last executing test programs:

7m34.096428157s ago: executing program 32 (id=4513):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x55, 0xa, 0x3, "3205c546e8b41e04f4bf40070700", 0x38303553})

6m52.486000266s ago: executing program 6 (id=4993):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r0, 0x0, 0xe)

6m52.179499467s ago: executing program 6 (id=4996):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff})

6m52.095776258s ago: executing program 6 (id=4997):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x0, 0xe0})

6m51.936825632s ago: executing program 6 (id=4999):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

6m51.339943535s ago: executing program 6 (id=5002):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="c5dd22ba", 0x4}, {0x0}], 0x2, 0xf, 0x2a3)

6m49.810533803s ago: executing program 6 (id=5016):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f00000000c0)=@generic={0x0, "5b4e0d669db1f1bb3f09c830691f2c911008f158999a16d148c0075e892c6a5bd045578834669edd9f16b4e942d4bc38e31948a79682d64d46d160db85b8fe52590435417abb3786fa91ca0d28f12f31142e40cdf07b801d7fd23c3c80a62ceb14b4bea5fd9b258c9b04ceede8b8154362b726a21ee8080d5c3900ab8448"}, 0x80, 0x0, 0x0, &(0x7f0000001980)=[{0x10, 0x0, 0x2}], 0x10}}], 0x1, 0x1c)

6m49.190179803s ago: executing program 33 (id=5016):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f00000000c0)=@generic={0x0, "5b4e0d669db1f1bb3f09c830691f2c911008f158999a16d148c0075e892c6a5bd045578834669edd9f16b4e942d4bc38e31948a79682d64d46d160db85b8fe52590435417abb3786fa91ca0d28f12f31142e40cdf07b801d7fd23c3c80a62ceb14b4bea5fd9b258c9b04ceede8b8154362b726a21ee8080d5c3900ab8448"}, 0x80, 0x0, 0x0, &(0x7f0000001980)=[{0x10, 0x0, 0x2}], 0x10}}], 0x1, 0x1c)

5m40.36950332s ago: executing program 3 (id=5864):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

5m40.152382577s ago: executing program 3 (id=5866):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0)

5m40.041433331s ago: executing program 3 (id=5867):
syz_open_dev$usbmon(&(0x7f00000005c0), 0x166, 0x0)
syz_open_dev$usbmon(&(0x7f00000000c0), 0x8000, 0x44000)

5m39.774796669s ago: executing program 3 (id=5872):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f000001fc40)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c756e695f786c6174653d312c696f636861727365743d63703835372c696f636861727365743d6d61636761656c69632c757466383d312c757466383d302c001238b07c058b8e0df5cedc75eeed5f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c757466383d3047756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c757466383d302c636865636b3d7374726963742c6e"], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=")
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)

5m39.348045562s ago: executing program 3 (id=5876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0)

5m38.865926109s ago: executing program 3 (id=5880):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x19, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, r0, 0x2, 0x1}, 0x50)

5m38.381910725s ago: executing program 34 (id=5880):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x19, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, r0, 0x2, 0x1}, 0x50)

4m4.648120826s ago: executing program 5 (id=7109):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)

4m4.42136793s ago: executing program 5 (id=7112):
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0)
mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa)

4m4.255411024s ago: executing program 5 (id=7115):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)

4m3.752287692s ago: executing program 5 (id=7120):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000040)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@gid_ignore}, {@undelete}, {@volume={'volume', 0x3d, 0x7}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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")
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

4m3.251039814s ago: executing program 5 (id=7128):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4606, &(0x7f0000000080)={0x2})

4m2.430728437s ago: executing program 5 (id=7140):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0xb}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x349218d8, {}, {0x2}, @connect={{0x2, 0x83}, {0x3, 0xfc}}}, {0x0, 0x9, 0x0, 0x0, @time={0x800002, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x3}, {}, {0x0, 0xfc}, @result={0x2, 0x2}}], 0x70)

4m1.960105471s ago: executing program 35 (id=7140):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0xb}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x349218d8, {}, {0x2}, @connect={{0x2, 0x83}, {0x3, 0xfc}}}, {0x0, 0x9, 0x0, 0x0, @time={0x800002, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x3}, {}, {0x0, 0xfc}, @result={0x2, 0x2}}], 0x70)

2m29.588211287s ago: executing program 9 (id=8435):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

2m28.954725854s ago: executing program 9 (id=8443):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000e40), 0x41, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000e80))

2m28.534862649s ago: executing program 9 (id=8450):
timer_create(0x9, 0x0, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

2m28.158022518s ago: executing program 9 (id=8455):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000700000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000200000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)

2m27.839542392s ago: executing program 9 (id=8461):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2m26.765825537s ago: executing program 9 (id=8477):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0xfe)

2m12.364795699s ago: executing program 36 (id=8477):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0xfe)

4.337890984s ago: executing program 7 (id=10308):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0xa, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1, 0x5515, &(0x7f000000af40)="$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")
open(&(0x7f0000000080)='./file1\x00', 0x145142, 0x0)

2.982138109s ago: executing program 0 (id=10329):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0})

2.668605246s ago: executing program 0 (id=10333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x1, 0xdd}]}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x1, 0x0, 0x1, [@nested={0x0, 0x12f, 0x0, 0x1, [@typed={0x0, 0x74}, @typed={0x0, 0xfe, 0x0, 0x0, @u32=0x4}, @typed={0x0, 0x4c}, @typed={0x0, 0x148, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x0, 0x8a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @generic="92557b1db244ab351d2a49c5d3353e8ea7c863b7a4e97cf78a6d05ab3f777541105a53fedb265cb159b9b4fff991db173d"]}]}, @generic="c3beb899adffc9c05eb8c1126ae35569f307076b0926b332d3469eb51c22e2ad08d45d9a15c8e07521442eb906e345d5f7f6c5826f5fcaef4b5dd7f7938088ef6434cca8de28558248719d15c75c1e7a98", @generic="6fbf19734b1cdba2c8622e21c82835e31a63b9eda6cd5afcf7d09d6c35db1f3455cea6e21829a8ff488d88ef4d77892be7211d9bbaa724fafb6253858450c6b156518155ecfa7e5d2f00a7394cab8c3dd121484859bc94b7a936aa", @typed={0x0, 0x65, 0x0, 0x0, @uid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010)

2.325803016s ago: executing program 0 (id=10336):
symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)

2.243597571s ago: executing program 2 (id=10338):
symlink(&(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0\x00')
lgetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0)

2.082353306s ago: executing program 7 (id=10339):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_ifindex, @empty}, 0x10)

2.078548382s ago: executing program 0 (id=10340):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00000000010184000800000000000002201000240002801400018008000100"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)

1.982376755s ago: executing program 2 (id=10341):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

1.757453149s ago: executing program 2 (id=10344):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x1, 0x0, "d020670f6edd9a2ad5b4f84e565c6f0f30807278f8983c3c0a31965ebd9ca8ac", 0x384c4150})

1.756146181s ago: executing program 0 (id=10345):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.463449796s ago: executing program 2 (id=10348):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xdc}}, 0x0)

1.408989071s ago: executing program 1 (id=10350):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)

1.322571284s ago: executing program 4 (id=10351):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40b, 0x70bd2b, 0x500, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xc}, @IFLA_MACSEC_ES={0x5}]}}}]}, 0x44}}, 0x0)

1.197487344s ago: executing program 2 (id=10352):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001080), 0x2000, 0x0)
cachestat(r0, &(0x7f0000000040)={0xff, 0x1}, 0x0, 0x20)

1.169678272s ago: executing program 0 (id=10353):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000040)={0x0, 0x9, 0x6, "71b8255bd35f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.148128463s ago: executing program 8 (id=10354):
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000303fa00000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368)

1.102372196s ago: executing program 1 (id=10355):
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x5761, 0x0)

1.093710872s ago: executing program 4 (id=10356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a300000000074000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300e4edf2b708000240000000000e000100636f6e6e6c6162656c0000000900010073797a300000000014000580080001400000002f080002400000000114"], 0xe8}}, 0x0)

949.946301ms ago: executing program 2 (id=10357):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905", @ANYRES32], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

949.527987ms ago: executing program 8 (id=10358):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x33c5, @empty, 0xffffffff}}, 0x0, 0xfffc}, 0x90)

863.941842ms ago: executing program 1 (id=10359):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)

832.734939ms ago: executing program 4 (id=10360):
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @opaque="24b38862c7c919dc616e223b433c2da3"}}}}}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}}}}}}}, 0x0)

804.50314ms ago: executing program 8 (id=10361):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x50}, 0x1, 0x7}, 0x0)

803.272549ms ago: executing program 7 (id=10362):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0))

707.164789ms ago: executing program 8 (id=10363):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, 0x14, 0x105, 0x70bc26, 0x25dfdb7b, {0x10, 0xff}, [@INET_DIAG_REQ_BYTECODE={0xfffffffffffffe93, 0x1, "000000c4ef"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040044}, 0x14800)

631.041223ms ago: executing program 4 (id=10364):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@cgroup=r0, r0, 0x2f, 0x2028, 0x4}, 0x20)

605.675537ms ago: executing program 7 (id=10365):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)

514.29219ms ago: executing program 1 (id=10366):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, &(0x7f0000000000)="a01c311a3b8e0eba779d418e9bb1fdf003b6d455d648eb3a904d86681c8bc498e1d39de75e3d6a542998094c2a84c8074815425119e7ce8f50ad29daa04ee54545d72aa2020c715fabf47a1014ede9497d75358dd963f4e92c397e5cc14b3ceb0d", 0x0}, 0x50)

411.890086ms ago: executing program 4 (id=10367):
r0 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328)

327.652569ms ago: executing program 7 (id=10368):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x84, 0x4d, 0x0, 0x0)

281.816027ms ago: executing program 8 (id=10369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080)

256.460538ms ago: executing program 1 (id=10370):
r0 = socket(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x23, 0x3}})

141.994049ms ago: executing program 4 (id=10371):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8890}, 0x4000)

54.058947ms ago: executing program 7 (id=10372):
r0 = socket(0x1d, 0x2, 0x6)
ppoll(&(0x7f0000000c80)=[{r0}], 0x1, &(0x7f0000000cc0)={0x0, 0x989680}, 0x0, 0x0)

35.84716ms ago: executing program 8 (id=10373):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000380), &(0x7f00000000c0)}, 0x20)

0s ago: executing program 1 (id=10374):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)

kernel console output (not intermixed with test programs):

