last executing test programs:

2m30.841660476s ago: executing program 0 (id=2987):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a300000000020000780050003001c0000000c0001800800014008000000050014002000000005000500020000000500010006"], 0x68}}, 0x0)

2m30.610428889s ago: executing program 0 (id=2991):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x1412, 0x1, 0x70bd1c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x200c0082)

2m30.40102677s ago: executing program 0 (id=2994):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x33}, 0x1c)

2m30.21762239s ago: executing program 0 (id=2997):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb7)

2m30.131813435s ago: executing program 0 (id=2999):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2m29.192079607s ago: executing program 0 (id=3012):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000001140)={[{@shortname_lower}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@gid}, {@utf8no}, {@fat=@check_strict}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x89, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000140))

2m13.962560948s ago: executing program 32 (id=3012):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000001140)={[{@shortname_lower}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@gid}, {@utf8no}, {@fat=@check_strict}, {@shortname_win95}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x89, 0x29b, &(0x7f0000000580)="$eJzs3c9qK1UYAPBv0iRNVEgWrkRwQBeuwr33CW6QChezUrLQjV5sC5KEQgMB/2Dsyr3gynfwHXwAN76BC5eCO7sQR5KZSdI0bY3EVOrvt5kvc74v509OWyjMyUevjgbHZ+PTiy9+jkYjicrTeBqXSbSjEqWvAgB4SC6zLH7LcnflVqMeEVmreFXZw/AAgH/BNn//AYCH4b33P3in2+sdvZumjYjR15N+Evk1b++exicxjJN4FK34IyJbyOOXnvWOopqm5T8DJs3oR4w+/LF43f01Yl7/OFrRXq+vF1npXLwxmk76s55n11q8kER0syRPeRKteDkiq0XxJvnl7We9oyfp9fro1+PN178rxv/nSXSiFT99HGcxjOP5Wyzrv3ycpm9l3/7+eT6DfkQynfQP53lL2cFePhAAAAAAAAAAAAAAAAAAAAAAAP4XOulCe/X8nPI0wE5nc/uN5wMVJ/xMV87XeZSmaXmMz6Rfi7y+Gq9Uo3p/MwcAAAAAAAAAAAAAAAAAAID/jvGnnw2eD4cn51eCH7JZ0Lw1Zz2ortwpH+u/u2pzMPg+YvuqvxPEQTG0YXKti6Rs2kFfh9skNzd1GpWb1rA6jHzw32w/sNd2NcFbg3J3DZ4ncUdyY/MmWdl15TY8HydbbMhsw9Id3FhV39Hc6y/+0/LmxoWazbi2WMyrVY3ZJ7lyp7bjn5Q1yc5/9wAAAAAAAAAAAAAAAAAAAFctH/qNX641XtzLkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg75bf/78Ior1+Zz2YFsXzO5Xbkw/Pxxu6be95mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxwfwUAAP//5OlVhQ==")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000140))

2.129143783s ago: executing program 3 (id=5005):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0xffe0}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41}}], 0x20, 0x4048800}, 0x10)

1.945490692s ago: executing program 3 (id=5009):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]})

1.774454492s ago: executing program 1 (id=5012):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))

1.738872834s ago: executing program 3 (id=5013):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0x100, 0x3a882548, 0xa, 0x47504a50, [0x0, 0x4], [0x5d39b393, 0x1]}})

1.604348122s ago: executing program 1 (id=5015):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x18, 0xa, 0x1, "b50404cf3d04d7ad1ce6caa4751ea58fc78e9e22956841e87000", 0x3032344d})

1.527395586s ago: executing program 3 (id=5018):
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e00"], 0x50)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)

1.444315801s ago: executing program 1 (id=5020):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100000000002500000001000480180000000900000000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xe}, 0x94)

1.346265046s ago: executing program 3 (id=5022):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

1.251094401s ago: executing program 1 (id=5025):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000000000001000000090000000000000014000000000000000000000002000000bb0000000000000040000000000000000000000007"], 0x70}}], 0x1, 0x24008084)

1.159856116s ago: executing program 3 (id=5026):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x4423, &(0x7f0000004480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)

1.079253831s ago: executing program 4 (id=5028):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x7, 0x7fff, '\x00', 0x0})

1.079030791s ago: executing program 1 (id=5029):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x2, 0x4)

960.532517ms ago: executing program 4 (id=5031):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newsa={0x140, 0x10, 0x1, 0x70bd27, 0x0, {{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9}, {@in=@local, 0x0, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x40}, {0x1000000000000, 0x0, 0x0, 0xd3a}, {0x20000, 0x7, 0x0, 0x8000000000000001}, {0x0, 0xbc}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3a}, [@algo_auth={0x48, 0x1, {{'sha256-arm64-neon\x00'}}}, @tfcpad={0x8, 0x16, 0x9}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

863.183813ms ago: executing program 1 (id=5032):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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")
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00')

820.230505ms ago: executing program 4 (id=5034):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c0002800800014000000011080003400000000508000240000000011400000011000100"], 0xec}}, 0x0)

651.184064ms ago: executing program 2 (id=5035):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0x1d, 0x0, 0x0, 0x0, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x20004010)

650.872745ms ago: executing program 4 (id=5036):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfebd}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

529.533771ms ago: executing program 4 (id=5037):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x80082102, &(0x7f0000000080))

359.13866ms ago: executing program 4 (id=5038):
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x100002, 0x5, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x24ffffff)

359.00936ms ago: executing program 2 (id=5039):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}, @IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x44}}, 0x0)

174.559031ms ago: executing program 2 (id=5040):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000)

101.789005ms ago: executing program 2 (id=5041):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x58, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xe}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040004}, 0x24040004)

49.710388ms ago: executing program 2 (id=5042):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000001100)={0x0, 0x2, 0x5}, 0xc)

0s ago: executing program 2 (id=5043):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'rr\x00', 0x37, 0xfffffffe, 0x7f}, 0x2c)

kernel console output (not intermixed with test programs):

