454471][T28648]  ? clear_bhb_loop+0x60/0xb0
[ 1012.459171][T28648]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1012.465072][T28648] RIP: 0033:0x7fd24fb9c14a
[ 1012.469496][T28648] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1012.489107][T28648] RSP: 002b:00007fd250a05e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1012.497534][T28648] RAX: ffffffffffffffda RBX: 00007fd250a05ee0 RCX: 00007fd24fb9c14a
[ 1012.505515][T28648] RDX: 00002000000004c0 RSI: 00002000000008c0 RDI: 00007fd250a05ea0
[ 1012.513492][T28648] RBP: 00002000000004c0 R08: 00007fd250a05ee0 R09: 0000000001008490
[ 1012.521467][T28648] R10: 0000000001008490 R11: 0000000000000246 R12: 00002000000008c0
[ 1012.529441][T28648] R13: 00007fd250a05ea0 R14: 00000000000004eb R15: 0000200000000a40
[ 1012.537426][T28648]  </TASK>
[ 1012.540850][T28648] Kernel Offset: disabled
[ 1012.545163][T28648] Rebooting in 86400 seconds..