last executing test programs:

1m35.502807283s ago: executing program 1 (id=1582):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x0, 0x0, 0xffff, 0x2000, 0xa, 0x80}, {0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x7fff, 0xfffffffffffffffd}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in6=@loopback, 0x4d4, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x0, 0x0, 0x12}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x7}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x4d3, 0x32}, 0x0, @in=@broadcast, 0x800000, 0x3, 0x0, 0x0, 0x0, 0xcff3}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x3c}, 0xa, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x6, 0xabf}, {{@in=@broadcast, 0x4d4, 0x2b}, 0x0, @in=@loopback, 0x3505, 0x0, 0x0, 0x80}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffe, 0x4, 0x0, 0xfc, 0x1}]}]}, 0x23c}}, 0x0)

1m35.25251371s ago: executing program 1 (id=1585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}}, 0x14}}, 0x84)

1m35.008922787s ago: executing program 1 (id=1588):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000002, 0x3)

1m34.912557733s ago: executing program 1 (id=1590):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x204818, &(0x7f0000000480)=ANY=[], 0x1, 0x54e, &(0x7f00000008c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

1m34.66012713s ago: executing program 1 (id=1593):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe2)

1m33.852663905s ago: executing program 1 (id=1601):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)

1m33.312481561s ago: executing program 32 (id=1601):
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)

3.616890325s ago: executing program 3 (id=2650):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, 0x0)

2.534757218s ago: executing program 0 (id=2666):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x30, 0x3, "5fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.283759135s ago: executing program 3 (id=2669):
unshare(0x2c020400)
syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0xd96d, 0x3f, 0xfffffffe, 0x24000, 0x0, 0x0}, 0x0, 0x0)

2.250758287s ago: executing program 0 (id=2670):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)

2.027944782s ago: executing program 2 (id=2673):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x70a, 0x183e, 0x30314142, 0x6, 0x9, [{0x93, 0xf}, {0x6, 0x5}, {0x5, 0x25}, {0x2, 0x7fff}, {0x7fffffff, 0xffffff00}, {0x5, 0xfe00}, {0xfffffff8, 0x10}, {0xffff, 0x400003}], 0xd, 0x2, 0x2, 0x1, 0x1}})

2.003574944s ago: executing program 3 (id=2674):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)

1.998922394s ago: executing program 0 (id=2675):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000000c0)={0x1, 0x20000000, 0x17, 0x101, 0xee, &(0x7f0000000b00)})

1.817059507s ago: executing program 2 (id=2677):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xee, &(0x7f0000000000), &(0x7f0000000040)=0x4)

1.780357179s ago: executing program 3 (id=2678):
r0 = syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x80800)
ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000180)={0x0, 0x6, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa6})

1.654691108s ago: executing program 2 (id=2680):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0x2, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota_file, 0x4}, {@acl}, {@data_journal}, {@usrjquota, 0x3d}]}, 0x2, 0x110f, &(0x7f0000001140)="$eJzs2LFqFEEYB/D/7B2Y7mTTL4IWFhISzs4qRYRrrW0kpDJVrooI4rv4OJLKPuQBLAKWwshusp5IIGAuhoPfD2Z3+OabmW/KmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCVV/1nu0naMdIkKUnXnS0uknRj/PHXSZOSN0eL5cHJ/PUyyWRIL33rZ/XT0u493Wrn7bzda19u7z9rl6cf3r87Pj46uV6mpMv55foPUq7rudHW+vcDAACATVHvbPb3ktP/uz8AAABwm7U+JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8gzpb9dskP2utaZKUpOvOFhdJuocsEAAAALizkiZvZzfFMzwDrLzIt1kZ4mP7Ufqc3XwZ5j9apR429184AAAAbJTprRnlj/v480xTa/00jj3JNDs7V/3+1w98308mpwfZ/X0n/zx8zy8/Ho6t1Mk9nQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAXO3BAAgAAACDo/+t2BAoAAAAAAAAAAAAAAAAAAAAAAB8FAAD//6zC3aE=")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)

1.613102061s ago: executing program 0 (id=2681):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000003c0)={0x2e, 0x1, 0x0, "a6892d080000000e5dedae4d40137137c17a5ac1f393f65946a68dd1f8822c88", 0x34324142})

1.612327041s ago: executing program 3 (id=2682):
syz_mount_image$jfs(&(0x7f00000011c0), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYRES8=0x0], 0xfa, 0x61be, &(0x7f00000073c0)="$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")
lsetxattr$security_capability(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x1)

1.416800584s ago: executing program 0 (id=2683):
r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==")
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480))

1.416511464s ago: executing program 4 (id=2684):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x140e, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x40)

1.311763701s ago: executing program 4 (id=2685):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20)

1.01724262s ago: executing program 4 (id=2686):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

942.873406ms ago: executing program 2 (id=2687):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce)
getsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4)

660.867865ms ago: executing program 4 (id=2688):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r0, 0x0, 0x0)

509.288715ms ago: executing program 4 (id=2689):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x90, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_SRC={0x8, 0x2, @multicast2}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000004)

391.576764ms ago: executing program 2 (id=2690):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f0300000000000000000800a100", @ANYRES32, @ANYBLOB="0c000d80"], 0x24}], 0x1}, 0x2404c8c0)

294.56899ms ago: executing program 4 (id=2691):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90424fc60100c034002bc0100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

104.695833ms ago: executing program 3 (id=2692):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)

99.736493ms ago: executing program 2 (id=2693):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000001000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

0s ago: executing program 0 (id=2694):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94)

kernel console output (not intermixed with test programs):