fr=1, Product=2, SerialNumber=3
[  394.781688][T14052] loop2: detected capacity change from 0 to 64
[  394.814807][ T5845] usb 5-1: Product: syz
[  394.819050][ T5845] usb 5-1: Manufacturer: syz
[  394.823756][ T5845] usb 5-1: SerialNumber: syz
[  394.881405][ T5845] usb 5-1: config 0 descriptor??
[  394.897494][ T5845] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  395.070438][T14060] loop3: detected capacity change from 0 to 128
[  395.153292][T14060] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  395.201529][T14060] hpfs: filesystem error: improperly stopped
[  395.221776][T14060] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  395.233158][T14060] hpfs: You really don't want any checks? You are crazy...
[  395.242336][T14060] hpfs: hpfs_map_sector(): read error
[  395.248172][T14060] hpfs: code page support is disabled
[  395.256995][T14060] hpfs: hpfs_map_4sectors(): unaligned read
[  395.263012][T14060] hpfs: hpfs_map_4sectors(): unaligned read
[  395.269575][T14060] hpfs: filesystem error: unable to find root dir
[  395.355298][ T5845] gspca_sonixj: reg_r err -71
[  395.360119][ T5845] sonixj: probe of 5-1:0.0 failed with error -71
[  395.394885][ T5845] usb 5-1: USB disconnect, device number 2
[  395.541052][T14068] loop2: detected capacity change from 0 to 256
[  395.628290][T14068] FAT-fs (loop2): Directory bread(block 64) failed
[  395.654471][T14068] FAT-fs (loop2): Directory bread(block 65) failed
[  395.670382][T14056] loop1: detected capacity change from 0 to 32768
[  395.687743][T14068] FAT-fs (loop2): Directory bread(block 66) failed
[  395.717050][T14068] FAT-fs (loop2): Directory bread(block 67) failed
[  395.723954][T14056] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3426 (14056)
[  395.744671][T14068] FAT-fs (loop2): Directory bread(block 68) failed
[  395.751869][T14068] FAT-fs (loop2): Directory bread(block 69) failed
[  395.761629][T14068] FAT-fs (loop2): Directory bread(block 70) failed
[  395.772835][T14056] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  395.781810][T14068] FAT-fs (loop2): Directory bread(block 71) failed
[  395.798638][T14056] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  395.804801][T14068] FAT-fs (loop2): Directory bread(block 72) failed
[  395.818296][T14056] BTRFS info (device loop1): turning on sync discard
[  395.830920][T14068] FAT-fs (loop2): Directory bread(block 73) failed
[  395.838524][T14056] BTRFS info (device loop1): enabling disk space caching
[  395.866326][T14056] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  395.899463][T14056] BTRFS info (device loop1): trying to use backup root at mount time
[  395.930779][T14056] BTRFS info (device loop1): force clearing of disk cache
[  395.964555][T14056] BTRFS info (device loop1): disk space caching is enabled
[  396.202377][T14056] BTRFS info (device loop1): rebuilding free space tree
[  396.255900][T14056] BTRFS info (device loop1): disabling free space tree
[  396.262962][T14056] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  396.302290][T14056] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  396.349106][T14097] loop4: detected capacity change from 0 to 2048
[  396.379801][T14097] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  396.437622][T14099] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  396.462149][ T5894] udevd[5894]: incorrect nilfs2 checksum on /dev/loop4
[  396.730222][ T5767] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  396.812160][T14075] loop3: detected capacity change from 0 to 32768
[  396.961925][T14075] JBD2: Ignoring recovery information on journal
[  397.091028][T14075] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  397.516076][T14124] loop1: detected capacity change from 0 to 256
[  397.544485][T14124] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  397.568508][ T5770] ocfs2: Unmounting device (7,3) on (node local)
[  397.600295][T14124] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  397.648465][T14123] xt_CT: No such helper "pptp"
[  398.124832][T13478] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  398.331195][T13478] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  398.350621][T13478] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  398.391600][T13478] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  398.419522][T13478] usb 3-1: config 220 has no interface number 2
[  398.435002][T13478] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  398.464500][T13478] usb 3-1: config 220 interface 0 has no altsetting 0
[  398.484611][T13478] usb 3-1: config 220 interface 76 has no altsetting 0
[  398.491533][T13478] usb 3-1: config 220 interface 1 has no altsetting 0
[  398.531704][T13478] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  398.548949][T13478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.567844][T13478] usb 3-1: Product: syz
[  398.572067][T13478] usb 3-1: Manufacturer: syz
[  398.600654][T13478] usb 3-1: SerialNumber: syz
[  398.607104][T14153] loop4: detected capacity change from 0 to 4096
[  398.742758][T14153] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  398.880708][T13478] usb 3-1: selecting invalid altsetting 0
[  398.910135][T13478] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  398.941234][T13478] usb 3-1: No valid video chain found.
[  398.941723][T14163] loop1: detected capacity change from 0 to 4096
[  398.982826][T13478] usb 3-1: selecting invalid altsetting 0
[  398.994514][T13478] usbtest: probe of 3-1:220.1 failed with error -22
[  399.045197][T14163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.068262][T13478] usb 3-1: USB disconnect, device number 17
[  399.250277][T14177] 
@ÿ: renamed from bond_slave_0 (while UP)
[  399.263543][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.519364][T14183] loop4: detected capacity change from 0 to 512
[  399.552816][T14183] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.3478: inode has both inline data and extents flags
[  399.614659][T14183] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.3478: couldn't read orphan inode 15 (err -117)
[  399.680888][T14183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.809649][T13484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.311803][T14181] loop1: detected capacity change from 0 to 32768
[  400.327207][T14181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.3477 (14181)
[  400.361144][T14181] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  400.401556][T14181] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  400.442205][T14181] BTRFS info (device loop1): using free space tree
[  400.493853][T14181] BTRFS info (device loop1): enabling ssd optimizations
[  400.514127][T14181] BTRFS info (device loop1): auto enabling async discard
[  400.524900][ T5828] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  400.613175][T14226] loop3: detected capacity change from 0 to 4096
[  400.746517][ T5828] usb 3-1: config 0 has an invalid interface number: 83 but max is 0
[  400.764675][ T5828] usb 3-1: config 0 has no interface number 0
[  400.778302][ T5828] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has an invalid bInterval 101, changing to 7
[  400.794799][ T5767] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  400.826694][ T5828] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid maxpacket 26468, setting to 1024
[  400.862943][ T5828] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  400.902660][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.937762][ T5828] usb 3-1: config 0 descriptor??
[  400.966475][T14211] loop4: detected capacity change from 0 to 32768
[  400.976460][ T5828] ttusbir 3-1:0.83: cannot find expected altsetting
[  401.071099][T14211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3491 (14211)
[  401.134341][T14211] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  401.151656][ T5828] usb 3-1: USB disconnect, device number 18
[  401.184975][T14211] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  401.226876][T14211] BTRFS info (device loop4): turning on sync discard
[  401.236882][T14211] BTRFS info (device loop4): enabling disk space caching
[  401.243967][T14211] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  401.268538][T14211] BTRFS info (device loop4): trying to use backup root at mount time
[  401.277155][T14211] BTRFS info (device loop4): force clearing of disk cache
[  401.277620][ T5894] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5894)
[  401.284806][T14211] BTRFS info (device loop4): disk space caching is enabled
[  401.453057][T14251] loop3: detected capacity change from 0 to 256
[  401.474643][T14251] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  401.603905][T14211] BTRFS info (device loop4): rebuilding free space tree
[  401.606691][T14251] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  401.725883][T14211] BTRFS info (device loop4): disabling free space tree
[  401.760633][T14211] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  401.817525][T14211] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  402.247980][T13484] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  402.525597][T14278] loop3: detected capacity change from 0 to 1024
[  402.637660][T14278] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  402.676294][T14278] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  402.686845][T14278] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.3508: Failed to acquire dquot type 0
[  402.732088][T14278] EXT4-fs (loop3): 1 truncate cleaned up
[  402.747463][T14278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  402.886907][T14278] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  402.924957][T14278] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  402.944856][T14278] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.3508: Failed to acquire dquot type 0
[  403.139027][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.193021][T14301] loop2: detected capacity change from 0 to 512
[  403.325613][T14301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  403.410405][T14301] ext4 filesystem being mounted at /886/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  403.581558][T14315] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3524'.
[  403.596486][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.612111][T14311] loop1: detected capacity change from 0 to 4096
[  403.634563][T14311] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  403.854813][T14311] ntfs3: loop1: ino=0, attr_set_size
[  404.728415][T14353] loop2: detected capacity change from 0 to 256
[  404.813006][T14355] netlink: 'syz.1.3544': attribute type 5 has an invalid length.
[  404.838534][T14353] FAT-fs (loop2): Directory bread(block 64) failed
[  404.861834][T14353] FAT-fs (loop2): Directory bread(block 65) failed
[  404.870591][T14353] FAT-fs (loop2): Directory bread(block 66) failed
[  404.884250][T14353] FAT-fs (loop2): Directory bread(block 67) failed
[  404.891477][T14353] FAT-fs (loop2): Directory bread(block 68) failed
[  404.910642][T14353] FAT-fs (loop2): Directory bread(block 69) failed
[  404.941516][T14353] FAT-fs (loop2): Directory bread(block 70) failed
[  404.961258][T14353] FAT-fs (loop2): Directory bread(block 71) failed
[  404.973208][T14353] FAT-fs (loop2): Directory bread(block 72) failed
[  404.980374][T14353] FAT-fs (loop2): Directory bread(block 73) failed
[  405.183819][T14364] loop3: detected capacity change from 0 to 8
[  405.254070][T14364] SQUASHFS error: Unable to read inode 0xe3
[  405.259717][T14337] loop4: detected capacity change from 0 to 32768
[  405.296784][T14337] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  405.330694][T14337] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  405.414160][T14337] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  405.444651][ T5828] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  405.454518][ T5828] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  405.456303][   T23] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  405.548981][ T5828] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 94ms
[  405.573426][ T5828] gfs2: fsid=syz:syz.0: jid=0: Done
[  405.594076][T14337] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  405.599695][T14374] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3552'.
[  405.682263][   T23] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  405.737845][   T23] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  405.757708][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.789475][   T23] usb 2-1: Product: syz
[  405.793810][   T23] usb 2-1: Manufacturer: syz
[  405.803944][   T23] usb 2-1: SerialNumber: syz
[  405.817594][   T23] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  405.922730][T14384] loop3: detected capacity change from 0 to 8
[  405.964041][T14384] SQUASHFS error: Unable to read inode 0xa7
[  406.047383][T14337] gfs2: fsid=syz:syz.0: found 1 quota changes
[  406.251035][T14392] loop2: detected capacity change from 0 to 8
[  406.294318][   T23] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  406.367027][T13484] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  406.367027][T13484]   inode = 11 2339
[  406.367027][T13484]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472
[  406.390510][   T23] usb 2-1: USB disconnect, device number 13
[  406.444934][T13484] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  406.473472][T13484] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:13484 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  406.523382][T13484] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  406.544884][T13484] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  406.586500][T13484] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  406.624688][T13484] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  406.634132][T13484] gfs2: fsid=syz:syz.0: File system withdrawn
[  406.641345][T13484] CPU: 0 PID: 13484 Comm: syz-executor Not tainted syzkaller #0
[  406.649024][T13484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  406.659107][T13484] Call Trace:
[  406.662397][T13484]  <TASK>
[  406.665433][T13484]  dump_stack_lvl+0x18c/0x250
[  406.670115][T13484]  ? kobject_uevent_env+0x363/0x8b0
[  406.675317][T13484]  ? show_regs_print_info+0x20/0x20
[  406.680596][T13484]  ? load_image+0x400/0x400
[  406.685097][T13484]  ? kobject_uevent_env+0x363/0x8b0
[  406.690297][T13484]  gfs2_withdraw+0xb24/0x13d0
[  406.694981][T13484]  ? gfs2_lm+0x240/0x240
[  406.699222][T13484]  ? preempt_schedule+0xc0/0xd0
[  406.704073][T13484]  ? gfs2_consist_inode_i+0xf5/0x110
[  406.709356][T13484]  gfs2_inode_refresh+0xb89/0x1000
[  406.714469][T13484]  ? gfs2_inode_metasync+0xf0/0xf0
[  406.719579][T13484]  ? gfs2_glock_nq+0xd4f/0x1420
[  406.724441][T13484]  gfs2_instantiate+0x162/0x220
[  406.729301][T13484]  gfs2_glock_wait+0x1d4/0x2a0
[  406.734068][T13484]  do_sync+0x4c6/0xe50
[  406.738145][T13484]  ? gfs2_quota_sync+0x411/0x5a0
[  406.743078][T13484]  ? bh_get+0x760/0x760
[  406.747233][T13484]  ? __lock_acquire+0x7d40/0x7d40
[  406.752253][T13484]  ? do_raw_spin_lock+0x11f/0x2c0
[  406.757308][T13484]  ? gfs2_quota_sync+0x411/0x5a0
[  406.762244][T13484]  ? do_raw_spin_unlock+0x121/0x230
[  406.767453][T13484]  gfs2_quota_sync+0x411/0x5a0
[  406.773523][T13484]  gfs2_sync_fs+0x4c/0xb0
[  406.777888][T13484]  sync_filesystem+0xea/0x220
[  406.782576][T13484]  generic_shutdown_super+0x6f/0x2b0
[  406.787865][T13484]  kill_block_super+0x44/0x90
[  406.792537][T13484]  deactivate_locked_super+0x97/0x100
[  406.797908][T13484]  cleanup_mnt+0x43b/0x4d0
[  406.802321][T13484]  task_work_run+0x1d4/0x260
[  406.806921][T13484]  ? task_work_cancel+0x220/0x220
[  406.811949][T13484]  ? exit_to_user_mode_loop+0x3b/0x110
[  406.817408][T13484]  exit_to_user_mode_loop+0xe6/0x110
[  406.822691][T13484]  exit_to_user_mode_prepare+0xee/0x180
[  406.828240][T13484]  syscall_exit_to_user_mode+0x1a/0x50
[  406.833698][T13484]  do_syscall_64+0x61/0xa0
[  406.838119][T13484]  ? clear_bhb_loop+0x40/0x90
[  406.842794][T13484]  ? clear_bhb_loop+0x40/0x90
[  406.847478][T13484]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  406.853370][T13484] RIP: 0033:0x7f57a2b9bf17
[  406.857803][T13484] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  406.877507][T13484] RSP: 002b:00007ffc0c186c98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  406.885920][T13484] RAX: 0000000000000000 RBX: 00007f57a2c0471f RCX: 00007f57a2b9bf17
[  406.893888][T13484] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0c186d50
[  406.901855][T13484] RBP: 00007ffc0c186d50 R08: 00007ffc0c187d50 R09: 00000000ffffffff
[  406.909822][T13484] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc0c187de0
[  406.917787][T13484] R13: 00007f57a2c0471f R14: 0000000000063290 R15: 00007ffc0c187e20
[  406.925765][T13484]  </TASK>
[  407.669356][T14428] loop4: detected capacity change from 0 to 4096
[  407.677226][T14428] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  407.713372][T14428] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  407.744462][T14428] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  407.753390][T14428] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  407.789300][T14428] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  407.874585][T14428] ntfs: volume version 3.1.