New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85
[  907.411945][T26825] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  907.440013][   T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  907.452973][T26932] vfat: Deprecated parameter 'posix'
[  907.456174][   T30] usb 1-1: Product: syz
[  907.462567][T26932] FAT-fs: "posix" option is obsolete, not supported now
[  907.470852][   T30] usb 1-1: Manufacturer: syz
[  907.505275][   T30] usb 1-1: SerialNumber: syz
[  907.540654][   T30] usb 1-1: config 0 descriptor??
[  907.555833][ T8228] Bluetooth: hci6: command tx timeout
[  907.570109][   T30] ipw 1-1:0.0: IPWireless converter converter detected
[  907.658210][ T6940] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  907.691158][ T6940] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  907.767227][   T30] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  907.852385][T26942] xt_l2tp: v2 sid > 0xffff: 117440512
[  907.858829][ T9733] usb 1-1: USB disconnect, device number 113
[  907.890956][ T9733] ipw 1-1:0.0: device disconnected
[  907.893095][T26946] loop8: detected capacity change from 0 to 512
[  907.919418][T26946] EXT4-fs: Ignoring removed oldalloc option
[  907.953482][T26948] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8766'.
[  907.992172][T26948] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8766'.
[  908.022923][T26946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  908.111517][T26956] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  908.134456][T26956] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  908.162173][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  908.415061][T26960] loop8: detected capacity change from 0 to 64
[  908.721553][   T31] audit: type=1326 audit(913.686:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26976 comm="syz.7.8778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  908.868763][   T31] audit: type=1326 audit(913.686:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26976 comm="syz.7.8778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  908.935820][T26982] loop0: detected capacity change from 0 to 1024
[  908.977673][   T31] audit: type=1326 audit(913.801:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26976 comm="syz.7.8778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  909.105550][   T31] audit: type=1326 audit(913.801:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26976 comm="syz.7.8778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  909.163894][   T31] audit: type=1326 audit(913.801:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26976 comm="syz.7.8778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  909.406379][T26997] loop0: detected capacity change from 0 to 128
[  909.511993][T27002] netlink: 'syz.4.8790': attribute type 8 has an invalid length.
[  909.886853][T27017] No such timeout policy "syz1"
[  910.144655][T27026] loop4: detected capacity change from 0 to 64
[  910.677908][   T31] audit: type=1326 audit(915.733:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27043 comm="syz.7.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  910.762403][T26715] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  910.790062][   T31] audit: type=1326 audit(915.775:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27043 comm="syz.7.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  910.797785][T27047] loop4: detected capacity change from 0 to 256
[  910.857083][T26715] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  910.875202][T27047] exfat: Deprecated parameter 'namecase'
[  910.883484][   T31] audit: type=1326 audit(915.786:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27043 comm="syz.7.8806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  910.933890][T26715] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  910.990520][T27047] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  911.006072][T27049] loop1: detected capacity change from 0 to 2048
[  911.007635][T26715] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  911.085340][T27049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  911.211689][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  911.532658][T26715] 8021q: adding VLAN 0 to HW filter on device bond0
[  911.702544][T26715] 8021q: adding VLAN 0 to HW filter on device team0
[  911.776064][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state
[  911.783328][ T9976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  911.949443][ T9976] bridge0: port 2(bridge_slave_1) entered blocking state
[  911.956672][ T9976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  912.052855][T27087] netlink: 'syz.8.8822': attribute type 13 has an invalid length.
[  912.063714][T27089] kAFS: unable to lookup cell '('
[  912.398872][T27100] netlink: 'syz.7.8827': attribute type 3 has an invalid length.
[  912.453981][T27100] netlink: 'syz.7.8827': attribute type 3 has an invalid length.
[  912.501738][T27100] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8827'.
[  912.809464][T27117] loop8: detected capacity change from 0 to 512
[  912.851799][T27120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8834'.
[  912.892798][T27117] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  912.907421][T27115] loop1: detected capacity change from 0 to 2048
[  912.939425][T27115] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  913.034743][T27125] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  913.068778][T26715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  913.082872][T27117] EXT4-fs (loop8): 1 truncate cleaned up
[  913.090233][T27115] NILFS error (device loop1): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  913.153100][T27117] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  913.208469][T27115] Remounting filesystem read-only
[  913.244506][T27128] bond1: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3)
[  913.305527][T27128] bond1 (unregistering): Released all slaves
[  913.390980][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  913.464288][T26715] veth0_vlan: entered promiscuous mode
[  913.540737][T26715] veth1_vlan: entered promiscuous mode
[  913.749991][T26715] veth0_macvtap: entered promiscuous mode
[  913.787625][T27146] bridge0: port 4(bond0) entered blocking state
[  913.826402][T27146] bridge0: port 4(bond0) entered disabled state
[  913.860473][T27146] bond0: entered allmulticast mode
[  913.907915][T27146] bond_slave_0: entered allmulticast mode
[  913.924501][T27146] bond_slave_1: entered allmulticast mode
[  913.945011][T27146] team0: entered allmulticast mode
[  913.997527][T27146] team_slave_0: entered allmulticast mode
[  914.012251][T27146] team_slave_1: entered allmulticast mode
[  914.048595][T27146] syz_tun: entered allmulticast mode
[  914.061357][T27158] netlink: 'syz.1.8848': attribute type 27 has an invalid length.
[  914.082876][T27146] bond0: entered promiscuous mode
[  914.097961][T27146] bond_slave_0: entered promiscuous mode
[  914.103990][T27158] netlink: 'syz.1.8848': attribute type 3 has an invalid length.
[  914.120447][T27158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8848'.
[  914.133083][T27146] bond_slave_1: entered promiscuous mode
[  914.151532][T27146] team0: entered promiscuous mode
[  914.158829][T27146] team_slave_0: entered promiscuous mode
[  914.174744][T27146] team_slave_1: entered promiscuous mode
[  914.213151][T27146] syz_tun: entered promiscuous mode
[  914.229459][T27146] bridge0: port 4(bond0) entered blocking state
[  914.235891][T27146] bridge0: port 4(bond0) entered forwarding state
[  914.289305][T26715] veth1_macvtap: entered promiscuous mode
[  914.447670][T26715] batman_adv: batadv0: Interface activated: batadv_slave_0
[  914.533655][T26715] batman_adv: batadv0: Interface activated: batadv_slave_1
[  914.619480][ T6383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  914.689494][ T6383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  914.710826][ T6383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  914.763217][ T6383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  914.868525][T27185] loop8: detected capacity change from 0 to 64
[  914.925105][T27185] syz.8.8859: attempt to access beyond end of device
[  914.925105][T27185] loop8: rw=0, sector=1024, nr_sectors = 2 limit=64
[  914.925187][T27185] Buffer I/O error on dev loop8, logical block 512, async page read
[  914.925491][T27185] syz.8.8859: attempt to access beyond end of device
[  914.925491][T27185] loop8: rw=0, sector=113152, nr_sectors = 2 limit=64
[  914.925523][T27185] Buffer I/O error on dev loop8, logical block 56576, async page read
[  915.127175][T25426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  915.278279][T25426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  915.403858][T27202] xt_CT: You must specify a L4 protocol and not use inversions on it
[  915.441611][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  915.502961][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  915.545945][T27205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8867'.
[  916.357391][T27240] netlink: 'syz.8.8881': attribute type 20 has an invalid length.
[  916.384922][ T8431] usb 2-1: new full-speed USB device number 104 using dummy_hcd
[  916.594639][T27251] loop4: detected capacity change from 0 to 256
[  916.605383][ T8431] usb 2-1: config 0 has an invalid interface number: 46 but max is 0
[  916.648476][ T8431] usb 2-1: config 0 has no interface number 0
[  916.684838][ T8431] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  916.734806][ T8431] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  916.757607][T27251] FAT-fs (loop4): Directory bread(block 64) failed
[  916.812750][T27251] FAT-fs (loop4): Directory bread(block 65) failed
[  916.824635][ T8431] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  916.849767][T27251] FAT-fs (loop4): Directory bread(block 66) failed
[  916.873618][ T8431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.911459][ T8431] usb 2-1: Product: syz
[  916.911478][T27251] FAT-fs (loop4): Directory bread(block 67) failed
[  916.959746][ T8431] usb 2-1: Manufacturer: syz
[  916.964390][ T8431] usb 2-1: SerialNumber: syz
[  916.977353][T27251] FAT-fs (loop4): Directory bread(block 68) failed
[  917.018573][T27251] FAT-fs (loop4): Directory bread(block 69) failed
[  917.043532][ T8431] usb 2-1: config 0 descriptor??
[  917.072439][T27251] FAT-fs (loop4): Directory bread(block 70) failed
[  917.091235][ T8431] ums-karma 2-1:0.46: USB Mass Storage device detected
[  917.095675][T27251] FAT-fs (loop4): Directory bread(block 71) failed
[  917.165386][T27251] FAT-fs (loop4): Directory bread(block 72) failed
[  917.186493][T27251] FAT-fs (loop4): Directory bread(block 73) failed
[  917.280300][ T8431] ums-karma 2-1:0.46: probe with driver ums-karma failed with error -5
[  917.360097][ T8431] usb 2-1: USB disconnect, device number 104
[  917.543052][T27270] loop2: detected capacity change from 0 to 4096
[  917.589742][T27270] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  917.701768][T27270] ntfs3(loop2): ino=19, mi_enum_attr
[  917.709789][T27270] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  917.839156][T27270] ntfs3(loop2): failed to convert "c46c" to cp437
[  917.882015][T27270] ntfs3(loop2): ino=20, mi_enum_attr
[  918.070661][T27295] usb usb9: usbfs: process 27295 (syz.1.8902) did not claim interface 6 before use
[  918.281261][T27302] afs: Bad value for 'source'
[  918.293927][T27297] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode
[  918.345707][T27297] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  918.508059][T27300] loop7: detected capacity change from 0 to 4096
[  918.593453][T27300] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  918.679837][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  918.725764][T27300] ntfs3(loop7): ino=1a, mi_enum_attr
[  918.789899][T27300] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  918.950218][T27324] siw: device registration error -23
[  919.051701][T27328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8916'.
[  919.097423][T27328] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8916'.
[  919.160524][T27328] netlink: 4260 bytes leftover after parsing attributes in process `syz.8.8916'.
[  919.580413][T27341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8922'.
[  920.109431][T27187] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  920.280776][T27365] loop1: detected capacity change from 0 to 2048
[  920.299358][T27187] usb 1-1: Using ep0 maxpacket: 16
[  920.307321][T27317] loop4: detected capacity change from 0 to 32768
[  920.325235][T27187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  920.363112][T27187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  920.376837][T27372] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  920.385162][T27187] usb 1-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00
[  920.409547][T27187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  920.421336][T27187] usb 1-1: config 0 descriptor??
[  920.434705][T27317] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  920.445643][T27187] hub 1-1:0.0: USB hub found
[  920.641796][T27187] hub 1-1:0.0: 9 ports detected
[  920.654631][T27187] hub 1-1:0.0: insufficient power available to use all downstream ports
[  920.674761][T27317] XFS (loop4): Ending clean mount
[  920.745858][T27317] XFS (loop4): Quotacheck needed: Please wait.
[  920.844196][T27187] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  920.850592][T27187] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  920.960731][T27317] XFS (loop4): Quotacheck: Done.
[  920.968189][T27187] usb 1-1: USB disconnect, device number 114
[  921.211097][ T5939] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  921.566046][T27350] loop7: detected capacity change from 0 to 40427
[  921.644175][T27350] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  921.731657][T27350] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  921.831144][T27350] F2FS-fs (loop7): invalid crc value
[  922.268854][T27413] nvme_fabrics: missing parameter 'transport=%s'
[  922.272246][T27350] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  922.295437][T27413] nvme_fabrics: missing parameter 'nqn=%s'
[  922.352836][T27350] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  922.369787][T27388] loop8: detected capacity change from 0 to 32768
[  922.379906][T27350] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  922.883178][T27396] loop1: detected capacity change from 0 to 32768
[  922.989181][T27396] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  923.227921][T27449] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  923.372097][T27396] XFS (loop1): Ending clean mount
[  923.755165][T27418] loop4: detected capacity change from 0 to 32768
[  923.802628][T27418] (syz.4.8939,27418,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  923.876245][T27418] (syz.4.8939,27418,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  923.895235][ T5934] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  923.938275][T27457] loop8: detected capacity change from 0 to 4096
[  924.096111][T27418] JBD2: Ignoring recovery information on journal
[  924.143560][T27467] loop2: detected capacity change from 0 to 1024
[  924.203746][T27457] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  924.259549][T27467] hfsplus: failed to load root directory
[  924.359338][T27418] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  924.682615][T27479] loop8: detected capacity change from 0 to 64
[  924.739489][    C1] sd 0:0:1:0: [sda] tag#2558 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  924.750000][    C1] sd 0:0:1:0: [sda] tag#2558 CDB: Read(6) 08 00 bc b2 00 00
[  924.787118][T27484] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8965'.
[  925.093326][ T5939] ocfs2: Unmounting device (7,4) on (node local)
[  925.650357][T27500] loop1: detected capacity change from 0 to 4096
[  925.711949][T27500] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  925.774176][T27469] loop7: detected capacity change from 0 to 32768
[  925.849068][T27469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.8948 (27469)
[  925.876861][T27500] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  925.904927][T27469] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  925.939214][T27500] ntfs3(loop1): mft corrupted
[  925.956724][T27500] ntfs3(loop1): Failed to load $Extend (-22).
[  925.975006][T27469] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  926.016461][T27500] ntfs3(loop1): Failed to initialize $Extend.
[  926.104489][T27500] ntfs3(loop1): ino=1e, mi_enum_attr
[  926.221769][T27500] ntfs3(loop1): ino=1e, mi_enum_attr
[  926.296238][T27469] BTRFS info (device loop7): enabling ssd optimizations
[  926.298691][T27500] ntfs3(loop1): ino=1e, mi_enum_attr
[  926.314553][T27469] BTRFS info (device loop7): turning off barriers
[  926.376921][T27469] BTRFS info (device loop7): disabling tree log
[  926.383240][T27469] BTRFS info (device loop7): turning on async discard
[  926.460905][T27469] BTRFS info (device loop7): enabling free space tree
[  926.504296][T27469] BTRFS info (device loop7): max_inline set to 4096
[  926.684900][T27469] BTRFS info (device loop7 state M): max_inline set to 4096
[  926.824850][T18025] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  927.022993][T27557] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8988'.