000009 RDI: 00007ffff7784190
[  204.433044][ T5765] RBP: 00007ffff7784190 R08: 0000000000000000 R09: 0000000000000000
[  204.441124][ T5765] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffff7785220
[  204.449114][ T5765] R13: 00007fea46813d7d R14: 0000000000031cd1 R15: 00007ffff7785260
[  204.457161][ T5765]  </TASK>
[  204.460270][    C0] vkms_vblank_simulate: vblank timer overrun
[  204.511984][ T8667] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  204.620567][ T8667] XFS (loop1): Ending clean mount
[  204.634306][ T8667] XFS (loop1): Quotacheck needed: Please wait.
[  204.644336][ T8699] loop3: detected capacity change from 0 to 512
[  204.725809][ T8667] XFS (loop1): Quotacheck: Done.
[  204.762460][ T5782] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  204.995020][ T5768] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  205.022338][ T8703] xt_l2tp: wrong L2TP version: 0
[  205.636088][ T8722] loop2: detected capacity change from 0 to 256
[  205.690258][ T8722] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  206.342798][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'.
[  206.557878][ T8755] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4)
[  206.706683][ T8758] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1302'.
[  207.791737][  T968] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  207.836517][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'.
[  207.901812][    T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  207.982091][  T968] usb 4-1: Using ep0 maxpacket: 32
[  207.994098][  T968] usb 4-1: config 0 has an invalid interface number: 119 but max is 0
[  208.016060][  T968] usb 4-1: config 0 has no interface number 0
[  208.034839][  T968] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19
[  208.051785][  T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.091390][  T968] usb 4-1: Product: syz
[  208.107629][    T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  208.118428][  T968] usb 4-1: Manufacturer: syz
[  208.127488][  T968] usb 4-1: SerialNumber: syz
[  208.137427][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.154337][  T968] usb 4-1: config 0 descriptor??
[  208.167422][    T8] usb 2-1: config 0 descriptor??
[  208.184288][  T968] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  208.205325][    T8] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  208.521806][ T5756] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  208.590574][  T968] gspca_sn9c2028: read1 error -71
[  208.596829][  T968] gspca_sn9c2028: read1 error -71
[  208.610199][  T968] sn9c2028: probe of 4-1:0.119 failed with error -71
[  208.623769][  T968] usb 4-1: USB disconnect, device number 5
[  208.637082][    T8] gspca_stv06xx: I2C: Read error writing address: -71
[  208.657090][    T8] usb 2-1: USB disconnect, device number 7
[  208.712957][ T5756] usb 3-1: Using ep0 maxpacket: 32
[  208.730500][ T5756] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  208.749349][ T5756] usb 3-1: config 0 has no interface number 0
[  208.763720][ T5756] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  208.774183][ T5756] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  208.788040][ T5756] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  208.797536][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.806435][ T5756] usb 3-1: Product: syz
[  208.810836][ T5756] usb 3-1: Manufacturer: syz
[  208.815547][ T5756] usb 3-1: SerialNumber: syz
[  208.823919][ T5756] usb 3-1: config 0 descriptor??
[  208.834561][ T8816] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  208.857637][ T8816] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  208.914251][ T5756] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 36:2a:06:83:8a:0d
[  209.600571][ T8825] loop0: detected capacity change from 0 to 32768
[  209.915710][ T8852] loop3: detected capacity change from 0 to 256
[  210.427511][ T5756] usb 3-1: USB disconnect, device number 6
[  210.451138][ T5756] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  211.600227][ T8861] loop1: detected capacity change from 0 to 32768
[  211.730946][ T8861] JBD2: Ignoring recovery information on journal
[  211.795262][ T8889] loop2: detected capacity change from 0 to 4096
[  211.811656][ T8889] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  211.947351][ T8889] ntfs3: loop2: failed to convert "c46c" to macgaelic
[  211.973125][ T8861] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  212.067798][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout
[  212.074073][ T5773] Bluetooth: hci3: command 0x0406 tx timeout
[  212.080567][ T5774] Bluetooth: hci2: command 0x0406 tx timeout
[  212.089842][ T8898] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  212.248474][ T8861] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3923141632
[  212.272248][ T8861] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  212.367601][ T8861] OCFS2: File system is now read-only.
[  212.402176][ T8861] (syz.1.1346,8861,1):ocfs2_search_chain:1761 ERROR: status = -30
[  212.423585][ T8861] (syz.1.1346,8861,1):ocfs2_search_chain:1871 ERROR: status = -30
[  212.461860][ T8861] (syz.1.1346,8861,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  212.506882][ T8861] (syz.1.1346,8861,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  212.591653][ T8861] (syz.1.1346,8861,1):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  212.600093][ T8861] (syz.1.1346,8861,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  212.644638][ T8861] (syz.1.1346,8861,1):ocfs2_mknod_locked:639 ERROR: status = -30
[  212.671645][ T8861] (syz.1.1346,8861,1):ocfs2_mknod:385 ERROR: status = -30
[  212.680096][ T8861] (syz.1.1346,8861,1):ocfs2_mknod:502 ERROR: status = -30
[  212.721710][ T8861] (syz.1.1346,8861,1):ocfs2_mkdir:659 ERROR: status = -30
[  212.926908][ T5768] ocfs2: Unmounting device (7,1) on (node local)
[  214.452072][ T8981] loop0: detected capacity change from 0 to 256
[  214.459603][ T8979] loop2: detected capacity change from 0 to 1024
[  214.822071][ T8991] xt_CT: You must specify a L4 protocol and not use inversions on it
[  215.097102][ T9002] loop1: detected capacity change from 0 to 736
[  215.277112][ T9002] rock: directory entry would overflow storage
[  215.289997][ T9009] netlink: 'syz.3.1398': attribute type 3 has an invalid length.
[  215.308604][ T9002] rock: sig=0x3b10, size=4, remaining=3
[  215.321158][ T9009] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1398'.
[  216.001792][ T9029] loop3: detected capacity change from 0 to 64
[  216.027105][ T8996] loop0: detected capacity change from 0 to 32768
[  216.086976][ T8996] (syz.0.1393,8996,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  216.160539][ T8996] (syz.0.1393,8996,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  216.245422][ T8996] JBD2: Ignoring recovery information on journal
[  216.295903][ T8996] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  216.301361][ T9035] loop1: detected capacity change from 0 to 256
[  216.432840][ T9035] FAT-fs (loop1): Directory bread(block 64) failed
[  216.432924][ T9035] FAT-fs (loop1): Directory bread(block 65) failed
[  216.433027][ T9035] FAT-fs (loop1): Directory bread(block 66) failed
[  216.433059][ T9035] FAT-fs (loop1): Directory bread(block 67) failed
[  216.433212][ T9035] FAT-fs (loop1): Directory bread(block 68) failed
[  216.433243][ T9035] FAT-fs (loop1): Directory bread(block 69) failed
[  216.433340][ T9035] FAT-fs (loop1): Directory bread(block 70) failed
[  216.433370][ T9035] FAT-fs (loop1): Directory bread(block 71) failed
[  216.433465][ T9035] FAT-fs (loop1): Directory bread(block 72) failed
[  216.433494][ T9035] FAT-fs (loop1): Directory bread(block 73) failed