[  407.898595][T14436] loop3: detected capacity change from 0 to 256
[  407.925523][T14436] exfat: Deprecated parameter 'namecase'
[  407.992304][T14436] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  408.015740][T14428] ntfs: (device loop4): ntfs_nlstoucs(): Name using character set euc-jp contains characters that cannot be converted to Unicode.
[  408.049134][T14428] ntfs: (device loop4): ntfs_lookup(): Failed to convert name to Unicode.
[  408.403691][T14450] loop2: detected capacity change from 0 to 256
[  408.564194][T14450] FAT-fs (loop2): Directory bread(block 64) failed
[  408.584829][T14450] FAT-fs (loop2): Directory bread(block 65) failed
[  408.591557][T14450] FAT-fs (loop2): Directory bread(block 66) failed
[  408.616516][T14450] FAT-fs (loop2): Directory bread(block 67) failed
[  408.623669][T14456] xt_cgroup: path and classid specified
[  408.645497][T14450] FAT-fs (loop2): Directory bread(block 68) failed
[  408.652144][T14450] FAT-fs (loop2): Directory bread(block 69) failed
[  408.667975][T14450] FAT-fs (loop2): Directory bread(block 70) failed
[  408.689969][T14450] FAT-fs (loop2): Directory bread(block 71) failed
[  408.700235][T14450] FAT-fs (loop2): Directory bread(block 72) failed
[  408.722575][T14450] FAT-fs (loop2): Directory bread(block 73) failed
[  408.835419][   T27] audit: type=1326 audit(2000000033.509:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.1.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  408.857799][    C1] vkms_vblank_simulate: vblank timer overrun
[  408.934685][   T27] audit: type=1326 audit(2000000033.519:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.1.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  409.007532][   T27] audit: type=1326 audit(2000000033.519:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14463 comm="syz.1.3597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  409.282101][T14475] loop1: detected capacity change from 0 to 4096
[  409.341666][T14475] ntfs: volume version 3.1.
[  409.586311][T14489] i2c i2c-0: Invalid block write size 34
[  409.939648][T14504] loop2: detected capacity change from 0 to 2048
[  409.965078][T14504] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  410.006655][T14506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3618'.
[  410.026496][T14506] unsupported nlmsg_type 40
[  410.051387][T14508] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  410.587855][T14500] loop4: detected capacity change from 0 to 32768
[  410.617975][T14500] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  410.841856][T14530] netlink: 'syz.2.3630': attribute type 1 has an invalid length.
[  410.842259][ T5894] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  411.124631][ T7506] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  411.311911][T14521] loop3: detected capacity change from 0 to 32768
[  411.324509][ T7506] usb 5-1: Using ep0 maxpacket: 8
[  411.333766][ T7506] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  411.341669][T14521] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  411.357387][ T7506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.389227][ T7506] usb 5-1: Product: syz
[  411.393457][ T7506] usb 5-1: Manufacturer: syz
[  411.411984][ T7506] usb 5-1: SerialNumber: syz
[  411.449027][ T7506] usb 5-1: config 0 descriptor??
[  411.483682][ T7506] gspca_main: se401-2.14.0 probing 047d:5003
[  411.592260][ T5894] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  411.825570][T14553] loop2: detected capacity change from 0 to 4096
[  411.848157][T14553] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  411.889628][ T7506] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  411.907490][ T7506] se401: probe of 5-1:0.0 failed with error -71
[  411.926356][ T7506] usb 5-1: USB disconnect, device number 3
[  412.322101][T14549] loop3: detected capacity change from 0 to 32768
[  412.335974][T14549] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.3639 (14549)
[  412.385182][T14549] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  412.423026][T14549] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  412.458557][T14549] BTRFS info (device loop3): force zlib compression, level 3
[  412.504576][T14549] BTRFS info (device loop3): force clearing of disk cache
[  412.511777][T14549] BTRFS info (device loop3): setting nodatasum
[  412.574147][T14549] BTRFS info (device loop3): allowing degraded mounts
[  412.614534][T14549] BTRFS info (device loop3): enabling disk space caching
[  412.621637][T14549] BTRFS info (device loop3): disk space caching is enabled
[  412.788521][T14549] BTRFS info (device loop3): auto enabling async discard
[  412.844120][T14549] BTRFS info (device loop3): rebuilding free space tree
[  412.883514][T14549] BTRFS info (device loop3): disabling free space tree
[  412.904850][T14549] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  412.946651][T14549] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  413.097170][T14549] BTRFS info (device loop3): balance: start -sconvert=raid0,soft,usage=10625749090306,limit=51539609600
[  413.121666][T14549] BTRFS info (device loop3): balance: ended with status: 0
[  413.279213][ T5770] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  413.525812][   T27] kauditd_printk_skb: 17 callbacks suppressed
[  413.525828][   T27] audit: type=1326 audit(2000000038.199:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14612 comm="syz.4.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  413.651655][   T27] audit: type=1326 audit(2000000038.199:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14612 comm="syz.4.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  413.658454][T14619] loop1: detected capacity change from 0 to 256
[  413.769125][   T27] audit: type=1326 audit(2000000038.219:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14612 comm="syz.4.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  413.774309][T14619] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  413.795601][   T27] audit: type=1326 audit(2000000038.219:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14612 comm="syz.4.3663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  414.477284][   T27] audit: type=1326 audit(2000000039.149:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14642 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  414.523080][   T27] audit: type=1326 audit(2000000039.149:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14642 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  414.549148][   T27] audit: type=1326 audit(2000000039.179:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14642 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  414.634708][   T27] audit: type=1326 audit(2000000039.179:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14642 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  414.710488][   T27] audit: type=1326 audit(2000000039.179:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14642 comm="syz.2.3677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  415.026547][T14663] loop2: detected capacity change from 0 to 64
[  415.061878][T14663] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  415.085369][T14663] hfs: filesystem is marked locked, mounting read-only.
[  416.279060][T14719] xt_bpf: check failed: parse error
[  417.164620][T14760] netlink: 'syz.1.3735': attribute type 1 has an invalid length.
[  417.172417][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3735'.
[  417.297971][T14766] loop4: detected capacity change from 0 to 128
[  417.351273][T14766] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  417.453190][T14766] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  417.633123][T13484] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  418.140787][T14772] loop2: detected capacity change from 0 to 32768
[  418.188043][T14772] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.3740 (14772)
[  418.195378][T14775] loop1: detected capacity change from 0 to 32768
[  418.217102][T14791] loop3: detected capacity change from 0 to 256
[  418.262815][T14772] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  418.285638][T14772] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  418.301590][T14772] BTRFS info (device loop2): using free space tree
[  418.512488][T14772] BTRFS info (device loop2): enabling ssd optimizations
[  418.582631][T14772] BTRFS info (device loop2): auto enabling async discard
[  418.805744][ T5775] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  418.938780][ T5758] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by udevd (5758)
[  419.236373][T14827] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3758'.
[  419.459794][T14831] i2c i2c-0: Invalid block write size 252
[  419.667003][T14814] loop1: detected capacity change from 0 to 40427
[  419.716667][T14814] F2FS-fs (loop1): build fault injection attr: rate: 7, type: 0x7ffff
[  419.753245][T14814] F2FS-fs (loop1): Image doesn't support compression
[  419.780276][T14814] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x2ac
[  419.839993][T14814] F2FS-fs (loop1): invalid crc value
[  419.890098][T14814] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[  419.930865][T14814] F2FS-fs (loop1): Found nat_bits in checkpoint
[  420.034193][T14814] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[  420.113801][T14814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  420.136911][T14854] loop3: detected capacity change from 0 to 1024
[  420.216909][T14814] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0
[  420.250924][T14859] loop2: detected capacity change from 0 to 256
[  420.303592][T14859] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  420.328124][T14854] hfsplus: invalid extended attribute record
[  420.495384][   T11] hfsplus: b-tree write err: -5, ino 4
[  420.617354][T14863] xt_CT: You must specify a L4 protocol and not use inversions on it
[  420.707231][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3775'.
[  420.904672][T14873] veth1_to_bond: entered promiscuous mode
[  421.446346][T14897] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3789'.
[  422.349582][T14911] loop3: detected capacity change from 0 to 32768
[  422.447247][T14936] comedi comedi0: Minor 47 could not be opened
[  422.449005][T14911] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  422.499731][   T27] audit: type=1326 audit(2000000047.179:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14939 comm="syz.1.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  422.522082][    C0] vkms_vblank_simulate: vblank timer overrun
[  422.530182][   T27] audit: type=1326 audit(2000000047.179:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14939 comm="syz.1.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  422.581529][   T27] audit: type=1326 audit(2000000047.259:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14939 comm="syz.1.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  422.603940][    C0] vkms_vblank_simulate: vblank timer overrun
[  422.611143][   T27] audit: type=1326 audit(2000000047.259:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14939 comm="syz.1.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  422.634651][T14911] (syz.3.3797,14911,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=0, inode=0, rec_len=49, name_len=1
[  422.650039][T14911] (syz.3.3797,14911,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2
[  422.674587][T14911] (syz.3.3797,14911,0):ocfs2_symlink:1867 ERROR: status = -2
[  422.704184][T14911] (syz.3.3797,14911,0):ocfs2_symlink:2068 ERROR: status = -2
[  422.736893][   T27] audit: type=1326 audit(2000000047.259:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14939 comm="syz.1.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  422.781359][T14946] loop1: detected capacity change from 0 to 128
[  422.849060][ T5770] ocfs2: Unmounting device (7,3) on (node local)
[  422.865230][T14946] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  422.977195][T14946] ext4 filesystem being mounted at /933/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  423.040385][T14951] loop4: detected capacity change from 0 to 512
[  423.052791][T14954] loop2: detected capacity change from 0 to 256
[  423.101769][T14951] EXT4-fs (loop4): 1 truncate cleaned up
[  423.126624][T14951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  423.205958][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  423.248772][   T27] audit: type=1800 audit(2000000047.929:206): pid=14951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3816" name="file0" dev="loop4" ino=13 res=0 errno=0
[  423.305072][T13484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.453140][T14964] xt_CT: You must specify a L4 protocol and not use inversions on it
[  423.474670][T14966] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3819'.
[  423.558910][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3822'.
[  423.571993][T14968] netlink: 30 bytes leftover after parsing attributes in process `syz.3.3822'.
[  423.877025][T14982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3830'.
[  423.923213][T14982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3830'.
[  424.162809][T14993] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  424.219207][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3835'.
[  424.580889][T15013] loop1: detected capacity change from 0 to 64
[  424.807046][T15014] loop4: detected capacity change from 0 to 4096
[  424.837988][T15022] loop2: detected capacity change from 0 to 64
[  424.844464][T15014] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  425.521916][T15041] loop2: detected capacity change from 0 to 128
[  425.572956][T15041] FAT-fs (loop2): Directory bread(block 32) failed
[  425.582828][T15041] FAT-fs (loop2): Directory bread(block 33) failed
[  425.604660][T15041] FAT-fs (loop2): Directory bread(block 34) failed
[  425.634949][T15041] FAT-fs (loop2): Directory bread(block 35) failed
[  425.641640][T15041] FAT-fs (loop2): Directory bread(block 36) failed
[  425.672342][T15041] FAT-fs (loop2): Directory bread(block 37) failed
[  425.692699][T15041] FAT-fs (loop2): Directory bread(block 38) failed
[  425.726457][T15041] FAT-fs (loop2): Directory bread(block 39) failed
[  425.745866][T15041] FAT-fs (loop2): Directory bread(block 40) failed
[  425.752440][T15041] FAT-fs (loop2): Directory bread(block 41) failed
[  425.974067][T15051] loop1: detected capacity change from 0 to 4096
[  426.015750][T15051] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  426.108620][T15051] ntfs: volume version 3.1.
[  426.461029][T15038] loop4: detected capacity change from 0 to 32768
[  427.134054][T15081] loop1: detected capacity change from 0 to 64
[  428.136875][T15123] vlan0: entered promiscuous mode
[  428.262510][T15125] loop1: detected capacity change from 0 to 2048
[  428.335159][T15125] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  428.398622][T15134] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  428.470273][T15125] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  428.522743][T15125] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16)
[  428.586900][T15125] Remounting filesystem read-only
[  428.591993][T15125] NILFS (loop1): error -5 truncating bmap (ino=16)
[  428.754003][ T5767] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  428.775985][ T5767] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  428.804892][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  428.820014][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  428.835440][ T5769] Bluetooth: hci4: command 0x0401 tx timeout
[  428.849767][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  428.859673][ T5767] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  428.914671][T13478] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  429.098541][T13478] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  429.133063][T13478] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  429.157928][T13478] usb 5-1: config 220 has no interface number 2
[  429.164284][T13478] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  429.210859][T13478] usb 5-1: config 220 interface 0 has no altsetting 0
[  429.234588][T13478] usb 5-1: config 220 interface 76 has no altsetting 0
[  429.256825][T13478] usb 5-1: config 220 interface 1 has no altsetting 0
[  429.277164][T13478] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  429.293277][T13478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.306609][T13478] usb 5-1: Product: syz
[  429.310819][T13478] usb 5-1: Manufacturer: syz
[  429.317618][T13478] usb 5-1: SerialNumber: syz
[  429.541600][T13478] usb 5-1: selecting invalid altsetting 0
[  429.566700][T13478] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  429.609724][T13478] usb 5-1: No valid video chain found.
[  429.641904][T13478] usb 5-1: selecting invalid altsetting 0
