last executing test programs:

13m19.712727095s ago: executing program 32 (id=4253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)

13m11.579697431s ago: executing program 33 (id=4335):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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")
renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x0)

11m34.897105011s ago: executing program 7 (id=5772):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

11m34.680103226s ago: executing program 7 (id=5775):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x29, 0x4e, 0x0, 0x0)

11m34.430763447s ago: executing program 7 (id=5780):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)

11m34.052038924s ago: executing program 7 (id=5785):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x1000002, &(0x7f0000000200)={[{@errors_remount}, {}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@gid}, {@discard_size={'discard', 0x3d, 0x426}}, {@grpquota}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x401}}]}, 0x1, 0x60b9, &(0x7f000000c400)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f0000020240)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})

11m32.665022807s ago: executing program 7 (id=5807):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
sendfile(r0, r0, 0x0, 0xffff)

11m31.922923736s ago: executing program 7 (id=5819):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x40000)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0x2, 0x87})

11m31.342854361s ago: executing program 34 (id=5819):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x40000)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000080)={0x2, 0x87})

5m37.052841527s ago: executing program 8 (id=11027):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000180)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x10}, 0x94)

5m36.811861219s ago: executing program 8 (id=11029):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
pause()

5m35.748609831s ago: executing program 8 (id=11046):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000100019002cbd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a70d040069920700280012800e0001006970366772657461700000001400028006000e000313000006000f00050000001400030069703667726574617030"], 0x5c}}, 0x8040)

5m35.432283531s ago: executing program 8 (id=11052):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000440)={[{@dmask={'dmask', 0x3d, 0x4ae}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@sys_tz}, {@errors_remount}, {}, {}, {@gid}, {@utf8}, {@sys_tz}, {@sys_tz}, {@keep_last_dots}]}, 0x1, 0x152d, &(0x7f00000034c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

5m34.857422202s ago: executing program 8 (id=11060):
syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

5m34.220417363s ago: executing program 8 (id=11069):
syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))

5m33.745294534s ago: executing program 35 (id=11069):
syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40))

4m20.637360459s ago: executing program 0 (id=12080):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
fgetxattr(r0, &(0x7f0000000000)=@random={'os2.', 'GPL\x00'}, 0x0, 0x0)

4m20.42509765s ago: executing program 0 (id=12085):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1})

4m20.173372897s ago: executing program 0 (id=12092):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="d5f5440496f56877a926459c091f", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m19.895974205s ago: executing program 0 (id=12099):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0x10001, 0x0, 0x4, 0x0, 0x8, {0x77359400}, {0x4, 0x8, 0x2, 0xfd, 0x40, 0x0, "0bc112e7"}, 0x8, 0x2, {0x0}, 0x42d})

4m19.659011208s ago: executing program 0 (id=12103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)

4m19.465288554s ago: executing program 0 (id=12107):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000)

4m3.295059909s ago: executing program 36 (id=12107):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000)

2m40.014491468s ago: executing program 6 (id=13537):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000000f1401000c000000fddbdf25080003000400000009004500fcffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x2006c8c0}, 0x20000000)

2m39.675700849s ago: executing program 6 (id=13543):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x80000000000000)

2m39.387618202s ago: executing program 6 (id=13550):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='uid_map\x00')
lseek(r0, 0x289e0cb5, 0x0)

2m39.048266818s ago: executing program 6 (id=13556):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3a, &(0x7f0000000180)=[{0xd, '\x00', @st={0x4, [{0x1, @uvalue=0x401}, {0x2, @svalue=0x6}, {0x3, @svalue=0xffffffffffffffff}, {0x3, @uvalue=0x3}]}, 0xffffffff}]})

2m38.714611579s ago: executing program 6 (id=13564):
setresuid(0xee00, 0xee00, 0x0)
ptrace(0x10, 0x1)

2m38.496490742s ago: executing program 6 (id=13571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800)

2m22.29216614s ago: executing program 37 (id=13571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800)

9.76594892s ago: executing program 3 (id=15734):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0xa}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x0, 0x400, 0x2, 0x2, 0x17}}]}}]}, 0x154}}, 0x0)

9.330072925s ago: executing program 3 (id=15738):
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './bus\x00'})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x40}})

9.036872257s ago: executing program 3 (id=15742):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e23, 0x81, @local, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x18, 0x1, 0x51, 0xfffffffb}}], 0x18}, 0x48840)

8.869114754s ago: executing program 3 (id=15745):
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
sync()
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

8.339858657s ago: executing program 3 (id=15751):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_BROADCAST={0xa, 0x2, @random="0a5e1ea96a84"}]}, 0x54}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)

8.008378304s ago: executing program 3 (id=15758):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)

5.100337644s ago: executing program 2 (id=15781):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)

4.380789994s ago: executing program 5 (id=15790):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0xe19, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x4237}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000090)

4.066505464s ago: executing program 5 (id=15792):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe})
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa04000a640400d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3.847384686s ago: executing program 5 (id=15795):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x100)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000280))

3.643313919s ago: executing program 5 (id=15796):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0)

3.155576985s ago: executing program 5 (id=15805):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4810, &(0x7f0000000040)=ANY=[], 0x11, 0x6ba, &(0x7f00000001c0)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0)

2.924566754s ago: executing program 4 (id=15807):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_SCRNMAP(r0, 0x4b36, 0x0)

2.900780315s ago: executing program 9 (id=15808):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202)

2.669940044s ago: executing program 9 (id=15810):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0xffffff6a, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000)

2.642905046s ago: executing program 4 (id=15811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

2.641830839s ago: executing program 2 (id=15812):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

2.428750416s ago: executing program 9 (id=15814):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x1000000b}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r1, 0x0, 0x8008, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.406538086s ago: executing program 4 (id=15816):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84)

2.273805336s ago: executing program 2 (id=15817):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300)
sendmmsg$inet(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000)

2.135802533s ago: executing program 9 (id=15819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x4, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080)

1.93261761s ago: executing program 2 (id=15821):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8)

1.866567006s ago: executing program 9 (id=15822):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x3, 0xb911, &(0x7f00000001c0)="$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")

1.705218008s ago: executing program 1 (id=15823):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000001c0)={'dt2801\x00', [0x408, 0x7ff, 0xffffffff, 0x0, 0x1, 0x1, 0x8, 0x7, 0xa, 0xfc, 0x2, 0x1, 0x684b, 0x4000004, 0x6, 0xffffffff, 0x1, 0x1a447, 0x3, 0x40000006, 0x100, 0x2, 0xf24, 0x6, 0xb, 0xa, 0x5, 0xc, 0x4, 0x10000, 0x6]})

1.606707349s ago: executing program 2 (id=15824):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000002e000000180001801400020064756d6d793000"], 0x2c}}, 0x0)

1.429434169s ago: executing program 4 (id=15825):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r0, 0x0, 0x97, 0x4008084, &(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)

1.368984572s ago: executing program 1 (id=15826):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="88d6"], 0x14}, 0x1, 0x0, 0x0, 0x4040889}, 0x4000)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

1.2927389s ago: executing program 2 (id=15827):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
get_mempolicy(&(0x7f0000000000), 0x0, 0x6, &(0x7f00006a5000/0xd000)=nil, 0x2)

1.174116079s ago: executing program 5 (id=15828):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000b80), 0x1, 0x45f, &(0x7f0000000080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

1.046071443s ago: executing program 4 (id=15829):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="31032abd7000fbdbdf250b00000008000300", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)

1.034883978s ago: executing program 1 (id=15830):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
prlimit64(r0, 0x0, &(0x7f00000032c0), 0x0)

689.105033ms ago: executing program 4 (id=15831):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x8, 0x4, 0xfffff43e, 0x97}, &(0x7f0000004480)=0x98)

463.883325ms ago: executing program 1 (id=15832):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0xc901, @mcast1, 0xfff}, 0x1c)
syz_emit_ethernet(0x6e, &(0x7f0000002240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9379, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, [@fragment={0x32, 0x0, 0x0, 0x1, 0x0, 0xc, 0x66}]}}}}}}}, 0x0)

295.680046ms ago: executing program 1 (id=15833):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

21.905455ms ago: executing program 1 (id=15834):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

0s ago: executing program 9 (id=15835):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@nojournal_checksum}, {@noinit_itable}]}, 0x3, 0x445, &(0x7f0000000600)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
rmdir(&(0x7f0000000000)='./bus\x00')

kernel console output (not intermixed with test programs):