[  216.759022][ T9045] IPv6: NLM_F_CREATE should be specified when creating new route
[  216.869240][ T5764] ocfs2: Unmounting device (7,0) on (node local)
[  217.339480][ T9060] Unsupported ieee802154 address type: 0
[  217.553468][ T9069] loop1: detected capacity change from 0 to 16
[  217.648295][ T9069] erofs: (device loop1): mounted with root inode @ nid 36.
[  217.738951][ T9069] syz.1.1419: attempt to access beyond end of device
[  217.738951][ T9069] loop1: rw=0, sector=1936876908, nr_sectors = 1 limit=16
[  217.839353][ T9069] syz.1.1419: attempt to access beyond end of device
[  217.839353][ T9069] loop1: rw=0, sector=3955228672, nr_sectors = 1 limit=16
[  217.899563][ T9078] netlink: 'syz.2.1423': attribute type 1 has an invalid length.
[  217.917909][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'.
[  218.050144][   T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  218.150936][ T9084] loop2: detected capacity change from 0 to 2048
[  218.183284][ T9084] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.241687][   T27] usb 1-1: Using ep0 maxpacket: 16
[  218.256727][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  218.285634][   T27] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  218.314490][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.330339][ T9086] loop3: detected capacity change from 0 to 4096
[  218.339944][   T27] usb 1-1: Product: syz
[  218.357215][   T27] usb 1-1: Manufacturer: syz
[  218.371700][   T27] usb 1-1: SerialNumber: syz
[  218.392932][   T27] usb 1-1: config 0 descriptor??
[  218.423337][   T27] hub 1-1:0.0: bad descriptor, ignoring hub
[  218.447153][   T27] hub: probe of 1-1:0.0 failed with error -5
[  218.463086][ T9090] x_tables: unsorted underflow at hook 3
[  218.476163][ T9086] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  218.490575][   T27] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[  218.582204][ T9092] netlink: 'syz.2.1430': attribute type 3 has an invalid length.
[  218.591756][ T9092] netlink: 'syz.2.1430': attribute type 3 has an invalid length.
[  218.604359][ T9086] ntfs3: loop3: Failed to load $Extend (-22).
[  218.610522][ T9086] ntfs3: loop3: Failed to initialize $Extend.
[  218.637819][ T9092] netlink: 'syz.2.1430': attribute type 3 has an invalid length.
[  218.670321][ T9092] netlink: 'syz.2.1430': attribute type 3 has an invalid length.
[  218.692103][ T9092] netlink: 'syz.2.1430': attribute type 3 has an invalid length.
[  218.731822][ T9092] netlink: 'syz.2.1430': attribute type 3 has an invalid length.
[  218.770892][ T9092] netlink: 'syz.2.1430': attribute type 3 has an invalid length.
[  218.791785][ T9092] netlink: 'syz.2.1430': attribute type 3 has an invalid length.
[  219.492573][ T9116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.500516][ T9116] IPv6: NLM_F_CREATE should be set when creating new route
[  219.761334][ T9120] loop1: detected capacity change from 0 to 4096
[  220.696284][ T9126] loop3: detected capacity change from 0 to 32768
[  220.760562][ T5122] usb 1-1: reset high-speed USB device number 6 using dummy_hcd
[  220.797992][ T9126] JBD2: Ignoring recovery information on journal
[  220.813847][ T5122] usb 1-1: device reset changed ep0 maxpacket size!
[  220.859411][ T5756] usb 1-1: USB disconnect, device number 6
[  220.953751][ T9126] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  221.050477][ T9146] loop2: detected capacity change from 0 to 32768
[  221.152193][ T9126] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3923141632
[  221.201691][ T9126] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  221.212068][ T5756] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  221.241719][ T9126] OCFS2: File system is now read-only.
[  221.247326][ T9126] (syz.3.1445,9126,0):ocfs2_search_chain:1761 ERROR: status = -30
[  221.273753][ T9126] (syz.3.1445,9126,0):ocfs2_search_chain:1871 ERROR: status = -30
[  221.285155][ T9126] (syz.3.1445,9126,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  221.296459][ T9126] (syz.3.1445,9126,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  221.322164][ T9126] (syz.3.1445,9126,0):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  221.344391][ T9126] (syz.3.1445,9126,0):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  221.366422][ T9126] (syz.3.1445,9126,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  221.391720][ T9126] (syz.3.1445,9126,0):ocfs2_mknod:385 ERROR: status = -30
[  221.425177][ T9126] (syz.3.1445,9126,0):ocfs2_mknod:502 ERROR: status = -30
[  221.443981][ T5756] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  221.465566][ T9126] (syz.3.1445,9126,0):ocfs2_mkdir:659 ERROR: status = -30
[  221.476893][ T5756] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  221.521032][ T5756] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  221.551804][ T5756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.597253][ T5756] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  221.641072][ T5756] usb 1-1: invalid MIDI out EP 0
[  221.720732][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  221.958806][ T5756] snd-usb-audio: probe of 1-1:27.0 failed with error -22
[  222.012279][ T5756] usb 1-1: USB disconnect, device number 7
[  223.164864][ T9206] IPv6: NLM_F_CREATE should be specified when creating new route
[  223.173113][ T9206] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1484'.
[  223.382042][ T5756] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  223.576149][ T5756] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  223.604301][ T5756] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  223.631774][ T5756] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  223.640912][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.665330][ T5756] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  223.677475][ T5756] usb 3-1: invalid MIDI out EP 0
[  223.707371][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1494'.
[  223.823781][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  223.887157][ T5756] snd-usb-audio: probe of 3-1:27.0 failed with error -22
[  223.913929][ T5756] usb 3-1: USB disconnect, device number 7
[  224.019794][ T9234] [U] ^R
[  224.298844][   T28] audit: type=1326 audit(1768147156.195:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  224.340393][   T28] audit: type=1326 audit(1768147156.225:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  224.402744][   T28] audit: type=1326 audit(1768147156.225:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  224.441179][   T28] audit: type=1326 audit(1768147156.225:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  224.464209][   T28] audit: type=1326 audit(1768147156.225:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.0.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  224.472861][ T5756] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  224.567586][ T9248] loop3: detected capacity change from 0 to 4096
[  224.584886][ T9248] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  224.701792][ T5756] usb 2-1: Using ep0 maxpacket: 16
[  224.709733][ T5756] usb 2-1: config 0 has an invalid interface number: 49 but max is 0
[  224.721644][ T5756] usb 2-1: config 0 has no interface number 0
[  224.727870][ T5756] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  224.767735][ T5756] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  224.769896][ T9248] ntfs3: loop3: failed to convert "c46c" to koi8-ru
[  224.801463][ T5756] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  224.821157][ T5756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.870414][ T5756] usb 2-1: Product: syz
[  224.879485][ T5756] usb 2-1: Manufacturer: syz