[  429.658033][T13478] usbtest: probe of 5-1:220.1 failed with error -22
[  429.702188][T13478] usb 5-1: USB disconnect, device number 4
[  429.917447][T15162] loop1: detected capacity change from 0 to 32768
[  429.989913][T15162] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt
[  429.989913][T15162] 
[  430.028465][T15162] ERROR: (device loop1): remounting filesystem as read-only
[  430.063418][T15184] SET target dimension over the limit!
[  430.542497][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3935'.
[  430.959646][T15219] loop3: detected capacity change from 0 to 64
[  431.001325][T15219] syz.3.3944: attempt to access beyond end of device
[  431.001325][T15219] loop3: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  431.014773][T15221] loop1: detected capacity change from 0 to 1764
[  431.052519][T15219] Buffer I/O error on dev loop3, logical block 8388608, async page read
[  431.064593][ T5754] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  431.115415][T15219] syz.3.3944: attempt to access beyond end of device
[  431.115415][T15219] loop3: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  431.144676][T15219] Buffer I/O error on dev loop3, logical block 8388608, async page read
[  431.263038][ T5754] usb 3-1: Using ep0 maxpacket: 32
[  431.283427][ T5754] usb 3-1: config 0 has an invalid interface number: 74 but max is 1
[  431.304510][ T5754] usb 3-1: config 0 has no interface number 1
[  431.346853][ T5754] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  431.360512][T15231] loop1: detected capacity change from 0 to 8
[  431.372293][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.402179][ T5754] usb 3-1: Product: syz
[  431.407073][ T5754] usb 3-1: Manufacturer: syz
[  431.411704][ T5754] usb 3-1: SerialNumber: syz
[  431.452846][ T5754] usb 3-1: config 0 descriptor??
[  431.657774][ T5754] snd-usb-audio: probe of 3-1:0.74 failed with error -22
[  431.776699][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  431.900209][ T5754] usb 3-1: USB disconnect, device number 19
[  431.974722][T15250] netlink: 'syz.3.3959': attribute type 4 has an invalid length.
[  431.993479][T15250] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3959'.
[  432.027212][T15250] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  432.121690][T15255] loop1: detected capacity change from 0 to 512
[  432.135461][T15255] EXT4-fs: Ignoring removed mblk_io_submit option
[  432.217321][T15255] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  432.254230][T15255] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.3961: attempt to clear invalid blocks 2 len 1
[  432.313131][T15255] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  432.332644][T15255] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3961: invalid indirect mapped block 1819239214 (level 0)
[  432.348456][T15255] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3961: invalid indirect mapped block 1819239214 (level 1)
[  432.374223][T15255] EXT4-fs (loop1): 1 truncate cleaned up
[  432.381205][T15255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  432.566860][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.717484][T15275] loop3: detected capacity change from 0 to 256
[  432.741473][T15275] exfat: Deprecated parameter 'utf8'
[  432.770585][T15275] exfat: Deprecated parameter 'namecase'
[  432.785090][T15275] exfat: Deprecated parameter 'namecase'
[  432.893452][T15275] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  432.966965][T15286] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3975'.
[  433.145765][T15290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3977'.
[  433.158990][T15292] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3979'.
[  433.631129][T15309] sock: sock_timestamping_bind_phc: sock not bind to device
[  433.653134][T15312] tmpfs: Bad value for 'mpol'
[  433.809213][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3991'.
[  433.832549][T15320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3991'.
[  433.994675][   T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  434.026043][   T27] audit: type=1326 audit(2000000058.709:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.4.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  434.063186][   T27] audit: type=1326 audit(2000000058.729:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.4.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  434.095876][   T27] audit: type=1326 audit(2000000058.739:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.4.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  434.129811][   T27] audit: type=1326 audit(2000000058.739:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.4.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  434.183875][   T27] audit: type=1326 audit(2000000058.739:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15326 comm="syz.4.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  434.237930][   T23] usb 2-1: unable to get BOS descriptor or descriptor too short
[  434.248762][   T23] usb 2-1: config 129 has an invalid interface number: 135 but max is 0
[  434.278172][   T23] usb 2-1: config 129 has an invalid interface number: 5 but max is 0
[  434.298412][   T23] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  434.316440][   T23] usb 2-1: config 129 has no interface number 0
[  434.322845][   T23] usb 2-1: config 129 has no interface number 1
[  434.332420][   T23] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  434.392928][   T23] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  434.419077][   T23] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  434.433602][   T23] usb 2-1: config 129 interface 135 has no altsetting 0
[  434.433626][   T23] usb 2-1: config 129 interface 5 has no altsetting 0
[  434.438124][   T23] usb 2-1: string descriptor 0 read error: -22
[  434.438244][   T23] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  434.438266][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.448281][   T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  434.448336][   T23] usb 2-1: MIDIStreaming interface descriptor not found
[  434.706222][ T7506] usb 2-1: USB disconnect, device number 14
[  435.045790][T15362] tmpfs: Bad value for 'mpol'
[  435.072407][T15360] loop2: detected capacity change from 0 to 4096
[  435.101270][T15360] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  435.182733][T15366] netlink: 800 bytes leftover after parsing attributes in process `syz.4.4013'.
[  435.196272][T15366] netlink: 1301 bytes leftover after parsing attributes in process `syz.4.4013'.
[  435.391036][T15372] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4017'.
[  435.400888][T15370] loop3: detected capacity change from 0 to 256
[  435.414101][T15370] exfat: Deprecated parameter 'utf8'
[  435.427796][T15370] exfat: Deprecated parameter 'utf8'
[  435.449160][T15370] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  435.576660][T15370] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  435.724846][T15380] netlink: 'syz.1.4020': attribute type 58 has an invalid length.
[  435.774568][T15380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4020'.
[  435.854080][T15384] loop4: detected capacity change from 0 to 2048
[  435.863764][T15383] loop3: detected capacity change from 0 to 4096
[  435.926039][T15385] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  435.954850][T15386] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  436.016511][T15384] NILFS (loop4): error -2 truncating bmap (ino=16)
[  436.477687][T15376] loop2: detected capacity change from 0 to 32768
[  436.486128][T15397] loop4: detected capacity change from 0 to 1024
[  436.580517][T15376] ERROR: (device loop2): duplicateIXtree: 
[  436.580517][T15376] 
[  436.640222][ T1078] hfsplus: b-tree write err: -5, ino 4
[  436.655180][T15376] ERROR: (device loop2): remounting filesystem as read-only
[  437.034215][T15405] loop1: detected capacity change from 0 to 8
[  437.076671][T15405] SQUASHFS error: zlib decompression failed, data probably corrupt
[  437.080678][T15404] loop4: detected capacity change from 0 to 4096
[  437.088572][T15405] SQUASHFS error: Failed to read block 0x9b: -5
[  437.098007][T15405] SQUASHFS error: Unable to read metadata cache entry [99]
[  437.105672][T15405] SQUASHFS error: Unable to read inode 0x127
[  437.127635][T15404] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  437.230869][T15404] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  437.894215][T15425] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  438.034597][ T5845] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  438.224604][ T5845] usb 2-1: Using ep0 maxpacket: 16
[  438.241725][ T5845] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  438.262264][ T5845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  438.310473][ T5845] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  438.329932][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.344272][ T5845] usb 2-1: Product: syz
[  438.355582][ T5845] usb 2-1: Manufacturer: syz
[  438.366331][ T5845] usb 2-1: SerialNumber: syz
[  438.614659][ T5845] usb 2-1: 0:2 : does not exist
[  438.619649][ T5845] usb 2-1: unit 9 not found!
[  438.638726][ T5845] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4)
[  438.670828][ T5845] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4)
[  438.711097][ T5845] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4)
[  438.743748][ T5845] usb 2-1: 4:0: cannot get min/max values for control 5 (id 4)
[  438.747410][T15435] loop2: detected capacity change from 0 to 32768
[  438.792924][ T5845] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4)
[  438.805038][T15435] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  438.843191][ T5845] usb 2-1: USB disconnect, device number 15
[  439.081153][ T5758] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  439.800716][T15486] netlink: 'syz.4.4071': attribute type 1 has an invalid length.
[  440.000459][T15491] loop1: detected capacity change from 0 to 2048
[  440.047221][T15497] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4075'.
[  440.075433][T15491]  loop1: p1 p3 p4
[  440.088787][T15491] loop1: p4 size 589824 extends beyond EOD, truncated
[  440.151137][T15501] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4079'.
[  440.183510][T15491] FAT-fs (loop1p1): bogus number of reserved sectors
[  440.204318][T15491] FAT-fs (loop1p1): Can't find a valid FAT filesystem
[  440.282222][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  440.293204][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  440.483688][T15511] ieee802154 phy0 wpan0: encryption failed: -22
[  440.505365][T15510] loop3: detected capacity change from 0 to 2048
[  440.536597][T15510] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  440.571325][ T5894] udevd[5894]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  440.589010][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  440.589932][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  440.638093][T15515] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  440.762289][ T5894] udevd[5894]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  440.859267][ T5894] udevd[5894]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  440.889827][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  441.427143][T15541] loop4: detected capacity change from 0 to 8
[  441.489787][T15541] SQUASHFS error: zlib decompression failed, data probably corrupt
[  441.502334][T15541] SQUASHFS error: Failed to read block 0x9b: -5
[  441.517034][T15544] netlink: 'syz.3.4099': attribute type 2 has an invalid length.
[  441.534720][T15541] SQUASHFS error: Unable to read metadata cache entry [99]
[  441.562735][T15541] SQUASHFS error: Unable to read inode 0x127
[  441.570215][T15544] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4099'.
[  441.718402][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4102'.
[  441.895593][   T27] audit: type=1326 audit(2000000066.579:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15554 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  441.925155][T15557] snd_dummy snd_dummy.0: control 0:8:0:syz0:0 is already present
[  441.963946][   T27] audit: type=1326 audit(2000000066.579:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15554 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  442.038727][   T27] audit: type=1326 audit(2000000066.579:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15554 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  442.091875][T15563] loop4: detected capacity change from 0 to 512
[  442.118878][   T27] audit: type=1326 audit(2000000066.579:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15554 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  442.161600][   T27] audit: type=1326 audit(2000000066.579:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15554 comm="syz.2.4105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  442.232272][T15563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.460300][T13484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.544305][T15578] loop3: detected capacity change from 0 to 4096
[  442.544431][ T5845] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  442.607439][T15578] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  442.632492][T15578] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x4 as bad.  Run chkdsk.
[  442.647811][T15578] ntfs: (device loop3): load_and_init_attrdef(): Failed to initialize attribute definition table.
[  442.678486][T15578] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files.
[  442.770037][ T5845] usb 3-1: config 0 has an invalid interface number: 83 but max is 0
[  442.796809][ T5845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  442.826158][ T5845] usb 3-1: config 0 has no interface number 0
[  442.845941][ T5845] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  442.872552][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.907418][ T5845] usb 3-1: config 0 descriptor??
[  442.936179][ T5845] ttusbir 3-1:0.83: cannot find expected altsetting
[  443.183429][ T5845] usb 3-1: USB disconnect, device number 20
[  443.339466][T15598] loop3: detected capacity change from 0 to 8
[  443.390886][T15598] SQUASHFS error: zlib decompression failed, data probably corrupt
[  443.414501][T15598] SQUASHFS error: Failed to read block 0x9b: -5
[  443.441994][T15598] SQUASHFS error: Unable to read metadata cache entry [99]
[  443.483621][T15598] SQUASHFS error: Unable to read inode 0x127
[  443.493512][T15603] loop1: detected capacity change from 0 to 1764
[  443.678347][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4129'.
[  443.703251][T15607] netlink: 540 bytes leftover after parsing attributes in process `syz.4.4129'.
[  443.912654][T15611] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4131'.
[  444.080439][T15621] loop1: detected capacity change from 0 to 512
[  444.118191][T15621] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.4136: bad orphan inode 13
[  444.154122][T15621] ext4_test_bit(bit=12, block=4) = 1
[  444.178765][T15621] is_bad_inode(inode)=0
[  444.182990][T15621] NEXT_ORPHAN(inode)=0
[  444.208584][T15621] max_ino=32
[  444.211847][T15621] i_nlink=1
[  444.252138][T15621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.332524][T15621] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.4136: Hash code is SIPHASH, but hash not in dirent
[  444.375360][T15621] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4136: Corrupt directory, running e2fsck is recommended
[  444.443147][T15621] EXT4-fs warning (device loop1): dx_probe:845: inode #2: comm syz.1.4136: Hash code is SIPHASH, but hash not in dirent
[  444.509967][T15621] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.4136: Corrupt directory, running e2fsck is recommended
[  444.577926][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.726004][T15644] netlink: 'syz.4.4148': attribute type 58 has an invalid length.
[  444.763293][T15644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4148'.
[  444.877973][   T23] IPVS: starting estimator thread 0...
[  444.994931][T15651] IPVS: using max 24 ests per chain, 57600 per kthread
[  445.726730][T15675] loop2: detected capacity change from 0 to 64
[  446.023901][T15655] loop1: detected capacity change from 0 to 32768
[  446.336066][T15655] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  446.352050][T15692] loop2: detected capacity change from 0 to 256
[  446.456911][T15692] FAT-fs (loop2): Directory bread(block 64) failed
[  446.486509][T15692] FAT-fs (loop2): Directory bread(block 65) failed
[  446.504000][T15692] FAT-fs (loop2): Directory bread(block 66) failed
[  446.510839][T15655] XFS (loop1): Ending clean mount
[  446.544436][T15692] FAT-fs (loop2): Directory bread(block 67) failed
[  446.551106][T15692] FAT-fs (loop2): Directory bread(block 68) failed
[  446.628628][T15692] FAT-fs (loop2): Directory bread(block 69) failed
[  446.637534][ T5767] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  446.655113][T15699] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  446.679843][T15692] FAT-fs (loop2): Directory bread(block 70) failed