3-1: config 0 descriptor??
[ 1220.802546][ T7443] .`: renamed from bond0 (while UP)
[ 1220.870543][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14369'.
[ 1221.252707][  T875] gs_usb 3-1:0.0: Couldn't get device config: (err=-71)
[ 1221.274513][  T875] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[ 1221.329355][ T7466] xt_time: invalid argument - start or stop time greater than 23:59:59
[ 1221.339518][  T875] usb 3-1: USB disconnect, device number 16
[ 1221.677529][ T7474] loop3: detected capacity change from 0 to 512
[ 1221.691185][ T7448] loop9: detected capacity change from 0 to 32768
[ 1221.750088][ T7474] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1221.790338][ T7448] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1221.856122][ T7458] loop1: detected capacity change from 0 to 32768
[ 1221.863143][ T7484] netlink: 'syz.5.14383': attribute type 16 has an invalid length.
[ 1221.895792][ T7458] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[ 1221.907482][ T7448] XFS (loop9): Ending clean mount
[ 1221.916474][ T7474] EXT4-fs (loop3): re-mounted 00800000-0000-0000-0000-000000000000.
[ 1221.930966][ T7484] netlink: 'syz.5.14383': attribute type 17 has an invalid length.
[ 1221.943859][ T7448] XFS (loop9): Quotacheck needed: Please wait.
[ 1221.951628][ T7458] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1222.070569][ T7484] 8021q: adding VLAN 0 to HW filter on device .`
[ 1222.101688][ T5824] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[ 1222.123459][ T7448] XFS (loop9): Quotacheck: Done.
[ 1222.128697][ T7484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1222.253738][T31686] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1222.259617][ T7458] XFS (loop1): Ending clean mount
[ 1222.565239][ T5815] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1222.983101][ T7524] loop4: detected capacity change from 0 to 24
[ 1223.019901][ T7524] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 1223.063239][ T7524] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1223.760449][ T7550] binder: 7549:7550 ioctl c018620c 2000000000c0 returned -22
[ 1224.027173][ T7554] binder: 7553:7554 ioctl c018620c 2000000001c0 returned -22
[ 1224.214087][   T31] audit: type=1326 audit(1771003590.196:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.14415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1224.325770][ T7558] loop9: detected capacity change from 0 to 4096
[ 1224.332380][   T31] audit: type=1326 audit(1771003590.196:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.14415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1224.387594][ T7558] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[ 1224.443629][   T31] audit: type=1326 audit(1771003590.233:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.14415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1224.511888][ T7558] ntfs3(loop9): ino=19, mi_enum_attr
[ 1224.540528][   T31] audit: type=1326 audit(1771003590.233:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.14415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1224.654271][   T31] audit: type=1326 audit(1771003590.233:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.14415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1224.695532][ T7558] ntfs3(loop9): failed to convert "c46c" to cp1251
[ 1224.703009][ T7558] ntfs3(loop9): ino=20, mi_enum_attr
[ 1224.732923][ T7540] loop2: detected capacity change from 0 to 32768
[ 1224.755137][   T31] audit: type=1326 audit(1771003590.233:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.14415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1224.827413][   T31] audit: type=1326 audit(1771003590.233:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.14415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1224.851323][   T31] audit: type=1326 audit(1771003590.233:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.14415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1224.902365][ T7540] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1224.931617][ T7542] loop5: detected capacity change from 0 to 32768
[ 1224.946594][   T31] audit: type=1326 audit(1771003590.233:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.4.14415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1224.972100][ T7542] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.14405 (7542)
[ 1225.036510][ T7542] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1225.073969][ T7542] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1225.089811][ T7582] loop4: detected capacity change from 0 to 256
[ 1225.370592][ T7600] loop3: detected capacity change from 0 to 1024
[ 1225.405554][ T7542] BTRFS info (device loop5): enabling ssd optimizations
[ 1225.423546][ T7542] BTRFS info (device loop5): turning on async discard
[ 1225.430327][ T7540] XFS (loop2): Starting recovery (logdev: internal)
[ 1225.453585][ T7600] syz.3.14425: attempt to access beyond end of device
[ 1225.453585][ T7600] loop3: rw=8388608, sector=917504, nr_sectors = 2 limit=1024
[ 1225.480083][ T7542] BTRFS info (device loop5): enabling free space tree
[ 1225.513354][ T7540] XFS (loop2): Ending recovery (logdev: internal)
[ 1225.530028][ T7600] Buffer I/O error on dev loop3, logical block 458752, async page read
[ 1225.604760][ T7600] syz.3.14425: attempt to access beyond end of device
[ 1225.604760][ T7600] loop3: rw=8388608, sector=917504, nr_sectors = 2 limit=1024
[ 1225.643806][ T7600] Buffer I/O error on dev loop3, logical block 458752, async page read
[ 1225.765685][ T5975] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1225.798615][ T5835] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1226.041131][ T7617] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode
[ 1226.429897][ T7631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1227.134998][  T875] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 1227.338583][  T875] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[ 1227.353440][  T875] usb 6-1: config 0 has no interface number 0
[ 1227.381348][  T875] usb 6-1: config 0 interface 255 has no altsetting 0
[ 1227.421592][  T875] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1227.498943][  T875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1227.513227][  T875] usb 6-1: config 0 descriptor??
[ 1227.582273][  T875] cp210x 6-1:0.255: cp210x converter detected
[ 1227.707833][ T7684] loop4: detected capacity change from 0 to 512
[ 1227.774448][ T7684] EXT4-fs error (device loop4): ext4_orphan_get:1391: comm syz.4.14466: inode #13: comm syz.4.14466: iget: illegal inode #
[ 1227.844754][ T7684] loop4: lost filesystem error report for type 5 error -117
[ 1227.849899][    C0] EXT4-fs (loop4): error count since last fsck: 1
[ 1227.863931][    C0] EXT4-fs (loop4): initial error at time 1771003593: ext4_orphan_get:1391
[ 1227.872541][    C0] EXT4-fs (loop4): last error at time 1771003593: ext4_orphan_get:1391
[ 1227.903778][ T7684] EXT4-fs (loop4): Remounting filesystem read-only
[ 1227.941784][ T7684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1228.010285][ T7695] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[ 1228.047838][  T875] cp210x 6-1:0.255: failed to get vendor val 0x000e size 3: -71
[ 1228.103410][  T875] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1228.145997][  T875] usb 6-1: USB disconnect, device number 108
[ 1228.197022][ T2255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1228.223900][  T875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1228.232905][ T7704] loop9: detected capacity change from 0 to 64
[ 1228.285922][  T875] cp210x 6-1:0.255: device disconnected
[ 1228.416416][ T7708] netlink: 'syz.1.14477': attribute type 4 has an invalid length.
[ 1228.755685][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14484'.
[ 1228.909034][ T7729] loop9: detected capacity change from 0 to 256
[ 1229.146895][ T7741] netlink: 'syz.5.14491': attribute type 4 has an invalid length.
[ 1229.736699][ T7769] loop5: detected capacity change from 0 to 512
[ 1229.766974][ T7769] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1229.821811][ T7769] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.14506: corrupted in-inode xattr: e_value out of bounds
[ 1229.870773][ T7769] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1229.876859][ T7769] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.14506: couldn't read orphan inode 15 (err -117)
[ 1229.886143][    C0] EXT4-fs (loop5): error count since last fsck: 1
[ 1229.886169][    C0] EXT4-fs (loop5): initial error at time 1771003595: ext4_iget_extra_inode:5025: inode 15
[ 1229.886209][    C0] EXT4-fs (loop5): last error at time 1771003595: ext4_iget_extra_inode:5025: inode 15
[ 1230.013361][ T7769] loop5: lost filesystem error report for type 5 error -117
[ 1230.022220][ T7769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1230.067559][ T7784] netlink: 20 bytes leftover after parsing attributes in process `syz.9.14514'.
[ 1230.148659][T13371] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1230.304247][ T5975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1230.330872][T13371] usb 4-1: Using ep0 maxpacket: 8
[ 1230.364218][T13371] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1230.381618][T13371] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1230.447017][T13371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1230.489503][T13371] usb 4-1: Product: syz
[ 1230.512369][T13371] usb 4-1: Manufacturer: syz
[ 1230.516981][T13371] usb 4-1: SerialNumber: syz
[ 1230.540973][T13371] usb 4-1: config 0 descriptor??
[ 1230.579568][T13371] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1230.686788][ T7804] loop1: detected capacity change from 0 to 1024
[ 1230.715340][   T31] audit: type=1326 audit(1771003596.275:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.14525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1230.739818][ T7808] ip6t_srh: unknown srh invflags 7F00
[ 1230.750506][ T7804] hfsplus: invalid length 32517 has been corrected to 255
[ 1230.799850][   T31] audit: type=1326 audit(1771003596.275:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.14525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1230.804321][T13371] gspca_zc3xx: reg_w_i err -71
[ 1230.913881][   T31] audit: type=1326 audit(1771003596.275:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.14525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1231.014714][   T31] audit: type=1326 audit(1771003596.275:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.14525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1231.117263][ T3484] hfsplus: b-tree write err: -5, ino 20
[ 1231.142166][   T31] audit: type=1326 audit(1771003596.275:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.14525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1231.208728][   T31] audit: type=1326 audit(1771003596.275:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.14525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1231.208787][   T31] audit: type=1326 audit(1771003596.275:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.14525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1231.208837][   T31] audit: type=1326 audit(1771003596.275:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7805 comm="syz.2.14525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1231.208891][   T31] audit: type=1326 audit(1771003596.528:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.9.14529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1231.208941][   T31] audit: type=1326 audit(1771003596.546:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7814 comm="syz.9.14529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1231.528137][T13371] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1231.563639][ T7835] netlink: 'syz.4.14537': attribute type 1 has an invalid length.
[ 1231.617525][T13371] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1231.642695][T13371] usb 4-1: USB disconnect, device number 123
[ 1231.684281][ T7835] netlink: 'syz.4.14537': attribute type 1 has an invalid length.
[ 1231.699858][ T7835] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.14537'.
[ 1231.901633][ T7844] loop3: detected capacity change from 0 to 1024
[ 1232.005503][ T7849] loop9: detected capacity change from 0 to 512
[ 1232.012535][ T7848] loop2: detected capacity change from 0 to 736
[ 1232.020284][ T7844] hfsplus: extend alloc file! (8192,512,17039360)
[ 1232.049235][ T7849] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.14545: bad orphan inode 11862016
[ 1232.076319][ T7852] loop1: detected capacity change from 0 to 512
[ 1232.109834][ T7849] loop9: lost filesystem error report for type 5 error -117
[ 1232.130703][ T7849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 1232.222967][ T7852] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1232.255809][ T7849] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1232.405201][ T7852] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.14546: inode has both inline data and extents flags
[ 1232.526997][ T7852] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[ 1232.532868][    C1] EXT4-fs (loop1): error count since last fsck: 1
[ 1232.548459][    C1] EXT4-fs (loop1): initial error at time 1771003597: ext4_orphan_get:1391: inode 17
[ 1232.557923][    C1] EXT4-fs (loop1): last error at time 1771003597: ext4_orphan_get:1391: inode 17
[ 1232.571552][ T7852] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.14546: couldn't read orphan inode 17 (err -117)
[ 1232.667488][ T7852] loop1: lost filesystem error report for type 5 error -117
[ 1232.706015][ T7852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1232.805821][T31686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1232.874771][ T7852] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.14546: bg 0: block 65: padding at end of block bitmap is not set
[ 1233.009561][ T7852] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.14546: Failed to acquire dquot type 0
[ 1233.299301][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1233.509167][ T7901] netlink: 'syz.4.14564': attribute type 32 has an invalid length.
[ 1233.644233][ T7898] loop9: detected capacity change from 0 to 4096
[ 1233.700865][ T7898] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[ 1234.014449][ T7898] ntfs3(loop9): Failed to initialize $Extend/$Reparse.
[ 1234.678672][ T7942] dlm: no locking on control device
[ 1235.003075][ T7903] loop5: detected capacity change from 0 to 32768
[ 1235.029488][ T7903] diRead: diIAGRead returned -5
[ 1235.066481][ T7903] jfs_lookup: iget failed on inum 1048352
[ 1235.535488][ T7974] tmpfs: Bad value for 'mpol'
[ 1235.642789][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14595'.
[ 1237.600022][ T8014] loop2: detected capacity change from 0 to 32768
[ 1237.906878][ T8025] loop9: detected capacity change from 0 to 32768
[ 1237.913517][T13371] usb 5-1: new full-speed USB device number 115 using dummy_hcd
[ 1237.935851][ T8021] loop1: detected capacity change from 0 to 32768
[ 1237.961405][ T8021] xfs: Deprecated parameter 'ikeep'
[ 1237.969474][ T8025] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.14618 (8025)
[ 1238.017860][ T8021] XFS: ikeep mount option is deprecated.
[ 1238.062287][ T8025] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1238.093910][ T8025] BTRFS info (device loop9): using sha256 checksum algorithm
[ 1238.125332][ T8021] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1238.274692][T13371] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 1238.284352][T13371] usb 5-1: config 0 has no interface number 0
[ 1238.299084][T13371] usb 5-1: config 0 interface 41 has no altsetting 0
[ 1238.324895][ T8021] XFS (loop1): Ending clean mount
[ 1238.379725][T13371] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1238.390904][T13371] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1238.400237][T13371] usb 5-1: Product: syz
[ 1238.406191][T13371] usb 5-1: Manufacturer: syz
[ 1238.407551][ T8025] BTRFS info (device loop9): enabling ssd optimizations
[ 1238.411032][T13371] usb 5-1: SerialNumber: syz
[ 1238.428272][T13371] usb 5-1: config 0 descriptor??
[ 1238.445262][ T8021] XFS (loop1): Quotacheck needed: Please wait.
[ 1238.467044][ T8025] BTRFS info (device loop9): turning on async discard
[ 1238.473900][ T8025] BTRFS info (device loop9): enabling free space tree
[ 1238.541827][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14634'.
[ 1238.584889][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14634'.
[ 1238.638979][ T8021] XFS (loop1): Quotacheck: Done.
[ 1238.644742][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14634'.
[ 1238.788619][ T8025] BTRFS info (device loop9): balance: start -slimit=1310720,stripes=0..2632
[ 1238.871322][ T8025] BTRFS info (device loop9): balance: ended with status: 0
[ 1238.879570][ T5815] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1238.940869][T13371] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[ 1238.982556][T13371] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[ 1239.012194][ T8085] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14638'.
[ 1239.038049][T13371] usb 5-1: USB disconnect, device number 115
[ 1239.153593][T31686] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1239.583487][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14642'.
[ 1239.629151][ T8049] loop2: detected capacity change from 0 to 32768
[ 1239.883653][ T8049] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1239.937501][ T8105] vlan0: entered promiscuous mode
[ 1240.170897][ T8049] XFS (loop2): Ending clean mount
[ 1240.189162][ T8115] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1240.258750][ T8115] bond0: (slave netdevsim0): Releasing backup interface