[  224.891462][ T5756] usb 2-1: SerialNumber: syz
[  224.912549][ T5756] usb 2-1: config 0 descriptor??
[  224.927142][ T9239] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  225.096620][ T9266] xt_SECMARK: invalid mode: 2
[  225.203832][ T5756] usb 2-1: USB disconnect, device number 8
[  225.271110][ T9271] loop3: detected capacity change from 0 to 256
[  225.399013][ T9271] FAT-fs (loop3): Directory bread(block 64) failed
[  225.411649][ T9271] FAT-fs (loop3): Directory bread(block 65) failed
[  225.420737][ T9271] FAT-fs (loop3): Directory bread(block 66) failed
[  225.428049][ T9271] FAT-fs (loop3): Directory bread(block 67) failed
[  225.441785][ T9271] FAT-fs (loop3): Directory bread(block 68) failed
[  225.448397][ T9271] FAT-fs (loop3): Directory bread(block 69) failed
[  225.481988][ T9271] FAT-fs (loop3): Directory bread(block 70) failed
[  225.489336][ T9271] FAT-fs (loop3): Directory bread(block 71) failed
[  225.510516][ T9271] FAT-fs (loop3): Directory bread(block 72) failed
[  225.517845][ T9271] FAT-fs (loop3): Directory bread(block 73) failed
[  225.761022][ T9282] validate_nla: 46 callbacks suppressed
[  225.761038][ T9282] netlink: 'syz.2.1522': attribute type 1 has an invalid length.
[  226.748682][ T9322] xt_TCPMSS: Only works on TCP SYN packets
[  226.876550][ T9326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1544'.
[  226.905339][ T9329] loop2: detected capacity change from 0 to 256
[  226.912186][ T5756] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  226.924301][ T9330] netlink: 'syz.1.1546': attribute type 2 has an invalid length.
[  227.103088][ T5756] usb 4-1: Using ep0 maxpacket: 16
[  227.123521][ T5756] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.160779][ T5756] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  227.178907][ T9336] loop2: detected capacity change from 0 to 128
[  227.201695][ T5756] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  227.227436][ T5756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.253546][ T5756] usb 4-1: Product: syz
[  227.257935][ T5756] usb 4-1: Manufacturer: syz
[  227.278154][ T5756] usb 4-1: SerialNumber: syz
[  227.287402][ T9339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1550'.
[  227.301911][ T9339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1550'.
[  227.730790][ T9352] ip6tnl1: entered allmulticast mode
[  227.759880][ T5756] usb 4-1: cannot find UAC_HEADER
[  227.786899][ T9354] loop1: detected capacity change from 0 to 512
[  227.825523][ T5756] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  227.861145][ T5756] usb 4-1: USB disconnect, device number 6
[  227.904659][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  227.946655][ T9354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.031910][ T9354] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.171297][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.193511][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'.
[  228.203396][ T9367] (unnamed net_device) (uninitialized): option lacp_active: invalid value (37)
[  228.911702][   T28] audit: type=1326 audit(1768147160.805:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734df8f749 code=0x7ffc0000
[  228.981660][   T28] audit: type=1326 audit(1768147160.875:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734df8f749 code=0x7ffc0000
[  229.033671][ T9397] loop0: detected capacity change from 0 to 256
[  229.061633][   T28] audit: type=1326 audit(1768147160.875:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f734df8f749 code=0x7ffc0000
[  229.101169][ T9397] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  229.161770][   T28] audit: type=1326 audit(1768147160.875:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734df8f749 code=0x7ffc0000
[  229.241649][   T28] audit: type=1326 audit(1768147160.875:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9394 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734df8f749 code=0x7ffc0000
[  229.751037][ T9413] loop3: detected capacity change from 0 to 256
[  229.789512][ T9413] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  229.842546][ T9389] loop2: detected capacity change from 0 to 32768
[  229.954844][ T9389] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  230.003124][ T9424] loop1: detected capacity change from 0 to 164
[  230.117898][ T9389] XFS (loop2): Ending clean mount
[  230.214599][ T5768] iso9660: Corrupted directory entry in block 2 of inode 1920
[  230.229936][ T5765] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  230.290343][ T5768] ISOFS: unable to read i-node block
[  230.375237][ T5768] ISOFS: unable to read i-node block
[  231.277420][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.294306][ T9433] loop2: detected capacity change from 0 to 32768
[  231.319870][ T9433] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1592 (9433)
[  231.380581][ T9433] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  231.429349][ T9433] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  231.459238][ T9433] BTRFS info (device loop2): turning off barriers
[  231.494860][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.498803][ T9433] BTRFS info (device loop2): enabling ssd optimizations
[  231.532159][ T9433] BTRFS info (device loop2): using spread ssd allocation scheme
[  231.547193][ T9433] BTRFS info (device loop2): enabling auto defrag
[  231.554833][ T9433] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  231.574845][ T9433] BTRFS info (device loop2): trying to use backup root at mount time
[  231.631914][ T9433] BTRFS info (device loop2): ignoring data csums
[  231.639002][ T9433] BTRFS info (device loop2): force zlib compression, level 3
[  231.680328][ T9433] BTRFS info (device loop2): using free space tree
[  231.708469][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.032717][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.052718][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  232.066894][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  232.075614][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  232.096399][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  232.104374][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  232.112150][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  232.154789][ T9433] BTRFS error (device loop2: state MC): ignoredatacsums must be used with ro mount option
[  232.214535][ T5765] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  232.535624][ T9470] lo speed is unknown, defaulting to 1000
[  232.636510][ T9483] loop3: detected capacity change from 0 to 64
[  232.648232][ T9484] netlink: 'syz.0.1612': attribute type 6 has an invalid length.
[  232.680672][ T9484] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1612'.
[  233.097605][ T9492] mmap: syz.2.1608 (9492) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  233.952217][ T9470] chnl_net:caif_netlink_parms(): no params data found
[  234.131792][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  234.225119][   T51] Bluetooth: hci2: command tx timeout
[  234.356471][   T23] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  234.371668][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.379833][   T23] usb 4-1: Product: syz
[  234.385185][   T23] usb 4-1: Manufacturer: syz
[  234.389884][   T23] usb 4-1: SerialNumber: syz
[  234.404985][ T9535] loop0: detected capacity change from 0 to 2048
[  234.418433][   T23] usb 4-1: config 0 descriptor??
[  234.445713][   T23] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  234.483132][ T9535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.521412][ T9535] EXT4-fs (loop0): Online resizing not supported with bigalloc