[  927.624338][T27573] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  927.827929][T27513] loop4: detected capacity change from 0 to 32768
[  928.021722][T27513] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  928.101256][T27513] XFS (loop4): Ending clean mount
[  928.111506][T27513] XFS (loop4): Quotacheck needed: Please wait.
[  928.148490][ T6186] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  928.317307][T27513] XFS (loop4): Quotacheck: Done.
[  928.359223][ T6186] usb 2-1: Using ep0 maxpacket: 8
[  928.416761][ T6186] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  928.446958][ T6186] usb 2-1: config 0 interface 0 has no altsetting 0
[  928.567786][ T6186] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[  928.576884][ T6186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  928.579623][ T5939] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  928.600411][ T6186] usb 2-1: Product: syz
[  928.604610][ T6186] usb 2-1: Manufacturer: syz
[  928.672516][ T6186] usb 2-1: SerialNumber: syz
[  928.714364][ T6186] usb 2-1: config 0 descriptor??
[  928.764278][ T6186] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[  928.962237][ T6186] snd_usb_toneport 2-1:0.0: cannot get proper max packet size
[  929.009098][ T6186] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[  929.057359][ T6186] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  929.184214][T27561] loop0: detected capacity change from 0 to 32768
[  929.209256][ T6186] usb 2-1: USB disconnect, device number 105
[  929.334751][T27619] loop7: detected capacity change from 0 to 64
[  929.400963][T27561] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  929.439224][T27619] Trying to free block not in datazone
[  929.494518][T27601] loop8: detected capacity change from 0 to 32768
[  929.507632][T27601] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.8999 (27601)
[  929.576599][T27601] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  929.622703][T27561] XFS (loop0): Ending clean mount
[  929.634412][T27601] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  929.659924][T27561] XFS (loop0): Quotacheck needed: Please wait.
[  929.771339][T27561] XFS (loop0): Quotacheck: Done.
[  930.039643][T27601] BTRFS info (device loop8): enabling ssd optimizations
[  930.091821][T27601] BTRFS info (device loop8): turning off barriers
[  930.098294][T27601] BTRFS info (device loop8): disabling tree log
[  930.167985][T27601] BTRFS info (device loop8): turning on async discard
[  930.174807][T27601] BTRFS info (device loop8): enabling free space tree
[  930.244905][T27601] BTRFS info (device loop8): max_inline set to 4096
[  930.274914][ T5924] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  930.444545][T27601] BTRFS info (device loop8 state M): max_inline set to 4096
[  930.607973][T20136] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  930.609490][T27668] loop1: detected capacity change from 0 to 164
[  930.713695][T27671] netlink: 'syz.7.9019': attribute type 1 has an invalid length.
[  930.762808][T27671] netlink: 224 bytes leftover after parsing attributes in process `syz.7.9019'.
[  930.787545][T27668] iso9660: Corrupted directory entry in block 2 of inode 1920
[  930.878300][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  930.894587][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  930.966213][T27673] loop4: detected capacity change from 0 to 1024
[  931.374829][T27681] netlink: 33024 bytes leftover after parsing attributes in process `syz.0.9016'.
[  931.796746][T27689] nftables ruleset with unbound chain
[  931.817622][T27650] loop2: detected capacity change from 0 to 32768
[  931.958921][T27650] ERROR: (device loop2): diAllocBit: iag inconsistent
[  931.958921][T27650] 
[  932.036161][T27650] ialloc: diAlloc returned -5!
[  932.085692][T27696] netlink: 408 bytes leftover after parsing attributes in process `syz.7.9028'.
[  932.644064][T27718] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9037'.
[  932.701970][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  932.712371][T27718] 0·: renamed from hsr_slave_1 (while UP)
[  932.834894][T27718] 0·: entered allmulticast mode
[  932.893915][T27718] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  932.934744][T27724] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9040'.
[  933.189517][T27733] loop4: detected capacity change from 0 to 512
[  933.196864][T27733] EXT4-fs: Ignoring removed nobh option
[  933.265068][T27737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9044'.
[  933.287528][T27733] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  933.326252][T27736] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  933.357909][T27736] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  933.398455][T27733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[  933.406877][T27739] netlink: 32 bytes leftover after parsing attributes in process `syz.7.9046'.
[  933.489291][T27733] EXT4-fs (loop4): orphan cleanup on readonly fs
[  933.497589][T27733] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.9043: attempt to clear invalid blocks 1024 len 1
[  933.528489][T27733] EXT4-fs (loop4): Remounting filesystem read-only
[  933.570375][T27733] EXT4-fs (loop4): 1 truncate cleaned up
[  933.609330][T27745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9048'.
[  933.621589][T27733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  933.654036][T27745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9048'.
[  933.921993][ T5939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  934.165402][T27762] netlink: 344 bytes leftover after parsing attributes in process `syz.0.9056'.
[  934.544038][T27779] loop0: detected capacity change from 0 to 128
[  935.086923][T27746] loop8: detected capacity change from 0 to 32768
[  935.137477][T27746] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.9049 (27746)
[  935.234781][T27746] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  935.312797][T27746] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  935.480784][T27819] loop7: detected capacity change from 0 to 24
[  935.532117][T27819] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  935.578176][T27746] BTRFS info (device loop8): setting nodatasum
[  935.590046][T27746] BTRFS info (device loop8): setting nodatacow
[  935.612658][T27746] BTRFS info (device loop8): enabling ssd optimizations
[  935.640973][T27819] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  935.651406][T27746] BTRFS info (device loop8): turning on async discard
[  935.661040][T27830] __nla_validate_parse: 1 callbacks suppressed
[  935.661060][T27830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9076'.
[  935.682236][T27746] BTRFS info (device loop8): enabling free space tree
[  935.728899][T27819] VFS: Lookup of 'file0' in romfs loop7 would have caused loop
[  936.165512][T27844] loop7: detected capacity change from 0 to 8
[  936.171957][ T8431] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  936.190034][T20136] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  936.247919][T27844] SQUASHFS error: Unable to read inode 0xe3
[  936.313542][T27847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9083'.
[  936.360923][ T8431] usb 2-1: Using ep0 maxpacket: 16
[  936.400548][ T8431] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 214, changing to 11
[  936.427592][T27850] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[  936.499700][ T8431] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  936.551296][ T8431] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  936.621457][ T8431] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  936.666244][ T8431] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  936.720120][T27855] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9086'.
[  936.730229][T27856] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  936.738945][ T8431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  936.787177][T27856] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  936.794722][ T8431] usb 2-1: SerialNumber: syz
[  936.869607][T27862] loop0: detected capacity change from 0 to 128
[  936.870516][T27835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  936.931430][T27835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  936.995380][T27862] afs: Unknown parameter 'hash'
[  937.010835][T27855] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  937.125008][T27855] bond1 (unregistering): Released all slaves
[  937.153258][ T8431] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  937.173504][T27866] loop4: detected capacity change from 0 to 512
[  937.215481][ T8431] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12
[  937.295298][T27866] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  937.377522][ T8431] usb 2-1: USB disconnect, device number 106
[  937.412979][T27866] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.9089: inode has both inline data and extents flags
[  937.521971][T27866] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.9089: couldn't read orphan inode 17 (err -117)
[  937.557087][T27866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  937.692443][T27866] Quota error (device loop4): do_check_range: Getting block 144 out of range 0-5
[  937.890205][ T5939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  937.901518][T27858] loop2: detected capacity change from 0 to 32768
[  937.939701][T27882] loop7: detected capacity change from 0 to 2048
[  937.949584][T27887] loop0: detected capacity change from 0 to 256
[  938.023780][T27882] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  938.085941][T27887] FAT-fs (loop0): Directory bread(block 64) failed
[  938.092524][T27887] FAT-fs (loop0): Directory bread(block 65) failed
[  938.178231][T27887] FAT-fs (loop0): Directory bread(block 66) failed
[  938.238352][T27887] FAT-fs (loop0): Directory bread(block 67) failed
[  938.245019][T27887] FAT-fs (loop0): Directory bread(block 68) failed
[  938.321855][T27887] FAT-fs (loop0): Directory bread(block 69) failed
[  938.328507][T27887] FAT-fs (loop0): Directory bread(block 70) failed
[  938.375343][T18025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.384958][T27887] FAT-fs (loop0): Directory bread(block 71) failed
[  938.448375][T27887] FAT-fs (loop0): Directory bread(block 72) failed
[  938.535853][T27887] FAT-fs (loop0): Directory bread(block 73) failed
[  938.589128][T27906] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9101'.
[  938.634943][T27908] loop4: detected capacity change from 0 to 64
[  938.669882][T27906] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9101'.
[  939.660314][T27938] ieee802154 phy1 wpan1: encryption failed: -22
[  940.275904][T27958] loop1: detected capacity change from 0 to 512
[  940.381655][T27958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  940.464156][T27958] EXT4-fs error (device loop1): ext4_xattr_block_find:1878: inode #15: comm syz.1.9127: corrupted xattr block 32: overlapping e_value 
[  940.479977][T27969] loop8: detected capacity change from 0 to 2048
[  940.502027][T27969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  940.837661][ T5934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  940.974334][T27917] loop7: detected capacity change from 0 to 40427
[  941.040664][T27917] F2FS-fs: heap/no_heap options were deprecated
[  941.108973][T27917] F2FS-fs (loop7): build fault injection rate: 23
[  941.128316][T27917] F2FS-fs (loop7): build fault injection type: 0x3bfe8c
[  941.132956][T27987] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9135'.
[  941.179835][T27989] netlink: 'syz.2.9140': attribute type 12 has an invalid length.
[  941.200649][T27917] F2FS-fs (loop7): invalid crc value
[  941.233443][T27989] netlink: 'syz.2.9140': attribute type 4 has an invalid length.
[  941.357436][T27917] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  941.661733][T28006] loop8: detected capacity change from 0 to 16
[  941.709945][T27917] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  941.740478][T28006] erofs (device loop8): mounted with root inode @ nid 36.
[  941.810962][T27917] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  941.956863][T27917] F2FS-fs (loop7): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  942.064794][T28013] bridge0: port 1(bridge_slave_0) entered disabled state
[  942.137637][T28016] loop0: detected capacity change from 0 to 2048
[  942.140254][T28013] bridge0: port 2(bridge_slave_1) entered disabled state
[  942.221023][T28022] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  942.287908][T28016] NILFS (loop0): error -2 truncating bmap (ino=16)
[  942.338282][T28022] NILFS (loop0): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[  942.362950][T28022] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16)
[  942.420469][T28022] Remounting filesystem read-only
[  942.694523][ T5924] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  943.500803][T28047] loop8: detected capacity change from 0 to 8
[  943.529847][   T31] audit: type=1326 audit(950.219:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28046 comm="syz.0.9168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7df18f749 code=0x7ffc0000
[  943.600380][T28047] SQUASHFS error: Failed to read block 0x2fc: -5
[  943.627370][T28047] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  943.646849][   T31] audit: type=1326 audit(950.219:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28046 comm="syz.0.9168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb7df18f749 code=0x7ffc0000
[  943.673662][T28047] SQUASHFS error: Unable to read directory block [247:26]
[  943.747738][   T31] audit: type=1326 audit(950.219:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28046 comm="syz.0.9168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7df18f749 code=0x7ffc0000
[  943.803628][T28054] JFS: discard option not supported on device
[  943.841459][T28054] Mount JFS Failure: -22
[  943.842773][T28026] loop1: detected capacity change from 0 to 40427
[  943.852637][T28054] jfs_mount failed w/return code = -22
[  943.856117][   T31] audit: type=1326 audit(950.219:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28046 comm="syz.0.9168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7df18f749 code=0x7ffc0000
[  943.910796][T28026] F2FS-fs (loop1): invalid crc value
[  944.230237][T28065] loop8: detected capacity change from 0 to 512
[  944.255216][T28026] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  944.283350][T28065] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  944.304268][T28026] F2FS-fs (loop1): Start checkpoint disabled!
[  944.314905][T28065] EXT4-fs (loop8): orphan cleanup on readonly fs
[  944.355259][T28065] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.9174: Block bitmap for bg 0 marked uninitialized
[  944.441006][T28074] loop7: detected capacity change from 0 to 4096
[  944.457021][T28065] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  944.468627][T28074] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  944.490300][T28065] EXT4-fs (loop8): 1 orphan inode deleted
[  944.501877][T28065] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  944.515448][T28026] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  944.551866][T28026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  944.582751][T28074] ntfs3(loop7): Failed to load $Extend (-22).
[  944.588873][T28074] ntfs3(loop7): Failed to initialize $Extend.
[  944.756690][T28083] netlink: 45 bytes leftover after parsing attributes in process `syz.2.9183'.
[  944.764380][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  944.985824][T28088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9186'.
[  945.010178][T28089] loop4: detected capacity change from 0 to 16
[  945.071341][T28089] erofs (device loop4): mounted with root inode @ nid 36.
[  945.165555][T28085] loop0: detected capacity change from 0 to 4096
[  945.210734][T28085] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  945.299738][T28085] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  945.414285][   T31] audit: type=1326 audit(952.203:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28096 comm="syz.4.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d018f749 code=0x7ffc0000
[  945.571287][   T31] audit: type=1326 audit(952.203:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28096 comm="syz.4.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fe9d018f749 code=0x7ffc0000
[  945.689698][   T31] audit: type=1326 audit(952.203:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28096 comm="syz.4.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d018f749 code=0x7ffc0000
[  945.828729][   T31] audit: type=1326 audit(952.203:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28096 comm="syz.4.9191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d018f749 code=0x7ffc0000
[  946.159545][T28117] loop8: detected capacity change from 0 to 2048
[  946.180681][T28120] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  946.211226][T28120] batadv_slave_0: entered promiscuous mode
[  946.217095][T28120] batadv_slave_0: entered allmulticast mode
[  946.237273][T28117] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=26504, location=26504
[  946.317963][T28117] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  946.471619][T28129] nfs: Deprecated parameter 'nointr'