[ 1240.338373][ T8115] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[ 1240.356092][ T8115] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1240.372405][ T5835] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1240.545139][   T31] kauditd_printk_skb: 14 callbacks suppressed
[ 1240.545161][   T31] audit: type=1326 audit(1771003605.479:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.5.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b9bf79 code=0x7ffc0000
[ 1240.553353][ T8089] loop3: detected capacity change from 0 to 32768
[ 1240.685929][   T31] audit: type=1326 audit(1771003605.507:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.5.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b9bf79 code=0x7ffc0000
[ 1240.744544][   T31] audit: type=1326 audit(1771003605.507:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.5.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b9bf79 code=0x7ffc0000
[ 1240.846315][ T8089] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1240.855876][   T31] audit: type=1326 audit(1771003605.525:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.5.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f2718b9bf79 code=0x7ffc0000
[ 1240.880022][   T31] audit: type=1326 audit(1771003605.525:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.5.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b9bf79 code=0x7ffc0000
[ 1240.903980][   T31] audit: type=1326 audit(1771003605.525:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.5.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2718b9bf79 code=0x7ffc0000
[ 1240.927783][   T31] audit: type=1326 audit(1771003605.525:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.5.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2718b9bf79 code=0x7ffc0000
[ 1240.950740][   T31] audit: type=1326 audit(1771003605.525:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8121 comm="syz.5.14651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2718b9bf79 code=0x7ffc0000
[ 1241.125490][ T8089] XFS (loop3): Ending clean mount
[ 1241.158746][   T31] audit: type=1326 audit(1771003605.769:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.1.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af7b9bf79 code=0x7ffc0000
[ 1241.231328][   T31] audit: type=1326 audit(1771003605.769:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8129 comm="syz.1.14653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af7b9bf79 code=0x7ffc0000
[ 1241.365619][ T5824] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1241.815236][ T8162] openvswitch: netlink: IP tunnel dst address not specified
[ 1241.854613][ T8165] netlink: 'syz.9.14668': attribute type 4 has an invalid length.
[ 1241.896520][ T8165] netlink: 152 bytes leftover after parsing attributes in process `syz.9.14668'.
[ 1242.187618][T13371] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1242.404913][T13371] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1242.418287][T13371] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1242.456553][T13371] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1242.499233][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14678'.
[ 1242.508442][T13371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1242.517414][T13371] usb 4-1: SerialNumber: syz
[ 1242.615770][  T975] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1242.772182][T13371] usb 4-1: 0:2 : does not exist
[ 1242.808306][  T975] usb 2-1: Using ep0 maxpacket: 32
[ 1242.833762][  T975] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1242.864960][  T975] usb 2-1: config 7 has an invalid interface number: 187 but max is 0
[ 1242.903981][  T975] usb 2-1: config 7 has no interface number 0
[ 1242.926162][  T975] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1242.937305][ T8198] loop9: detected capacity change from 0 to 2048
[ 1242.989588][  T975] usb 2-1: config 7 interface 187 has no altsetting 0
[ 1242.999815][ T8198] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1243.025963][T13371] usb 4-1: USB disconnect, device number 124
[ 1243.104885][  T975] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[ 1243.126558][T31686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1243.156148][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.214166][  T975] usb 2-1: Product: syz
[ 1243.218382][  T975] usb 2-1: Manufacturer: syz
[ 1243.255851][  T975] usb 2-1: SerialNumber: syz
[ 1243.265971][ T8208] bond1 (unregistering): Released all slaves
[ 1243.356309][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1243.411010][ T8218] loop9: detected capacity change from 0 to 256
[ 1243.572232][  T975] usb 2-1: Unknown endpoint type found, address 0x07
[ 1243.581430][ T8219] netlink: 'syz.5.14692': attribute type 12 has an invalid length.
[ 1243.588372][  T975] usb 2-1: Unknown endpoint type found, address 0x03
[ 1243.597305][ T8219] netlink: 'syz.5.14692': attribute type 4 has an invalid length.
[ 1243.613880][  T975] usb 2-1: Not enough endpoints found in device, aborting!
[ 1243.843714][ T3943] usb 2-1: USB disconnect, device number 114
[ 1244.526819][ T8258] loop4: detected capacity change from 0 to 512
[ 1244.602434][ T8258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1244.653637][ T8258] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1244.717903][ T8267] loop3: detected capacity change from 0 to 256
[ 1244.906626][ T8267] FAT-fs (loop3): Directory bread(block 64) failed
[ 1244.951133][ T8267] FAT-fs (loop3): Directory bread(block 65) failed
[ 1244.958394][ T8267] FAT-fs (loop3): Directory bread(block 66) failed
[ 1244.964944][ T8267] FAT-fs (loop3): Directory bread(block 67) failed
[ 1245.004138][ T8267] FAT-fs (loop3): Directory bread(block 68) failed
[ 1245.011208][ T8267] FAT-fs (loop3): Directory bread(block 69) failed
[ 1245.017841][ T8267] FAT-fs (loop3): Directory bread(block 70) failed
[ 1245.024975][ T8267] FAT-fs (loop3): Directory bread(block 71) failed
[ 1245.031877][ T8267] FAT-fs (loop3): Directory bread(block 72) failed
[ 1245.040582][ T8282] tmpfs: Bad value for 'mpol'
[ 1245.044364][ T2255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1245.060184][ T8267] FAT-fs (loop3): Directory bread(block 73) failed
[ 1245.332408][  T975] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[ 1245.504487][  T975] usb 10-1: config 0 has an invalid interface number: 251 but max is 0
[ 1245.535283][  T975] usb 10-1: config 0 has no interface number 0
[ 1245.544968][T13371] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1245.575826][  T975] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1245.576518][ T8297] loop5: detected capacity change from 0 to 4096
[ 1245.594530][  T975] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1245.613255][  T975] usb 10-1: Product: syz
[ 1245.629056][  T975] usb 10-1: Manufacturer: syz
[ 1245.634651][  T975] usb 10-1: SerialNumber: syz
[ 1245.651623][  T975] usb 10-1: config 0 descriptor??
[ 1245.704524][ T8297] ntfs3(loop5): ino=b, mi_enum_attr
[ 1245.721677][ T8297] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1245.742366][T13371] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 1245.759166][T13371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1245.767622][ T8297] ntfs3(loop5): Failed to load $Extend (-22).
[ 1245.789089][ T8297] ntfs3(loop5): Failed to initialize $Extend.
[ 1245.804348][T13371] usb 2-1: config 0 descriptor??
[ 1245.823296][ T3944] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1245.837109][T13371] gspca_main: spca508-2.14.0 probing 8086:0110
[ 1246.007149][ T3944] usb 3-1: Using ep0 maxpacket: 16
[ 1246.034937][ T3944] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1246.047315][ T3944] usb 3-1: config 0 has no interface number 0
[ 1246.053491][ T3944] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1246.088359][ T8311] loop4: detected capacity change from 0 to 4096
[ 1246.092007][ T3944] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9
[ 1246.106161][  T975] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1246.124415][  T975] asix 10-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[ 1246.156310][  T975] asix 10-1:0.251: probe with driver asix failed with error -5
[ 1246.161949][ T3944] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8240, setting to 1024
[ 1246.169712][  T975] usb 10-1: USB disconnect, device number 9
[ 1246.201171][ T8311] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[ 1246.232839][ T3944] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1246.253985][ T3944] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1246.278331][T13371] gspca_spca508: reg_read err -71
[ 1246.285560][T13371] gspca_spca508: reg_read err -71
[ 1246.290887][ T3944] usb 3-1: Product: syz
[ 1246.306974][T13371] gspca_spca508: reg_read err -71
[ 1246.315050][ T3944] usb 3-1: SerialNumber: syz
[ 1246.318288][T13371] gspca_spca508: reg_read err -71
[ 1246.336423][T13371] gspca_spca508: reg write: error -71
[ 1246.359249][T13371] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[ 1246.372766][ T3944] usb 3-1: config 0 descriptor??
[ 1246.433562][T13371] usb 2-1: USB disconnect, device number 115
[ 1246.442347][ T3944] cm109 3-1:0.8: invalid payload size 1024, expected 4
[ 1246.478412][ T3944] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input89
[ 1246.663436][    C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1246.712415][  T975] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 1246.887974][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1246.888259][T13371] usb 3-1: USB disconnect, device number 17
[ 1246.895060][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1246.956001][  T975] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1246.967606][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1246.975612][  T975] usb 6-1: Product: syz
[ 1246.985697][  T975] usb 6-1: Manufacturer: syz
[ 1246.997498][  T975] usb 6-1: SerialNumber: syz
[ 1247.003748][T13371] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1247.029587][  T975] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1247.079506][T32343] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1247.959627][ T8355] loop9: detected capacity change from 0 to 2048
[ 1248.013157][   T31] kauditd_printk_skb: 3 callbacks suppressed
[ 1248.013181][   T31] audit: type=1326 audit(1771003612.447:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.14761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1248.249941][   T31] audit: type=1326 audit(1771003612.447:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.14761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1248.337520][ T8355] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1248.495539][   T31] audit: type=1326 audit(1771003612.447:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.14761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1248.731098][   T31] audit: type=1326 audit(1771003612.447:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.14761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1248.843452][T32343] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1249.022218][   T31] audit: type=1326 audit(1771003612.447:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.14761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x7ffc0000
[ 1249.165255][T32343] ath9k_htc: Failed to initialize the device
[ 1249.174471][  T875] usb 6-1: USB disconnect, device number 109
[ 1249.193232][  T875] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1249.571832][ T8349] loop3: detected capacity change from 0 to 32768
[ 1249.613680][ T8380] loop1: detected capacity change from 0 to 4096
[ 1249.629181][ T8349] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[ 1249.630597][ T8387] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[ 1249.688975][ T8349] JBD2: Ignoring recovery information on journal
[ 1249.726288][ T8380] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[ 1249.849934][ T8349] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1250.245033][ T5824] ocfs2: Unmounting device (7,3) on (node local)
[ 1250.280052][ T8408] netlink: 'syz.9.14784': attribute type 1 has an invalid length.
[ 1250.413468][ T8406] loop4: detected capacity change from 0 to 4096
[ 1250.992013][ T8430] loop2: detected capacity change from 0 to 128
[ 1251.055688][ T8430] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1251.147680][ T8430] ext4 filesystem being mounted at /2452/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1251.187296][ T8430] EXT4-fs warning (device loop2): ext4_group_extend:1862: can't shrink FS - resize aborted
[ 1251.289488][ T5835] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1251.458649][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14806'.
[ 1251.483802][ T8451] loop5: detected capacity change from 0 to 1764
[ 1251.504631][ T8454] loop3: detected capacity change from 0 to 512
[ 1251.594699][ T8451] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1251.620968][ T8454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1251.691648][ T8454] ext4 filesystem being mounted at /2588/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1251.712115][ T8460] bond6: Removing last ns target with arp_interval on
[ 1251.769271][ T8454] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.14807: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[ 1251.868082][ T8454] EXT4-fs error (device loop3) in ext4_free_inode:361: Filesystem failed CRC
[ 1251.945320][ T8471] netlink: 'syz.5.14813': attribute type 10 has an invalid length.
[ 1252.032485][ T8471] veth0_macvtap: left promiscuous mode
[ 1252.052939][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1252.084927][ T8471] batman_adv: batadv0: Adding interface: macvtap0
[ 1252.114064][ T8471] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1252.147849][ T8468] loop9: detected capacity change from 0 to 4096
[ 1252.200721][ T8471] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[ 1252.369893][ T8482] loop1: detected capacity change from 0 to 2048
[ 1253.018456][ T8510] loop1: detected capacity change from 0 to 16
[ 1253.058103][ T8510] erofs (device loop1): mounted with root inode @ nid 36.
[ 1253.151485][ T8510] erofs (device loop1): unsupported i_format 1796 of nid 86
[ 1253.302345][ T8522] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14841'.
[ 1253.305952][ T8521] dlm: no local IP address has been set
[ 1253.333367][ T8522] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14841'.
[ 1253.390351][ T8521] dlm: cannot start dlm midcomms -107
[ 1253.621977][ T8534] loop4: detected capacity change from 0 to 512
[ 1253.693169][ T8534] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1253.765933][ T8534] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4224: comm syz.4.14845: Allocating blocks 41-42 which overlap fs metadata
[ 1253.876762][ T8534] loop4: lost filesystem error report for type 5 error -117
[ 1253.886289][    C0] EXT4-fs (loop4): error count since last fsck: 1
[ 1253.900141][    C0] EXT4-fs (loop4): initial error at time 1771004386: ext4_mb_mark_diskspace_used:4224
[ 1253.909764][    C0] EXT4-fs (loop4): last error at time 1771004386: ext4_mb_mark_diskspace_used:4224
[ 1253.955550][   T31] audit: type=1400 audit(1771004386.248:598): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8547 comm="syz.5.14850"
[ 1253.965890][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14851'.
[ 1253.972224][ T8534] EXT4-fs (loop4): Remounting filesystem read-only
[ 1254.067083][ T8534] Quota error (device loop4): write_blk: dquota write failed
[ 1254.074507][ T8534] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[ 1254.120286][ T8534] Quota error (device loop4): write_blk: dquota write failed
[ 1254.139695][ T8554] ip6t_srh: unknown srh match flags  4000
[ 1254.147074][ T8534] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[ 1254.188819][ T8534] EXT4-fs (loop4): 1 truncate cleaned up
[ 1254.221549][ T8556] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1254.229467][ T8534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1254.346829][ T2255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1254.493818][ T5835] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[ 1254.611225][T32343] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1254.619271][ T8524] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.14839 (8524)
[ 1254.648618][   T31] audit: type=1326 audit(1771004386.972:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8568 comm="syz.4.14859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94acd9bf79 code=0x0
[ 1254.661423][ T8573] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14861'.
[ 1254.693521][ T8524] BTRFS info (device loop9): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1254.714279][ T8524] BTRFS info (device loop9): using sha256 checksum algorithm
[ 1254.766097][ T8571] set_capacity_and_notify: 2 callbacks suppressed
[ 1254.766120][ T8571] loop1: detected capacity change from 0 to 4096
[ 1254.790949][T32343] usb 4-1: Using ep0 maxpacket: 8
[ 1254.804895][T32343] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1254.868679][T32343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1254.936477][T32343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1254.972876][ T8524] BTRFS info (device loop9): turning off barriers
[ 1254.979352][ T8524] BTRFS info (device loop9): enabling free space tree
[ 1254.991447][ T8571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1255.058348][T32343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1255.111901][T32343] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1255.150538][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1255.158283][T32343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1255.208456][T32343] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[ 1255.252631][T32343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1255.307206][T32343] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1255.317285][T32343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1255.368355][T32343] usb 4-1: Product: syz