[  234.603942][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.893324][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.916197][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.938271][   T23] usb 4-1: USB disconnect, device number 7
[  234.944183][ T9470] bridge_slave_0: entered allmulticast mode
[  234.948237][ T9470] bridge_slave_0: entered promiscuous mode
[  235.081817][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.089010][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.117722][ T9470] bridge_slave_1: entered allmulticast mode
[  235.131151][ T9470] bridge_slave_1: entered promiscuous mode
[  235.196891][ T9553] loop2: detected capacity change from 0 to 4096
[  235.228730][ T9553] ntfs3: loop2: ino=3, Correct links count -> 2.
[  235.375206][ T9470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.424623][ T9470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.795191][ T9470] team0: Port device team_slave_0 added
[  235.893639][ T9470] team0: Port device team_slave_1 added
[  236.011733][  T968] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  236.083277][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.096070][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.127720][ T9470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.229133][   T49] hsr_slave_0: left promiscuous mode
[  236.236319][  T968] usb 4-1: Using ep0 maxpacket: 32
[  236.243747][  T968] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  236.262206][  T968] usb 4-1: config 0 has no interface number 0
[  236.271734][  T968] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  236.290489][   T49] hsr_slave_1: left promiscuous mode
[  236.301985][   T51] Bluetooth: hci2: command tx timeout
[  236.317698][  T968] usb 4-1: config 0 interface 2 has no altsetting 0
[  236.350527][  T968] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  236.386263][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.411270][  T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.419879][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.459929][  T968] usb 4-1: Product: syz
[  236.482852][  T968] usb 4-1: Manufacturer: syz
[  236.483988][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  236.487527][  T968] usb 4-1: SerialNumber: syz
[  236.504795][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.517538][  T968] usb 4-1: config 0 descriptor??
[  236.530542][   T49] bridge_slave_1: left allmulticast mode
[  236.548858][   T49] bridge_slave_1: left promiscuous mode
[  236.568281][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.642781][   T49] bridge_slave_0: left allmulticast mode
[  236.648516][   T49] bridge_slave_0: left promiscuous mode
[  236.672370][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.746841][   T49] veth1_macvtap: left promiscuous mode
[  236.762775][   T49] veth0_macvtap: left promiscuous mode
[  236.770369][  T968] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  236.789367][   T49] veth1_vlan: left promiscuous mode
[  236.814223][ T9593] loop0: detected capacity change from 0 to 512
[  236.884933][ T9593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.918889][ T9593] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.002845][ T9593] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1647: corrupted xattr block 33: invalid ea_ino
[  237.051024][  T968] usb 4-1: USB disconnect, device number 8
[  237.060452][ T9593] fscrypt (loop0, inode 15): Error -117 getting encryption context
[  237.137430][ T6475] udevd[6475]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  237.186624][   T49] bond2 (unregistering): Released all slaves
[  237.227211][   T49] bond1 (unregistering): Released all slaves
[  237.235341][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.378418][ T9597] Invalid option length (1040122) for dns_resolver key
[  237.999794][   T49] team0 (unregistering): Port device team_slave_1 removed
[  238.054819][   T49] team0 (unregistering): Port device team_slave_0 removed
[  238.111015][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.169534][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.390081][   T51] Bluetooth: hci2: command tx timeout
[  238.790518][   T49] bond0 (unregistering): Released all slaves
[  238.914655][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.922019][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.961516][ T9470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.043225][   T27] lo speed is unknown, defaulting to 1000
[  239.241187][ T9470] hsr_slave_0: entered promiscuous mode
[  239.254175][ T9470] hsr_slave_1: entered promiscuous mode
[  239.283844][ T9470] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  239.291502][ T9470] Cannot create hsr debugfs directory
[  240.267514][ T9470] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  240.346666][ T9470] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  240.387280][ T9470] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  240.432781][ T9646] virtiofs: Unknown parameter 'always'
[  240.438710][ T9470] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  240.461711][   T51] Bluetooth: hci2: command tx timeout
[  240.500938][ T9649] loop0: detected capacity change from 0 to 256
[  240.638585][ T9649] FAT-fs (loop0): Directory bread(block 64) failed
[  240.668856][ T9649] FAT-fs (loop0): Directory bread(block 65) failed
[  240.723218][ T9649] FAT-fs (loop0): Directory bread(block 66) failed
[  240.729847][ T9649] FAT-fs (loop0): Directory bread(block 67) failed
[  240.796225][ T9649] FAT-fs (loop0): Directory bread(block 68) failed
[  240.842008][ T9649] FAT-fs (loop0): Directory bread(block 69) failed
[  240.862039][ T9649] FAT-fs (loop0): Directory bread(block 70) failed
[  240.868657][ T9649] FAT-fs (loop0): Directory bread(block 71) failed
[  240.923454][ T9649] FAT-fs (loop0): Directory bread(block 72) failed
[  240.962213][ T9649] FAT-fs (loop0): Directory bread(block 73) failed
[  240.977337][ T9470] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.057008][ T9470] 8021q: adding VLAN 0 to HW filter on device team0
[  241.140395][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.147658][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  241.213695][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.222129][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  241.704435][ T9685] x_tables: duplicate underflow at hook 2
[  241.927122][ T9693] loop2: detected capacity change from 0 to 512
[  242.014807][ T9693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.033394][ T9695] loop3: detected capacity change from 0 to 1764
[  242.136048][ T9693] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.253720][ T9693] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1683: corrupted xattr block 33: invalid ea_ino
[  242.269659][ T9693] fscrypt (loop2, inode 15): Error -117 getting encryption context
[  242.289083][ T9470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.390461][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.037906][ T9690] loop0: detected capacity change from 0 to 32768
[  243.315131][ T9470] veth0_vlan: entered promiscuous mode
[  243.350514][ T9470] veth1_vlan: entered promiscuous mode
[  243.557309][ T9470] veth0_macvtap: entered promiscuous mode
[  243.591589][ T9470] veth1_macvtap: entered promiscuous mode
[  243.703247][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.735788][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.755224][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.781605][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.791868][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.803238][ T9709] loop3: detected capacity change from 0 to 32768