[  446.718433][T15692] FAT-fs (loop2): Directory bread(block 71) failed
[  446.744574][T15692] FAT-fs (loop2): Directory bread(block 72) failed
[  446.751085][T15699] CIFS mount error: No usable UNC path provided in device string!
[  446.751085][T15699] 
[  446.775348][T15692] FAT-fs (loop2): Directory bread(block 73) failed
[  446.818930][T15699] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  446.885870][T15683] loop3: detected capacity change from 0 to 32768
[  446.959367][T15683] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  447.021145][T15683] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  447.155610][T15683] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  447.325425][T15683] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  447.414461][  T788] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  447.624441][  T788] usb 5-1: Using ep0 maxpacket: 8
[  447.642510][  T788] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  447.669042][  T788] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.701360][  T788] usb 5-1: config 0 has no interface number 0
[  447.733855][  T788] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  447.756347][T15724] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28)
[  447.784715][  T788] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  447.822678][  T788] usb 5-1: config 0 interface 52 has no altsetting 0
[  447.835841][  T788] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  447.864793][  T788] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  447.872939][  T788] usb 5-1: Manufacturer: syz
[  447.896643][  T788] usb 5-1: config 0 descriptor??
[  447.904110][  T788] hub 5-1:0.52: bad descriptor, ignoring hub
[  447.925339][  T788] hub: probe of 5-1:0.52 failed with error -5
[  448.144714][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4187'.
[  448.161291][  T788] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input17
[  448.614707][  T788] usb 5-1: USB disconnect, device number 5
[  448.911466][T15760] loop1: detected capacity change from 0 to 512
[  448.976566][T15760] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #3: comm syz.1.4199: corrupted inode contents
[  449.021170][T15760] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #3: comm syz.1.4199: mark_inode_dirty error
[  449.073355][T15760] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #3: comm syz.1.4199: corrupted inode contents
[  449.103536][T15760] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.4199: mark_inode_dirty error
[  449.169051][T15748] loop2: detected capacity change from 0 to 32768
[  449.185317][T15760] Quota error (device loop1): write_blk: dquota write failed
[  449.192864][T15760] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  449.210542][T15748] XFS: attr2 mount option is deprecated.
[  449.222590][T15760] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.4199: Failed to acquire dquot type 0
[  449.272150][T15748] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  449.316352][T15760] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.4199: corrupted inode contents
[  449.356933][T15774] loop3: detected capacity change from 0 to 4096
[  449.369600][T15774] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  449.394513][T15760] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #16: comm syz.1.4199: mark_inode_dirty error
[  449.416882][T15748] XFS (loop2): Ending clean mount
[  449.442534][T15748] XFS (loop2): Quotacheck needed: Please wait.
[  449.445082][T15760] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.4199: corrupted inode contents
[  449.482254][T15774] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  449.515330][T15760] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.4199: mark_inode_dirty error
[  449.561170][T15760] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.4199: corrupted inode contents
[  449.590940][T15748] XFS (loop2): Quotacheck: Done.
[  449.591117][T15760] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  449.638082][ T5770] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22.
[  449.645357][T15760] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #16: comm syz.1.4199: corrupted inode contents
[  449.664443][T15760] EXT4-fs error (device loop1): ext4_truncate:4294: inode #16: comm syz.1.4199: mark_inode_dirty error
[  449.677273][T15760] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  449.693181][T15760] EXT4-fs (loop1): 1 truncate cleaned up
[  449.715482][T15760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.757496][T15760] ext4 filesystem being mounted at /1026/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  449.887165][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  449.933779][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.947534][T15787] loop4: detected capacity change from 0 to 256
[  450.041858][T15787] FAT-fs (loop4): Directory bread(block 64) failed
[  450.061102][T15787] FAT-fs (loop4): Directory bread(block 65) failed
[  450.088225][T15787] FAT-fs (loop4): Directory bread(block 66) failed
[  450.109582][T15787] FAT-fs (loop4): Directory bread(block 67) failed
[  450.132916][T15791] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4209'.
[  450.133067][T15787] FAT-fs (loop4): Directory bread(block 68) failed
[  450.161627][T15787] FAT-fs (loop4): Directory bread(block 69) failed
[  450.171969][T15787] FAT-fs (loop4): Directory bread(block 70) failed
[  450.180213][T15787] FAT-fs (loop4): Directory bread(block 71) failed
[  450.191402][T15787] FAT-fs (loop4): Directory bread(block 72) failed
[  450.198705][T15787] FAT-fs (loop4): Directory bread(block 73) failed
[  450.322069][T15795] xt_CT: No such helper "syz1"
[  450.905889][T15815] loop1: detected capacity change from 0 to 4096
[  451.012877][T15815] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  451.135837][T15815] ntfs3: loop1: Failed to load $Extend (-22).
[  451.141976][T15815] ntfs3: loop1: Failed to initialize $Extend.
[  451.192689][T15822] SET target dimension over the limit!
[  452.078011][T15850] loop3: detected capacity change from 0 to 256
[  452.324996][T15859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4242'.
[  452.624557][T15868] binder: 15867:15868 ioctl 400c620e ffffffffffffffff returned -14
[  452.875449][T15878] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4251'.
[  452.893940][T15878] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4251'.
[  452.903912][T15878] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4251'.
[  453.031229][T15860] loop1: detected capacity change from 0 to 32768
[  453.034563][T13478] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  453.249757][T13478] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  453.264483][T13478] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  453.303727][T13478] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  453.329328][T15890] loop4: detected capacity change from 0 to 64
[  453.345648][T13478] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  453.372759][T13478] usb 3-1: config 1 has no interface number 0
[  453.397287][T13478] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  453.441696][T15894] netlink: 'syz.3.4259': attribute type 2 has an invalid length.
[  453.443636][T13478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.471706][T15894] netlink: 119 bytes leftover after parsing attributes in process `syz.3.4259'.
[  453.519080][T13478] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  453.571319][T15896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4260'.
[  453.603919][T15896] ip6tnl2: entered allmulticast mode
[  453.730318][T13478] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values
[  453.782282][T13478] snd_usb_pod 3-1:1.1: invalid control EP
[  453.799117][T13478] snd_usb_pod 3-1:1.1: cannot start listening: -22
[  453.826803][T13478] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  453.846033][T13478] snd_usb_pod: probe of 3-1:1.1 failed with error -22
[  453.896325][T15904] loop3: detected capacity change from 0 to 8
[  453.931554][T15904] SQUASHFS error: Unable to read inode 0x24
[  453.947358][T13478] usb 3-1: USB disconnect, device number 21
[  454.013853][T15906] loop4: detected capacity change from 0 to 512
[  454.058144][T15906] EXT4-fs (loop4): orphan cleanup on readonly fs
[  454.078106][T15906] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.4265: corrupted in-inode xattr: invalid size in ea xattr
[  454.127984][T15906] EXT4-fs (loop4): Remounting filesystem read-only
[  454.136250][T15906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  454.156531][  T788] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  454.231864][T13484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.374567][  T788] usb 2-1: Using ep0 maxpacket: 32
[  454.403512][  T788] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  454.434455][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.453077][  T788] usb 2-1: Product: syz
[  454.460950][  T788] usb 2-1: Manufacturer: syz
[  454.470166][  T788] usb 2-1: SerialNumber: syz
[  454.485476][  T788] usb 2-1: config 0 descriptor??
[  454.643989][T15927] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4271'.
[  454.936806][  T788] airspy 2-1:0.0: usb_control_msg() failed -71 request 0a
[  454.944116][  T788] airspy 2-1:0.0: Could not detect board
[  454.953037][  T788] airspy: probe of 2-1:0.0 failed with error -71
[  454.962023][  T788] usb 2-1: USB disconnect, device number 16
[  455.036150][   T27] audit: type=1107 audit(2000000079.709:217): pid=15940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  455.154948][T15939] loop2: detected capacity change from 0 to 4096
[  455.169830][T15939] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  455.220353][T15939] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  455.250804][T15939] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  455.298350][T15939] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  455.355418][T15939] ntfs: volume version 3.1.
[  455.386990][T15939] ntfs: (device loop2): load_and_init_quota(): Failed to find inode number for $Quota.
[  455.403693][T15939] ntfs: (device loop2): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  455.519329][T15955] loop3: detected capacity change from 0 to 1024
[  455.565113][T15955] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  455.594594][T15955] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  455.646461][T15955] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  455.671634][T15960] loop1: detected capacity change from 0 to 128
[  455.690221][T15955] EXT4-fs (loop3): orphan cleanup on readonly fs
[  455.704533][T15955] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.4285: Inode bitmap for bg 0 marked uninitialized
[  455.773409][T15955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  455.875046][T15955] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  455.930514][T15962] loop2: detected capacity change from 0 to 2048
[  455.979791][T15962] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  456.027311][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  456.039707][T15968] IPv6: Can't replace route, no match found
[  457.412172][T16023] loop2: detected capacity change from 0 to 256
[  457.488668][T16023] FAT-fs (loop2): Directory bread(block 64) failed
[  457.512872][T16023] FAT-fs (loop2): Directory bread(block 65) failed
[  457.528432][T16023] FAT-fs (loop2): Directory bread(block 66) failed
[  457.534780][T16027] bridge0: port 1(veth0_to_bridge) entered blocking state
[  457.549859][T16023] FAT-fs (loop2): Directory bread(block 67) failed
[  457.571128][T16027] bridge0: port 1(veth0_to_bridge) entered disabled state
[  457.590599][T16027] veth0_to_bridge: entered allmulticast mode
[  457.591461][T16023] FAT-fs (loop2): Directory bread(block 68) failed
[  457.614196][T16027] veth0_to_bridge: entered promiscuous mode
[  457.620455][T16023] FAT-fs (loop2): Directory bread(block 69) failed
[  457.641623][T16027] bridge0: port 1(veth0_to_bridge) entered blocking state
[  457.646002][T16023] FAT-fs (loop2): Directory bread(block 70) failed
[  457.649010][T16027] bridge0: port 1(veth0_to_bridge) entered forwarding state
[  457.684454][T16023] FAT-fs (loop2): Directory bread(block 71) failed
[  457.691560][T16023] FAT-fs (loop2): Directory bread(block 72) failed
[  457.710747][T16023] FAT-fs (loop2): Directory bread(block 73) failed
[  457.740698][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4323'.
[  458.151269][T16019] loop4: detected capacity change from 0 to 32768
[  458.206878][T16019] (syz.4.4316,16019,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  458.207709][T16042] netlink: 'syz.3.4328': attribute type 12 has an invalid length.
[  458.234998][T16019] (syz.4.4316,16019,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  458.309110][T16019] JBD2: Ignoring recovery information on journal
[  458.380499][T16019] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  458.420710][T16049] loop2: detected capacity change from 0 to 64
[  458.782520][T16056] loop1: detected capacity change from 0 to 2048
[  458.802871][T13484] ocfs2: Unmounting device (7,4) on (node local)
[  458.874682][T16059] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  458.918120][T16056] NILFS (loop1): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[  458.961878][T16056] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  459.033610][T16056] Remounting filesystem read-only
[  459.058815][T16056] NILFS (loop1): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[  459.108781][T16056] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16)
[  459.144573][T16056] NILFS (loop1): error -5 truncating bmap (ino=16)
[  459.213058][T16051] loop3: detected capacity change from 0 to 32768
[  459.233206][ T5767] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  459.254474][ T5767] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  459.261826][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  459.309137][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  459.313488][T16051] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  459.339444][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  459.350875][ T5767] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  459.799313][T16051] XFS (loop3): Ending clean mount
[  459.828333][T16051] XFS (loop3): Quotacheck needed: Please wait.
[  459.900244][T16093] loop4: detected capacity change from 0 to 512
[  459.912519][T16051] XFS (loop3): Quotacheck: Done.
[  459.973624][T16093] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000]
[  460.013072][T16093] System zones: 0-2, 18-18, 34-34
[  460.088226][T16093] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #3: comm syz.4.4348: corrupted inode contents
[  460.103633][ T5770] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  460.167317][T16093] EXT4-fs error (device loop4): ext4_dirty_inode:6124: inode #3: comm syz.4.4348: mark_inode_dirty error
[  460.200008][T16093] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #3: comm syz.4.4348: corrupted inode contents
[  460.284455][T16093] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.4348: mark_inode_dirty error
[  460.318828][T16093] Quota error (device loop4): write_blk: dquota write failed
[  460.385201][T16093] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  460.427790][T16093] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.4348: Failed to acquire dquot type 0
[  460.568382][T16093] EXT4-fs (loop4): 1 orphan inode deleted
[  460.595152][ T1122] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  460.618323][T16093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.624415][ T1122] EXT4-fs error (device loop4): ext4_release_dquot:6985: comm kworker/u4:9: Failed to release dquot type 1
[  460.707771][T16093] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  460.857245][T13484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  460.954638][T16125] netlink: 'syz.2.4363': attribute type 21 has an invalid length.
[  460.962510][T16125] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4363'.
[  461.024962][T16125] netlink: 'syz.2.4363': attribute type 4 has an invalid length.
[  461.278266][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4369'.
[  461.288970][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4369'.
[  461.304039][T16141] mmap: syz.4.4370 (16141): VmData 47947776 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  461.434678][ T5845] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  461.630317][T16150] loop2: detected capacity change from 0 to 4096
[  461.657810][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.658176][T16150] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  461.693365][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.714231][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  461.744574][ T5845] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  461.764880][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.785158][ T5845] usb 2-1: config 0 descriptor??