[ 1255.389636][T32343] usb 4-1: Manufacturer: syz
[ 1255.395494][T32343] usb 4-1: SerialNumber: syz
[ 1255.432676][T31686] BTRFS info (device loop9): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1255.496932][T32343] usb 4-1: config 0 descriptor??
[ 1255.503397][ T8561] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1255.566682][T32343] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1255.985302][ T8622] netlink: 'syz.9.14873': attribute type 64 has an invalid length.
[ 1256.016130][ T8625] x_tables: duplicate underflow at hook 2
[ 1256.024692][ T8626] netlink: 'syz.4.14882': attribute type 21 has an invalid length.
[ 1256.097583][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1256.101458][T32343] usb 4-1: USB disconnect, device number 125
[ 1256.104815][ T8622] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1256.178961][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1256.326832][ T8626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14882'.
[ 1256.508816][ T8634] netlink: 'syz.5.14885': attribute type 1 has an invalid length.
[ 1256.632770][ T8640] loop3: detected capacity change from 0 to 22
[ 1256.682263][ T8640] MTD: Attempt to mount non-MTD device "/dev/loop3"
[ 1256.693853][ T8642] netlink: 'syz.1.14889': attribute type 21 has an invalid length.
[ 1256.704454][ T8640] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1256.726302][ T8642] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14889'.
[ 1256.758876][ T8642] netlink: 'syz.1.14889': attribute type 4 has an invalid length.
[ 1256.804263][ T8642] netlink: 'syz.1.14889': attribute type 5 has an invalid length.
[ 1256.838700][ T8642] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14889'.
[ 1256.944910][ T8649] loop4: detected capacity change from 0 to 128
[ 1256.953160][ T8647] netlink: 'syz.5.14891': attribute type 2 has an invalid length.
[ 1257.009765][ T8649] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1257.043431][ T8649] ext4 filesystem being mounted at /426/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1257.102346][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14897'.
[ 1257.152991][ T8649] EXT4-fs warning (device loop4): ext4_group_add:1736: No reserved GDT blocks, can't resize
[ 1257.479756][ T2255] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1257.553201][ T8677] loop2: detected capacity change from 0 to 256
[ 1257.690279][ T8677] FAT-fs (loop2): Directory bread(block 64) failed
[ 1257.715353][T32343] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1257.721979][ T8677] FAT-fs (loop2): Directory bread(block 65) failed
[ 1257.749907][ T8677] FAT-fs (loop2): Directory bread(block 66) failed
[ 1257.800904][ T8677] FAT-fs (loop2): Directory bread(block 67) failed
[ 1257.852441][ T8677] FAT-fs (loop2): Directory bread(block 68) failed
[ 1257.886563][T32343] usb 10-1: Using ep0 maxpacket: 32
[ 1257.894875][ T8677] FAT-fs (loop2): Directory bread(block 69) failed
[ 1257.912307][T32343] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1257.933794][ T8677] FAT-fs (loop2): Directory bread(block 70) failed
[ 1257.976026][ T8677] FAT-fs (loop2): Directory bread(block 71) failed
[ 1257.987505][T32343] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1257.991210][ T8677] FAT-fs (loop2): Directory bread(block 72) failed
[ 1258.001482][ T8690] syz.4.14912 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1258.029400][T32343] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.037519][T32343] usb 10-1: Product: syz
[ 1258.045102][ T8677] FAT-fs (loop2): Directory bread(block 73) failed
[ 1258.071938][T32343] usb 10-1: Manufacturer: syz
[ 1258.087131][T32343] usb 10-1: SerialNumber: syz
[ 1258.114717][T32343] usb 10-1: config 0 descriptor??
[ 1258.147199][T32343] quatech2 10-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[ 1258.341587][T32343] usb 10-1: qt2_setup_urbs - submit read urb failed -8
[ 1258.370822][T32343] quatech2 10-1:0.0: probe with driver quatech2 failed with error -8
[ 1258.476262][ T8705] loop1: detected capacity change from 0 to 1024
[ 1258.488561][ T8702] loop3: detected capacity change from 0 to 4096
[ 1258.516604][ T8705] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1258.534195][ T3944] usb 10-1: USB disconnect, device number 10
[ 1258.579112][ T8705] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.14920: Invalid block bitmap block 0 in block_group 0
[ 1258.617909][ T8705] loop1: lost filesystem error report for type 5 error -117
[ 1258.618392][ T8705] EXT4-fs (loop1): Remounting filesystem read-only
[ 1258.625741][    C1] EXT4-fs (loop1): error count since last fsck: 1
[ 1258.625764][    C1] EXT4-fs (loop1): initial error at time 1771004391: ext4_read_block_bitmap_nowait:483
[ 1258.625795][    C1] EXT4-fs (loop1): last error at time 1771004391: ext4_read_block_bitmap_nowait:483
[ 1258.720899][ T8716] netlink: 'syz.4.14925': attribute type 62 has an invalid length.
[ 1258.738146][ T8718] loop3: detected capacity change from 0 to 1024
[ 1258.743857][ T8705] Quota error (device loop1): write_blk: dquota write failed
[ 1258.751885][ T8705] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1258.794887][ T8718] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[ 1258.813169][ T8705] EXT4-fs (loop1): 1 orphan inode deleted
[ 1258.841427][ T8705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1258.887611][ T3484] hfsplus: b-tree write err: -5, ino 25
[ 1258.893534][ T3484] hfsplus: b-tree write err: -5, ino 4
[ 1258.939937][ T3484] hfsplus: b-tree write err: -5, ino 2
[ 1259.089596][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1259.174745][ T8732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1259.235388][ T8726] loop2: detected capacity change from 0 to 4096
[ 1259.305609][ T8726] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[ 1259.497582][ T8726] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[ 1259.706493][ T8740] loop3: detected capacity change from 0 to 4096
[ 1259.878565][ T8752] x_tables: unsorted underflow at hook 3
[ 1260.087297][ T8758] tmpfs: Bad value for 'mpol'
[ 1260.327001][ T8766] netlink: 'syz.4.14949': attribute type 1 has an invalid length.
[ 1260.424160][ T8770] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1260.463450][ T8774] loop9: detected capacity change from 0 to 8
[ 1260.528268][ T8774] SQUASHFS error: Failed to read block 0x738: -5
[ 1260.572051][ T8774] SQUASHFS error: Unable to read metadata cache entry [736]
[ 1260.776552][ T8782] loop2: detected capacity change from 0 to 1764
[ 1260.983974][ T8791] netlink: 56 bytes leftover after parsing attributes in process `syz.5.14961'.
[ 1261.435358][ T8811] netlink: 'syz.9.14971': attribute type 7 has an invalid length.
[ 1261.444380][ T8811] netlink: 'syz.9.14971': attribute type 8 has an invalid length.
[ 1261.544386][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14974'.
[ 1261.725769][ T8825] netlink: 'syz.3.14977': attribute type 1 has an invalid length.
[ 1261.871310][ T8832] loop2: detected capacity change from 0 to 256
[ 1261.958373][ T8832] FAT-fs (loop2): Directory bread(block 64) failed
[ 1261.987660][ T8832] FAT-fs (loop2): Directory bread(block 65) failed
[ 1262.020041][ T8832] FAT-fs (loop2): Directory bread(block 66) failed
[ 1262.065513][ T8832] FAT-fs (loop2): Directory bread(block 67) failed
[ 1262.101510][ T8832] FAT-fs (loop2): Directory bread(block 68) failed
[ 1262.118595][ T8832] FAT-fs (loop2): Directory bread(block 69) failed
[ 1262.143102][ T8832] FAT-fs (loop2): Directory bread(block 70) failed
[ 1262.173432][ T8832] FAT-fs (loop2): Directory bread(block 71) failed
[ 1262.180090][ T8832] FAT-fs (loop2): Directory bread(block 72) failed
[ 1262.248834][ T8832] FAT-fs (loop2): Directory bread(block 73) failed
[ 1262.482708][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14993'.
[ 1263.400058][ T8901] loop3: detected capacity change from 0 to 512
[ 1263.707182][   T31] audit: type=1326 audit(1771004396.484:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8914 comm="syz.2.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1263.734316][T13371] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1263.812841][   T31] audit: type=1326 audit(1771004396.484:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8914 comm="syz.2.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1263.904896][   T31] audit: type=1326 audit(1771004396.558:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8914 comm="syz.2.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1263.929594][T13371] usb 4-1: Using ep0 maxpacket: 8
[ 1263.963513][T13371] usb 4-1: config 0 has an invalid interface number: 88 but max is 3
[ 1263.972029][T13371] usb 4-1: config 0 has an invalid interface number: 250 but max is 3
[ 1263.990544][T13371] usb 4-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config
[ 1264.022186][   T31] audit: type=1326 audit(1771004396.558:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8914 comm="syz.2.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1264.046153][T13371] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 4
[ 1264.064338][T13371] usb 4-1: config 0 has no interface number 0
[ 1264.073018][T13371] usb 4-1: config 0 has no interface number 1
[ 1264.082236][   T31] audit: type=1326 audit(1771004396.558:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8914 comm="syz.2.15023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1264.110794][T13371] usb 4-1: config 0 interface 88 has no altsetting 0
[ 1264.122597][T13371] usb 4-1: config 0 interface 250 has no altsetting 0
[ 1264.136618][T13371] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3
[ 1264.155175][T13371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1264.203665][T13371] usb 4-1: config 0 descriptor??
[ 1264.236445][ T8928] xt_CT: No such helper "snmp"
[ 1264.305889][ T3944] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1264.414015][T13371] usb 4-1: string descriptor 0 read error: -71
[ 1264.450817][T13371] usb 4-1: USB disconnect, device number 126
[ 1264.458213][ T3944] usb 3-1: Using ep0 maxpacket: 8
[ 1264.480507][ T3944] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1264.495391][ T3944] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1264.515246][ T8942] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1264.534730][ T3944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.563347][ T3944] usb 3-1: Product: syz
[ 1264.578936][ T3944] usb 3-1: Manufacturer: syz
[ 1264.598745][ T3944] usb 3-1: SerialNumber: syz
[ 1264.609477][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15037'.
[ 1264.630544][ T3944] usb 3-1: config 0 descriptor??
[ 1264.663692][ T3944] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[ 1264.842650][ T3944] snd_usb_toneport 3-1:0.0: cannot get proper max packet size
[ 1264.880571][ T3944] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1264.924908][ T3944] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1265.063566][T13371] usb 3-1: USB disconnect, device number 18
[ 1265.071905][ T8932] loop9: detected capacity change from 0 to 32768
[ 1265.157154][ T8932] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1265.348486][   T31] audit: type=1400 audit(1771004398.217:605): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=8973 comm="syz.1.15050"
[ 1265.405083][ T8932] XFS (loop9): Ending clean mount
[ 1265.474882][ T8979] openvswitch: netlink: IP tunnel dst address not specified
[ 1265.598854][T31686] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1265.928704][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15060'.
[ 1266.022787][ T9000] xt_l2tp: v2 doesn't support IP mode
[ 1266.199629][ T9006] loop4: detected capacity change from 0 to 128
[ 1266.279078][ T9006] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1266.306925][T32343] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1266.331488][ T9006] ext4 filesystem being mounted at /462/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1266.425229][ T9006] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks
[ 1266.466188][T32343] usb 3-1: Using ep0 maxpacket: 32
[ 1266.487959][ T9006] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted
[ 1266.492486][T32343] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1266.532919][T32343] usb 3-1: config 255 has an invalid interface number: 81 but max is 0
[ 1266.556845][T32343] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[ 1266.603141][T32343] usb 3-1: config 255 has no interface number 0
[ 1266.609469][T32343] usb 3-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83
[ 1266.656634][T32343] usb 3-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1266.728322][T32343] usb 3-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[ 1266.766224][ T2255] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1266.781580][T32343] usb 3-1: config 255 interface 81 has no altsetting 0
[ 1266.795792][T32343] usb 3-1: string descriptor 0 read error: -22
[ 1266.803292][T32343] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac
[ 1266.820038][T32343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1266.834377][ T9004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1266.871787][T32343] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:255.81/input/input91
[ 1267.229797][ T9039] loop9: detected capacity change from 0 to 256
[ 1267.277652][ T3944] usb 3-1: USB disconnect, device number 19
[ 1267.277724][    C1] usbtouchscreen 3-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -19
[ 1267.300531][ T9039] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d)
[ 1267.408272][ T9044] loop4: detected capacity change from 0 to 1024
[ 1267.619594][ T3484] hfsplus: b-tree write err: -5, ino 25
[ 1267.661112][ T3484] hfsplus: b-tree write err: -5, ino 4
[ 1267.666716][ T3484] hfsplus: b-tree write err: -5, ino 2
[ 1267.842472][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15090'.
[ 1267.975498][ T9065] netlink: 'syz.3.15092': attribute type 1 has an invalid length.
[ 1268.025764][ T9067] loop2: detected capacity change from 0 to 512
[ 1268.080059][ T9067] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1268.157280][ T9067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1268.339426][ T9083] loop1: detected capacity change from 0 to 256
[ 1268.383908][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1268.424984][ T9089] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[ 1268.443402][ T9083] FAT-fs (loop1): Directory bread(block 64) failed
[ 1268.477686][ T9083] FAT-fs (loop1): Directory bread(block 65) failed
[ 1268.484764][ T9083] FAT-fs (loop1): Directory bread(block 66) failed
[ 1268.537766][ T9083] FAT-fs (loop1): Directory bread(block 67) failed
[ 1268.576912][ T9083] FAT-fs (loop1): Directory bread(block 68) failed
[ 1268.602503][ T9083] FAT-fs (loop1): Directory bread(block 69) failed
[ 1268.621758][ T9083] FAT-fs (loop1): Directory bread(block 70) failed
[ 1268.628286][ T9083] FAT-fs (loop1): Directory bread(block 71) failed
[ 1268.668970][ T9083] FAT-fs (loop1): Directory bread(block 72) failed
[ 1268.678373][ T9083] FAT-fs (loop1): Directory bread(block 73) failed
[ 1268.836489][ T9103] netlink: 80 bytes leftover after parsing attributes in process `syz.2.15110'.
[ 1269.056964][ T9108] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1269.309384][ T9120] loop1: detected capacity change from 0 to 1024
[ 1269.474846][ T9120] syz.1.15119: attempt to access beyond end of device
[ 1269.474846][ T9120] loop1: rw=8388608, sector=5778, nr_sectors = 2 limit=1024
[ 1269.620748][T32343] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1269.645278][ T9133] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c)
[ 1269.792160][T32343] usb 5-1: Using ep0 maxpacket: 32
[ 1269.878263][T32343] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3
[ 1269.894352][T32343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1269.918441][T32343] usb 5-1: Product: syz
[ 1269.922665][T32343] usb 5-1: Manufacturer: syz
[ 1269.938734][T32343] usb 5-1: SerialNumber: syz
[ 1269.967302][T32343] usb 5-1: config 0 descriptor??
[ 1269.993825][ T9150] netlink: 'syz.9.15130': attribute type 2 has an invalid length.
[ 1270.197339][ T9154] netlink: 'syz.3.15136': attribute type 1 has an invalid length.
[ 1270.294316][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15139'.
[ 1270.356604][   T31] audit: type=1326 audit(1771004403.466:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1270.399381][T32343] f81534a_ctrl 5-1:0.0: failed to enable ports: -71
[ 1270.424018][T32343] f81534a_ctrl 5-1:0.0: probe with driver f81534a_ctrl failed with error -71
[ 1270.460335][   T31] audit: type=1326 audit(1771004403.466:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1270.503220][T32343] usb 5-1: USB disconnect, device number 116
[ 1270.561329][   T31] audit: type=1326 audit(1771004403.508:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1270.625860][   T31] audit: type=1326 audit(1771004403.508:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9163 comm="syz.2.15140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47f19bf79 code=0x7ffc0000
[ 1270.681282][ T9178] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15146'.
[ 1270.818203][ T9174] loop2: detected capacity change from 0 to 4096
[ 1270.875967][ T9174] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[ 1270.896268][ T9177] bond0: entered promiscuous mode
[ 1270.945619][ T9177] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1271.018106][ T9174] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 1271.574470][ T9205] loop5: detected capacity change from 0 to 128
[ 1271.584754][ T9198] loop1: detected capacity change from 0 to 4096