[  947.197092][T28158] loop0: detected capacity change from 0 to 1764
[  947.571193][T28173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9226'.
[  947.728725][   T31] audit: type=1326 audit(954.628:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28174 comm="syz.7.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  947.847065][   T31] audit: type=1326 audit(954.628:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28174 comm="syz.7.9228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  947.917371][T28181] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9231'.
[  948.513487][T28163] loop1: detected capacity change from 0 to 32768
[  948.590616][T28163] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9222 (28163)
[  948.672558][T28165] loop2: detected capacity change from 0 to 32768
[  948.685914][T28163] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  948.705747][T28201] loop7: detected capacity change from 0 to 1024
[  948.750092][T28163] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  948.772652][T28207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9244'.
[  948.810723][T28207] netlink: 'syz.0.9244': attribute type 1 has an invalid length.
[  948.896805][T28205] loop8: detected capacity change from 0 to 4096
[  948.914859][T28205] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  948.934715][T28205] ntfs3(loop8): ino=3, mi_enum_attr
[  948.985441][T28221] loop4: detected capacity change from 0 to 8
[  949.004423][ T9976] hfsplus: b-tree write err: -5, ino 4
[  949.040954][T28163] BTRFS info (device loop1): enabling ssd optimizations
[  949.048730][T28163] BTRFS info (device loop1): turning on async discard
[  949.055556][T28163] BTRFS info (device loop1): enabling free space tree
[  949.077960][T28221] SQUASHFS error: Failed to read block 0x26067d: -5
[  949.181066][T28221] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  949.225355][T28221] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  949.335925][ T5934] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  949.731290][T28241] overlay: Unknown parameter 'smackfshat'
[  950.091227][T28252] bridge0: port 1(bridge_slave_0) entered disabled state
[  950.297225][T28258] loop8: detected capacity change from 0 to 512
[  950.370141][T28258] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  950.527071][T28267] loop7: detected capacity change from 0 to 512
[  950.536095][T28268] loop4: detected capacity change from 0 to 16
[  950.578854][T28268] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  950.635085][T28258] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  950.667238][T28268] cramfs: Error -3 while decompressing!
[  950.676457][T28268] cramfs: ffffffff999c81a8(453)->ffff8880351fd000(4096)
[  950.692305][T28270] netlink: 'syz.2.9267': attribute type 21 has an invalid length.
[  950.732443][T28258] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  950.740954][T28258] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  950.747924][T28267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  951.062317][T28279] netlink: 204 bytes leftover after parsing attributes in process `syz.2.9271'.
[  951.088152][T18025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  951.297288][ T7911] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[  951.451794][T28298] netlink: 'syz.0.9279': attribute type 1 has an invalid length.
[  951.471599][ T7911] usb 9-1: config 0 has an invalid interface number: 49 but max is 0
[  951.496146][ T7911] usb 9-1: config 0 has no interface number 0
[  951.503778][ T7911] usb 9-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  951.574909][ T7911] usb 9-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid maxpacket 514, setting to 64
[  951.631670][ T7911] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  951.643987][ T7911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.652414][ T7911] usb 9-1: Product: syz
[  951.664441][ T7911] usb 9-1: Manufacturer: syz
[  951.669581][ T7911] usb 9-1: SerialNumber: syz
[  951.692255][ T7911] usb 9-1: config 0 descriptor??
[  951.728282][T28283] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  951.760148][T28307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9284'.
[  951.779190][T28304] loop2: detected capacity change from 0 to 1024
[  951.789773][T28307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9284'.
[  952.011334][ T7911] qcserial 9-1:0.49: Qualcomm USB modem converter detected
[  952.088766][ T7911] usb 9-1: Qualcomm USB modem converter now attached to ttyUSB0
[  952.125391][T26056] hfsplus: b-tree write err: -5, ino 4
[  952.161472][ T7911] usb 9-1: USB disconnect, device number 14
[  952.224446][ T7911] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0
[  952.275747][ T7911] qcserial 9-1:0.49: device disconnected
[  952.584643][T28333] xt_policy: output policy not valid in PREROUTING and INPUT
[  952.687450][T28336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9299'.
[  952.739023][T28336] netlink: 348 bytes leftover after parsing attributes in process `syz.4.9299'.
[  952.768829][T28336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9299'.
[  952.809566][T28336] netlink: 348 bytes leftover after parsing attributes in process `syz.4.9299'.
[  953.022421][T28348] ieee802154 phy1 wpan1: encryption failed: -22
[  953.094236][T28355] loop2: detected capacity change from 0 to 256
[  953.165583][T28355] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  953.316467][T28360] loop7: detected capacity change from 0 to 256
[  953.338023][T28358] netlink: 'syz.8.9309': attribute type 32 has an invalid length.
[  953.655051][T28371] loop8: detected capacity change from 0 to 512
[  953.741852][T28371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  953.972288][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  954.246236][T28344] loop1: detected capacity change from 0 to 32768
[  954.307855][T28344] 
[  954.307855][T28344]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  954.307855][T28344] 
[  954.376162][T28397] ieee802154 phy1 wpan1: encryption failed: -22
[  954.489143][T25426] read_mapping_page failed!
[  954.495523][T25426] ERROR: (device loop1): txCommit: 
[  954.495523][T25426] 
[  954.580376][T25426] jfs_write_inode: jfs_commit_inode failed!
[  954.610800][ T5934] 
[  954.610800][ T5934]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  954.610800][ T5934] 
[  954.658479][ T5934] 
[  954.658479][ T5934]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  954.658479][ T5934] 
[  954.670001][T28405] loop2: detected capacity change from 0 to 256
[  954.678646][T28405] exfat: Deprecated parameter 'namecase'
[  954.695734][T28405] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  955.651892][T28443] loop0: detected capacity change from 0 to 256
[  956.552263][T28473] loop0: detected capacity change from 0 to 256
[  956.856037][T28438] loop7: detected capacity change from 0 to 32768
[  956.929554][T28486] netlink: 'syz.2.9369': attribute type 4 has an invalid length.
[  957.014372][T28438] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  957.080974][T28488] loop0: detected capacity change from 0 to 2048
[  957.113040][T28497] openvswitch: netlink: IP tunnel dst address not specified
[  957.154821][T28454] loop4: detected capacity change from 0 to 32768
[  957.207905][T28488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  957.228314][T28438] XFS (loop7): Ending clean mount
[  957.349723][T28506] loop2: detected capacity change from 0 to 64
[  957.457435][T18025] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  957.510965][ T5924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  957.589281][T28508] xt_CT: You must specify a L4 protocol and not use inversions on it
[  957.832343][T28516] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9376'.
[  957.882932][T28516] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9376'.
[  957.954410][T28516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  958.614082][T28540] loop7: detected capacity change from 0 to 256
[  958.676879][T28540] exfat: Deprecated parameter 'utf8'
[  958.730469][T28540] exfat: Deprecated parameter 'utf8'
[  958.798010][T28540] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  958.834901][T28550] xt_CT: You must specify a L4 protocol and not use inversions on it
[  958.917890][T28540] cifs: Unknown parameter 'ÿÿITäŒ&¬æ:ÅèÙ"‚Õë�ï1:ºÃÃÓ­'Ä4,�Zz-#FÇ<æõ]%gCžÊ
[  958.917890][T28540] SÃȘØÈžZ§6ŸÂ'
[  959.220049][T28564] netlink: 'syz.1.9403': attribute type 6 has an invalid length.
[  959.349205][T28569] loop7: detected capacity change from 0 to 128
[  959.377898][   T31] kauditd_printk_skb: 3 callbacks suppressed
[  959.377921][   T31] audit: type=1326 audit(966.858:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.2.9406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[  959.468552][T28569] EXT4-fs (loop7): Test dummy encryption mode enabled
[  959.527118][   T31] audit: type=1326 audit(966.911:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.2.9406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[  959.556410][T28569] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  959.614679][T28569] EXT4-fs error (device loop7): ext4_validate_block_bitmap:423: comm syz.7.9404: bg 0: bad block bitmap checksum
[  959.727754][   T31] audit: type=1326 audit(966.911:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.2.9406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[  959.796381][T18025] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  959.813625][   T31] audit: type=1326 audit(966.911:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28567 comm="syz.2.9406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[  960.136619][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  960.605910][T28613] loop7: detected capacity change from 0 to 1024
[  960.633000][T28613] EXT4-fs: Ignoring removed nomblk_io_submit option
[  960.663742][T28613] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  960.708035][T28613] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002]
[  960.748206][T28613] System zones: 0-1, 3-36
[  960.818681][T28613] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  960.894354][T28595] loop8: detected capacity change from 0 to 32768
[  960.939228][T28595] (syz.8.9416,28595,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  960.966479][T28623] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:ac8c:44ff:fe6f:cbba error=-28
[  961.026841][T28595] (syz.8.9416,28595,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  961.042914][T18025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  961.128571][T28595] JBD2: Ignoring recovery information on journal
[  961.205908][T28628] loop0: detected capacity change from 0 to 2048
[  961.229657][T28595] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  961.257756][T28631] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  961.630805][ T6127] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  961.736322][T28640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9434'.
[  961.806455][ T6127] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  961.825180][T20136] ocfs2: Unmounting device (7,8) on (node local)
[  961.843337][ T6127] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  961.868742][ T6127] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  961.921676][ T6127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.970332][ T6127] usb 3-1: config 0 descriptor??
[  962.183584][T28614] loop1: detected capacity change from 0 to 40427
[  962.214694][T28614] F2FS-fs (loop1): build fault injection rate: 26
[  962.249838][T28614] F2FS-fs (loop1): build fault injection type: 0xe
[  962.298543][T28614] F2FS-fs (loop1): invalid crc value
[  962.327720][T28614] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4559/0x7170
[  962.360994][T28623] infiniband !yz!: set active
[  962.373930][T28623] infiniband !yz!: added team_slave_0
[  962.387404][T28614] F2FS-fs (loop1): Failed to initialize F2FS node manager (-12)
[  962.396957][ T6127] Bluetooth: Can't get state to change to load configuration err
[  962.432102][ T6127] Bluetooth: Loading sysconfig file failed
[  962.485273][ T6127] ath3k 3-1:0.0: probe with driver ath3k failed with error -16
[  962.505251][T28623] RDS/IB: !yz!: added
[  962.533285][T28623] smc: adding ib device !yz! with port count 1
[  962.572070][T28623] smc:    ib device !yz! port 1 has no pnetid
[  962.578570][ T6127] usb 3-1: USB disconnect, device number 103
[  962.708718][T28660] loop8: detected capacity change from 0 to 512
[  962.728915][T28660] EXT4-fs: Ignoring removed i_version option
[  962.825163][T28660] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  962.893117][T28667] loop7: detected capacity change from 0 to 128
[  962.968480][T28667] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  963.145317][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  963.249040][T28674] i2c i2c-0: Invalid block write size 252
[  963.262273][T18025] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  963.349895][T28676] loop0: detected capacity change from 0 to 1024
[  963.598395][ T3464] hfsplus: b-tree write err: -5, ino 4
[  964.196706][T28705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9463'.
[  964.308087][T26825] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  964.498576][T26825] usb 8-1: Using ep0 maxpacket: 8
[  964.518491][T26825] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  964.545790][T26825] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  964.593595][T26825] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x43, changing to 0x3
[  964.624284][T26825] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 254, changing to 11
[  964.648429][T26825] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[  964.682120][T26825] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  964.726626][T26825] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.751701][T28697] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  964.778809][T26825] hub 8-1:1.0: bad descriptor, ignoring hub
[  964.814277][T26825] hub 8-1:1.0: probe with driver hub failed with error -5
[  964.861518][T26825] cdc_wdm 8-1:1.0: skipping garbage
[  964.867034][T26825] cdc_wdm 8-1:1.0: skipping garbage
[  964.892438][T26825] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22
[  964.975844][T26825] usb 8-1: USB disconnect, device number 7
[  965.103604][T28726] loop2: detected capacity change from 0 to 2048
[  965.167461][T28729] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9475'.
[  965.197878][T28726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  965.254040][T28726] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.9473: bg 0: block 345: padding at end of block bitmap is not set
[  965.272387][T28726] EXT4-fs (loop2): Remounting filesystem read-only
[  965.361372][T26715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  965.446185][T28737] loop1: detected capacity change from 0 to 512
[  965.457399][T28702] loop0: detected capacity change from 0 to 32768
[  965.474020][T28737] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  965.530673][T28702] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  965.672332][T28702] XFS (loop0): Ending clean mount
[  965.852780][   T30] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  965.906785][ T5924] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  966.034655][   T30] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  966.067334][   T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.068673][T28759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9486'.
[  966.145997][   T30] usb 9-1: config 0 descriptor??
[  966.178841][   T30] gspca_main: spca508-2.14.0 probing 8086:0110
[  966.528881][T28767] loop2: detected capacity change from 0 to 64
[  966.604631][   T30] gspca_spca508: reg_read err -71
[  966.633050][   T30] gspca_spca508: reg_read err -71
[  966.669111][   T30] gspca_spca508: reg_read err -71
[  966.691096][   T30] gspca_spca508: reg_read err -71
[  966.717966][   T30] gspca_spca508: reg write: error -71
[  966.736488][   T30] spca508 9-1:0.0: probe with driver spca508 failed with error -71
[  966.775419][   T30] usb 9-1: USB disconnect, device number 15
[  966.787686][T28775] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9493'.
[  966.820483][T28775] netlink: 96 bytes leftover after parsing attributes in process `syz.7.9493'.
[  967.098851][T28785] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9498'.
[  967.832140][ T7911] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  968.022822][ T7911] usb 8-1: Using ep0 maxpacket: 32
[  968.046724][ T7911] usb 8-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8
[  968.089724][ T7911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.102057][T28817] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9514'.
[  968.177219][ T7911] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:16.0/input/input64
[  968.368124][ T5177] bcm5974 8-1:16.0: could not read from device
[  968.480792][ T5177] bcm5974 8-1:16.0: could not read from device
[  968.501979][ T7911] usb 8-1: USB disconnect, device number 8
[  968.686450][T28836] loop8: detected capacity change from 0 to 8
[  968.707486][T28836] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  969.308925][ T5915] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  969.464613][T28853] loop0: detected capacity change from 0 to 4096