[  243.818844][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.834597][ T9709] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  243.845367][ T9709] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  243.855830][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  243.863783][ T9709] BTRFS info (device loop3): using free space tree
[  243.893350][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.904316][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.914957][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.927571][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.937846][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  243.948675][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.960484][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  243.973488][ T9470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.984560][ T9470] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.071991][ T9470] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.080799][ T9470] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.211000][ T9709] BTRFS info (device loop3): enabling ssd optimizations
[  244.232656][ T9709] BTRFS info (device loop3): auto enabling async discard
[  244.293138][ T9760] comedi comedi1: dmm32at: I/O port conflict (0x5,16)
[  244.349653][ T9762] xt_hashlimit: overflow, rate too high: 1125899906842624
[  244.483271][  T741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.491188][  T741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.607853][ T5766] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  244.645559][  T741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.710219][  T741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.312476][ T9778] loop0: detected capacity change from 0 to 4096
[  245.351680][ T9778] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  245.457010][ T9790] loop4: detected capacity change from 0 to 512
[  245.551766][ T9790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  245.621834][ T9790] System zones: 1-12
[  245.648993][ T9790] EXT4-fs (loop4): orphan cleanup on readonly fs
[  245.740707][ T9790] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33261: comm syz.4.1706: invalid block
[  245.842607][ T9790] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1706: invalid indirect mapped block 8 (level 2)
[  245.927356][ T9790] EXT4-fs (loop4): 1 truncate cleaned up
[  245.979434][ T9790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  246.016649][ T9801] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709510581)
[  246.061776][ T9801] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  246.263808][ T9470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.578206][ T9816] loop0: detected capacity change from 0 to 512
[  246.626491][ T9816] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  246.659757][ T9816] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  246.742006][ T5840] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  246.871828][ T1135] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  246.925491][ T9826] comedi comedi1: dmm32at: I/O port conflict (0x5,16)
[  246.932926][ T5840] usb 5-1: Using ep0 maxpacket: 32
[  247.002999][ T5840] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  247.011083][ T5840] usb 5-1: config 0 has no interface number 0
[  247.051686][ T5840] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  247.093816][ T5840] usb 5-1: config 0 interface 2 has no altsetting 0
[  247.119851][ T5840] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  247.139759][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.161650][ T5840] usb 5-1: Product: syz
[  247.165906][ T5840] usb 5-1: Manufacturer: syz
[  247.182676][ T5840] usb 5-1: SerialNumber: syz
[  247.197451][ T5840] usb 5-1: config 0 descriptor??
[  247.461943][ T5840] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  247.472174][ T9839] program syz.3.1723 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  247.792066][ T5840] usb 5-1: USB disconnect, device number 2
[  247.939475][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  247.955696][ T9823] loop2: detected capacity change from 0 to 32768
[  247.992708][ T9823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1718 (9823)
[  248.016515][ T9823] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.038131][ T9823] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  248.062069][ T9823] BTRFS info (device loop2): using free space tree
[  248.273990][ T9823] BTRFS info (device loop2): enabling ssd optimizations
[  248.281126][ T9823] BTRFS info (device loop2): auto enabling async discard
[  248.608793][ T5765] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.881254][ T9891] sp0: Synchronizing with TNC
[  248.950628][ T9887] [U] è
[  249.449133][ T9908] loop2: detected capacity change from 0 to 512
[  249.508639][ T9908] EXT4-fs: Ignoring removed nobh option
[  249.532293][ T9910] netlink: 'syz.3.1741': attribute type 7 has an invalid length.
[  249.656074][ T9908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.684118][ T9908] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  249.883348][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.037005][ T9963] netlink: 'syz.3.1760': attribute type 1 has an invalid length.
[  251.307134][ T9932] loop2: detected capacity change from 0 to 32768
[  251.347152][ T9932] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1747 (9932)
[  251.420899][ T9932] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.456272][ T9932] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  251.501751][ T9932] BTRFS info (device loop2): using free space tree
[  251.736939][ T9932] BTRFS info (device loop2): enabling ssd optimizations
[  251.749439][ T9932] BTRFS info (device loop2): auto enabling async discard
[  251.903028][T10002] ipt_rpfilter: unknown options
[  251.972012][ T5765] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.158787][T10012] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1774'.
[  252.338540][T10012] team0: Port device team_slave_0 removed
[  252.372504][T10012] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  252.874156][T10030] sp0: Synchronizing with TNC
[  252.949883][T10029] [U] è
[  253.520971][T10050] loop2: detected capacity change from 0 to 4096
[  253.596792][T10050] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  255.144897][T10107] loop0: detected capacity change from 0 to 16
[  255.172455][T10107] erofs: (device loop0): mounted with root inode @ nid 36.
[  255.230651][T10107] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768
[  255.256208][T10107] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 32768
[  255.309797][T10107] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 32811 of nid 36
[  255.676586][T10088] loop3: detected capacity change from 0 to 32768
[  255.764068][T10088] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  255.837610][T10101] loop2: detected capacity change from 0 to 32768
[  255.864935][T10101] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1808 (10101)
[  255.943656][T10101] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  255.981890][T10101] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  256.021924][T10101] BTRFS info (device loop2): using free space tree
[  256.069449][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  256.077898][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  256.217678][T10088] XFS (loop3): Ending clean mount
[  256.236317][T10088] XFS (loop3): Quotacheck needed: Please wait.
[  256.304556][T10101] BTRFS info (device loop2): enabling ssd optimizations
[  256.320845][T10158] ip6tnl1: entered allmulticast mode
[  256.327114][T10101] BTRFS info (device loop2): auto enabling async discard