[  461.817257][ T5845] hub 2-1:0.0: USB hub found
[  461.872034][T16157] loop4: detected capacity change from 0 to 512
[  461.928065][T16157] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  461.957546][T16157] EXT4-fs (loop4): orphan cleanup on readonly fs
[  461.985339][T16157] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:512: comm syz.4.4378: Block bitmap for bg 0 marked uninitialized
[  462.002196][T16150] ntfs3: loop2: failed to convert "c46c" to cp852
[  462.035211][ T5845] hub 2-1:0.0: 9 ports detected
[  462.042437][T16157] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6653: Corrupt filesystem
[  462.044466][ T5845] hub 2-1:0.0: insufficient power available to use all downstream ports
[  462.069274][T16157] EXT4-fs (loop4): 1 orphan inode deleted
[  462.080262][T16157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  462.144757][T16157] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  462.210226][T16157] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  462.239645][ T5845] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  462.279628][ T5845] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  462.334112][T13484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.345821][ T5845] usb 2-1: USB disconnect, device number 17
[  462.832491][T16184] loop4: detected capacity change from 0 to 64
[  463.370579][   T27] audit: type=1326 audit(2000000088.049:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  463.444449][   T27] audit: type=1326 audit(2000000088.089:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  463.517975][   T27] audit: type=1326 audit(2000000088.089:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  463.593982][T16180] loop2: detected capacity change from 0 to 32768
[  463.600869][   T27] audit: type=1326 audit(2000000088.089:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  463.643653][T16180] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.4388 (16180)
[  463.684848][   T27] audit: type=1326 audit(2000000088.089:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16199 comm="syz.1.4399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55779acb9 code=0x7ffc0000
[  463.712621][T16180] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  463.741541][T16180] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  463.760540][T16180] BTRFS info (device loop2): turning off barriers
[  463.768046][T16180] BTRFS info (device loop2): max_inline at 0
[  463.858236][T16180] BTRFS info (device loop2): enabling all of the rescue options
[  463.866379][T16212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  463.897986][T16180] BTRFS info (device loop2): ignoring data csums
[  463.916459][T16180] BTRFS info (device loop2): ignoring bad roots
[  463.922807][T16180] BTRFS info (device loop2): disabling log replay at mount time
[  463.992348][T16180] BTRFS info (device loop2): force zlib compression, level 3
[  464.005089][T16180] BTRFS info (device loop2): enabling ssd optimizations
[  464.012121][T16180] BTRFS info (device loop2): using spread ssd allocation scheme
[  464.082159][T16180] BTRFS info (device loop2): allowing degraded mounts
[  464.125753][T16180] BTRFS info (device loop2): using free space tree
[  464.132380][T16180] workqueue: max_active 2097161 requested for btrfs-worker is out of range, clamping between 1 and 512
[  464.196701][T16225] xt_ecn: cannot match TCP bits for non-tcp packets
[  464.228479][T16180] workqueue: max_active 2097161 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  464.337119][T16180] workqueue: max_active 2097161 requested for btrfs-endio is out of range, clamping between 1 and 512
[  464.349150][T16180] workqueue: max_active 2097161 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  464.361933][T16180] workqueue: max_active 2097161 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  464.378096][T16180] workqueue: max_active 2097161 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  464.420729][T16180] workqueue: max_active 2097161 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[  464.539475][ T3506] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0
[  464.626996][T16180] BTRFS error (device loop2): failed to load root extent
[  464.648520][   T41] BTRFS warning (device loop2: state C): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1
[  464.705121][T16180] BTRFS info (device loop2: state C): auto enabling async discard
[  464.739704][T16250] loop1: detected capacity change from 0 to 2048
[  464.769154][T16257] comedi comedi0: Minor 4 specified more than once!
[  464.787112][T16255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4419'.
[  464.807334][T16250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  464.983458][ T5775] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  465.106524][T16263] ip6t_REJECT: ECHOREPLY is not supported
[  465.534606][ T7506] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  465.794608][ T7506] usb 2-1: Using ep0 maxpacket: 16
[  465.805328][ T7506] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  465.831517][ T7506] usb 2-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config
[  465.842439][T16285] netlink: 372 bytes leftover after parsing attributes in process `syz.4.4434'.
[  465.877111][ T7506] usb 2-1: config 0 has no interface number 0
[  465.905786][ T7506] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  465.938450][ T7506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.956700][ T7506] usb 2-1: Product: syz
[  465.960943][ T7506] usb 2-1: Manufacturer: syz
[  465.974838][ T7506] usb 2-1: SerialNumber: syz
[  465.990804][ T7506] usb 2-1: config 0 descriptor??
[  466.144520][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4440'.
[  466.168136][T16296] loop2: detected capacity change from 0 to 2048
[  466.191119][T16296] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  466.241876][T16296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  466.261794][ T5754] usb 2-1: USB disconnect, device number 18
[  466.282331][T16303] overlayfs: disabling nfs_export due to verity=require
[  466.303802][T16303] overlayfs: conflicting options: userxattr,verity=require
[  466.305902][T16296] EXT4-fs error (device loop2): empty_inline_dir:1867: inode #12: block 9: comm syz.2.4438: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0
[  466.380046][T16296] EXT4-fs (loop2): Remounting filesystem read-only
[  466.408463][T16296] EXT4-fs warning (device loop2): empty_inline_dir:1874: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60
[  466.525211][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.529728][T16307] loop3: detected capacity change from 0 to 4096
[  466.940921][T16319] loop4: detected capacity change from 0 to 1024
[  466.987002][T16319] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  467.043990][T16325] loop3: detected capacity change from 0 to 512
[  467.129918][T16325] EXT4-fs (loop3): orphan cleanup on readonly fs
[  467.134140][T16319] hfsplus: filesystem is marked journaled, leaving read-only.
[  467.145594][T16325] EXT4-fs error (device loop3): ext4_do_update_inode:5248: inode #15: comm syz.3.4452: corrupted inode contents
[  467.162243][T16323] loop2: detected capacity change from 0 to 4096
[  467.180015][T16325] EXT4-fs (loop3): Remounting filesystem read-only
[  467.187209][T16325] EXT4-fs (loop3): 1 orphan inode deleted
[  467.206340][T16325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  467.219145][T16323] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  467.363459][T16323] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  467.393698][T16323] ntfs3: loop2: Failed to load $Extend (-22).
[  467.424478][T16323] ntfs3: loop2: Failed to initialize $Extend.
[  467.440904][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.826984][T16350] loop3: detected capacity change from 0 to 32768
[  468.924683][T16350] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  468.924683][T16350] 
[  468.974691][T16350] ialloc: diAlloc returned -5!
[  469.172384][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4485'.
[  469.241801][T16390] loop4: detected capacity change from 0 to 4096
[  469.282776][T16390] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  469.355220][T16390] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  469.414994][T16396] netlink: 'syz.3.4487': attribute type 7 has an invalid length.
[  469.434273][T16390] ntfs3: loop4: ino=0, attr_set_size
[  469.461478][T16396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4487'.
[  469.534471][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4487'.
[  469.709825][T16398] netlink: 'syz.4.4488': attribute type 3 has an invalid length.
[  469.864118][T16388] loop1: detected capacity change from 0 to 32768
[  469.896565][T16388] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.4483 (16388)
[  469.950310][T16388] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  469.989893][T16388] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  469.998814][ T7506] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  470.012529][T16388] BTRFS info (device loop1): using free space tree
[  470.124433][T16388] BTRFS info (device loop1): enabling ssd optimizations
[  470.154522][T16388] BTRFS info (device loop1): auto enabling async discard
[  470.184672][ T7506] usb 4-1: Using ep0 maxpacket: 8
[  470.195711][ T7506] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  470.203835][ T7506] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.239336][ T7506] usb 4-1: config 0 has no interface number 0
[  470.263608][ T7506] usb 4-1: config 0 interface 52 has no altsetting 0
[  470.293067][ T7506] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  470.304431][ T7506] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  470.318011][ T7506] usb 4-1: Manufacturer: syz
[  470.328460][ T7506] usb 4-1: config 0 descriptor??
[  470.335936][ T7506] hub 4-1:0.52: bad descriptor, ignoring hub
[  470.343403][ T7506] hub: probe of 4-1:0.52 failed with error -5
[  470.407914][T16424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.464460][ T5767] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  470.774553][T16394] loop2: detected capacity change from 0 to 65536
[  470.932139][  T788] usb 4-1: USB disconnect, device number 11
[  470.976153][T16394] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  471.063283][T16394] XFS (loop2): Ending clean mount
[  471.085079][T16394] XFS (loop2): Quotacheck needed: Please wait.
[  471.246713][T16394] XFS (loop2): Quotacheck: Done.
[  471.473348][ T5775] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  471.903438][   T27] audit: type=1326 audit(2000000096.569:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.4.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  471.991247][   T27] audit: type=1326 audit(2000000096.579:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.4.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  472.063072][   T27] audit: type=1326 audit(2000000096.609:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.4.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  472.104489][T16470] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0)
[  472.161247][   T27] audit: type=1326 audit(2000000096.609:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.4.4510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57a2b9acb9 code=0x7ffc0000
[  472.277282][T16476] netlink: 'syz.2.4505': attribute type 5 has an invalid length.
[  472.463378][   T27] audit: type=1326 audit(2000000097.139:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  472.522840][   T27] audit: type=1326 audit(2000000097.139:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  472.604536][   T27] audit: type=1326 audit(2000000097.169:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  472.628451][T16487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4521'.
[  472.672702][   T27] audit: type=1326 audit(2000000097.169:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16482 comm="syz.2.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634c59acb9 code=0x7ffc0000
[  472.912683][T16472] loop1: detected capacity change from 0 to 32768
[  472.930385][T16472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.4514 (16472)
[  472.991932][T16472] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  473.044561][T16472] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  473.094520][T16472] BTRFS info (device loop1): using free space tree
[  473.326042][T16480] loop3: detected capacity change from 0 to 32768
[  473.359863][T16472] BTRFS info (device loop1): enabling ssd optimizations
[  473.413701][T16472] BTRFS info (device loop1): auto enabling async discard
[  473.496563][T16480] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  473.580838][T16480] (syz.3.4517,16480,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64
[  473.592321][ T5767] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  473.615455][T16480] (syz.3.4517,16480,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2
[  473.638184][T16480] (syz.3.4517,16480,0):ocfs2_mknod:298 ERROR: status = -2
[  473.652872][T16480] (syz.3.4517,16480,0):ocfs2_mknod:502 ERROR: status = -2
[  473.668907][T16480] (syz.3.4517,16480,0):ocfs2_create:676 ERROR: status = -2
[  474.196856][ T5770] ocfs2: Unmounting device (7,3) on (node local)
[  474.515650][T16542] loop2: detected capacity change from 0 to 1024
[  474.652122][ T1078] hfsplus: b-tree write err: -5, ino 4
[  474.759308][T16551] loop1: detected capacity change from 0 to 164
[  475.557387][T16581] loop4: detected capacity change from 0 to 1024
[  475.798313][T16590] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4561'.
[  476.019096][T16598] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 60703 - 0
[  476.035657][T16598] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 60703 - 0
[  476.044990][T16598] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 60703 - 0
[  476.054108][T16598] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 60703 - 0
[  476.087225][T16598] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 45645 - 0
[  476.115132][T16598] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 45645 - 0
[  476.125063][T16598] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 45645 - 0
[  476.136569][T16598] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 45645 - 0
[  476.145940][T16598] geneve2: entered promiscuous mode
[  476.151299][T16598] geneve2: entered allmulticast mode
[  476.764475][ T5845] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  476.964692][ T5845] usb 3-1: Using ep0 maxpacket: 8
[  477.005879][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  477.035150][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  477.053656][ T5845] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  477.063832][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  477.083900][ T5845] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  477.103981][ T5845] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  477.132439][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.165030][ T5845] usb 3-1: config 0 descriptor??
[  477.171153][T16617] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  477.184665][T16647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4590'.
[  477.226785][T16647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4590'.
[  477.723259][ T5769] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  477.732672][ T5845] usb 3-1: USB disconnect, device number 22
[  477.932710][T16673] No such timeout policy "syz0"
[  478.076355][T16678] loop3: detected capacity change from 0 to 2048
[  478.114164][T16678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  478.143519][T16682] loop1: detected capacity change from 0 to 512
[  478.167187][T16682] EXT4-fs: Ignoring removed nomblk_io_submit option
[  478.242140][T16682] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  478.308248][T16682] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  478.329138][T16682] EXT4-fs (loop1): orphan cleanup on readonly fs
[  478.350677][T16682] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  478.362941][T16682] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  478.435077][T16682] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  478.444142][T16689] erspan0: entered promiscuous mode
[  478.457973][T16682] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4607: bg 0: block 40: padding at end of block bitmap is not set
[  478.460183][T16689] erspan0: entered allmulticast mode
[  478.474854][T16682] EXT4-fs (loop1): Remounting filesystem read-only
[  478.485741][T16682] EXT4-fs (loop1): 1 truncate cleaned up
[  478.504680][T16682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  478.616122][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.980137][T16707] nfs: Unexpected value for 'lock'
[  479.384648][  T788] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  479.600774][  T788] usb 3-1: Using ep0 maxpacket: 32
[  479.619995][  T788] usb 3-1: unable to get BOS descriptor or descriptor too short