[  969.479997][ T5915] usb 9-1: Using ep0 maxpacket: 32
[  969.492318][ T5915] usb 9-1: config 0 has an invalid interface number: 151 but max is 0
[  969.504356][ T5915] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  969.562707][ T5915] usb 9-1: config 0 has no interface number 0
[  969.592069][ T5915] usb 9-1: config 0 interface 151 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  969.651769][ T5915] usb 9-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  969.681935][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.713007][ T5915] usb 9-1: Product: syz
[  969.717223][ T5915] usb 9-1: Manufacturer: syz
[  969.728876][T28863] loop7: detected capacity change from 0 to 1764
[  969.750828][ T5915] usb 9-1: SerialNumber: syz
[  969.789584][ T5915] usb 9-1: config 0 descriptor??
[  969.811295][T28863] iso9660: Corrupted directory entry in block 14 of inode 1920
[  969.922899][T28867] No source specified
[  970.044693][T28843] loop1: detected capacity change from 0 to 32768
[  970.084360][T28843] (syz.1.9527,28843,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  970.108005][T28843] (syz.1.9527,28843,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  970.196691][T28843] JBD2: Ignoring recovery information on journal
[  970.301349][T28843] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  970.342527][ T5915] usb 9-1: USB disconnect, device number 16
[  970.531207][ T6193] udevd[6193]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  970.740794][ T5934] ocfs2: Unmounting device (7,1) on (node local)
[  971.074528][T28897] loop8: detected capacity change from 0 to 16
[  971.112050][T28897] erofs (device loop8): mounted with root inode @ nid 36.
[  972.070926][T28933] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component
[  972.514965][T28901] loop0: detected capacity change from 0 to 32768
[  972.571993][T28901] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9556 (28901)
[  972.610616][T28901] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  972.657302][T28901] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  972.684318][T28954] 9pnet: Found fid 0 not clunked
[  972.916208][T28981] delete_channel: no stack
[  972.964030][T28901] BTRFS info (device loop0): enabling ssd optimizations
[  972.986293][T28901] BTRFS info (device loop0): turning on async discard
[  973.026789][T28901] BTRFS info (device loop0): enabling free space tree
[  973.147548][ T5938] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  973.254216][T28990] loop7: detected capacity change from 0 to 1024
[  973.300714][T28990] EXT4-fs: Ignoring removed nomblk_io_submit option
[  973.321903][ T5924] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  973.334827][ T5938] usb 2-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44
[  973.394275][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  973.442888][T26825] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[  973.470485][T28990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  973.484389][ T5938] usb 2-1: config 0 descriptor??
[  973.512504][ T5938] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f
[  973.693928][T26825] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  973.738819][T26825] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  973.764692][T18025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  973.788523][T26825] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  973.863289][T26825] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64
[  973.918685][T26825] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  973.934857][ T5938] gspca_sn9c20x: Write register 1001 failed -71
[  973.973854][ T5938] gspca_sn9c20x: Device initialization failed
[  974.005986][T26825] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  974.021588][ T5938] gspca_sn9c20x 2-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  974.052030][   T31] audit: type=1326 audit(982.238:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29009 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[  974.081139][T26825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.092495][ T5938] usb 2-1: USB disconnect, device number 107
[  974.128284][T26825] usb 9-1: Product: syz
[  974.149487][T26825] usb 9-1: Manufacturer: syz
[  974.185630][T26825] usb 9-1: SerialNumber: syz
[  974.196742][   T31] audit: type=1326 audit(982.238:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29009 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[  974.270107][T26825] usb 9-1: config 0 descriptor??
[  974.292825][T28992] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  974.315607][   T31] audit: type=1326 audit(982.248:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29009 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[  974.379377][T26825] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input65
[  974.400119][T29018] netlink: 'syz.4.9605': attribute type 1 has an invalid length.
[  974.419530][   T31] audit: type=1326 audit(982.248:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29009 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[  974.442047][T29018] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9605'.
[  974.499826][T29018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9605'.
[  974.566377][   T31] audit: type=1326 audit(982.248:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29009 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[  974.654884][ T7911] usb 9-1: USB disconnect, device number 17
[  974.745088][T29026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  975.313539][   T31] audit: type=1107 audit(983.592:228): pid=29039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  975.643443][T29057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9623'.
[  975.856005][T29021] loop7: detected capacity change from 0 to 32768
[  975.987490][T29021] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  976.066051][T29021] XFS (loop7): Ending clean mount
[  976.119227][T29080] netlink: 'syz.1.9629': attribute type 12 has an invalid length.
[  976.124549][T29021] XFS (loop7): Quotacheck needed: Please wait.
[  976.224205][T29021] XFS (loop7): Quotacheck: Done.
[  976.368960][T18025] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  976.762783][T29094] netlink: 'syz.2.9637': attribute type 4 has an invalid length.
[  976.788377][T29096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9638'.
[  976.818698][T29094] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9637'.
[  976.900539][T29094] .`: renamed from bond0 (while UP)
[  977.362572][T29108] x_tables: ip_tables: osf match: only valid for protocol 6
[  977.506823][T29073] loop4: detected capacity change from 0 to 32768
[  977.543237][T29079] loop8: detected capacity change from 0 to 32768
[  977.567608][T29073] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.9630 (29073)
[  977.625508][T29073] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  977.648493][T29079] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  977.657502][T29073] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  977.667855][T29123] netlink: del zone limit has 8 unknown bytes
[  977.939647][T29079] XFS (loop8): Ending clean mount
[  977.989474][T29079] XFS (loop8): Quotacheck needed: Please wait.
[  978.001816][T29073] BTRFS info (device loop4): enabling ssd optimizations
[  978.043855][T29073] BTRFS info (device loop4): turning on async discard
[  978.110433][T29073] BTRFS info (device loop4): enabling free space tree
[  978.154539][T29079] XFS (loop8): Quotacheck: Done.
[  978.334044][T20136] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  978.346636][ T5939] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  979.258655][T29142] loop0: detected capacity change from 0 to 32768
[  979.323561][T29175] netlink: 'syz.1.9667': attribute type 29 has an invalid length.
[  979.454417][ T7911] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  979.658004][ T7911] usb 3-1: Using ep0 maxpacket: 32
[  979.675164][ T7911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  979.716141][ T7911] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  979.767365][ T7911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  979.796845][ T7911] usb 3-1: Product: syz
[  979.805859][ T7911] usb 3-1: Manufacturer: syz
[  979.810496][ T7911] usb 3-1: SerialNumber: syz
[  979.815641][T29154] loop7: detected capacity change from 0 to 32768
[  979.838089][T29154] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9657 (29154)
[  979.894888][ T7911] usb 3-1: config 0 descriptor??
[  979.927520][T29154] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  979.955378][ T7911] usb 3-1: bad CDC descriptors
[  979.982362][ T7911] usb 3-1: unsupported MDLM descriptors
[  979.996296][T29154] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  980.168536][ T7911] usb 3-1: USB disconnect, device number 104
[  980.263479][T29199] loop8: detected capacity change from 0 to 512
[  980.301164][T29154] BTRFS info (device loop7): enabling ssd optimizations
[  980.308190][T29154] BTRFS info (device loop7): turning on async discard
[  980.392698][T29199] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  980.392788][T29154] BTRFS info (device loop7): enabling free space tree
[  980.506952][T29154] BTRFS warning (device loop7): can't clear the compat:0 feature bit while mounted
[  980.516950][T29199] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  980.534890][T29199] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.9676: Corrupt directory, running e2fsck is recommended
[  980.624752][T18025] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  980.676852][T29199] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  980.743493][T29199] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm syz.8.9676: corrupted in-inode xattr: invalid ea_ino
[  980.768658][T29199] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9676: couldn't read orphan inode 15 (err -117)
[  980.845115][T29199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  981.143659][T29199] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  981.168712][T29199] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  981.206259][   T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  981.236567][T29199] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.9676: Corrupt directory, running e2fsck is recommended
[  981.369692][   T30] usb 8-1: config index 0 descriptor too short (expected 133, got 72)
[  981.392186][   T30] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  981.433356][   T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.447164][T29199] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  981.491041][   T30] usb 8-1: Product: syz
[  981.505295][   T30] usb 8-1: Manufacturer: syz
[  981.516518][   T30] usb 8-1: SerialNumber: syz
[  981.592538][   T30] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  981.723628][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  981.730272][ T5915] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  982.029173][    C1] usb 8-1: ath9k_htc: over RX MAX_PKT_NUM
[  982.092055][T29246] netlink: 'syz.2.9693': attribute type 3 has an invalid length.
[  982.368513][   T30] usb 8-1: USB disconnect, device number 9
[  982.446289][T29259] loop0: detected capacity change from 0 to 2048
[  982.461529][   T31] audit: type=1326 audit(991.088:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29261 comm="syz.1.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c0b8f749 code=0x7ffc0000
[  982.477850][T29259] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  982.549259][   T31] audit: type=1326 audit(991.109:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29261 comm="syz.1.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c0b8f749 code=0x7ffc0000
[  982.614923][T29259] UDF-fs: unknown compression code (0)
[  982.651753][   T31] audit: type=1326 audit(991.140:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29261 comm="syz.1.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f95c0b8f749 code=0x7ffc0000
[  982.743722][   T31] audit: type=1326 audit(991.140:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29261 comm="syz.1.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c0b8f749 code=0x7ffc0000
[  982.787247][ T5915] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  982.818123][T29268] loop1: detected capacity change from 0 to 1024
[  982.839576][ T5915] ath9k_htc: Failed to initialize the device
[  982.864507][   T31] audit: type=1326 audit(991.140:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29261 comm="syz.1.9700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95c0b8f749 code=0x7ffc0000
[  982.903023][   T30] usb 8-1: ath9k_htc: USB layer deinitialized
[  982.973966][T29268] hfsplus: cannot replace xattr
[  983.173018][ T6181] hfsplus: b-tree write err: -5, ino 4
[  983.452044][T29288] x_tables: duplicate underflow at hook 3
[  983.797781][   T31] audit: type=1326 audit(992.505:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.4.9720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d018f749 code=0x7ffc0000
[  983.871077][   T31] audit: type=1326 audit(992.526:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.4.9720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d018f749 code=0x7ffc0000
[  983.958655][   T31] audit: type=1326 audit(992.526:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.4.9720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d018f749 code=0x7ffc0000
[  984.071165][   T31] audit: type=1326 audit(992.526:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.4.9720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9d018f749 code=0x7ffc0000
[  984.105252][   T31] audit: type=1326 audit(992.526:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29301 comm="syz.4.9720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe9d018f749 code=0x7ffc0000
[  984.202885][T29319] loop7: detected capacity change from 0 to 16
[  984.238026][T29319] erofs (device loop7): mounted with root inode @ nid 36.
[  984.250511][T29319] syz.7.9729: attempt to access beyond end of device
[  984.250511][T29319] loop7: rw=0, sector=301990144, nr_sectors = 257 limit=16
[  984.250750][T29319] syz.7.9729: attempt to access beyond end of device
[  984.250750][T29319] loop7: rw=0, sector=301990400, nr_sectors = 1 limit=16
[  984.251875][T29319] erofs (device loop7): read error -5 @ 0 of nid 36
[  984.395628][T29324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9730'.
[  984.404825][T29324] hsr_slave_1: entered allmulticast mode
[  984.488736][T29330] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9734'.
[  984.636624][T29335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9737'.
[  984.874239][T29346] loop8: detected capacity change from 0 to 256
[  985.548668][T29368] CIFS: VFS: Malformed UNC in devname
[  986.220837][T29343] loop7: detected capacity change from 0 to 32768
[  986.259769][T29343] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9739 (29343)
[  986.307526][T29395] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9766'.
[  986.320270][T29343] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  986.338430][T29393] loop4: detected capacity change from 0 to 1024
[  986.354428][T29395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9766'.
[  986.368934][T29343] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  986.633547][T29414] No such timeout policy "syz1"
[  986.660559][T29343] BTRFS info (device loop7): enabling ssd optimizations
[  986.690474][T29343] BTRFS info (device loop7): turning on async discard
[  986.750987][T29343] BTRFS info (device loop7): enabling free space tree
[  987.036736][T18025] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  987.322601][T29432] loop0: detected capacity change from 0 to 4096
[  987.489255][T29443] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  987.598031][T29432] syz.0.9777: attempt to access beyond end of device
[  987.598031][T29432] loop0: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096
[  987.620312][T29432] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1)
[  988.404003][   T31] kauditd_printk_skb: 4 callbacks suppressed
[  988.404026][   T31] audit: type=1400 audit(997.334:243): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=29470 comm="syz.0.9795"
[  988.474447][T29476] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9797'.
[  988.512108][ T5938] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  988.521600][T29476] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  988.571431][T29476] openvswitch: netlink: Message has 16 unknown bytes.
[  988.702465][ T5938] usb 9-1: Using ep0 maxpacket: 32
[  988.715285][ T5938] usb 9-1: config 0 has an invalid interface number: 133 but max is 0
[  988.741650][ T5938] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  988.781892][ T5938] usb 9-1: config 0 has no interface number 0
[  988.794579][ T5938] usb 9-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  988.841765][ T5938] usb 9-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 50404, setting to 1024
[  988.884744][ T5938] usb 9-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[  988.914819][ T5938] usb 9-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  988.965001][ T5938] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  989.007294][ T5938] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.039741][ T5938] usb 9-1: Product: syz