[ 1271.641987][ T9205] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1271.668861][ T9205] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1271.769093][ T9213] netlink: 36 bytes leftover after parsing attributes in process `syz.9.15163'.
[ 1272.115891][ T5975] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1272.206617][ T9217] loop2: detected capacity change from 0 to 1024
[ 1272.465367][ T9195] loop4: detected capacity change from 0 to 32768
[ 1272.525583][ T9195] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[ 1272.665641][ T1317] hfsplus: b-tree write err: -5, ino 25
[ 1272.719326][ T1317] hfsplus: b-tree write err: -5, ino 4
[ 1272.736688][ T9195] JBD2: Ignoring recovery information on journal
[ 1272.773362][ T1317] hfsplus: b-tree write err: -5, ino 2
[ 1272.864870][ T9195] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1272.871831][ T9236] loop1: detected capacity change from 0 to 128
[ 1272.954506][ T9236] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1273.016495][ T9236] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1273.497802][ T2255] ocfs2: Unmounting device (7,4) on (node local)
[ 1273.740866][ T9260] loop1: detected capacity change from 0 to 512
[ 1273.780640][ T9260] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1273.807413][ T9260] EXT4-fs: Ignoring removed bh option
[ 1273.920569][ T9260] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[ 1273.944751][    C1] EXT4-fs (loop1): error count since last fsck: 1
[ 1273.951241][    C1] EXT4-fs (loop1): initial error at time 1771004407: mb_free_blocks:2047: inode 11: block 64
[ 1273.961500][    C1] EXT4-fs (loop1): last error at time 1771004407: mb_free_blocks:2047: inode 11: block 64
[ 1273.991501][ T9265] loop9: detected capacity change from 0 to 256
[ 1274.028595][ T9260] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.15184: corrupted inode contents
[ 1274.066237][ T9260] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1274.070214][ T9260] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #11: comm syz.1.15184: mark_inode_dirty error
[ 1274.090169][ T9265] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[ 1274.146992][ T9260] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1274.160598][ T9260] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.15184: invalid indirect mapped block 1 (level 1)
[ 1274.201820][ T9260] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1274.204395][ T9260] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.15184: corrupted inode contents
[ 1274.266674][ T9260] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1274.271230][ T9260] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[ 1274.340893][ T9260] loop1: lost filesystem error report for type 5 error -117
[ 1274.341395][ T9260] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #11: comm syz.1.15184: corrupted inode contents
[ 1274.442191][ T9260] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1274.452062][ T9260] EXT4-fs error (device loop1): ext4_truncate:4587: inode #11: comm syz.1.15184: mark_inode_dirty error
[ 1274.529371][ T9260] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1274.535260][ T9260] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[ 1274.582934][ T9260] loop1: lost filesystem error report for type 5 error -117
[ 1274.592648][ T9260] EXT4-fs (loop1): 1 truncate cleaned up
[ 1274.674162][ T9260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1274.731412][   T31] audit: type=1326 audit(1771004408.055:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.15195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1274.811746][   T31] audit: type=1326 audit(1771004408.097:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.15195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1274.847342][ T9260] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.15184: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[ 1274.914959][   T31] audit: type=1326 audit(1771004408.118:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.15195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1275.021124][   T31] audit: type=1326 audit(1771004408.118:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.15195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1275.046660][ T9297] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[ 1275.103840][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1275.174134][   T31] audit: type=1326 audit(1771004408.118:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.9.15195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1275.357893][ T9268] loop4: detected capacity change from 0 to 40427
[ 1275.387702][ T9309] netlink: 'syz.2.15206': attribute type 1 has an invalid length.
[ 1275.403530][ T9268] F2FS-fs: heap/no_heap options were deprecated
[ 1275.425063][ T9268] F2FS-fs (loop4): build fault injection rate: 23
[ 1275.464360][ T9268] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[ 1275.518722][ T9268] F2FS-fs (loop4): invalid crc value
[ 1275.614464][ T9268] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x756/0x1260
[ 1275.950931][ T9268] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1276.033291][ T9268] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1276.044179][ T9339] netlink: 'syz.5.15219': attribute type 23 has an invalid length.
[ 1276.137617][ T9268] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_new_inode_folio+0xed/0x140
[ 1276.154676][ T3944] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1276.316894][   T30] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[ 1276.338338][ T3944] usb 4-1: config 95 has an invalid interface number: 1 but max is 0
[ 1276.347335][ T3944] usb 4-1: config 95 has no interface number 0
[ 1276.353532][ T3944] usb 4-1: config 95 interface 1 has no altsetting 0
[ 1276.414735][ T3944] usb 4-1: string descriptor 0 read error: -22
[ 1276.441255][ T3944] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[ 1276.462022][ T3944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1276.508452][   T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1276.545099][   T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1276.603079][   T30] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 1276.646735][   T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1276.684175][   T30] usb 3-1: SerialNumber: syz
[ 1276.728382][   T30] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[ 1276.761555][   T30] usb-storage 3-1:1.0: USB Mass Storage device detected
[ 1276.819594][   T30] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 1276.876561][   T30] scsi host1: usb-storage 3-1:1.0
[ 1276.941257][ T3944] usb 4-1: USB disconnect, device number 127
[ 1277.021051][T32343] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1277.157959][ T9374] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1277.164532][ T9369] loop9: detected capacity change from 0 to 4096
[ 1277.174727][T32343] usb 2-1: Using ep0 maxpacket: 8
[ 1277.185295][T32343] usb 2-1: config 6 has an invalid interface number: 64 but max is 0
[ 1277.195710][ T9369] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[ 1277.198475][T32343] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1277.223523][T32343] usb 2-1: config 6 has no interface number 0
[ 1277.234774][T32343] usb 2-1: too many endpoints for config 6 interface 64 altsetting 21: 207, using maximum allowed: 30
[ 1277.282316][T32343] usb 2-1: config 6 interface 64 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[ 1277.319076][T32343] usb 2-1: config 6 interface 64 has no altsetting 0
[ 1277.334542][T32343] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1277.346687][T32343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.362668][T32343] usb 2-1: Product: syz
[ 1277.367344][T32343] usb 2-1: Manufacturer: syz
[ 1277.374981][T32343] usb 2-1: SerialNumber: syz
[ 1277.504476][ T9379] loop5: detected capacity change from 0 to 64
[ 1277.561985][ T9379] Trying to free block not in datazone
[ 1277.583086][ T9381] netlink: 'syz.4.15237': attribute type 4 has an invalid length.
[ 1277.626991][ T9381] netlink: 17 bytes leftover after parsing attributes in process `syz.4.15237'.
[ 1277.700099][T32343] usb 2-1: USB disconnect, device number 116
[ 1278.015734][ T9394] loop4: detected capacity change from 0 to 2048
[ 1278.043939][   T31] audit: type=1400 audit(1771004411.551:615): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9398 comm="syz.5.15246"
[ 1278.069931][ T9397] loop3: detected capacity change from 0 to 1024
[ 1278.086585][ T9394] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1278.145391][ T9394] syz.4.15242: attempt to access beyond end of device
[ 1278.145391][ T9394] loop4: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[ 1278.160263][ T9400] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1278.226178][T32343] usb 3-1: USB disconnect, device number 20
[ 1278.236491][ T9394] syz.4.15242: attempt to access beyond end of device
[ 1278.236491][ T9394] loop4: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[ 1278.314300][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15248'.
[ 1278.320417][ T9394] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3)
[ 1278.325123][ T9404] netlink: 31 bytes leftover after parsing attributes in process `syz.5.15248'.
[ 1278.396656][ T9404] netlink: 'syz.5.15248': attribute type 3 has an invalid length.
[ 1278.421293][ T9404] netlink: 'syz.5.15248': attribute type 2 has an invalid length.
[ 1278.444555][ T9404] netlink: 31 bytes leftover after parsing attributes in process `syz.5.15248'.
[ 1278.521756][ T9406] loop1: detected capacity change from 0 to 2048
[ 1278.547967][ T9406] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1278.642413][ T9406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1278.956984][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1279.178666][ T9434] infiniband ÙÞ: RDMA CMA: cma_listen_on_dev, error -98
[ 1279.320773][T32343] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 1279.490556][ T9449] loop3: detected capacity change from 0 to 256
[ 1279.496914][T32343] usb 6-1: Using ep0 maxpacket: 8
[ 1279.504918][ T9447] loop1: detected capacity change from 0 to 1764
[ 1279.521234][T32343] usb 6-1: config 3 has an invalid interface number: 45 but max is 0
[ 1279.549199][T32343] usb 6-1: config 3 contains an unexpected descriptor of type 0x2, skipping
[ 1279.567965][ T9449] FAT-fs (loop3): Directory bread(block 64) failed
[ 1279.585628][T32343] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[ 1279.595517][ T9447] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1279.607147][ T9449] FAT-fs (loop3): Directory bread(block 65) failed
[ 1279.616869][T32343] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.634333][ T9449] FAT-fs (loop3): Directory bread(block 66) failed
[ 1279.680984][T32343] usb 6-1: config 3 has no interface number 0
[ 1279.687153][T32343] usb 6-1: config 3 interface 45 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0
[ 1279.701672][ T9449] FAT-fs (loop3): Directory bread(block 67) failed
[ 1279.714781][ T9449] FAT-fs (loop3): Directory bread(block 68) failed
[ 1279.723003][T32343] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1279.747126][ T9449] FAT-fs (loop3): Directory bread(block 69) failed
[ 1279.775651][ T9449] FAT-fs (loop3): Directory bread(block 70) failed
[ 1279.782232][ T9449] FAT-fs (loop3): Directory bread(block 71) failed
[ 1279.791805][T32343] usb 6-1: config 3 interface 45 has no altsetting 0
[ 1279.807928][ T9452] loop4: detected capacity change from 0 to 4096
[ 1279.840339][T32343] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=c5.0b
[ 1279.852959][ T9449] FAT-fs (loop3): Directory bread(block 72) failed
[ 1279.873422][T32343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1279.875572][ T9452] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[ 1279.882571][ T9449] FAT-fs (loop3): Directory bread(block 73) failed
[ 1279.911897][T32343] usb 6-1: Product: syz
[ 1279.916124][T32343] usb 6-1: Manufacturer: syz
[ 1279.917224][ T9460] netlink: 'syz.1.15274': attribute type 61 has an invalid length.
[ 1279.926043][T32343] usb 6-1: SerialNumber: syz
[ 1280.303257][ T9469] loop2: detected capacity change from 0 to 16
[ 1280.388783][ T9469] erofs (device loop2): mounted with root inode @ nid 36.
[ 1280.467984][T32343] usb 6-1: USB disconnect, device number 110
[ 1280.716797][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1281.650388][ T9516] loop9: detected capacity change from 0 to 4096
[ 1281.679063][ T9516] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[ 1281.742258][ T9526] erofs (device loop5): mounted with root inode @ nid 36.
[ 1281.837334][ T9516] ntfs3(loop9): Failed to initialize $Extend/$Reparse.
[ 1282.305033][ T9502] set_capacity_and_notify: 1 callbacks suppressed
[ 1282.305059][ T9502] loop1: detected capacity change from 0 to 32768
[ 1282.363398][ T9546] loop5: detected capacity change from 0 to 2048
[ 1282.438366][ T9546] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1282.520294][ T9554] x_tables: duplicate underflow at hook 3
[ 1282.570287][ T9546] syz.5.15316: attempt to access beyond end of device
[ 1282.570287][ T9546] loop5: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[ 1282.589497][ T9556] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1282.706027][ T9546] syz.5.15316: attempt to access beyond end of device
[ 1282.706027][ T9546] loop5: rw=8388608, sector=9437254, nr_sectors = 2 limit=2048
[ 1282.783922][ T9546] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=0)
[ 1282.831242][ T9561] loop2: detected capacity change from 0 to 512
[ 1282.919349][ T9561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1283.007162][ T9561] EXT4-fs (loop2): 1 truncate cleaned up
[ 1283.045267][ T9561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1283.083589][ T9570] loop9: detected capacity change from 0 to 4096
[ 1283.153315][ T9570] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[ 1283.190714][ T9561] cifs: Unknown parameter 'quota'
[ 1283.216151][ T9570] ntfs3(loop9): ino=18, mi_enum_attr
[ 1283.237204][ T9561] CIFS mount error: No usable UNC path provided in device string!
[ 1283.237204][ T9561] 
[ 1283.259994][ T9570] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[ 1283.310916][ T9561] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1283.344663][ T9570] ntfs3(loop9): ino=0, attr_set_size
[ 1283.604663][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1283.725919][ T9591] loop3: detected capacity change from 0 to 256
[ 1283.893630][ T9591] FAT-fs (loop3): Directory bread(block 64) failed
[ 1283.955984][ T9591] FAT-fs (loop3): Directory bread(block 65) failed
[ 1283.962648][ T9591] FAT-fs (loop3): Directory bread(block 66) failed
[ 1284.008723][ T9591] FAT-fs (loop3): Directory bread(block 67) failed
[ 1284.028193][ T9591] FAT-fs (loop3): Directory bread(block 68) failed
[ 1284.088366][ T9591] FAT-fs (loop3): Directory bread(block 69) failed
[ 1284.110331][ T9591] FAT-fs (loop3): Directory bread(block 70) failed
[ 1284.145373][ T9591] FAT-fs (loop3): Directory bread(block 71) failed
[ 1284.163344][ T9591] FAT-fs (loop3): Directory bread(block 72) failed
[ 1284.206261][ T9591] FAT-fs (loop3): Directory bread(block 73) failed
[ 1284.223635][ T9595] loop2: detected capacity change from 0 to 8192
[ 1284.290319][ T9595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1284.351092][ T9595] FAT-fs (loop2): Filesystem has been set read-only
[ 1284.379806][ T9595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1284.419729][ T9595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1284.462781][ T9595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1284.497831][ T9595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1284.568073][ T9595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1284.631183][ T9595] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1043)
[ 1284.881356][ T9650] PM: Enabling pm_trace changes system date and time during resume.
[ 1284.881356][ T9650] PM: Correct system time has to be restored manually after resume.
[ 1284.982905][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15362'.
[ 1285.038155][ T9658] vlan0: left allmulticast mode
[ 1285.179037][ T9667] netlink: 'syz.5.15363': attribute type 7 has an invalid length.
[ 1285.247832][ T9679] ip6t_REJECT: ECHOREPLY is not supported
[ 1285.421956][  T875] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1285.517607][ T9691] loop5: detected capacity change from 0 to 8
[ 1285.569486][ T9691] SQUASHFS error: Failed to read block 0x71: -5
[ 1285.598275][  T875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1285.619377][   T31] audit: type=1800 audit(1771004419.499:616): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.15368" name="file1" dev="loop5" ino=1 res=0 errno=0
[ 1285.652409][  T875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1285.691288][ T9707] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1285.697694][  T875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1285.728530][  T875] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[ 1285.752402][  T875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.811989][  T875] usb 3-1: Product: syz
[ 1285.835301][  T875] usb 3-1: Manufacturer: syz
[ 1285.852879][  T875] usb 3-1: SerialNumber: syz
[ 1285.915437][  T875] usb 3-1: config 0 descriptor??
[ 1286.015624][ T9728] netlink: 'syz.9.15379': attribute type 4 has an invalid length.
[ 1286.166916][ T3950] usb 3-1: USB disconnect, device number 21
[ 1286.886376][ T9794] netlink: 'syz.1.15400': attribute type 1 has an invalid length.
[ 1286.914407][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15400'.
[ 1287.073112][ T9792] loop2: detected capacity change from 0 to 4096
[ 1287.096809][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15404'.
[ 1287.167494][ T9792] ntfs3(loop2): ino=0, mi_enum_attr