[  479.642218][  T788] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  479.666833][  T788] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  479.694604][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.730530][  T788] usb 3-1: Product: syz
[  479.753235][  T788] usb 3-1: Manufacturer: syz
[  479.766281][  T788] usb 3-1: SerialNumber: syz
[  479.847464][T16745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4637'.
[  479.857879][T16745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4637'.
[  479.868333][T16745] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4637'.
[  479.924563][ T5754] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  480.012562][  T788] usb 3-1: Not enough endpoints found in device, aborting!
[  480.134581][ T5754] usb 2-1: Using ep0 maxpacket: 8
[  480.170030][ T5754] usb 2-1: unable to get BOS descriptor or descriptor too short
[  480.181113][ T5754] usb 2-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 255
[  480.204679][ T5754] usb 2-1: config 8 interface 0 has no altsetting 0
[  480.217655][ T5754] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  480.241458][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.254008][ T5845] usb 3-1: USB disconnect, device number 23
[  480.261771][ T5754] usb 2-1: Product: syz
[  480.279861][ T5754] usb 2-1: Manufacturer: syz
[  480.297500][ T5754] usb 2-1: SerialNumber: syz
[  480.322661][T16739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  480.568524][ T5754] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  480.606070][ T5754] usb 2-1: selecting invalid altsetting 0
[  480.696207][ T5754] usb 2-1: USB disconnect, device number 19
[  480.758915][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  480.939816][T16764] loop3: detected capacity change from 0 to 32768
[  480.940324][T16775] loop2: detected capacity change from 0 to 8
[  480.972069][T16764] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.4647 (16764)
[  481.045900][T16764] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  481.051666][T16775] SQUASHFS error: xz decompression failed, data probably corrupt
[  481.070673][T16775] SQUASHFS error: Failed to read block 0xa8: -5
[  481.078816][T16764] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  481.097815][T16764] BTRFS info (device loop3): force zlib compression, level 3
[  481.107146][T16764] BTRFS info (device loop3): force clearing of disk cache
[  481.115001][T16775] SQUASHFS error: xz decompression failed, data probably corrupt
[  481.115509][T16764] BTRFS info (device loop3): setting nodatasum
[  481.129643][T16764] BTRFS info (device loop3): allowing degraded mounts
[  481.146013][T16775] SQUASHFS error: Failed to read block 0xa8: -5
[  481.180941][T16764] BTRFS info (device loop3): enabling disk space caching
[  481.185307][   T27] audit: type=1800 audit(2000000105.839:231): pid=16775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4651" name="file0" dev="loop2" ino=3 res=0 errno=0
[  481.204710][T16764] BTRFS info (device loop3): disk space caching is enabled
[  481.278868][T16781] netlink: 'syz.1.4654': attribute type 20 has an invalid length.
[  481.294581][T16780] x_tables: duplicate underflow at hook 2
[  481.392664][T16764] BTRFS info (device loop3): auto enabling async discard
[  481.437245][T16764] BTRFS info (device loop3): rebuilding free space tree
[  481.484156][T16764] BTRFS info (device loop3): disabling free space tree
[  481.491470][T16764] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  481.522550][T16764] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  481.764788][ T5770] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  482.003561][ T5894] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop3 scanned by udevd (5894)
[  482.174165][T16828] loop2: detected capacity change from 0 to 512
[  482.185772][T16825] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  482.217222][T16825] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  482.276141][T16828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  482.324465][T16828] ext4 filesystem being mounted at /1143/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  482.516106][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.689762][T16845] netlink: 'syz.1.4676': attribute type 21 has an invalid length.
[  482.714585][T16845] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4676'.
[  482.723761][T16845] netlink: 'syz.1.4676': attribute type 5 has an invalid length.
[  482.784781][T16845] netlink: 'syz.1.4676': attribute type 6 has an invalid length.
[  482.805478][T16845] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4676'.
[  483.304500][ T7506] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  483.390699][T16849] loop3: detected capacity change from 0 to 32768
[  483.399873][T16849] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4677 (16849)
[  483.430048][T16849] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  483.465572][T16849] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  483.495644][ T7506] usb 2-1: too many configurations: 37, using maximum allowed: 8
[  483.505650][T16849] BTRFS info (device loop3): using free space tree
[  483.575879][ T7506] usb 2-1: string descriptor 0 read error: -71
[  483.583545][ T7506] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  483.592981][ T7506] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.635342][T16849] BTRFS info (device loop3): enabling ssd optimizations
[  483.654721][ T7506] usb 2-1: can't set config #1, error -71
[  483.660645][T16849] BTRFS info (device loop3): auto enabling async discard
[  483.675227][ T7506] usb 2-1: USB disconnect, device number 20
[  483.841201][ T5770] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  484.135231][T16894] overlay: Unknown parameter '\'
[  484.978069][T16896] loop2: detected capacity change from 0 to 32768
[  485.022054][T16896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4692 (16896)
[  485.046468][T16896] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  485.068701][T16896] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  485.104010][T16896] BTRFS info (device loop2): using free space tree
[  485.172864][T16905] loop3: detected capacity change from 0 to 32768
[  485.181764][T16905] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.4695 (16905)
[  485.210622][T16905] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  485.222618][T16905] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  485.255759][T16905] BTRFS info (device loop3): using free space tree
[  485.333740][T16896] BTRFS info (device loop2): enabling ssd optimizations
[  485.381899][T16896] BTRFS info (device loop2): auto enabling async discard
[  485.544526][T16905] BTRFS info (device loop3): enabling ssd optimizations
[  485.569916][T16905] BTRFS info (device loop3): auto enabling async discard
[  485.600613][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  485.824836][T16966] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4710'.
[  485.995567][ T5770] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  486.249470][T16974] loop4: detected capacity change from 0 to 256
[  486.316439][T16974] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x68d18d75, utbl_chksum : 0xe619d30d)
[  486.367216][T16978] netlink: 'syz.2.4715': attribute type 30 has an invalid length.
[  486.475243][T16974] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000008) bogus content (0x00080000)
[  486.564590][T16974] exFAT-fs (loop4): Filesystem has been set read-only
[  487.100762][T16999] loop1: detected capacity change from 0 to 512
[  487.157700][T16999] EXT4-fs: Ignoring removed nomblk_io_submit option
[  487.190656][T16999] EXT4-fs: Ignoring removed bh option
[  487.289324][T16999] EXT4-fs error (device loop1): mb_free_blocks:1954: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  487.362045][T16999] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #11: comm syz.1.4725: corrupted inode contents
[  487.384748][T17007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'.
[  487.425196][T16999] EXT4-fs error (device loop1): ext4_dirty_inode:6124: inode #11: comm syz.1.4725: mark_inode_dirty error
[  487.425876][T16994] loop4: detected capacity change from 0 to 32768
[  487.453260][T16994] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.4720 (16994)
[  487.510365][T16999] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.4725: invalid indirect mapped block 1 (level 1)
[  487.528786][T16994] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  487.564603][T16994] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  487.573306][T16994] BTRFS info (device loop4): using free space tree
[  487.603630][T16999] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #11: comm syz.1.4725: corrupted inode contents
[  487.630232][T16999] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  487.668709][T16999] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #11: comm syz.1.4725: corrupted inode contents
[  487.725325][T16999] EXT4-fs error (device loop1): ext4_truncate:4294: inode #11: comm syz.1.4725: mark_inode_dirty error
[  487.817679][T16999] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  487.865862][T16994] BTRFS info (device loop4): enabling ssd optimizations
[  487.872913][T16994] BTRFS info (device loop4): auto enabling async discard
[  487.904774][T16999] EXT4-fs (loop1): 1 truncate cleaned up
[  487.911642][T16999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.089729][T16999] EXT4-fs error (device loop1): ext4_find_dest_de:2115: inode #2: block 13: comm syz.1.4725: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  488.146820][T17039] xt_CT: You must specify a L4 protocol and not use inversions on it
[  488.228202][T13484] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  488.276274][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.707826][T17054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4741'.
[  488.943800][T17059] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4745'.
[  488.974490][T17059] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4745'.
[  489.444622][T17080] loop2: detected capacity change from 0 to 256
[  489.904554][T17097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4763'.
[  490.277851][T17113] loop1: detected capacity change from 0 to 128
[  490.437942][T17111] loop2: detected capacity change from 0 to 4096
[  490.461810][T17111] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  490.606320][T17111] ntfs3: loop2: failed to convert "076c" to cp949
[  490.970854][T17131] netlink: 'syz.1.4779': attribute type 21 has an invalid length.
[  491.007805][T17131] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4779'.
[  491.037078][T17131] netlink: 'syz.1.4779': attribute type 5 has an invalid length.
[  491.069030][T17131] netlink: 'syz.1.4779': attribute type 6 has an invalid length.
[  491.092167][T17131] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4779'.
[  491.257865][T17139] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  491.672233][T17158] binder: 17157:17158 ioctl c018620c 200000000380 returned -22
[  491.817741][    C1] sd 0:0:1:0: [sda] tag#7427 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  491.828241][    C1] sd 0:0:1:0: [sda] tag#7427 CDB: Read(6) 08 00 9f d1 fe de
[  492.251862][T17181] netlink: 'syz.1.4803': attribute type 1 has an invalid length.
[  492.260455][T17181] netlink: 'syz.1.4803': attribute type 2 has an invalid length.
[  492.280172][T17181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4803'.
[  492.476059][T17192] loop2: detected capacity change from 0 to 128
[  492.545579][T17192] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  492.569034][T17192] ext4 filesystem being mounted at /1178/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  492.585977][T17192] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 9 (only 1 groups)
[  492.653676][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  493.204472][ T5845] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  493.289697][T17229] loop3: detected capacity change from 0 to 164
[  493.316601][T17229] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  493.372702][T17229] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  493.390719][T17229] Symlink component flag not implemented
[  493.397231][ T5845] usb 5-1: Using ep0 maxpacket: 16
[  493.408640][T17229] Symlink component flag not implemented
[  493.415758][ T5845] usb 5-1: config index 0 descriptor too short (expected 65, got 36)
[  493.433670][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.458715][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.488517][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  493.502763][ T5845] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  493.535004][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.568465][ T5845] usb 5-1: config 0 descriptor??
[  493.590043][ T5845] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20
[  493.633577][ T5124] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  493.741387][ T5758] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  493.770527][ T5124] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  493.820809][ T5124] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  493.847522][T17240] comedi comedi1: adq12b: I/O port conflict (0x6,16)
[  493.856784][T17211] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  493.884873][ T5124] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  493.899930][ T5845] usb 5-1: USB disconnect, device number 6
[  494.028863][   T27] audit: type=1326 audit(2000000118.709:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17246 comm=162E44A480DB682108B49543019E91 exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff55779acb9 code=0x0
[  494.146861][T17251] loop2: detected capacity change from 0 to 2048
[  494.198296][T17251]  loop2: p1 < > p3 p4 < >
[  494.210351][T17251] loop2: p3 start 4284289 is beyond EOD, truncated
[  494.247089][ T5139]  loop2: p1 < > p3 p4 < >
[  494.265630][ T5139] loop2: p3 start 4284289 is beyond EOD, truncated
[  494.321154][T17251] MINIX-fs: unable to read superblock
[  494.522395][ T5894] udevd[5894]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  494.565104][ T5758] udevd[5758]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  494.630235][T17264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4844'.
[  494.655073][T17264] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4844'.
[  494.694965][T17264] netlink: 'syz.3.4844': attribute type 3 has an invalid length.
[  494.711727][T17264] netlink: 'syz.3.4844': attribute type 2 has an invalid length.
[  494.720398][T17264] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4844'.
[  495.096235][T17280] delete_channel: no stack
[  495.274665][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4856'.
[  495.283947][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4856'.
[  495.514998][T17303] set match dimension is over the limit!
[  495.617344][T17307] netlink: 'syz.3.4865': attribute type 1 has an invalid length.
[  496.220954][T17332] loop1: detected capacity change from 0 to 512
[  496.238026][T17332] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  496.312234][T17332] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  496.338608][T17332] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.4878: bg 0: block 248: padding at end of block bitmap is not set
[  496.390674][T17332] Quota error (device loop1): write_blk: dquota write failed
[  496.420096][T17332] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  496.430375][T17332] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.4878: Failed to acquire dquot type 1
[  496.464880][T17332] EXT4-fs (loop1): 1 truncate cleaned up
[  496.472555][T17332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  496.587740][T17332] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  496.634942][T17332] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  496.684684][T17332] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.4878: Failed to acquire dquot type 1
[  496.867293][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  496.899087][ T1111] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  496.934718][ T1111] EXT4-fs error (device loop1): ext4_release_dquot:6985: comm kworker/u4:8: Failed to release dquot type 1
[  497.172193][T17368] loop1: detected capacity change from 0 to 128
[  497.283113][T17368] FAT-fs (loop1): Directory bread(block 32) failed
[  497.324415][T17368] FAT-fs (loop1): Directory bread(block 33) failed
[  497.334518][T17368] FAT-fs (loop1): Directory bread(block 34) failed
[  497.341226][T17368] FAT-fs (loop1): Directory bread(block 35) failed
[  497.375769][T17368] FAT-fs (loop1): Directory bread(block 36) failed
[  497.394694][T17368] FAT-fs (loop1): Directory bread(block 37) failed
[  497.401377][T17368] FAT-fs (loop1): Directory bread(block 38) failed
[  497.424561][T17368] FAT-fs (loop1): Directory bread(block 39) failed
[  497.431258][T17368] FAT-fs (loop1): Directory bread(block 40) failed
[  497.475160][T17368] FAT-fs (loop1): Directory bread(block 41) failed