[  989.055387][ T5938] usb 9-1: Manufacturer: syz
[  989.060042][ T5938] usb 9-1: SerialNumber: syz
[  989.097077][ T5938] usb 9-1: config 0 descriptor??
[  989.103540][T29468] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  989.118057][T29468] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  989.162796][T29490] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  989.203825][T29490] team0: Port device netdevsim0 removed
[  989.212243][T29490] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  989.307871][   T31] audit: type=1326 audit(998.279:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.7.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  989.343073][ T5938] usb 9-1: probing VID:PID(0424:012C)   
[  989.372600][ T5938] usb 9-1: vub300 testing BULK OUT EndPoint(0) 0B
[  989.408072][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  989.425889][ T5938] usb 9-1: vub300 testing BULK OUT EndPoint(1) 0F
[  989.435306][   T31] audit: type=1326 audit(998.310:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.7.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  989.475762][ T5938] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs
[  989.493766][ T5938] vub300 9-1:0.133: probe with driver vub300 failed with error -22
[  989.508865][T29471] loop2: detected capacity change from 0 to 32768
[  989.523152][ T5938] usb 9-1: USB disconnect, device number 18
[  989.559289][   T31] audit: type=1326 audit(998.310:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.7.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  989.651665][   T31] audit: type=1326 audit(998.310:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.7.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  989.672834][T29471] ea_get: invalid extended attribute
[  989.723534][T29471] ffff8880a45a1ea8: 04 00 00 00                                      ....
[  989.752947][   T31] audit: type=1326 audit(998.310:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29491 comm="syz.7.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  989.824124][T29474] loop4: detected capacity change from 0 to 32768
[  989.876377][T29474] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  989.878673][T29481] loop0: detected capacity change from 0 to 32768
[  989.917228][T29481] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.9800 (29481)
[  989.981318][T29481] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  989.993370][T29481] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  990.138597][T29474] XFS (loop4): Ending clean mount
[  990.291045][ T5939] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  990.335456][T29481] BTRFS info (device loop0): enabling ssd optimizations
[  990.398602][T29481] BTRFS info (device loop0): turning on async discard
[  990.405426][T29481] BTRFS info (device loop0): enabling free space tree
[  990.566811][T29537] netlink: 'syz.2.9812': attribute type 1 has an invalid length.
[  990.695061][ T5924] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  991.140386][T29543] bond0: option lp_interval: invalid value (0)
[  991.155420][T29546] loop0: detected capacity change from 0 to 1024
[  991.193180][T29543] bond0: option lp_interval: allowed values 1 - 2147483647
[  991.208168][T29546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  991.246669][T29543] bond0 (unregistering): Released all slaves
[  991.275283][T29546] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  991.313670][T29546] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  991.357071][T29546] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  991.430631][T29546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  991.527433][T29510] loop7: detected capacity change from 0 to 32768
[  991.593855][T29510] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9810 (29510)
[  991.638959][ T5924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  991.716488][T29510] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  991.789805][T29510] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  991.815610][T29564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9830'.
[  991.904654][T29574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9832'.
[  992.048182][T29574] bond2: option xmit_hash_policy: invalid value (9)
[  992.088789][T29510] BTRFS info (device loop7): enabling ssd optimizations
[  992.133254][T29510] BTRFS info (device loop7): turning on async discard
[  992.134611][T29574] bond2 (unregistering): Released all slaves
[  992.155500][T29510] BTRFS info (device loop7): enabling free space tree
[  992.309995][T29591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9835'.
[  992.359521][T18025] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  992.510712][T29593] loop0: detected capacity change from 0 to 2048
[  992.561746][T29593] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=26504, location=26504
[  992.621031][T29593] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  992.701524][   T31] audit: type=1800 audit(1001.848:249): pid=29593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9836" name="file1" dev="loop0" ino=1367 res=0 errno=0
[  993.234837][T29565] loop2: detected capacity change from 0 to 32768
[  993.296521][T29565] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9831 (29565)
[  993.412835][T29565] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  993.465617][T29565] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  993.514519][T29620] loop7: detected capacity change from 0 to 1764
[  993.834906][T29565] BTRFS info (device loop2): enabling ssd optimizations
[  993.863947][T29565] BTRFS info (device loop2): turning on async discard
[  993.896356][T29565] BTRFS info (device loop2): enabling free space tree
[  993.978209][T29650] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9856'.
[  994.032590][T29650] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9856'.
[  994.171834][T26715] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  994.760846][T29679] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9871'.
[  994.835534][T29679] ip6tnl3: entered allmulticast mode
[  995.566358][ T5915] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  995.686509][T29716] netlink: 'syz.0.9889': attribute type 30 has an invalid length.
[  995.745114][ T5915] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  995.803082][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.865329][ T5915] usb 5-1: Product: syz
[  995.889996][T29716] bond2: option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6)
[  995.913837][ T5915] usb 5-1: Manufacturer: syz
[  995.918484][ T5915] usb 5-1: SerialNumber: syz
[  995.960143][ T5915] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  995.987298][T29716] bond2 (unregistering): Released all slaves
[  996.006169][   T30] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  996.047475][ T5906] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  996.144321][T29731] loop1: detected capacity change from 0 to 256
[  996.218273][T29731] FAT-fs (loop1): Directory bread(block 64) failed
[  996.224676][ T5906] usb 3-1: Using ep0 maxpacket: 8
[  996.225144][T29733] netlink: 'syz.7.9897': attribute type 2 has an invalid length.
[  996.251761][T29731] FAT-fs (loop1): Directory bread(block 65) failed
[  996.263906][    C1] usb 5-1: ath: unknown panic pattern!
[  996.273182][ T5906] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  996.278144][T29731] FAT-fs (loop1): Directory bread(block 66) failed
[  996.294532][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.302635][ T5906] usb 3-1: Product: syz
[  996.323123][T29731] FAT-fs (loop1): Directory bread(block 67) failed
[  996.325100][ T5906] usb 3-1: Manufacturer: syz
[  996.340343][ T5906] usb 3-1: SerialNumber: syz
[  996.351760][T29731] FAT-fs (loop1): Directory bread(block 68) failed
[  996.362048][ T5906] usb 3-1: config 0 descriptor??
[  996.372873][T29731] FAT-fs (loop1): Directory bread(block 69) failed
[  996.373193][ T5906] gspca_main: sq930x-2.14.0 probing 2770:930c
[  996.399241][T29731] FAT-fs (loop1): Directory bread(block 70) failed
[  996.422358][T29731] FAT-fs (loop1): Directory bread(block 71) failed
[  996.434596][T29731] FAT-fs (loop1): Directory bread(block 72) failed
[  996.441420][T29731] FAT-fs (loop1): Directory bread(block 73) failed
[  996.615271][ T5915] usb 5-1: USB disconnect, device number 111
[  996.681072][T29724] loop8: detected capacity change from 0 to 32768
[  996.799832][ T5906] gspca_sq930x: ucbus_write failed -71
[  996.816682][ T5906] sq930x 3-1:0.0: probe with driver sq930x failed with error -71
[  996.876912][ T5906] usb 3-1: USB disconnect, device number 105
[  997.010943][   T31] audit: type=1326 audit(1006.373:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29743 comm="syz.7.9904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  997.058314][T29744] xt_CT: You must specify a L4 protocol and not use inversions on it
[  997.058422][   T30] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  997.112661][   T30] ath9k_htc: Failed to initialize the device
[  997.119994][   T31] audit: type=1326 audit(1006.404:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29743 comm="syz.7.9904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  997.155649][ T5915] usb 5-1: ath9k_htc: USB layer deinitialized
[  997.214568][   T31] audit: type=1326 audit(1006.404:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29743 comm="syz.7.9904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  997.293561][   T31] audit: type=1326 audit(1006.404:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29743 comm="syz.7.9904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  997.395233][   T31] audit: type=1326 audit(1006.404:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29743 comm="syz.7.9904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  997.492729][T29753] loop4: detected capacity change from 0 to 512
[  997.501035][   T31] audit: type=1326 audit(1006.404:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29743 comm="syz.7.9904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  997.579185][T29753] EXT4-fs (loop4): orphan cleanup on readonly fs
[  997.590620][   T31] audit: type=1326 audit(1006.404:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29743 comm="syz.7.9904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  997.611895][T29753] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #11: block 1728053262: comm syz.4.9908: lblock 0 mapped to illegal pblock 1728053262 (length 1)
[  997.614244][   T31] audit: type=1326 audit(1006.404:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29743 comm="syz.7.9904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  997.651093][   T31] audit: type=1326 audit(1006.404:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29743 comm="syz.7.9904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8f9a18f749 code=0x7ffc0000
[  997.729326][T29753] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  997.762410][T29753] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.9908: corrupted inode contents
[  997.791381][T29753] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.9908: mark_inode_dirty error
[  997.865807][T29753] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.9908: corrupted inode contents
[  997.903604][T29739] loop0: detected capacity change from 0 to 32768
[  997.922856][T29753] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.9908: mark_inode_dirty error
[  997.969229][T29739] (syz.0.9900,29739,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  997.984804][T29739] (syz.0.9900,29739,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  998.002359][T29753] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.9908: mark inode dirty (error -117)
[  998.090884][T29753] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117)
[  998.098992][T29739] JBD2: Ignoring recovery information on journal
[  998.160274][T29753] EXT4-fs (loop4): 1 orphan inode deleted
[  998.168514][T29753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  998.294358][T29739] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  998.354887][ T5939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  998.596461][T29782] loop4: detected capacity change from 0 to 1764
[  998.799015][ T5924] ocfs2: Unmounting device (7,0) on (node local)
[  999.074363][T29762] loop7: detected capacity change from 0 to 32768
[  999.187888][T29762] JBD2: Ignoring recovery information on journal
[  999.251509][T29762] jbd2_journal_bmap: journal block not found at offset 32 on loop7-75
[  999.259805][T29762] JBD2: bad block at offset 32
[  999.266032][T29797] loop1: detected capacity change from 0 to 1024
[  999.325997][T29762] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  999.727859][T18025] ocfs2: Unmounting device (7,7) on (node local)
[  999.839270][T29812] loop1: detected capacity change from 0 to 128
[  999.892345][T29812] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[ 1000.206813][T29789] loop8: detected capacity change from 0 to 32768
[ 1000.249617][T29789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.9924 (29789)
[ 1000.300890][T29826] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9940'.
[ 1000.338237][T29826] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9940'.
[ 1000.369985][T29831] loop2: detected capacity change from 0 to 64
[ 1000.387870][T29789] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1000.398372][T29826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9940'.
[ 1000.476494][T29831] Trying to free block not in datazone
[ 1000.497043][T29789] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[ 1000.519250][T29831] minix_free_block (loop2:21): bit already cleared
[ 1000.807065][T29854] openvswitch: netlink: Invalid VLAN frame
[ 1000.854601][T29789] BTRFS info (device loop8): enabling ssd optimizations
[ 1000.897445][T29789] BTRFS info (device loop8): turning on async discard
[ 1000.904259][T29789] BTRFS info (device loop8): enabling free space tree
[ 1001.042586][T29863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9950'.
[ 1001.094120][T29863] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9950'.
[ 1001.134811][ T8227] Bluetooth: hci4: command 0x0406 tx timeout
[ 1001.249779][T20136] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1001.761992][T29889] netlink: 'syz.2.9963': attribute type 1 has an invalid length.
[ 1001.810768][T29889] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9963'.
[ 1002.304066][T29899] loop1: detected capacity change from 0 to 4096
[ 1003.299886][T29939] xt_connbytes: Forcing CT accounting to be enabled
[ 1003.457498][T29947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9991'.
[ 1004.676311][T29985] loop1: detected capacity change from 0 to 256
[ 1004.698584][T29987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10010'.
[ 1004.707513][T29985] exfat: Deprecated parameter 'utf8'
[ 1004.745364][T29987] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10010'.
[ 1004.765577][T29985] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[ 1004.850064][T29991] loop2: detected capacity change from 0 to 16
[ 1004.874087][T29955] loop7: detected capacity change from 0 to 32768
[ 1004.910923][T29955] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.9995 (29955)
[ 1004.937283][T29991] erofs (device loop2): mounted with root inode @ nid 36.
[ 1005.005685][T29955] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1005.064074][T29955] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[ 1005.340762][T29955] BTRFS info (device loop7): enabling ssd optimizations
[ 1005.382090][T29955] BTRFS info (device loop7): turning on async discard
[ 1005.413316][T29955] BTRFS info (device loop7): enabling free space tree
[ 1005.662853][T30021] loop4: detected capacity change from 0 to 136
[ 1005.715778][T18025] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1006.237924][T30039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10029'.
[ 1006.285961][T30033] loop1: detected capacity change from 0 to 4096
[ 1006.328333][T30033] ntfs3(loop1): ino=3, Correct links count -> 2.
[ 1006.483817][T30033] ntfs3(loop1): ino=1a, mi_enum_attr
[ 1006.496319][T30033] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1006.587300][T30043] loop7: detected capacity change from 0 to 256
[ 1006.812331][T26825] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1006.998948][T26825] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[ 1007.023209][T26825] usb 3-1: config 0 has no interface number 0
[ 1007.058414][T26825] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1007.112191][T26825] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1007.160875][T26825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.208195][T26825] usb 3-1: Product: syz
[ 1007.239333][T26825] usb 3-1: Manufacturer: syz
[ 1007.243973][T26825] usb 3-1: SerialNumber: syz
[ 1007.288713][T26825] usb 3-1: config 0 descriptor??
[ 1007.327502][T26825] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[ 1007.452969][T30031] loop0: detected capacity change from 0 to 32768
[ 1007.488705][T30031] syz.0.10025: attempt to access beyond end of device
[ 1007.488705][T30031] loop0: rw=0, sector=68719476736, nr_sectors = 8 limit=32768
[ 1007.574178][    C0] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[ 1007.605748][T30031] Read error 10 at 0x0
[ 1007.609914][T30031] read_mapping_page failed!