[ 1287.224552][ T9792] ntfs3(loop2): ino=0, mi_enum_attr
[ 1287.235936][ T9792] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 1287.444053][ T9822] xt_addrtype: ipv6 does not support BROADCAST matching
[ 1287.700002][ T9841] loop1: detected capacity change from 0 to 1024
[ 1287.788984][ T9848] loop9: detected capacity change from 0 to 256
[ 1287.847092][ T9850] netlink: 'syz.3.15418': attribute type 8 has an invalid length.
[ 1287.920632][ T9848] FAT-fs (loop9): Directory bread(block 64) failed
[ 1287.956397][ T9855] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1287.965701][ T9848] FAT-fs (loop9): Directory bread(block 65) failed
[ 1287.982978][ T9848] FAT-fs (loop9): Directory bread(block 66) failed
[ 1288.020350][ T9848] FAT-fs (loop9): Directory bread(block 67) failed
[ 1288.080040][ T9848] FAT-fs (loop9): Directory bread(block 68) failed
[ 1288.086627][ T9848] FAT-fs (loop9): Directory bread(block 69) failed
[ 1288.165222][ T9848] FAT-fs (loop9): Directory bread(block 70) failed
[ 1288.171794][ T9848] FAT-fs (loop9): Directory bread(block 71) failed
[ 1288.212822][ T9848] FAT-fs (loop9): Directory bread(block 72) failed
[ 1288.269384][ T9848] FAT-fs (loop9): Directory bread(block 73) failed
[ 1288.318050][ T9914] loop3: detected capacity change from 0 to 512
[ 1288.456226][ T9914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1288.598398][ T9934] loop1: detected capacity change from 0 to 256
[ 1288.792778][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1289.322669][ T9977] loop3: detected capacity change from 0 to 64
[ 1289.441787][ T9988] overlayfs: cannot append lower layer
[ 1289.922189][T10024] netlink: 'syz.5.15460': attribute type 3 has an invalid length.
[ 1289.967769][T10024] netlink: 'syz.5.15460': attribute type 3 has an invalid length.
[ 1289.993357][T10030] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[ 1290.034186][T10030] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1290.086342][T10024] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15460'.
[ 1290.355697][T10047] netlink: 'syz.9.15467': attribute type 22 has an invalid length.
[ 1290.710017][T10078] loop4: detected capacity change from 0 to 164
[ 1290.748303][T10078] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1290.812795][  T875] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1290.859970][T10088] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0
[ 1290.980409][  T875] usb 2-1: Using ep0 maxpacket: 16
[ 1291.022220][  T875] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[ 1291.041169][  T875] usb 2-1: config 0 has no interface number 0
[ 1291.047361][  T875] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[ 1291.097282][T10107] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[ 1291.118635][  T875] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 1291.156453][T10107] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1291.158301][  T875] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[ 1291.258404][  T875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1291.299753][  T875] usb 2-1: Product: syz
[ 1291.303967][  T875] usb 2-1: Manufacturer: syz
[ 1291.335637][  T875] usb 2-1: SerialNumber: syz
[ 1291.347900][T10116] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[ 1291.358343][  T875] usb 2-1: config 0 descriptor??
[ 1291.384817][  T875] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected
[ 1291.438628][T10123] loop5: detected capacity change from 0 to 256
[ 1291.507876][T10123] FAT-fs (loop5): Directory bread(block 64) failed
[ 1291.524161][T10123] FAT-fs (loop5): Directory bread(block 65) failed
[ 1291.563333][T10123] FAT-fs (loop5): Directory bread(block 66) failed
[ 1291.604362][T10123] FAT-fs (loop5): Directory bread(block 67) failed
[ 1291.613617][  T875] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[ 1291.629227][T10123] FAT-fs (loop5): Directory bread(block 68) failed
[ 1291.667545][T10123] FAT-fs (loop5): Directory bread(block 69) failed
[ 1291.701251][T10123] FAT-fs (loop5): Directory bread(block 70) failed
[ 1291.732905][T10123] FAT-fs (loop5): Directory bread(block 71) failed
[ 1291.760415][T10123] FAT-fs (loop5): Directory bread(block 72) failed
[ 1291.804292][T10123] FAT-fs (loop5): Directory bread(block 73) failed
[ 1291.858205][  T875] usb 2-1: USB disconnect, device number 117
[ 1291.904687][  T875] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[ 1291.940939][  T875] cypress_m8 2-1:0.35: device disconnected
[ 1292.311343][T10114] loop9: detected capacity change from 0 to 32768
[ 1292.393580][T10114] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[ 1292.455543][T10114] JBD2: Ignoring recovery information on journal
[ 1292.674501][T10202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15508'.
[ 1292.693434][T10114] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 1292.810531][T10195] loop2: detected capacity change from 0 to 4096
[ 1292.812492][ T3484] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1292.837465][T10195] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[ 1292.856906][ T3484] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1292.893689][ T3484] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1292.940138][ T3484] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1293.024466][T10195] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[ 1293.051266][T10195] ntfs3(loop2): ino=5, mi_enum_attr
[ 1293.143347][T31686] ocfs2: Unmounting device (7,9) on (node local)
[ 1293.608190][T10250] loop3: detected capacity change from 0 to 1024
[ 1293.738824][T10250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1294.008062][ T5824] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1294.196812][T10284] program syz.3.15533 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1294.287337][T10290] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[ 1294.638314][T10249] loop5: detected capacity change from 0 to 32768
[ 1294.658821][T10308] loop4: detected capacity change from 0 to 1024
[ 1294.695697][T10249] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.15524 (10249)
[ 1294.834292][T10249] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1294.860024][T10249] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1294.932015][T10324] loop3: detected capacity change from 0 to 2048
[ 1294.968771][T10324] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1294.988310][T10340] loop2: detected capacity change from 0 to 256
[ 1294.995812][T10340] exfat: Deprecated parameter 'utf8'
[ 1295.001248][T10340] exfat: Deprecated parameter 'utf8'
[ 1295.064284][T10340] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d)
[ 1295.083813][T10249] BTRFS info (device loop5): enabling ssd optimizations
[ 1295.149238][T10249] BTRFS info (device loop5): turning on async discard
[ 1295.165851][T10249] BTRFS info (device loop5): enabling free space tree
[ 1295.324767][T10372] loop3: detected capacity change from 0 to 128
[ 1295.437972][T10372] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1295.480119][ T5975] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1295.523198][T10372] ext4 filesystem being mounted at /2713/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1295.805509][ T5824] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1296.104941][T10401] loop2: detected capacity change from 0 to 2048
[ 1296.253312][T10423] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1296.264131][   T30] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1296.442145][   T30] usb 2-1: Using ep0 maxpacket: 32
[ 1296.453587][   T30] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1296.497871][   T30] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1296.557460][T10440] loop9: detected capacity change from 0 to 64
[ 1296.568262][   T30] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1296.581730][   T30] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1296.621676][   T30] usb 2-1: Product: syz
[ 1296.644540][   T30] usb 2-1: Manufacturer: syz
[ 1296.672842][  T875] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1296.707670][   T30] hub 2-1:4.0: USB hub found
[ 1296.887172][  T875] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1296.897037][  T875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1296.917301][   T30] hub 2-1:4.0: 7 ports detected
[ 1296.922540][  T875] usb 5-1: config 0 descriptor??
[ 1296.936083][   T30] hub 2-1:4.0: insufficient power available to use all downstream ports
[ 1297.093117][   T30] hub 2-1:4.0: hub_hub_status failed (err = -71)
[ 1297.137941][   T30] hub 2-1:4.0: config failed, can't get hub status (err -71)
[ 1297.251761][   T30] usb 2-1: USB disconnect, device number 118
[ 1297.370568][  T875] ath6kl: Failed to submit usb control message: -71
[ 1297.394540][  T875] ath6kl: unable to send the bmi data to the device: -71
[ 1297.402340][  T875] ath6kl: Unable to send get target info: -71
[ 1297.447214][  T875] ath6kl: Failed to init ath6kl core: -71
[ 1297.473368][  T875] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1297.486879][ T3944] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1297.524157][T10502] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 1297.543766][  T875] usb 5-1: USB disconnect, device number 117
[ 1297.664808][ T3944] usb 4-1: Using ep0 maxpacket: 32
[ 1297.685492][ T3944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 1297.728951][ T3944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1297.761054][ T3944] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[ 1297.803808][ T3944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1297.812555][T10524] netlink: 2 bytes leftover after parsing attributes in process `syz.1.15590'.
[ 1297.834963][ T3944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[ 1297.867162][ T3944] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 1297.898504][ T3944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1297.920486][ T3944] usb 4-1: Product: syz
[ 1297.930480][ T3944] usb 4-1: Manufacturer: syz
[ 1297.935096][ T3944] usb 4-1: SerialNumber: syz
[ 1297.958386][T10529] loop5: detected capacity change from 0 to 64
[ 1297.966652][T10530] loop9: detected capacity change from 0 to 8
[ 1297.992510][ T3944] usb 4-1: config 0 descriptor??
[ 1298.053209][ T3944] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input94
[ 1298.415864][T10566] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15599'.
[ 1298.446427][T13371] usb 4-1: USB disconnect, device number 2
[ 1298.740882][   T31] audit: type=1326 audit(1771004433.274:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.9.15606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1298.823317][   T31] audit: type=1326 audit(1771004433.305:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.9.15606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1298.878443][   T31] audit: type=1326 audit(1771004433.305:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.9.15606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f704dd5c84e code=0x7ffc0000
[ 1298.960614][   T31] audit: type=1326 audit(1771004433.305:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.9.15606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f704dd5c84e code=0x7ffc0000
[ 1299.055971][T10609] loop9: detected capacity change from 0 to 8
[ 1299.075511][   T31] audit: type=1326 audit(1771004433.316:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.9.15606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1299.121509][   T31] audit: type=1326 audit(1771004433.316:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.9.15606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1299.212567][   T31] audit: type=1326 audit(1771004433.316:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10595 comm="syz.9.15606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704dd9bf79 code=0x7ffc0000
[ 1299.488750][   T31] audit: type=1326 audit(1771004434.061:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10630 comm="syz.9.15617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f704dd9bf79 code=0x0
[ 1299.813977][T10654] loop2: detected capacity change from 0 to 512
[ 1299.867519][T10649] loop3: detected capacity change from 0 to 4096
[ 1299.877178][T10592] loop4: detected capacity change from 0 to 32768
[ 1299.901733][T10654] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[ 1299.924157][T10649] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[ 1299.934572][T10654] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[ 1299.945794][T10654] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.15624: Failed to acquire dquot type 1
[ 1299.948333][T10592] 
[ 1299.948333][T10592]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1299.948333][T10592] 
[ 1299.957288][T10654] loop2: lost filesystem error report for type 5 error -5
[ 1299.975078][    C0] EXT4-fs (loop2): error count since last fsck: 1
[ 1299.988723][    C0] EXT4-fs (loop2): last error at time 1771004434: ext4_acquire_dquot:7003
[ 1300.027263][T10654] EXT4-fs (loop2): 1 truncate cleaned up
[ 1300.055103][T10654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1300.089742][T10669] ALSA: mixer_oss: invalid OSS volume ''
[ 1300.104341][T10649] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[ 1300.125839][T10654] ext4 filesystem being mounted at /2578/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1300.157018][ T2255] 
[ 1300.157018][ T2255]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1300.157018][ T2255] 
[ 1300.212847][ T2255] 
[ 1300.212847][ T2255]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1300.212847][ T2255] 
[ 1300.355206][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1300.409761][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1300.413074][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1300.443899][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1300.506496][T10682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1300.708790][T10701] ALSA: mixer_oss: invalid OSS volume ''
[ 1300.843418][T10704] loop9: detected capacity change from 0 to 512
[ 1300.901188][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15638'.
[ 1300.930306][T10704] EXT4-fs (loop9): 1 truncate cleaned up
[ 1300.940461][T10704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1301.090391][T31686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1301.099606][  T875] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[ 1301.184509][ T3944] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1301.262536][  T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1301.286992][T10735] xt_connbytes: Forcing CT accounting to be enabled
[ 1301.299544][  T875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1301.337747][ T3944] usb 5-1: Using ep0 maxpacket: 8
[ 1301.337855][  T875] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1301.384617][  T875] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1301.404785][  T875] usb 4-1: Manufacturer: syz
[ 1301.409926][ T3944] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[ 1301.409963][ T3944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.409988][ T3944] usb 5-1: Product: syz
[ 1301.410008][ T3944] usb 5-1: Manufacturer: syz
[ 1301.410027][ T3944] usb 5-1: SerialNumber: syz
[ 1301.464002][ T3944] usb 5-1: config 0 descriptor??
[ 1301.546220][ T3944] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244)
[ 1301.552360][  T875] usb 4-1: config 0 descriptor??
[ 1301.787526][T10765] loop9: detected capacity change from 0 to 256
[ 1301.820292][T10765] exfat: Deprecated parameter 'utf8'
[ 1301.828611][T10765] exfat: Deprecated parameter 'utf8'
[ 1301.871786][ T3944] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[ 1301.892228][ T3944] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1301.916095][T10765] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x97423c56, utbl_chksum : 0xe619d30d)
[ 1301.923330][ T3944] usb 5-1: USB disconnect, device number 118
[ 1301.992722][  T875] hid_parser_main: 8 callbacks suppressed
[ 1301.992748][  T875] cougar 0003:060B:700A.0002: unknown main item tag 0x0
[ 1302.045316][  T875] cougar 0003:060B:700A.0002: unknown main item tag 0x0
[ 1302.070660][  T875] cougar 0003:060B:700A.0002: unknown main item tag 0x0
[ 1302.078794][  T875] cougar 0003:060B:700A.0002: unknown main item tag 0x0
[ 1302.100616][  T875] cougar 0003:060B:700A.0002: unknown main item tag 0x0
[ 1302.123150][  T875] cougar 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[ 1302.281511][  T875] usb 4-1: USB disconnect, device number 3
[ 1302.330633][T10796] loop9: detected capacity change from 0 to 256
[ 1302.376138][T10796] exfat: Deprecated parameter 'namecase'
[ 1302.412963][T10796] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d)
[ 1302.501164][T10742] loop2: detected capacity change from 0 to 32768
[ 1302.608403][T10742] non-latin1 character 0xffff found in JFS file name
[ 1302.626760][T10808] fido_id[10808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1302.648456][T10742] mount with iocharset=utf8 to access
[ 1303.071240][T10839] loop2: detected capacity change from 0 to 2048
[ 1303.097832][T10846] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1303.140903][T10839] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1303.183504][T10839] Remounting filesystem read-only
[ 1303.195455][T10839] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1303.217579][  T875] kernel read not supported for file /media6 (pid: 875 comm: kworker/0:2)
[ 1303.227923][T13371] kernel write not supported for file /media6 (pid: 13371 comm: kworker/0:4)
[ 1303.287806][T10839] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1303.349200][T10839] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1303.444169][T10839] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1303.518194][T10839] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1303.550608][T10839] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1303.606881][T10839] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1303.664097][   T31] kauditd_printk_skb: 1 callbacks suppressed