[  497.653457][T17368] syz.1.4890: attempt to access beyond end of device
[  497.653457][T17368] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128
[  497.662671][T17358] loop4: detected capacity change from 0 to 32768
[  497.687764][T17368] FAT-fs (loop1): Filesystem has been set read-only
[  497.697635][T17378] loop3: detected capacity change from 0 to 4096
[  497.698941][T17368] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  497.722069][T17358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4897 (17358)
[  497.802157][T17381] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  497.861331][T17358] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  497.899650][T17358] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  497.913464][T17358] BTRFS info (device loop4): using free space tree
[  498.078363][T17358] BTRFS info (device loop4): enabling ssd optimizations
[  498.116485][T17358] BTRFS info (device loop4): auto enabling async discard
[  498.457934][T13484] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  498.694779][ T7506] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  498.709394][ T5769] Bluetooth: hci4: command 0x0401 tx timeout
[  498.904367][ T7506] usb 4-1: Using ep0 maxpacket: 16
[  498.946960][ T7506] usb 4-1: config 0 has an invalid interface number: 237 but max is 0
[  498.975435][ T7506] usb 4-1: config 0 has no interface number 0
[  498.981681][ T7506] usb 4-1: config 0 interface 237 has no altsetting 0
[  499.055657][ T7506] usb 4-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad
[  499.078094][ T7506] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.102160][ T7506] usb 4-1: Product: syz
[  499.115201][ T7506] usb 4-1: Manufacturer: syz
[  499.120345][ T7506] usb 4-1: SerialNumber: syz
[  499.175563][ T7506] usb 4-1: config 0 descriptor??
[  499.192302][ T7506] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 found
[  499.268453][T17435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4918'.
[  499.341374][T17438] loop1: detected capacity change from 0 to 1024
[  499.354186][T17439] loop4: detected capacity change from 0 to 256
[  499.408356][ T7506] snd_usb_podhd 4-1:0.237: cannot get proper max packet size
[  499.444394][ T7506] snd_usb_podhd 4-1:0.237: Line 6 POD HD300 now disconnected
[  499.484944][ T7506] snd_usb_podhd: probe of 4-1:0.237 failed with error -22
[  499.513760][ T3506] hfsplus: b-tree write err: -5, ino 4
[  499.639132][T17439] FAT-fs (loop4): Directory bread(block 64) failed
[  499.662547][T17439] FAT-fs (loop4): Directory bread(block 65) failed
[  499.681077][T17444] No such timeout policy "syz1"
[  499.683806][   T23] usb 4-1: USB disconnect, device number 12
[  499.690213][T17439] FAT-fs (loop4): Directory bread(block 66) failed
[  499.734572][T17439] FAT-fs (loop4): Directory bread(block 67) failed
[  499.742070][T17439] FAT-fs (loop4): Directory bread(block 68) failed
[  499.755356][T17439] FAT-fs (loop4): Directory bread(block 69) failed
[  499.762028][T17439] FAT-fs (loop4): Directory bread(block 70) failed
[  499.779459][T17439] FAT-fs (loop4): Directory bread(block 71) failed
[  499.813840][T17439] FAT-fs (loop4): Directory bread(block 72) failed
[  499.821162][T17439] FAT-fs (loop4): Directory bread(block 73) failed
[  499.873921][T17447] loop2: detected capacity change from 0 to 4096
[  499.911168][T17447] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  500.484037][T17465] loop4: detected capacity change from 0 to 64
[  500.726494][T17473] loop1: detected capacity change from 0 to 128
[  501.149054][T17464] loop2: detected capacity change from 0 to 32768
[  501.177122][T17464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4933 (17464)
[  501.250636][T17464] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  501.292951][T17464] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  501.313170][T17464] BTRFS info (device loop2): using free space tree
[  501.389929][T17500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4944'.
[  501.410149][T17500] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4944'.
[  501.418242][T17464] BTRFS info (device loop2): enabling ssd optimizations
[  501.429049][T17489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4943'.
[  501.464944][T17464] BTRFS info (device loop2): auto enabling async discard
[  501.685820][T17475] loop3: detected capacity change from 0 to 32768
[  501.718902][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  501.725391][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  501.745358][T17475] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.4938 (17475)
[  501.847105][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  501.941521][ T5758] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (5758)
[  502.855455][T17536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4959'.
[  502.894958][T17531] loop4: detected capacity change from 0 to 4096
[  502.902488][T17531] EXT4-fs: Ignoring removed nomblk_io_submit option
[  502.966202][T17531] EXT4-fs (loop4): Test dummy encryption mode enabled
[  502.998402][T17531] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  503.024596][T17531] System zones: 0-5
[  503.055845][T17531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.247164][T13484] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.718973][T17567] loop1: detected capacity change from 0 to 256
[  503.935541][T17575] nfs: Unexpected value for 'lock'
[  504.030520][T17580] x_tables: unsorted underflow at hook 4
[  504.735004][T17609] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  504.765530][T17611] erspan0: entered promiscuous mode
[  504.768703][T17609] overlayfs: missing 'lowerdir'
[  504.770781][T17611] erspan0: entered allmulticast mode
[  505.016356][T17623] loop1: detected capacity change from 0 to 164
[  505.046636][T17623] rock: directory entry would overflow storage
[  505.060818][T17623] rock: sig=0x66, size=4, remaining=3
[  505.131493][T17623] rock: directory entry would overflow storage
[  505.163103][T17623] rock: sig=0x66, size=4, remaining=3
[  507.225654][T17677] loop3: detected capacity change from 0 to 32768
[  507.227158][T17707] netlink: 'syz.2.5040': attribute type 20 has an invalid length.
[  507.305413][T17677] JBD2: Ignoring recovery information on journal
[  507.403575][   T23] IPVS: starting estimator thread 0...
[  507.474715][   T28] INFO: task syz-executor:5764 blocked for more than 143 seconds.
[  507.482852][   T28]       Not tainted syzkaller #0
[  507.488295][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  507.497337][T17715] IPVS: using max 22 ests per chain, 52800 per kthread
[  507.505497][T17677] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  507.521210][   T28] task:syz-executor    state:D stack:21672 pid:5764  ppid:1      flags:0x00004004
[  507.551243][   T28] Call Trace:
[  507.559407][   T28]  <TASK>
[  507.567077][   T28]  __schedule+0x1553/0x45a0
[  507.577357][   T28]  ? asan.module_dtor+0x20/0x20
[  507.588027][   T28]  ? mark_lock+0x94/0x320
[  507.598120][   T28]  ? lock_chain_count+0x20/0x20
[  507.603756][T17689] loop1: detected capacity change from 0 to 32768
[  507.607022][   T28]  ? _raw_spin_lock_irq+0xbb/0xf0
[  507.616231][   T28]  ? _raw_spin_lock_irqsave+0x100/0x100
[  507.622235][   T28]  schedule+0xbd/0x170
[  507.650916][   T27] audit: type=1800 audit(2000000132.319:233): pid=17677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5026" name="file0" dev="loop3" ino=17058 res=0 errno=0
[  507.655808][   T28]  io_schedule+0x80/0xd0
[  507.671716][    C0] vkms_vblank_simulate: vblank timer overrun
[  507.682440][   T28]  folio_wait_bit_common+0x714/0xfa0
[  507.702127][   T28]  ? folio_wait_bit+0x30/0x30
[  507.707213][   T28]  ? filemap_get_entry+0x379/0x3f0
[  507.712457][   T28]  ? _compound_head+0x120/0x120
[  507.722612][T17689] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  507.764543][   T28]  ? find_lock_entries+0xc3e/0xfe0
[  507.769751][   T28]  __filemap_get_folio+0xbc/0xbb0
[  507.820174][   T28]  truncate_inode_pages_range+0x46b/0xfb0
[  507.871805][   T28]  ? mapping_evict_folio+0x510/0x510
[  507.884816][   T28]  ? _raw_spin_lock_irq+0xbb/0xf0
[  507.889907][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  507.934899][T17689] XFS (loop1): Ending clean mount
[  507.943696][T17689] XFS (loop1): Quotacheck needed: Please wait.
[  507.950690][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  507.972504][   T28]  evict+0x4dd/0x8d0
[  507.985131][   T28]  ? proc_nr_inodes+0x230/0x230
[  508.003054][   T28]  ? do_raw_spin_unlock+0x121/0x230
[  508.014451][   T28]  ? do_raw_spin_unlock+0x121/0x230
[  508.019786][   T28]  evict_inodes+0x606/0x6a0
[  508.035311][T17689] XFS (loop1): Quotacheck: Done.
[  508.048296][   T28]  ? clear_inode+0x150/0x150
[  508.052964][   T28]  generic_shutdown_super+0x97/0x2b0
[  508.073043][   T28]  kill_block_super+0x44/0x90
[  508.083437][   T28]  deactivate_locked_super+0x97/0x100
[  508.089076][   T28]  cleanup_mnt+0x43b/0x4d0
[  508.093544][   T28]  task_work_run+0x1d4/0x260
[  508.105946][   T28]  ? task_work_cancel+0x220/0x220
[  508.111042][   T28]  ? exit_to_user_mode_loop+0x3b/0x110
[  508.132609][   T28]  exit_to_user_mode_loop+0xe6/0x110
[  508.139374][   T28]  exit_to_user_mode_prepare+0xee/0x180
[  508.145378][   T28]  syscall_exit_to_user_mode+0x1a/0x50
[  508.150903][   T28]  do_syscall_64+0x61/0xa0
[  508.155562][   T28]  ? clear_bhb_loop+0x40/0x90
[  508.160347][   T28]  ? clear_bhb_loop+0x40/0x90
[  508.165159][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  508.171074][   T28] RIP: 0033:0x7fd54e59bf17
[  508.175622][   T28] RSP: 002b:00007ffd59de84a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  508.184069][   T28] RAX: 0000000000000000 RBX: 00007fd54e60471f RCX: 00007fd54e59bf17
[  508.192131][   T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd59de8560
[  508.200475][   T28] RBP: 00007ffd59de8560 R08: 00007ffd59de9560 R09: 00000000ffffffff
[  508.208632][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd59de95f0
[  508.216810][   T28] R13: 00007fd54e60471f R14: 00000000000576d5 R15: 00007ffd59de9630
[  508.224880][   T28]  </TASK>
[  508.227998][   T28] 
[  508.227998][   T28] Showing all locks held in the system:
[  508.236916][   T28] 1 lock held by khungtaskd/28:
[  508.239139][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  508.242432][   T28]  #0: ffffffff8d12ffe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  508.260748][   T28] 5 locks held by kworker/u4:5/1078:
[  508.298723][   T28]  #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  508.308791][   T28]  #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0
[  508.317900][   T28]  #2: ffffffff8d12ffe0 (rcu_read_lock){....}-{1:2}, at: batadv_nc_worker+0xd2/0x610
[  508.327521][   T28]  #3: ffffffff97515b90 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6c/0x4f0
[  508.338207][   T28]  #4: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: enqueue_task+0x26d/0x2b0
[  508.351769][   T28] 2 locks held by getty/5525:
[  508.357230][   T28]  #0: ffff88802d7a60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  508.373216][   T28]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  508.390761][   T28] 1 lock held by syz-executor/5764:
[  508.396332][   T28]  #0: ffff88801c3160e0 (&type->s_umount_key#83){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0
[  508.410724][   T28] 1 lock held by syz-executor/5767:
[  508.416284][   T28] 2 locks held by syz-executor/5770:
[  508.421750][   T28]  #0: ffff88807d1440e0 (&type->s_umount_key#79){++++}-{3:3}, at: deactivate_super+0xa4/0xe0
[  508.432392][   T28]  #1: ffffffff8d1359b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880
[  508.460516][   T28] 2 locks held by kworker/0:5/7506:
[  508.467157][   T28]  #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  508.494590][   T28]  #1: ffffc9000ca9fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  508.524443][   T28] 
[  508.526821][   T28] =============================================
[  508.526821][   T28] 
[  508.538281][ T5770] ocfs2: Unmounting device (7,3) on (node local)
[  508.546409][   T28] NMI backtrace for cpu 0
[  508.550770][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  508.557996][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  508.568065][   T28] Call Trace:
[  508.571357][   T28]  <TASK>
[  508.574296][   T28]  dump_stack_lvl+0x18c/0x250
[  508.579002][   T28]  ? show_regs_print_info+0x20/0x20
[  508.584210][   T28]  ? load_image+0x400/0x400
[  508.588720][   T28]  nmi_cpu_backtrace+0x3a6/0x3e0
[  508.593669][   T28]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  508.599815][   T28]  ? _printk+0xde/0x130
[  508.603971][   T28]  ? load_image+0x400/0x400
[  508.608473][   T28]  ? load_image+0x400/0x400
[  508.612978][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  508.619141][   T28]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  508.625140][   T28]  watchdog+0xf3d/0xf80
[  508.629299][   T28]  ? watchdog+0x1e1/0xf80
[  508.633625][   T28]  kthread+0x2fa/0x390
[  508.637687][   T28]  ? hungtask_pm_notify+0x90/0x90
[  508.642711][   T28]  ? kthread_blkcg+0xd0/0xd0
[  508.647301][   T28]  ret_from_fork+0x48/0x80
[  508.651724][   T28]  ? kthread_blkcg+0xd0/0xd0
[  508.656313][   T28]  ret_from_fork_asm+0x11/0x20
[  508.661083][   T28]  </TASK>
[  508.664143][    C0] vkms_vblank_simulate: vblank timer overrun
[  508.671115][   T28] Sending NMI from CPU 0 to CPUs 1:
[  508.677039][    C1] NMI backtrace for cpu 1
[  508.677050][    C1] CPU: 1 PID: 5754 Comm: kworker/1:3 Not tainted syzkaller #0
[  508.677066][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  508.677076][    C1] Workqueue: rcu_gp process_srcu
[  508.677100][    C1] RIP: 0010:delay_tsc+0x71/0xc0
[  508.677119][    C1] Code: 00 00 e8 62 d8 e6 f6 65 8b 05 53 2e 8e 75 85 c0 74 1c f3 90 bf 01 00 00 00 e8 ab d6 e6 f6 e8 f6 e7 0c 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bd e8 b6 15 8b f6 eb dd 4c 29 fb e8 dc e7 0c 00 89 c5 0f
[  508.677132][    C1] RSP: 0018:ffffc9000457fa00 EFLAGS: 00000246
[  508.677145][    C1] RAX: 000000008fd584ac RBX: 0000000000002af9 RCX: 0000000000000001
[  508.677156][    C1] RDX: 0000000000000106 RSI: ffffffff8b1c7480 RDI: ffffffff8b1c7440
[  508.677168][    C1] RBP: 0000000000000001 R08: ffff8880b8f43bc7 R09: 1ffff110171e8778
[  508.677179][    C1] R10: dffffc0000000000 R11: ffffed10171e8779 R12: 0000000000000002
[  508.677190][    C1] R13: ffff8880b8f43bc0 R14: 000001068fd562ce R15: 0000000000002156
[  508.677202][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  508.677215][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  508.677226][    C1] CR2: 00007ff5579e1198 CR3: 000000007cd37000 CR4: 00000000003506e0
[  508.677240][    C1] Call Trace:
[  508.677246][    C1]  <TASK>
[  508.677254][    C1]  try_check_zero+0x39a/0x3e0
[  508.677278][    C1]  process_srcu+0x243/0x1330
[  508.677304][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  508.677323][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  508.677343][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  508.677361][    C1]  process_scheduled_works+0xa5d/0x15d0
[  508.677393][    C1]  ? assign_work+0x430/0x430
[  508.677413][    C1]  ? assign_work+0x3d0/0x430
[  508.677433][    C1]  worker_thread+0xa55/0xfc0
[  508.677451][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  508.677469][    C1]  ? _raw_spin_unlock+0x40/0x40
[  508.677486][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  508.677513][    C1]  kthread+0x2fa/0x390
[  508.677526][    C1]  ? pr_cont_work+0x560/0x560
[  508.677544][    C1]  ? kthread_blkcg+0xd0/0xd0
[  508.677558][    C1]  ret_from_fork+0x48/0x80
[  508.677575][    C1]  ? kthread_blkcg+0xd0/0xd0
[  508.677589][    C1]  ret_from_fork_asm+0x11/0x20
[  508.677617][    C1]  </TASK>
[  508.698374][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  508.698388][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  508.698405][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  508.698415][   T28] Call Trace:
[  508.698421][   T28]  <TASK>
[  508.698428][   T28]  dump_stack_lvl+0x18c/0x250
[  508.698453][   T28]  ? show_regs_print_info+0x20/0x20
[  508.698470][   T28]  ? load_image+0x400/0x400
[  508.698502][   T28]  panic+0x2dc/0x730
[  508.698520][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  508.698540][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  508.698558][   T28]  ? __irq_work_queue_local+0x13a/0x3b0
[  508.698580][   T28]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  508.698603][   T28]  watchdog+0xf7c/0xf80
[  508.698624][   T28]  ? watchdog+0x1e1/0xf80
[  508.698648][   T28]  kthread+0x2fa/0x390
[  508.698663][   T28]  ? hungtask_pm_notify+0x90/0x90
[  508.698682][   T28]  ? kthread_blkcg+0xd0/0xd0
[  508.698706][   T28]  ret_from_fork+0x48/0x80
[  508.698724][   T28]  ? kthread_blkcg+0xd0/0xd0
[  508.698739][   T28]  ret_from_fork_asm+0x11/0x20
[  508.698770][   T28]  </TASK>
[  508.706207][    C0] vkms_vblank_simulate: vblank timer overrun
[  508.706592][   T28] Kernel Offset: disabled
[  509.021891][   T28] Rebooting in 86400 seconds..