[ 1007.626237][   T31] audit: type=1107 audit(1017.511:259): pid=30062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1007.635260][T30031] jfs_mount: diMount failed w/rc = -5
[ 1007.663374][T30031] Mount JFS Failure: -5
[ 1007.667634][T30031] jfs_mount failed w/return code = -5
[ 1007.803556][T26825] usb 3-1: USB disconnect, device number 106
[ 1007.853066][T26825] yurex 3-1:0.50: USB YUREX #0 now disconnected
[ 1007.883480][T30067] : entered promiscuous mode
[ 1008.279812][T26825] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1008.557758][ T5938] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1008.600487][T30091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10055'.
[ 1008.938788][T30095] loop7: detected capacity change from 0 to 4096
[ 1009.008176][T30106] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1009.092626][T30095] ntfs3(loop7): ino=1a, mi_enum_attr
[ 1009.136369][T30095] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[ 1009.446176][T30119] loop0: detected capacity change from 0 to 64
[ 1009.629421][T30129] loop2: detected capacity change from 0 to 256
[ 1009.690525][T30125] loop1: detected capacity change from 0 to 4096
[ 1009.730607][T30125] EXT4-fs (loop1): Test dummy encryption mode enabled
[ 1009.798334][T30129] FAT-fs (loop2): Directory bread(block 64) failed
[ 1009.814224][T30125] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[ 1009.825910][T30129] FAT-fs (loop2): Directory bread(block 65) failed
[ 1009.877019][T30129] FAT-fs (loop2): Directory bread(block 66) failed
[ 1009.880199][T30125] System zones: 0-5
[ 1009.893525][T30134] netlink: 134788 bytes leftover after parsing attributes in process `syz.7.10076'.
[ 1009.939566][T30129] FAT-fs (loop2): Directory bread(block 67) failed
[ 1009.942783][T30138] netlink: 'syz.0.10077': attribute type 1 has an invalid length.
[ 1009.948723][T30125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1009.986322][T30129] FAT-fs (loop2): Directory bread(block 68) failed
[ 1009.998356][T30139] netlink: 11 bytes leftover after parsing attributes in process `syz.8.10078'.
[ 1010.029235][T30129] FAT-fs (loop2): Directory bread(block 69) failed
[ 1010.062804][T30141] loop4: detected capacity change from 0 to 16
[ 1010.087758][T30129] FAT-fs (loop2): Directory bread(block 70) failed
[ 1010.102594][T30141] erofs (device loop4): mounted with root inode @ nid 36.
[ 1010.135389][T30129] FAT-fs (loop2): Directory bread(block 71) failed
[ 1010.142091][T30129] FAT-fs (loop2): Directory bread(block 72) failed
[ 1010.173010][T30129] FAT-fs (loop2): Directory bread(block 73) failed
[ 1010.174979][ T5934] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1010.299729][T30129] syz.2.10074: attempt to access beyond end of device
[ 1010.299729][T30129] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256
[ 1010.371051][T30147] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[ 1010.386582][T30146] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10082'.
[ 1010.434045][T30147] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[ 1010.476660][T30147] overlayfs: missing 'lowerdir'
[ 1010.982277][T30171] loop8: detected capacity change from 0 to 1024
[ 1011.023098][T30173] netlink: 'syz.2.10095': attribute type 2 has an invalid length.
[ 1011.051185][T30171] EXT4-fs (loop8): stripe (32769) is not aligned with cluster size (16), stripe is disabled
[ 1011.081853][T30173] netlink: 'syz.2.10095': attribute type 9 has an invalid length.
[ 1011.110487][T30176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10097'.
[ 1011.127827][T30173] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.10095'.
[ 1011.203478][T30182] netlink: get zone limit has 4 unknown bytes
[ 1011.233189][T30171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1011.464652][T30190] loop4: detected capacity change from 0 to 256
[ 1011.522921][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1011.560342][T30190] FAT-fs (loop4): Directory bread(block 64) failed
[ 1011.608004][T30190] FAT-fs (loop4): Directory bread(block 65) failed
[ 1011.649759][T30193] libceph: resolve 'c' (ret=-3): failed
[ 1011.681265][T30190] FAT-fs (loop4): Directory bread(block 66) failed
[ 1011.705016][T30190] FAT-fs (loop4): Directory bread(block 67) failed
[ 1011.746952][T30190] FAT-fs (loop4): Directory bread(block 68) failed
[ 1011.785897][T30190] FAT-fs (loop4): Directory bread(block 69) failed
[ 1011.792651][T30190] FAT-fs (loop4): Directory bread(block 70) failed
[ 1011.813620][T30190] FAT-fs (loop4): Directory bread(block 71) failed
[ 1011.820263][T30190] FAT-fs (loop4): Directory bread(block 72) failed
[ 1011.869162][T30190] FAT-fs (loop4): Directory bread(block 73) failed
[ 1012.072887][T30203] overlayfs: unescaped trailing colons in lowerdir mount option.
[ 1012.420952][T30183] loop7: detected capacity change from 0 to 32768
[ 1012.476970][T30183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.10098 (30183)
[ 1012.632108][T30183] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1012.713487][T30183] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[ 1012.812530][T30208] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1012.924746][T30183] BTRFS info (device loop7): enabling ssd optimizations
[ 1012.976498][T30183] BTRFS info (device loop7): turning on async discard
[ 1013.010878][T30183] BTRFS info (device loop7): enabling free space tree
[ 1013.297868][T18025] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1013.826527][T30241] netlink: 'syz.7.10120': attribute type 1 has an invalid length.
[ 1013.845469][T30241] netlink: 'syz.7.10120': attribute type 1 has an invalid length.
[ 1013.967722][T30215] loop4: detected capacity change from 0 to 32768
[ 1014.096880][T30215] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1014.180804][T30215] XFS (loop4): Ending clean mount
[ 1014.226656][T30215] XFS (loop4): Quotacheck needed: Please wait.
[ 1014.287000][T30235] loop1: detected capacity change from 0 to 32768
[ 1014.314348][T30215] XFS (loop4): Quotacheck: Done.
[ 1014.339846][T30235] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10117 (30235)
[ 1014.394815][T30208] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1014.449534][ T5939] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1014.477092][T30208] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1014.612900][T30235] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1014.654925][T30235] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[ 1014.680138][T30235] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1014.978227][T30235] BTRFS info (device loop1): rebuilding free space tree
[ 1015.033290][T30235] BTRFS info (device loop1): disabling free space tree
[ 1015.040599][T30235] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1015.082154][T30235] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1015.119019][T30235] BTRFS info (device loop1): enabling ssd optimizations
[ 1015.126011][T30235] BTRFS info (device loop1): enabling disk space caching
[ 1015.155857][T30235] BTRFS info (device loop1): force clearing of disk cache
[ 1015.163361][T30235] BTRFS info (device loop1): enabling auto defrag
[ 1015.184488][T30235] BTRFS info (device loop1): max_inline set to 0
[ 1015.336425][ T6940] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1015.385983][ T3464] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1015.430521][ T3464] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1015.463746][ T3464] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1015.480890][T30296] netlink: 108 bytes leftover after parsing attributes in process `syz.4.10125'.
[ 1015.492395][ T5934] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1015.860452][ T5906] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1016.003037][ T5906] usb 8-1: Using ep0 maxpacket: 8
[ 1016.020496][ T5906] usb 8-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1016.051074][T30317] kernel read not supported for file /${$ (pid: 30317 comm: syz.4.10137)
[ 1016.070285][ T5906] usb 8-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[ 1016.092781][   T31] audit: type=1800 audit(1026.403:260): pid=30317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10137" name="${$" dev="mqueue" ino=83518 res=0 errno=0
[ 1016.117562][ T5906] usb 8-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1016.140831][ T5906] usb 8-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[ 1016.171894][ T5906] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1016.192119][ T5906] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.212377][ T5906] usb 8-1: Product: syz
[ 1016.216601][ T5906] usb 8-1: Manufacturer: syz
[ 1016.254655][ T5906] usb 8-1: SerialNumber: syz
[ 1016.271180][ T5906] hso 8-1:6.0: Can't find BULK OUT endpoint
[ 1016.290853][T30270] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1016.303114][T30322] loop2: detected capacity change from 0 to 64
[ 1016.460560][T30270] usb 9-1: Using ep0 maxpacket: 32
[ 1016.503280][T30269] usb 8-1: USB disconnect, device number 10
[ 1016.512378][T30270] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1016.549182][T30270] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1016.607246][T30270] usb 9-1: config 0 descriptor??
[ 1016.633042][T30270] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1016.645041][T30330] loop4: detected capacity change from 0 to 128
[ 1016.692341][T30330] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[ 1016.939895][ T5939] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1017.038877][T30270] gspca_sunplus: reg_w_riv err -71
[ 1017.064848][T30270] sunplus 9-1:0.0: probe with driver sunplus failed with error -71
[ 1017.114145][T30270] usb 9-1: USB disconnect, device number 19
[ 1017.218430][T30314] loop0: detected capacity change from 0 to 40427
[ 1017.221729][T30345] loop7: detected capacity change from 0 to 256
[ 1017.263314][T30314] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1017.284931][T30314] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1017.294222][T30345] exfat: Deprecated parameter 'utf8'
[ 1017.323300][T30345] exfat: Deprecated parameter 'namecase'
[ 1017.351876][T30314] F2FS-fs (loop0): invalid crc value
[ 1017.394223][T30350] program syz.4.10153 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1017.429697][T30345] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x32796214, utbl_chksum : 0xe619d30d)
[ 1017.462517][T30352] loop2: detected capacity change from 0 to 1764
[ 1017.659934][T30314] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1017.724586][T30314] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1017.767828][T30314] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1017.981700][T30366] loop8: detected capacity change from 0 to 1024
[ 1018.145068][T30366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1018.205094][T30371] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[ 1018.340543][T30371] bond2 (unregistering): Released all slaves
[ 1018.406613][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1018.493414][T30387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10167'.
[ 1018.536935][T30387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10167'.
[ 1018.661362][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1018.948023][T30399] loop7: detected capacity change from 0 to 8
[ 1018.992695][T30399] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 1019.034207][T30399] cramfs: Error -3 while decompressing!
[ 1019.044940][T30403] loop1: detected capacity change from 0 to 128
[ 1019.076930][ T6193] udevd[6193]: incorrect cramfs checksum on /dev/loop7
[ 1019.086956][T30399] cramfs: ffffffff999c82e8(26)->ffff888048be1000(4096)
[ 1019.096051][T30403] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[ 1019.124052][T30399] cramfs: Error -3 while decompressing!
[ 1019.140150][T30399] cramfs: ffffffff999c8302(26)->ffff888048be0000(4096)
[ 1019.170176][T30403] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[ 1019.184917][T30399] cramfs: Error -3 while decompressing!
[ 1019.190574][T30399] cramfs: ffffffff999c831c(16)->ffff88805491f000(4096)
[ 1019.213801][T30399] cramfs: Error -3 while decompressing!
[ 1019.221068][T30399] cramfs: ffffffff999c82e8(26)->ffff888048be1000(4096)
[ 1019.277630][ T6193] udevd[6193]: incorrect cramfs checksum on /dev/loop7
[ 1019.396822][T30403] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535)
[ 1019.596608][ T5934] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1020.057266][T30441] loop8: detected capacity change from 0 to 16
[ 1020.109825][T30441] erofs (device loop8): mounted with root inode @ nid 36.
[ 1020.240949][T30451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10198'.
[ 1020.244934][T30449] netlink: 'syz.2.10196': attribute type 1 has an invalid length.
[ 1020.317966][T30285] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1020.363962][T30453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10199'.
[ 1020.387238][T30455] ipt_rpfilter: unknown options
[ 1020.395823][T30453] tc_dump_action: action bad kind
[ 1020.508510][T30285] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1020.517617][T30285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.554745][T30285] usb 5-1: Product: syz
[ 1020.564470][T30285] usb 5-1: Manufacturer: syz
[ 1020.573274][T30285] usb 5-1: SerialNumber: syz
[ 1020.616833][T30285] usb 5-1: config 0 descriptor??
[ 1020.653476][T30285] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 112
[ 1021.012224][T30475] loop8: detected capacity change from 0 to 1024
[ 1021.016565][T30285]  (null): failure reading functionality
[ 1021.072941][T30285] i2c i2c-2: failure reading functionality
[ 1021.107178][T30475] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1021.123839][T30285] i2c i2c-2: connected i2c-tiny-usb device
[ 1021.170990][T30285] usb 5-1: USB disconnect, device number 112
[ 1021.320976][T20136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1021.735392][T30463] loop7: detected capacity change from 0 to 32768
[ 1021.811568][   T31] audit: type=1800 audit(1032.397:261): pid=30463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.10205" name="file1" dev="loop7" ino=4 res=0 errno=0
[ 1021.812501][T30501] loop8: detected capacity change from 0 to 1024
[ 1021.842475][T30463] ERROR: (device loop7): xtTruncate: xt_getpage: xtree page corrupt
[ 1021.842475][T30463] 
[ 1021.922970][T30463] ERROR: (device loop7): remounting filesystem as read-only
[ 1021.974153][T30501] hfsplus: invalid length 256 has been corrected to 127
[ 1021.987079][T30285] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1022.088615][T30511] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[ 1022.173882][ T3729] hfsplus: b-tree write err: -5, ino 4
[ 1022.624229][T30285] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1022.768763][T30530] loop1: detected capacity change from 0 to 2048
[ 1022.862214][T30534] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1022.910473][T30530] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1
[ 1023.003566][T30530] Remounting filesystem read-only
[ 1023.027350][T30539] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1023.291364][T30548] netlink: 'syz.1.10240': attribute type 11 has an invalid length.
[ 1023.347754][T30548] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.10240'.
[ 1023.700675][T30514] loop7: detected capacity change from 0 to 32768
[ 1023.811630][T30514] JBD2: Ignoring recovery information on journal
[ 1023.841053][T30565] netlink: 'syz.4.10250': attribute type 1 has an invalid length.
[ 1023.949321][T30514] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1024.053004][T30514] OCFS2: ERROR (device loop7): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[ 1024.053223][T30514] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1024.100933][T30514] OCFS2: File system is now read-only.
[ 1024.157194][T30514] (syz.7.10226,30514,1):ocfs2_calc_xattr_init:638 ERROR: status = -117
[ 1024.166192][T30514] (syz.7.10226,30514,1):ocfs2_mknod:337 ERROR: status = -117
[ 1024.243184][T30514] (syz.7.10226,30514,1):ocfs2_mknod:505 ERROR: status = -117
[ 1024.250619][T30514] (syz.7.10226,30514,1):ocfs2_create:678 ERROR: status = -117
[ 1024.321523][T30582] netlink: 'syz.8.10259': attribute type 1 has an invalid length.
[ 1024.359167][T30582] netlink: 228 bytes leftover after parsing attributes in process `syz.8.10259'.
[ 1024.477836][T30588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1024.571995][T30270] lo speed is unknown, defaulting to 1000
[ 1024.592816][T30270] syz0: Port: 1 Link DOWN
[ 1024.642999][T30269] lo speed is unknown, defaulting to 1000
[ 1024.647950][T18025] ocfs2: Unmounting device (7,7) on (node local)
[ 1024.713989][T30591] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10264'.
[ 1024.843108][T30596] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10266'.
[ 1024.954177][T30600] loop4: detected capacity change from 0 to 64
[ 1025.044180][T30600] syz.4.10268: attempt to access beyond end of device
[ 1025.044180][T30600] loop4: rw=0, sector=65534, nr_sectors = 2 limit=64
[ 1025.116452][T30600] Buffer I/O error on dev loop4, logical block 32767, async page read
[ 1025.153218][T30600] syz.4.10268: attempt to access beyond end of device
[ 1025.153218][T30600] loop4: rw=0, sector=65534, nr_sectors = 2 limit=64
[ 1025.219986][T30600] Buffer I/O error on dev loop4, logical block 32767, async page read
[ 1025.427879][T30608] loop0: detected capacity change from 0 to 4096