[ 1303.664118][   T31] audit: type=1800 audit(1771004438.439:626): pid=10839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15664" name="file2" dev="loop2" ino=16 res=0 errno=0
[ 1303.995606][T13371] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1304.044612][T10881] loop9: detected capacity change from 0 to 4096
[ 1304.085188][T10881] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[ 1304.135465][T10881] ntfs3(loop9): ino=3, mi_enum_attr
[ 1304.177298][T13371] usb 2-1: Using ep0 maxpacket: 8
[ 1304.192950][T13371] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1304.278600][T10841] loop3: detected capacity change from 0 to 32768
[ 1304.286941][T13371] usb 2-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=36.00
[ 1304.331242][T13371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1304.358233][T10841] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15666 (10841)
[ 1304.379091][T13371] usb 2-1: Product: syz
[ 1304.383303][T13371] usb 2-1: Manufacturer: syz
[ 1304.432820][T13371] usb 2-1: SerialNumber: syz
[ 1304.508542][T10841] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1304.561547][T10841] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1304.717261][T10923] netlink: 'syz.4.15685': attribute type 10 has an invalid length.
[ 1304.746952][T13371] ftdi_sio 2-1:6.0: FTDI USB Serial Device converter detected
[ 1304.757844][T13371] usb 2-1: Detected FT4232HA
[ 1304.775751][T13371] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1304.782950][T13371] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1304.807283][T13371] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1304.834769][T13371] usb 2-1: USB disconnect, device number 119
[ 1304.846742][T10841] BTRFS info (device loop3): enabling ssd optimizations
[ 1304.899463][T10841] BTRFS info (device loop3): turning on async discard
[ 1304.901697][T13371] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1304.906755][T10841] BTRFS info (device loop3): enabling free space tree
[ 1304.992241][T13371] ftdi_sio 2-1:6.0: device disconnected
[ 1305.057223][ T6855] udevd[6855]: setting mode of /dev/bus/usb/002/119 to 020664 failed: No such file or directory
[ 1305.078045][ T6855] udevd[6855]: setting owner of /dev/bus/usb/002/119 to uid=0, gid=0 failed: No such file or directory
[ 1305.089936][ T5824] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1305.140389][T10870] loop5: detected capacity change from 0 to 32768
[ 1305.163916][T10870] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 0c732a07-3147-4794-99be-b9b0ab1890bc
[ 1305.180368][T10870] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.15675 (10870)
[ 1305.223322][T10870] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1305.276683][T10870] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1305.545419][T10870] BTRFS info (device loop5): enabling ssd optimizations
[ 1305.566681][T10970] loop1: detected capacity change from 0 to 1024
[ 1305.575396][T10870] BTRFS info (device loop5): turning on async discard
[ 1305.582200][T10870] BTRFS info (device loop5): enabling free space tree
[ 1305.866146][T10986] loop9: detected capacity change from 0 to 256
[ 1305.984124][T10986] FAT-fs (loop9): Directory bread(block 64) failed
[ 1306.025723][ T5975] BTRFS info (device loop5): last unmount of filesystem 0c732a07-3147-4794-99be-b9b0ab1890bc
[ 1306.037402][T10986] FAT-fs (loop9): Directory bread(block 65) failed
[ 1306.075275][T10986] FAT-fs (loop9): Directory bread(block 66) failed
[ 1306.127430][T10986] FAT-fs (loop9): Directory bread(block 67) failed
[ 1306.175526][T10986] FAT-fs (loop9): Directory bread(block 68) failed
[ 1306.222876][T10986] FAT-fs (loop9): Directory bread(block 69) failed
[ 1306.243925][T10986] FAT-fs (loop9): Directory bread(block 70) failed
[ 1306.280534][T10986] FAT-fs (loop9): Directory bread(block 71) failed
[ 1306.287252][T10986] FAT-fs (loop9): Directory bread(block 72) failed
[ 1306.308940][T10986] FAT-fs (loop9): Directory bread(block 73) failed
[ 1306.848669][T11006] loop3: detected capacity change from 0 to 4096
[ 1306.904985][T11009] loop4: detected capacity change from 0 to 764
[ 1306.996450][T11009] Symlink component flag not implemented
[ 1307.029482][T11009] Symlink component flag not implemented
[ 1307.071241][T11009] Symlink component flag not implemented (129)
[ 1307.119819][T11009] Symlink component flag not implemented (6)
[ 1307.299372][T10998] loop1: detected capacity change from 0 to 131072
[ 1307.409161][T10998] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1307.486031][T11030] loop2: detected capacity change from 0 to 512
[ 1307.623463][T11030] EXT4-fs (loop2): 1 truncate cleaned up
[ 1307.663054][T10998] XFS (loop1): Starting recovery (logdev: internal)
[ 1307.718484][T11030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1307.780731][T10998] XFS (loop1): Ending recovery (logdev: internal)
[ 1307.836628][ T5815] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1307.866912][T11030] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.2.15702: bad entry in directory: inode out of bounds - offset=0, inode=131074, rec_len=12, size=1024 fake=1
[ 1307.962071][T11030] EXT4-fs error (device loop2) in ext4_delete_entry:2737: Corrupt filesystem
[ 1308.066659][T11030] EXT4-fs warning (device loop2): ext4_rename_delete:3729: inode #2: comm syz.2.15702: Deleting old file: nlink 4, error=-117
[ 1308.191842][T11030] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.15702: bg 0: block 465: padding at end of block bitmap is not set
[ 1308.375909][T11030] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem
[ 1308.456412][T11030] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.15702: invalid indirect mapped block 234881024 (level 0)
[ 1308.556858][T11030] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 1308.781952][T11075] loop3: detected capacity change from 0 to 256
[ 1308.786740][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1308.855693][T11075] exfat: Deprecated parameter 'utf8'
[ 1308.861057][T11075] exfat: Deprecated parameter 'namecase'
[ 1308.942802][T11075] exfat: Deprecated parameter 'namecase'
[ 1308.963202][T11075] exfat: Deprecated parameter 'utf8'
[ 1309.029869][T11075] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[ 1309.100485][T11075] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[ 1309.198927][   T31] audit: type=1800 audit(1771004444.245:627): pid=11075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15712" name="file1" dev="loop3" ino=1048824 res=0 errno=0
[ 1309.406006][T11102] netlink: 59 bytes leftover after parsing attributes in process `syz.9.15721'.
[ 1309.525244][T11112] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size.
[ 1309.578341][T11116] loop3: detected capacity change from 0 to 64
[ 1309.783338][T11132] 9p: Bad value for 'rfdno'
[ 1309.968059][T13371] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1310.163203][T13371] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1310.183044][T11149] loop5: detected capacity change from 0 to 512
[ 1310.187125][T13371] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1310.234409][T11149] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1310.245595][T13371] usb 3-1: Product: syz
[ 1310.249784][T13371] usb 3-1: Manufacturer: syz
[ 1310.283702][T13371] usb 3-1: SerialNumber: syz
[ 1310.323792][T13371] usb 3-1: config 0 descriptor??
[ 1310.333638][T11149] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[ 1310.366645][T11153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15733'.
[ 1310.451574][T11149] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1310.471025][T11149] System zones: 0-2, 18-18, 34-35
[ 1310.488972][T11149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1310.559545][T13371] hso 3-1:0.0: Can't find BULK IN endpoint
[ 1310.586601][T13371] usb-storage 3-1:0.0: USB Mass Storage device detected
[ 1310.673801][ T5975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1310.795668][T13371] usb 3-1: USB disconnect, device number 22
[ 1311.177124][T11208] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15744'.
[ 1311.281666][T11144] loop9: detected capacity change from 0 to 32768
[ 1311.322846][T11144] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1311.391824][T11144] XFS (loop9): Ending clean mount
[ 1311.401931][T11144] XFS (loop9): Quotacheck needed: Please wait.
[ 1311.516096][T11144] XFS (loop9): Quotacheck: Done.
[ 1311.745208][T31686] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1311.904092][T11250] loop2: detected capacity change from 0 to 512
[ 1312.012802][T11250] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.15753: corrupted in-inode xattr: e_value size too large
[ 1312.136651][T11250] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1312.137591][    C0] EXT4-fs (loop2): error count since last fsck: 1
[ 1312.153222][    C0] EXT4-fs (loop2): initial error at time 1771004447: ext4_iget_extra_inode:5025: inode 15
[ 1312.163246][    C0] EXT4-fs (loop2): last error at time 1771004447: ext4_iget_extra_inode:5025: inode 15
[ 1312.186875][T11250] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.15753: couldn't read orphan inode 15 (err -117)
[ 1312.199726][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15757'.
[ 1312.214385][T11250] loop2: lost filesystem error report for type 5 error -117
[ 1312.220149][T11250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1312.244030][T11272] siw: device registration error -23
[ 1312.323285][T11272] smc: removing ib device syz0
[ 1312.482138][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1312.498431][   T31] audit: type=1326 audit(1771004447.721:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af7b9bf79 code=0x7ffc0000
[ 1312.584709][   T31] audit: type=1326 audit(1771004447.721:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af7b9bf79 code=0x7ffc0000
[ 1312.661611][   T31] audit: type=1326 audit(1771004447.721:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3af7b9bf79 code=0x7ffc0000
[ 1312.716246][ T3944] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 1312.720557][   T31] audit: type=1326 audit(1771004447.721:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af7b9bf79 code=0x7ffc0000
[ 1312.748021][   T31] audit: type=1326 audit(1771004447.721:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af7b9bf79 code=0x7ffc0000
[ 1312.770846][   T31] audit: type=1326 audit(1771004447.721:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f3af7b9bf79 code=0x7ffc0000
[ 1312.797321][   T31] audit: type=1326 audit(1771004447.721:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af7b9bf79 code=0x7ffc0000
[ 1312.822778][   T31] audit: type=1326 audit(1771004447.721:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.15762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af7b9bf79 code=0x7ffc0000
[ 1312.966376][ T3944] usb 6-1: Using ep0 maxpacket: 8
[ 1312.976665][ T3944] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[ 1313.008924][ T3944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1313.027840][ T3944] usb 6-1: Product: syz
[ 1313.032115][ T3944] usb 6-1: Manufacturer: syz
[ 1313.042734][ T3944] usb 6-1: SerialNumber: syz
[ 1313.107157][ T3944] usb 6-1: config 0 descriptor??
[ 1313.391294][ T3944] gspca_main: sunplus-2.14.0 probing 04a5:3003
[ 1313.399184][ T3950] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1313.552250][T11332] loop2: detected capacity change from 0 to 4096
[ 1313.583174][ T3950] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1313.605591][ T3950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.625105][T11332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1313.635134][ T3950] usb 5-1: config 0 descriptor??
[ 1313.665720][ T3950] cp210x 5-1:0.0: cp210x converter detected
[ 1313.715213][ T3944] gspca_sunplus: reg_w_riv err -71
[ 1313.720946][ T3944] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[ 1313.771238][ T3944] usb 6-1: USB disconnect, device number 111
[ 1313.863764][T11338] loop1: detected capacity change from 0 to 4096
[ 1314.074783][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1314.127995][ T3950] usb 5-1: cp210x converter now attached to ttyUSB0
[ 1314.223113][T11357] loop9: detected capacity change from 0 to 1024
[ 1314.313438][ T3944] usb 5-1: USB disconnect, device number 119
[ 1314.340202][T11357] hfsplus: b-tree write err: -5, ino 2
[ 1314.364650][ T3944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1314.449188][T11370] hfsplus: invalid extended attribute record
[ 1314.509116][T11370] hfsplus: b-tree write err: -5, ino 2
[ 1314.576399][ T3944] cp210x 5-1:0.0: device disconnected
[ 1314.614284][T11302] Bluetooth: hci7: command 0x0405 tx timeout
[ 1314.679997][ T3484] hfsplus: b-tree write err: -5, ino 25
[ 1314.722963][ T3484] hfsplus: b-tree write err: -5, ino 4
[ 1314.742167][ T3484] hfsplus: b-tree write err: -5, ino 2
[ 1314.766159][ T3484] hfsplus: b-tree write err: -5, ino 22
[ 1315.110772][T11405] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[ 1315.272246][T11377] loop5: detected capacity change from 0 to 32768
[ 1315.376968][T11377] find_entry called with index = 0
[ 1315.393721][T11377] read_mapping_page failed!
[ 1315.408260][T11377] ERROR: (device loop5): txCommit: 
[ 1315.408260][T11377] 
[ 1315.433290][T11377] ERROR: (device loop5): diFree: numfree > numinos
[ 1315.433290][T11377] 
[ 1315.595732][T11419] loop9: detected capacity change from 0 to 4096
[ 1315.613695][T11419] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[ 1315.707301][T11419] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[ 1315.757120][T11419] ntfs3(loop9): Failed to load $Extend (-22).
[ 1315.782601][T11419] ntfs3(loop9): Failed to initialize $Extend.
[ 1316.277327][T11449] loop1: detected capacity change from 0 to 1024
[ 1316.288111][T11449] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1316.419510][T11449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1316.478553][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1316.493646][T11458] loop5: detected capacity change from 0 to 2048
[ 1316.504942][   T30] kernel read not supported for file /1490/schedstat (pid: 30 comm: kworker/1:2)
[ 1316.626143][T11458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1316.820204][ T5975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1316.857533][T11479] loop4: detected capacity change from 0 to 256
[ 1316.888605][T11479] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1317.069365][T11493] loop5: detected capacity change from 0 to 1024
[ 1317.131713][T21361] Bluetooth: hci8: command 0x1003 tx timeout
[ 1317.138294][T11384] Bluetooth: hci8: Opcode 0x1003 failed: -110
[ 1317.420646][T11516] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15810'.
[ 1317.447215][T11518] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1317.481022][   T30] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 1317.509838][T11522] loop2: detected capacity change from 0 to 512
[ 1317.564372][T11522] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1317.669824][   T30] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1317.680649][   T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1317.705496][   T30] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1317.715394][ T5835] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[ 1317.717675][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1317.748958][   T30] usb 6-1: SerialNumber: syz
[ 1318.158405][T11558] Bluetooth: MGMT ver 1.23
[ 1318.235788][   T30] usb 6-1: 0:2 : does not exist
[ 1318.797053][T11565] loop9: detected capacity change from 0 to 65536
[ 1318.933645][T11565] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[ 1319.006139][   T30] usb 6-1: USB disconnect, device number 112
[ 1319.018372][T11565] XFS (loop9): totally zeroed log
[ 1319.042597][T11565] XFS (loop9): Internal error hlen <= 0 || hlen > bufsize at line 2980 of file fs/xfs/xfs_log_recover.c.  Caller xlog_valid_rec_header+0x1a0/0x290
[ 1319.057620][T11565] CPU: 1 UID: 0 PID: 11565 Comm: syz.9.15822 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1319.057658][T11565] Tainted: [L]=SOFTLOCKUP
[ 1319.057668][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1319.057684][T11565] Call Trace:
[ 1319.057693][T11565]  <TASK>
[ 1319.057704][T11565]  dump_stack_lvl+0xe8/0x150
[ 1319.057745][T11565]  xfs_corruption_error+0x122/0x170
[ 1319.057775][T11565]  ? xlog_valid_rec_header+0x1a0/0x290
[ 1319.057815][T11565]  xlog_valid_rec_header+0x205/0x290
[ 1319.057850][T11565]  ? xlog_valid_rec_header+0x1a0/0x290
[ 1319.057900][T11565]  xlog_do_recovery_pass+0x331/0xcd0
[ 1319.057953][T11565]  ? __pfx_xlog_do_recovery_pass+0x10/0x10
[ 1319.058013][T11565]  ? kfree+0x1c1/0x610
[ 1319.058054][T11565]  xlog_verify_head+0x136/0x440
[ 1319.058100][T11565]  xlog_find_tail+0x5ca/0x840
[ 1319.058148][T11565]  xlog_recover+0x4b/0x3e0
[ 1319.058187][T11565]  xfs_log_mount+0x253/0x3e0
[ 1319.058217][T11565]  xfs_mountfs+0xe70/0x22e0
[ 1319.058267][T11565]  ? __pfx_xfs_mountfs+0x10/0x10
[ 1319.058299][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.058333][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.058365][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.058395][T11565]  ? trace_xfs_inode_timestamp_range+0x84/0x1e0
[ 1319.058430][T11565]  xfs_fs_fill_super+0x11b5/0x1600
[ 1319.058466][T11565]  get_tree_bdev_flags+0x431/0x4f0
[ 1319.058506][T11565]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[ 1319.058533][T11565]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 1319.058573][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.058607][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.058642][T11565]  vfs_get_tree+0x92/0x2a0