[  256.466794][T10088] XFS (loop3): Quotacheck: Done.
[  256.511968][ T5765] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.716749][   T28] audit: type=1107 audit(1768147188.615:55): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  256.867727][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  257.012860][T10171] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  257.189061][T10176] loop2: detected capacity change from 0 to 64
[  258.022757][T10197] netlink: 'syz.3.1834': attribute type 10 has an invalid length.
[  258.250932][   T28] audit: type=1326 audit(1768147190.145:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b318f749 code=0x7ffc0000
[  258.311757][   T28] audit: type=1326 audit(1768147190.145:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b318f749 code=0x7ffc0000
[  258.412046][   T28] audit: type=1326 audit(1768147190.195:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f94b318f749 code=0x7ffc0000
[  258.487072][   T28] audit: type=1326 audit(1768147190.195:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b318f749 code=0x7ffc0000
[  258.547465][T10211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1841'.
[  258.567583][   T28] audit: type=1326 audit(1768147190.195:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10202 comm="syz.3.1836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b318f749 code=0x7ffc0000
[  258.617836][T10183] loop4: detected capacity change from 0 to 32768
[  258.663577][T10183] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1830 (10183)
[  258.742676][T10183] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  258.791217][T10183] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  258.825199][T10183] BTRFS info (device loop4): using free space tree
[  258.974339][T10237] netlink: 'syz.2.1845': attribute type 10 has an invalid length.
[  259.048157][T10183] BTRFS info (device loop4): enabling ssd optimizations
[  259.074930][T10183] BTRFS info (device loop4): auto enabling async discard
[  259.213136][T10247] loop3: detected capacity change from 0 to 8
[  259.243258][T10247] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  259.279334][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop3
[  259.323267][T10247] cramfs: Error -3 while decompressing!
[  259.328904][T10247] cramfs: ffffffff96fcf368(26)->ffff888073e26000(4096)
[  259.371740][T10247] cramfs: Error -3 while decompressing!
[  259.377381][T10247] cramfs: ffffffff96fcf382(26)->ffff8880743c0000(4096)
[  259.442076][T10247] cramfs: Error -3 while decompressing!
[  259.457130][T10247] cramfs: ffffffff96fcf39c(16)->ffff888056e6e000(4096)
[  259.466954][ T9470] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.477881][T10252] delete_channel: no stack
[  259.482678][T10247] cramfs: Error -3 while decompressing!
[  259.514576][T10247] cramfs: ffffffff96fcf368(26)->ffff888073e26000(4096)
[  259.863498][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1854'.
[  259.969390][ T5782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5782)
[  260.505459][T10282] loop3: detected capacity change from 0 to 512
[  260.572219][T10282] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  260.601153][T10282] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  260.611632][T10282] EXT4-fs (loop3): orphan cleanup on readonly fs
[  260.618811][T10282] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  260.629092][T10282] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  260.644249][T10282] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  260.658482][T10282] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1862: bg 0: block 40: padding at end of block bitmap is not set
[  260.675197][T10282] EXT4-fs (loop3): Remounting filesystem read-only
[  260.682257][T10282] EXT4-fs (loop3): 1 truncate cleaned up
[  260.689577][T10282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  260.788605][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.992826][  T968] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  261.108110][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1869'.
[  261.221678][  T968] usb 3-1: Using ep0 maxpacket: 32
[  261.239422][  T968] usb 3-1: unable to get BOS descriptor or descriptor too short
[  261.259451][  T968] usb 3-1: config 7 has an invalid interface number: 187 but max is 0
[  261.275667][  T968] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  261.301169][  T968] usb 3-1: config 7 has no interface number 0
[  261.319423][  T968] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x7 has invalid wMaxPacketSize 0
[  261.349550][  T968] usb 3-1: config 7 interface 187 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  261.381618][  T968] usb 3-1: config 7 interface 187 has no altsetting 0
[  261.411393][  T968] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  261.429426][  T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.451905][  T968] usb 3-1: Product: syz
[  261.470740][  T968] usb 3-1: Manufacturer: syz
[  261.480395][  T968] usb 3-1: SerialNumber: syz
[  261.752487][T10314] overlayfs: unescaped trailing colons in lowerdir mount option.
[  261.761906][  T968] usb 3-1: Limiting number of CPorts to U8_MAX
[  261.802727][  T968] usb 3-1: Unknown endpoint type found, address 0x07
[  261.809507][  T968] usb 3-1: Not enough endpoints found in device, aborting!
[  261.876795][T10316] loop3: detected capacity change from 0 to 65
[  261.898733][T10316] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  262.022282][  T968] usb 3-1: USB disconnect, device number 8
[  262.930690][T10343] 9pnet: Could not find request transport: x
[  263.114957][   T28] audit: type=1326 audit(1768147195.015:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  263.179405][   T28] audit: type=1326 audit(1768147195.015:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  263.231084][   T28] audit: type=1326 audit(1768147195.035:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  263.299731][T10319] loop4: detected capacity change from 0 to 40427
[  263.303118][   T28] audit: type=1326 audit(1768147195.035:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  263.351647][T10319] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  263.359467][T10319] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  263.390362][   T28] audit: type=1326 audit(1768147195.035:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  263.461705][T10319] F2FS-fs (loop4): Found nat_bits in checkpoint
[  263.476633][   T28] audit: type=1326 audit(1768147195.035:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  263.537653][   T28] audit: type=1326 audit(1768147195.035:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  263.602737][T10367] loop3: detected capacity change from 0 to 256
[  263.619248][   T28] audit: type=1326 audit(1768147195.035:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.2.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  263.657725][T10367] FAT-fs (loop3): Directory bread(block 64) failed
[  263.670973][T10367] FAT-fs (loop3): Directory bread(block 65) failed
[  263.680916][T10367] FAT-fs (loop3): Directory bread(block 66) failed
[  263.695505][T10367] FAT-fs (loop3): Directory bread(block 67) failed
[  263.719752][T10367] FAT-fs (loop3): Directory bread(block 68) failed
[  263.751513][T10367] FAT-fs (loop3): Directory bread(block 69) failed
[  263.759761][T10367] FAT-fs (loop3): Directory bread(block 70) failed
[  263.775844][T10367] FAT-fs (loop3): Directory bread(block 71) failed
[  263.797960][T10319] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  263.818466][T10367] FAT-fs (loop3): Directory bread(block 72) failed
[  263.833096][T10319] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  263.861804][T10367] FAT-fs (loop3): Directory bread(block 73) failed