[ 1025.435116][T30616] binfmt_misc: register: failed to install interpreter file ./file0
[ 1025.502747][T30608] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[ 1026.202692][T30645] loop1: detected capacity change from 0 to 1024
[ 1026.214547][T30644] ip6gretap2: entered allmulticast mode
[ 1026.367948][ T3464] hfsplus: b-tree write err: -5, ino 4
[ 1026.461181][T30656] loop4: detected capacity change from 0 to 256
[ 1026.535614][T30656] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[ 1026.761118][T30668] netlink: 'syz.1.10300': attribute type 1 has an invalid length.
[ 1026.823492][T30668] netlink: 228 bytes leftover after parsing attributes in process `syz.1.10300'.
[ 1026.948284][T30675] loop2: detected capacity change from 0 to 128
[ 1027.265678][T30681] bridge0: port 1(bridge_slave_0) entered learning state
[ 1027.828549][T30706] openvswitch: netlink: IP tunnel dst address not specified
[ 1027.918345][T30700] loop1: detected capacity change from 0 to 4096
[ 1028.178844][T30718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10325'.
[ 1028.281362][ T5906] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1028.370422][   T31] audit: type=1326 audit(1039.295:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.2.10328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[ 1028.472077][ T5906] usb 5-1: Using ep0 maxpacket: 16
[ 1028.479846][ T5906] usb 5-1: config 0 has an invalid interface number: 102 but max is 0
[ 1028.498676][   T31] audit: type=1326 audit(1039.316:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.2.10328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[ 1028.522279][ T5906] usb 5-1: config 0 has no interface number 0
[ 1028.562505][ T5906] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=53.54
[ 1028.581848][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.596329][   T31] audit: type=1326 audit(1039.316:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.2.10328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[ 1028.622683][T30682] loop7: detected capacity change from 0 to 40427
[ 1028.634209][ T5906] usb 5-1: Product: syz
[ 1028.638413][ T5906] usb 5-1: Manufacturer: syz
[ 1028.643009][ T5906] usb 5-1: SerialNumber: syz
[ 1028.686450][T30682] F2FS-fs (loop7): invalid crc value
[ 1028.704827][ T5906] usb 5-1: config 0 descriptor??
[ 1028.712828][   T31] audit: type=1326 audit(1039.337:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.2.10328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[ 1028.765857][   T31] audit: type=1326 audit(1039.337:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.2.10328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[ 1028.805642][   T31] audit: type=1326 audit(1039.337:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.2.10328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[ 1028.875844][T30737] netlink: 'syz.0.10333': attribute type 1 has an invalid length.
[ 1028.929456][ T5906] snd-usb-audio 5-1:0.102: probe with driver snd-usb-audio failed with error -71
[ 1028.936469][ T5906] usb 5-1: USB disconnect, device number 113
[ 1028.961061][   T31] audit: type=1326 audit(1039.337:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.2.10328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[ 1028.961122][   T31] audit: type=1326 audit(1039.337:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30719 comm="syz.2.10328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fecba58f749 code=0x7ffc0000
[ 1029.071653][T30682] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1029.092857][T30682] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1029.148785][T30682] syz.7.10308: attempt to access beyond end of device
[ 1029.148785][T30682] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427
[ 1029.286832][T30747] loop8: detected capacity change from 0 to 1024
[ 1029.345061][T30747] hfsplus: found bad thread record in catalog
[ 1029.446096][T30752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10340'.
[ 1029.446130][T30752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10340'.
[ 1029.446151][T30752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10340'.
[ 1029.527064][ T1312] hfsplus: b-tree write err: -5, ino 4
[ 1030.118251][T30771] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10350'.
[ 1030.539357][T30270] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1030.683796][T30269] usb 3-1: new low-speed USB device number 107 using dummy_hcd
[ 1030.710858][T30270] usb 1-1: Using ep0 maxpacket: 8
[ 1030.748511][T30270] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1030.773115][T30270] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1030.796297][T30270] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1030.816593][T30270] usb 1-1: Product: syz
[ 1030.832587][T30270] usb 1-1: Manufacturer: syz
[ 1030.853354][T30270] usb 1-1: SerialNumber: syz
[ 1030.867505][T30269] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1030.892365][T30269] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[ 1030.913234][T30269] usb 3-1: config 0 has no interface number 0
[ 1030.919439][T30269] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1030.948887][T30269] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1030.968675][T30269] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1030.985133][T30269] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1030.995401][T30269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1031.050288][T30269] usb 3-1: config 0 descriptor??
[ 1031.087871][T30785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1031.096888][T30270] usb 1-1: Handspring Visor / Palm OS: No valid connect info available
[ 1031.134843][T30270] usb 1-1: Handspring Visor / Palm OS: port 91, is for unknown use
[ 1031.167835][T30270] usb 1-1: Handspring Visor / Palm OS: port 95, is for unknown use
[ 1031.177378][T30810] nbd: illegal input index 2958377
[ 1031.186436][T30270] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[ 1031.287545][T30270] usb 1-1: palm_os_3_probe - error -71 getting bytes available request
[ 1031.331040][T30270] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[ 1031.343041][T30270] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[ 1031.378930][T30270] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[ 1031.425201][T30270] usb 1-1: USB disconnect, device number 115
[ 1031.445796][T30270] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[ 1031.463084][   T32] INFO: task syz-executor:23182 blocked for more than 143 seconds.
[ 1031.481564][   T32]       Not tainted syzkaller #0
[ 1031.496221][T30270] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[ 1031.510071][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1031.519287][T30269] usb 3-1: USB disconnect, device number 107
[ 1031.541744][T30270] visor 1-1:1.0: device disconnected
[ 1031.557005][   T32] task:syz-executor    state:D stack:21592 pid:23182 tgid:23182 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1031.591528][   T32] Call Trace:
[ 1031.598181][   T32]  <TASK>
[ 1031.601264][   T32]  __schedule+0x14bc/0x5000
[ 1031.607393][   T32]  ? __pfx___schedule+0x10/0x10
[ 1031.612381][   T32]  ? schedule+0x91/0x360
[ 1031.618065][   T32]  schedule+0x165/0x360
[ 1031.622339][   T32]  io_schedule+0x80/0xd0
[ 1031.627892][   T32]  folio_wait_bit_common+0x6b0/0xb80
[ 1031.633348][   T32]  ? __pfx_folio_wait_bit_common+0x10/0x10
[ 1031.640423][   T32]  ? __pfx_wake_page_function+0x10/0x10
[ 1031.648004][   T32]  ? folios_put_refs+0x584/0x670
[ 1031.675133][   T32]  ? __pfx_find_lock_entries+0x10/0x10
[ 1031.681431][   T32]  ? __filemap_get_folio_mpol+0x81/0xb00
[ 1031.691179][   T32]  __filemap_get_folio_mpol+0x13e/0xb00
[ 1031.698343][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1031.704735][   T32]  truncate_inode_pages_range+0x3f0/0xd90
[ 1031.710794][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1031.717470][   T32]  ? kasan_save_stack+0x4d/0x60
[ 1031.725635][   T32]  ? kasan_save_stack+0x3e/0x60
[ 1031.730704][   T32]  ? kasan_record_aux_stack+0xbd/0xd0
[ 1031.736303][   T32]  ? deactivate_locked_super+0xbc/0x130
[ 1031.742102][   T32]  ? task_work_run+0x1d4/0x260
[ 1031.747727][   T32]  ? exit_to_user_mode_loop+0xff/0x4f0
[ 1031.753683][   T32]  ? do_syscall_64+0x2e3/0xf80
[ 1031.758571][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.764783][   T32]  ? __pfx_truncate_inode_pages_range+0x10/0x10
[ 1031.771535][   T32]  ? __lock_acquire+0x6b6/0x2cf0
[ 1031.776615][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1031.781979][   T32]  ? lockdep_hardirqs_on+0x98/0x140
[ 1031.787332][   T32]  evict+0x607/0xae0
[ 1031.791259][   T32]  ? __pfx_evict+0x10/0x10
[ 1031.795719][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1031.801546][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1031.807630][   T32]  ? do_raw_spin_unlock+0x122/0x240
[ 1031.812881][   T32]  evict_inodes+0x753/0x7e0
[ 1031.824911][   T32]  ? __pfx_evict_inodes+0x10/0x10
[ 1031.830040][   T32]  generic_shutdown_super+0x9a/0x2c0
[ 1031.839442][   T32]  kill_block_super+0x44/0x90
[ 1031.845517][   T32]  deactivate_locked_super+0xbc/0x130
[ 1031.850936][   T32]  cleanup_mnt+0x425/0x4c0
[ 1031.855842][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1031.861507][   T32]  ? lockdep_hardirqs_on+0x98/0x140
[ 1031.866827][   T32]  task_work_run+0x1d4/0x260
[ 1031.871479][   T32]  ? __pfx_task_work_run+0x10/0x10
[ 1031.876750][   T32]  ? exit_to_user_mode_loop+0x55/0x4f0
[ 1031.882287][   T32]  exit_to_user_mode_loop+0xff/0x4f0
[ 1031.887597][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1031.893370][   T32]  ? rcu_is_watching+0x15/0xb0
[ 1031.898154][   T32]  do_syscall_64+0x2e3/0xf80
[ 1031.902861][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.908942][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1031.914696][   T32]  ? exc_page_fault+0xab/0x100
[ 1031.919775][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.925810][   T32] RIP: 0033:0x7f2793590a77
[ 1031.930359][   T32] RSP: 002b:00007ffe95137f18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1031.941670][   T32] RAX: 0000000000000000 RBX: 00007f2793613d7d RCX: 00007f2793590a77
[ 1031.949737][   T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe95137fd0
[ 1031.957750][   T32] RBP: 00007ffe95137fd0 R08: 0000000000000000 R09: 0000000000000000
[ 1031.966161][   T32] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe95139060
[ 1031.974312][   T32] R13: 00007f2793613d7d R14: 00000000000d89aa R15: 00007ffe951390a0
[ 1031.982380][   T32]  </TASK>
[ 1031.985524][   T32] 
[ 1031.985524][   T32] Showing all locks held in the system:
[ 1031.993948][   T32] 1 lock held by khungtaskd/32:
[ 1031.998992][   T32]  #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1032.008984][   T32] 2 locks held by getty/5578:
[ 1032.013955][   T32]  #0: ffff8880348350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1032.023856][   T32]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[ 1032.034112][   T32] 3 locks held by kworker/u8:17/6383:
[ 1032.040406][   T32]  #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[ 1032.052509][   T32]  #1: ffffc90002ef7b80 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[ 1032.066621][   T32]  #2: ffffffff8df47400 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 1032.076853][   T32] 1 lock held by syz-executor/23182:
[ 1032.083529][   T32]  #0: ffff88808e29c0e0 (&type->s_umount_key#125){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[ 1032.094120][   T32] 1 lock held by syz.2.10357/30783:
[ 1032.099342][   T32] 
[ 1032.102074][   T32] =============================================
[ 1032.102074][   T32] 
[ 1032.111068][   T32] NMI backtrace for cpu 1
[ 1032.111088][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1032.111117][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1032.111132][   T32] Call Trace:
[ 1032.111143][   T32]  <TASK>
[ 1032.111154][   T32]  dump_stack_lvl+0x189/0x250
[ 1032.111195][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1032.111226][   T32]  ? __pfx__printk+0x10/0x10
[ 1032.111281][   T32]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1032.111313][   T32]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1032.111343][   T32]  ? __pfx__printk+0x10/0x10
[ 1032.111382][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.111416][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1032.111468][   T32]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1032.111499][   T32]  sys_info+0x135/0x170
[ 1032.111538][   T32]  watchdog+0xf95/0xfe0
[ 1032.111581][   T32]  ? watchdog+0x20a/0xfe0
[ 1032.111626][   T32]  kthread+0x711/0x8a0
[ 1032.111664][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1032.111700][   T32]  ? __pfx_kthread+0x10/0x10
[ 1032.111731][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.111764][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1032.111796][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.111825][   T32]  ? lockdep_hardirqs_on+0x98/0x140
[ 1032.111858][   T32]  ? __pfx_kthread+0x10/0x10
[ 1032.111893][   T32]  ret_from_fork+0x599/0xb30
[ 1032.111921][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1032.111959][   T32]  ? __switch_to_asm+0x39/0x70
[ 1032.111992][   T32]  ? __switch_to_asm+0x33/0x70
[ 1032.112024][   T32]  ? __pfx_kthread+0x10/0x10
[ 1032.112059][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1032.112114][   T32]  </TASK>
[ 1032.112124][   T32] Sending NMI from CPU 1 to CPUs 0:
[ 1032.289486][    C0] NMI backtrace for cpu 0
[ 1032.289508][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1032.289533][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1032.289548][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1032.289585][    C0] Code: be 83 b5 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 90 0d 00 f3 0f 1e fa fb f4 <e9> 93 83 b5 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1032.289604][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[ 1032.289625][    C0] RAX: f4bfaf0594586700 RBX: ffffffff81978eba RCX: f4bfaf0594586700
[ 1032.289643][    C0] RDX: 0000000000000001 RSI: ffffffff8d7867c7 RDI: ffffffff8bc02360
[ 1032.289660][    C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db
[ 1032.289677][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f817670
[ 1032.289695][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[ 1032.289713][    C0] FS:  0000000000000000(0000) GS:ffff888125e44000(0000) knlGS:0000000000000000
[ 1032.289732][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1032.289751][    C0] CR2: 00007fecba7b7198 CR3: 00000000783a2000 CR4: 0000000000350ef0
[ 1032.289770][    C0] Call Trace:
[ 1032.289781][    C0]  <TASK>
[ 1032.289789][    C0]  default_idle+0x13/0x20
[ 1032.289824][    C0]  default_idle_call+0x73/0xb0
[ 1032.289859][    C0]  do_idle+0x1ea/0x520
[ 1032.289885][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.289912][    C0]  ? irqentry_exit+0x5ba/0x660
[ 1032.289946][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1032.289983][    C0]  cpu_startup_entry+0x44/0x60
[ 1032.290009][    C0]  rest_init+0x2de/0x300
[ 1032.290032][    C0]  start_kernel+0x3a7/0x400
[ 1032.290065][    C0]  x86_64_start_reservations+0x24/0x30
[ 1032.290090][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1032.290115][    C0]  common_startup_64+0x13e/0x147
[ 1032.290157][    C0]  </TASK>
[ 1032.485648][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[ 1032.492501][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1032.501623][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1032.511685][   T32] Call Trace:
[ 1032.514961][   T32]  <TASK>
[ 1032.517879][   T32]  dump_stack_lvl+0x99/0x250
[ 1032.522470][   T32]  ? __asan_memcpy+0x40/0x70
[ 1032.527064][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1032.532259][   T32]  ? __pfx__printk+0x10/0x10
[ 1032.536857][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.542499][   T32]  vpanic+0x237/0x6d0
[ 1032.546504][   T32]  ? __pfx_vpanic+0x10/0x10
[ 1032.551009][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.556638][   T32]  ? preempt_schedule_common+0x83/0xd0
[ 1032.562108][   T32]  panic+0xb9/0xc0
[ 1032.565832][   T32]  ? __pfx_panic+0x10/0x10
[ 1032.570246][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.575873][   T32]  ? preempt_schedule_thunk+0x16/0x30
[ 1032.581244][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.586876][   T32]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1032.593052][   T32]  watchdog+0xfdf/0xfe0
[ 1032.597236][   T32]  ? watchdog+0x20a/0xfe0
[ 1032.601584][   T32]  kthread+0x711/0x8a0
[ 1032.605666][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1032.610356][   T32]  ? __pfx_kthread+0x10/0x10
[ 1032.614948][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.620582][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1032.625782][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1032.631416][   T32]  ? lockdep_hardirqs_on+0x98/0x140
[ 1032.636625][   T32]  ? __pfx_kthread+0x10/0x10
[ 1032.641234][   T32]  ret_from_fork+0x599/0xb30
[ 1032.645819][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1032.650933][   T32]  ? __switch_to_asm+0x39/0x70
[ 1032.655699][   T32]  ? __switch_to_asm+0x33/0x70
[ 1032.660471][   T32]  ? __pfx_kthread+0x10/0x10
[ 1032.665066][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1032.669848][   T32]  </TASK>
[ 1032.673144][   T32] Kernel Offset: disabled
[ 1032.677469][   T32] Rebooting in 86400 seconds..