[ 1319.058682][T11565]  do_new_mount+0x341/0xd30
[ 1319.058710][T11565]  ? apparmor_capable+0x137/0x1a0
[ 1319.058753][T11565]  ? __pfx_do_new_mount+0x10/0x10
[ 1319.058781][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.058811][T11565]  ? ns_capable+0x89/0xe0
[ 1319.058842][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.058874][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.058920][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.058949][T11565]  ? user_path_at+0xd4/0x160
[ 1319.058986][T11565]  __se_sys_mount+0x31d/0x420
[ 1319.059029][T11565]  ? __pfx___se_sys_mount+0x10/0x10
[ 1319.059057][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.059094][T11565]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1319.059124][T11565]  ? __x64_sys_mount+0x20/0xc0
[ 1319.059156][T11565]  do_syscall_64+0x14d/0xf80
[ 1319.059189][T11565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1319.059214][T11565]  ? trace_irq_disable+0x37/0x100
[ 1319.059253][T11565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1319.059278][T11565] RIP: 0033:0x7f704dd9d20a
[ 1319.059302][T11565] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1319.059323][T11565] RSP: 002b:00007f704bff5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1319.059350][T11565] RAX: ffffffffffffffda RBX: 00007f704bff5ee0 RCX: 00007f704dd9d20a
[ 1319.059369][T11565] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 00007f704bff5ea0
[ 1319.059388][T11565] RBP: 0000200000000000 R08: 00007f704bff5ee0 R09: 0000000000000000
[ 1319.059405][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 1319.059422][T11565] R13: 00007f704bff5ea0 R14: 000000000000b911 R15: 0000200000000100
[ 1319.059460][T11565]  </TASK>
[ 1319.059471][T11565] XFS (loop9): Corruption detected. Unmount and run xfs_repair
[ 1319.401090][T11565] XFS (loop9): Torn write (CRC failure) detected at log block 0x928. Truncating head block from 0x0.
[ 1319.419369][T11599] loop5: detected capacity change from 0 to 512
[ 1319.434191][T11565] XFS (loop9): failed to locate log tail
[ 1319.439878][T11565] XFS (loop9): log mount/recovery failed: error -74
[ 1319.464098][T11565] XFS (loop9): log mount failed
[ 1319.502077][T11599] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1319.653615][T11599] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.15828: corrupted in-inode xattr: e_value out of bounds
[ 1319.737361][T11599] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1319.738534][    C1] EXT4-fs (loop5): error count since last fsck: 1
[ 1319.754129][    C1] EXT4-fs (loop5): initial error at time 1771004455: ext4_iget_extra_inode:5025: inode 15
[ 1319.764117][    C1] EXT4-fs (loop5): last error at time 1771004455: ext4_iget_extra_inode:5025: inode 15
[ 1319.766873][T11599] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.15828: couldn't read orphan inode 15 (err -117)
[ 1319.862175][T11599] loop5: lost filesystem error report for type 5 error -117
[ 1320.003927][T11599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1320.101245][   T32] INFO: task syz.6.13571:5324 blocked for more than 143 seconds.
[ 1320.113303][T11628] loop9: detected capacity change from 0 to 512
[ 1320.125816][   T32]       Tainted: G             L      syzkaller #0
[ 1320.149312][T11628] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1320.187888][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1320.206339][T11599] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 1320.231876][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1320.242735][   T32] task:syz.6.13571     state:D
[ 1320.274386][T11628] EXT4-fs (loop9): 1 truncate cleaned up
[ 1320.274441][   T32]  stack:25896 pid:5324  tgid:5323  ppid:15804  task_flags:0x400040 flags:0x00080002
[ 1320.320820][   T32] Call Trace:
[ 1320.331400][T11628] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1320.346756][   T32]  <TASK>
[ 1320.349942][   T32]  __schedule+0x157c/0x52b0
[ 1320.354691][   T32]  ? __pfx___schedule+0x10/0x10
[ 1320.363137][   T32]  ? schedule+0x90/0x360
[ 1320.367657][   T32]  schedule+0x164/0x360
[ 1320.371908][   T32]  schedule_preempt_disabled+0x13/0x30
[ 1320.377604][   T32]  __mutex_lock+0x7fe/0x1300
[ 1320.382239][   T32]  ? __mutex_lock+0x5ac/0x1300
[ 1320.387279][   T32]  ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410
[ 1320.393484][   T32]  ? __pfx___mutex_lock+0x10/0x10
[ 1320.398745][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.404533][   T32]  ? stack_trace_save+0xa9/0x100
[ 1320.409981][   T32]  ? __pfx_stack_trace_save+0x10/0x10
[ 1320.423230][   T32]  nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410
[ 1320.437549][   T32]  ? stack_depot_save_flags+0x33/0x810
[ 1320.443538][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.449231][   T32]  ? kasan_save_track+0x4f/0x80
[ 1320.456555][T11628] EXT4-fs error (device loop9): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.9.15835: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1320.483828][   T32]  ? kasan_save_track+0x3e/0x80
[ 1320.488819][   T32]  ? __kasan_kmalloc+0x93/0xb0
[ 1320.510311][   T32]  ? __alloc_skb+0x2c1/0x7d0
[ 1320.514995][   T32]  ? netlink_dump+0x1ef/0xe80
[ 1320.522847][   T32]  ? __netlink_dump_start+0x5cb/0x7e0
[ 1320.528519][   T32]  ? genl_family_rcv_msg_dumpit+0x213/0x310
[ 1320.531385][T11628] EXT4-fs error (device loop9) in ext4_delete_entry:2737: Corrupt filesystem
[ 1320.545267][   T32]  ? genl_rcv_msg+0x5e8/0x7a0
[ 1320.550429][   T32]  ? netlink_rcv_skb+0x232/0x4b0
[ 1320.555534][   T32]  ? genl_rcv+0x28/0x40
[ 1320.561428][   T32]  ? netlink_unicast+0x80f/0x9b0
[ 1320.566499][   T32]  ? netlink_sendmsg+0x813/0xb40
[ 1320.573164][   T32]  ? ____sys_sendmsg+0xa68/0xad0
[ 1320.578796][   T32]  ? ___sys_sendmsg+0x2a5/0x360
[ 1320.583841][   T32]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[ 1320.590429][   T32]  ? do_syscall_64+0x14d/0xf80
[ 1320.602923][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1320.641367][   T32]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[ 1320.656040][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.664167][   T32]  ? rcu_is_watching+0x15/0xb0
[ 1320.669056][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.675653][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.682763][   T32]  ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0
[ 1320.689544][   T32]  genl_dumpit+0x10b/0x1b0
[ 1320.694550][   T32]  netlink_dump+0x722/0xe80
[ 1320.699191][   T32]  ? __pfx_netlink_dump+0x10/0x10
[ 1320.706928][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.719003][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.726763][   T32]  ? genl_start+0x499/0x6c0
[ 1320.731716][   T32]  __netlink_dump_start+0x5cb/0x7e0
[ 1320.737063][   T32]  genl_family_rcv_msg_dumpit+0x213/0x310
[ 1320.743436][   T32]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[ 1320.750876][   T32]  ? genl_get_cmd+0x4a8/0x930
[ 1320.755750][   T32]  ? __pfx_genl_start+0x10/0x10
[ 1320.761181][   T32]  ? __pfx_genl_dumpit+0x10/0x10
[ 1320.766248][   T32]  ? __pfx_genl_done+0x10/0x10
[ 1320.771636][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[ 1320.776989][   T32]  genl_rcv_msg+0x5e8/0x7a0
[ 1320.781639][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1320.788089][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.793866][   T32]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[ 1320.800991][   T32]  netlink_rcv_skb+0x232/0x4b0
[ 1320.807799][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1320.812988][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1320.818903][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.825646][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.831406][   T32]  ? down_read+0x272/0x2e0
[ 1320.837589][   T32]  ? genl_rcv+0xd/0x40
[ 1320.841770][   T32]  genl_rcv+0x28/0x40
[ 1320.846224][   T32]  netlink_unicast+0x80f/0x9b0
[ 1320.851515][   T32]  ? __pfx_netlink_unicast+0x10/0x10
[ 1320.857721][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.863849][   T32]  ? skb_put+0x11b/0x210
[ 1320.868200][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.874376][   T32]  netlink_sendmsg+0x813/0xb40
[ 1320.879291][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1320.885102][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.891119][   T32]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1320.896177][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.903367][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.909097][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1320.915036][   T32]  ____sys_sendmsg+0xa68/0xad0
[ 1320.922647][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.928370][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1320.933987][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.939863][   T32]  ? import_iovec+0x73/0xa0
[ 1320.944613][   T32]  ___sys_sendmsg+0x2a5/0x360
[ 1320.949594][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.955417][   T32]  ? __lock_acquire+0x6b5/0x2cf0
[ 1320.960667][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1320.965981][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.971712][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.977557][   T32]  ? futex_wait+0x29a/0x380
[ 1320.982116][   T32]  ? __fget_files+0x2a/0x420
[ 1320.986815][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1320.992460][   T32]  ? __fget_files+0x3a0/0x420
[ 1320.997340][   T32]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1321.002294][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1321.007860][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1321.013507][   T32]  ? rcu_is_watching+0x15/0xb0
[ 1321.018422][   T32]  do_syscall_64+0x14d/0xf80
[ 1321.023033][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1321.029198][   T32]  ? trace_irq_disable+0x37/0x100
[ 1321.034392][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1321.040299][   T32] RIP: 0033:0x7fe22419bf79
[ 1321.044810][   T32] RSP: 002b:00007fe225059028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1321.053260][   T32] RAX: ffffffffffffffda RBX: 00007fe224415fa0 RCX: 00007fe22419bf79
[ 1321.061235][   T32] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000003
[ 1321.069509][   T32] RBP: 00007fe2242327e0 R08: 0000000000000000 R09: 0000000000000000
[ 1321.077530][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1321.085600][   T32] R13: 00007fe224416038 R14: 00007fe224415fa0 R15: 00007ffd2c0579b8
[ 1321.095166][   T32]  </TASK>
[ 1321.098597][   T32] 
[ 1321.098597][   T32] Showing all locks held in the system:
[ 1321.107760][ T5975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1321.109175][   T32] 1 lock held by khungtaskd/32:
[ 1321.154548][T31686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1321.186076][   T32]  #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1321.205192][   T32] 2 locks held by getty/5569:
[ 1321.210317][   T32]  #0: ffff8880360320a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1321.220443][   T32]  #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 1321.230938][   T32] 1 lock held by udevd/5967:
[ 1321.236384][   T32] 2 locks held by syz.0.12107/1660:
[ 1321.241631][   T32]  #0: ffffffff8fc32970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1321.250599][   T32]  #1: ffffffff8ea82268 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0
[ 1321.261981][   T32] 3 locks held by syz.6.13571/5324:
[ 1321.267615][   T32]  #0: ffffffff8fc32970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1321.276229][   T32]  #1: ffff8880250fc6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[ 1321.287785][   T32]  #2: ffffffff8ea82268 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410
[ 1321.299779][   T32] 3 locks held by kworker/u9:2/11384:
[ 1321.306209][   T32]  #0: ffff8880529c0948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[ 1321.318464][   T32]  #1: ffffc90016b87c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[ 1321.331843][   T32]  #2: ffff88809b558ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1321.348225][   T32] 
[ 1321.350582][   T32] =============================================
[ 1321.350582][   T32] 
[ 1321.361094][   T32] NMI backtrace for cpu 1
[ 1321.361116][   T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1321.361149][   T32] Tainted: [L]=SOFTLOCKUP
[ 1321.361158][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1321.361173][   T32] Call Trace:
[ 1321.361183][   T32]  <TASK>
[ 1321.361194][   T32]  dump_stack_lvl+0xe8/0x150
[ 1321.361235][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[ 1321.361275][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1321.361307][   T32]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1321.361356][   T32]  sys_info+0x135/0x170
[ 1321.361388][   T32]  watchdog+0xf90/0xfe0
[ 1321.361428][   T32]  ? watchdog+0x209/0xfe0
[ 1321.361468][   T32]  kthread+0x388/0x470
[ 1321.361506][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1321.361536][   T32]  ? __pfx_kthread+0x10/0x10
[ 1321.361573][   T32]  ret_from_fork+0x51e/0xb90
[ 1321.361608][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1321.361635][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1321.361666][   T32]  ? __switch_to+0xc7d/0x1400
[ 1321.361695][   T32]  ? __pfx_kthread+0x10/0x10
[ 1321.361732][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1321.361786][   T32]  </TASK>
[ 1321.361796][   T32] Sending NMI from CPU 1 to CPUs 0:
[ 1321.483667][    C0] NMI backtrace for cpu 0
[ 1321.483695][    C0] CPU: 0 UID: 0 PID: 1010 Comm: kworker/u8:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1321.483727][    C0] Tainted: [L]=SOFTLOCKUP
[ 1321.483736][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1321.483752][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[ 1321.483786][    C0] RIP: 0010:trace_irq_enable+0x30/0x100
[ 1321.483822][    C0] Code: 8b 05 c8 df 4b 11 83 f8 08 73 33 89 c3 c1 e8 06 48 8d 3c c5 70 fb 10 90 be 08 00 00 00 e8 08 95 61 00 48 0f a3 1d e0 da 44 0e <73> 09 e8 a9 64 dd ff 84 c0 74 0f 5b 41 5e e9 68 20 44 ff cc 90 0f
[ 1321.483845][    C0] RSP: 0018:ffffc900037479d8 EFLAGS: 00000057
[ 1321.483864][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81cc2088
[ 1321.483880][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9010fb70
[ 1321.483896][    C0] RBP: ffff88807cadaa00 R08: ffffffff9010fb77 R09: 1ffffffff2021f6e
[ 1321.483914][    C0] R10: dffffc0000000000 R11: fffffbfff2021f6f R12: dffffc0000000000
[ 1321.483932][    C0] R13: ffff88807d546a00 R14: ffffffff87166a87 R15: 00000000000000d0
[ 1321.483952][    C0] FS:  0000000000000000(0000) GS:ffff8881254a0000(0000) knlGS:0000000000000000
[ 1321.483971][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1321.483988][    C0] CR2: 00007f704dfe42f8 CR3: 0000000075bee000 CR4: 0000000000350ef0
[ 1321.484007][    C0] Call Trace:
[ 1321.484016][    C0]  <TASK>
[ 1321.484026][    C0]  ? nsim_dev_trap_report_work+0x7c7/0xb80
[ 1321.484052][    C0]  trace_hardirqs_on+0x18/0x40
[ 1321.484082][    C0]  __local_bh_enable_ip+0xd0/0x130
[ 1321.484112][    C0]  nsim_dev_trap_report_work+0x7c7/0xb80
[ 1321.484150][    C0]  ? process_scheduled_works+0xa0f/0x17a0
[ 1321.484180][    C0]  process_scheduled_works+0xaec/0x17a0
[ 1321.484227][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1321.484259][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1321.484294][    C0]  ? assign_work+0x3d5/0x5e0
[ 1321.484324][    C0]  worker_thread+0xa50/0xfc0
[ 1321.484355][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1321.484385][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1321.484421][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1321.484456][    C0]  kthread+0x388/0x470
[ 1321.484492][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1321.484519][    C0]  ? __pfx_kthread+0x10/0x10
[ 1321.484554][    C0]  ret_from_fork+0x51e/0xb90
[ 1321.484586][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1321.484613][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1321.484641][    C0]  ? __switch_to+0xc7d/0x1400
[ 1321.484668][    C0]  ? __pfx_kthread+0x10/0x10
[ 1321.484703][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1321.484751][    C0]  </TASK>
[ 1321.741658][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[ 1321.748524][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1321.759190][   T32] Tainted: [L]=SOFTLOCKUP
[ 1321.763489][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1321.773523][   T32] Call Trace:
[ 1321.776789][   T32]  <TASK>
[ 1321.779709][   T32]  vpanic+0x56c/0xa60
[ 1321.783684][   T32]  ? __pfx___schedule+0x10/0x10
[ 1321.788542][   T32]  ? __pfx_vpanic+0x10/0x10
[ 1321.793076][   T32]  ? __pfx_console_unlock+0x10/0x10
[ 1321.798273][   T32]  panic+0xc5/0xd0
[ 1321.801986][   T32]  ? __pfx_panic+0x10/0x10
[ 1321.806396][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1321.812019][   T32]  ? preempt_schedule_thunk+0x16/0x30
[ 1321.817381][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1321.822999][   T32]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1321.829169][   T32]  watchdog+0xfda/0xfe0
[ 1321.833325][   T32]  ? watchdog+0x209/0xfe0
[ 1321.837652][   T32]  kthread+0x388/0x470
[ 1321.841716][   T32]  ? __pfx_watchdog+0x10/0x10
[ 1321.846380][   T32]  ? __pfx_kthread+0x10/0x10
[ 1321.850972][   T32]  ret_from_fork+0x51e/0xb90
[ 1321.855553][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[ 1321.860650][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1321.866270][   T32]  ? __switch_to+0xc7d/0x1400
[ 1321.870939][   T32]  ? __pfx_kthread+0x10/0x10
[ 1321.875523][   T32]  ret_from_fork_asm+0x1a/0x30
[ 1321.880295][   T32]  </TASK>
[ 1321.883609][   T32] Kernel Offset: disabled
[ 1321.887924][   T32] Rebooting in 86400 seconds..