[  263.903067][T10319] fscrypt (loop4, inode 3): Error -61 getting encryption context
[  264.327657][T10382] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  264.580546][T10388] loop3: detected capacity change from 0 to 1764
[  264.691304][T10388] iso9660: Corrupted directory entry in block 2 of inode 1920
[  264.953711][T10400] loop0: detected capacity change from 0 to 256
[  264.982845][T10400] exfat: Deprecated parameter 'utf8'
[  265.015767][T10400] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc6db6723, utbl_chksum : 0xe619d30d)
[  265.139752][T10400] overlay: filesystem on ./file0 not supported
[  265.437860][T10415] loop4: detected capacity change from 0 to 1764
[  266.029021][T10435] loop2: detected capacity change from 0 to 4096
[  266.066634][T10435] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  266.197824][T10443] loop0: detected capacity change from 0 to 2048
[  266.223030][T10435] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  266.246046][T10443] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.271842][T10435] ntfs3: loop2: Failed to load $Extend (-22).
[  266.278052][T10435] ntfs3: loop2: Failed to initialize $Extend.
[  266.795229][   T28] audit: type=1326 audit(1768147198.695:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  266.914923][   T28] audit: type=1326 audit(1768147198.695:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10458 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  266.953802][T10465] loop3: detected capacity change from 0 to 64
[  267.451732][ T5840] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  267.666570][ T5840] usb 4-1: Using ep0 maxpacket: 32
[  267.699028][ T5840] usb 4-1: config 0 has an invalid interface number: 228 but max is 0
[  267.711695][ T5840] usb 4-1: config 0 has no interface number 0
[  267.717899][ T5840] usb 4-1: config 0 interface 228 has no altsetting 0
[  267.744546][ T5840] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice= 0.02
[  267.754414][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.771943][ T5840] usb 4-1: Product: syz
[  267.781920][ T5840] usb 4-1: Manufacturer: syz
[  267.811784][ T5840] usb 4-1: SerialNumber: syz
[  267.842929][ T5840] usb 4-1: config 0 descriptor??
[  268.097206][T10466] loop0: detected capacity change from 0 to 32768
[  268.129739][ T5840] net1080 4-1:0.228 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, ba:c1:32:c3:65:a1
[  268.162672][T10506] syz.2.1947: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  268.170599][T10466] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  268.180732][T10506] CPU: 0 PID: 10506 Comm: syz.2.1947 Not tainted syzkaller #0
[  268.196015][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  268.206138][T10506] Call Trace:
[  268.209566][T10506]  <TASK>
[  268.212558][T10506]  dump_stack_lvl+0x16c/0x230
[  268.217385][T10506]  ? show_regs_print_info+0x20/0x20
[  268.222646][T10506]  ? load_image+0x3b0/0x3b0
[  268.227219][T10506]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  268.233693][T10506]  ? cpuset_print_current_mems_allowed+0x2e3/0x360
[  268.240270][T10506]  warn_alloc+0x210/0x300
[  268.244676][T10506]  ? stack_trace_save+0x9c/0xe0
[  268.249598][T10506]  ? zone_watermark_ok_safe+0x230/0x230
[  268.255223][T10506]  ? kasan_set_track+0x5f/0x70
[  268.260052][T10506]  ? kasan_set_track+0x4e/0x70
[  268.264878][T10506]  ? __kasan_kmalloc+0x8f/0xa0
[  268.269718][T10506]  ? xsk_init_queue+0xb0/0x110
[  268.274558][T10506]  ? xsk_setsockopt+0x43c/0x6f0
[  268.279640][T10506]  ? do_sock_setsockopt+0x175/0x1a0
[  268.284874][T10506]  ? __x64_sys_setsockopt+0x184/0x200
[  268.290319][T10506]  __vmalloc_node_range+0x126/0x1320
[  268.295663][T10506]  ? free_vm_area+0x50/0x50
[  268.300644][T10506]  vmalloc_user+0x74/0x80
[  268.305016][T10506]  ? xskq_create+0xbf/0x170
[  268.309690][T10506]  xskq_create+0xbf/0x170
[  268.314062][T10506]  xsk_init_queue+0xb0/0x110
[  268.318725][T10506]  xsk_setsockopt+0x43c/0x6f0
[  268.323475][T10506]  ? xsk_poll+0x670/0x670
[  268.327848][T10506]  ? __fget_files+0x28/0x4d0
[  268.332489][T10506]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  268.338064][T10506]  ? security_socket_setsockopt+0x7e/0xa0
[  268.343899][T10506]  ? xsk_poll+0x670/0x670
[  268.348265][T10506]  do_sock_setsockopt+0x175/0x1a0
[  268.353329][T10506]  ? __fdget+0x180/0x210
[  268.357697][T10506]  __x64_sys_setsockopt+0x184/0x200
[  268.362931][T10506]  do_syscall_64+0x55/0xb0
[  268.367370][T10506]  ? clear_bhb_loop+0x40/0x90
[  268.372077][T10506]  ? clear_bhb_loop+0x40/0x90
[  268.376786][T10506]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.382719][T10506] RIP: 0033:0x7fea4678f749
[  268.387165][T10506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  268.407071][T10506] RSP: 002b:00007fea47630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  268.415518][T10506] RAX: ffffffffffffffda RBX: 00007fea469e5fa0 RCX: 00007fea4678f749
[  268.423532][T10506] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  268.431546][T10506] RBP: 00007fea46813f91 R08: 0000000000000004 R09: 0000000000000000
[  268.439552][T10506] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.447555][T10506] R13: 00007fea469e6038 R14: 00007fea469e5fa0 R15: 00007ffff7784e48
[  268.455673][T10506]  </TASK>
[  268.505023][   T27] usb 4-1: USB disconnect, device number 9
[  268.527493][   T27] net1080 4-1:0.228 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT
[  268.589363][T10506] Mem-Info:
[  268.601185][T10506] active_anon:10670 inactive_anon:0 isolated_anon:0
[  268.601185][T10506]  active_file:11017 inactive_file:40676 isolated_file:0
[  268.601185][T10506]  unevictable:768 dirty:133 writeback:0
[  268.601185][T10506]  slab_reclaimable:10635 slab_unreclaimable:94474
[  268.601185][T10506]  mapped:25039 shmem:5471 pagetables:712
[  268.601185][T10506]  sec_pagetables:0 bounce:0
[  268.601185][T10506]  kernel_misc_reclaimable:0
[  268.601185][T10506]  free:1348270 free_pcp:9052 free_cma:0
[  268.728492][T10506] Node 0 active_anon:41980kB inactive_anon:0kB active_file:44068kB inactive_file:162504kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100056kB dirty:532kB writeback:0kB shmem:20348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12040kB pagetables:2848kB sec_pagetables:0kB all_unreclaimable? no
[  268.769187][T10466] XFS (loop0): Ending clean mount
[  268.778017][T10466] XFS (loop0): Quotacheck needed: Please wait.
[  268.810233][T10506] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  268.884643][T10466] XFS (loop0): Quotacheck: Done.
[  268.901848][T10506] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  268.931919][T10506] lowmem_reserve[]: 0 2525 2526 2526 2526
[  268.937917][T10506] Node 0 DMA32 free:1482368kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:42036kB inactive_anon:0kB active_file:44068kB inactive_file:161184kB unevictable:1536kB writepending:632kB present:3129332kB managed:2589632kB mlocked:0kB bounce:0kB free_pcp:14040kB local_pcp:8992kB free_cma:0kB
[  269.042343][T10506] lowmem_reserve[]: 0 0 1 1 1
[  269.059333][T10506] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  269.162800][T10506] lowmem_reserve[]: 0 0 0 0 0
[  269.167646][T10506] Node 1 Normal free:3895332kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23256kB local_pcp:14424kB free_cma:0kB
[  269.238632][ T5764] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  269.300051][T10506] lowmem_reserve[]: 0 0 0 0 0
[  269.326403][T10506] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  269.403719][T10506] Node 0 DMA32: 330*4kB (UME) 312*8kB (U) 194*16kB (UM) 238*32kB (ME) 199*64kB (UME) 122*128kB (UME) 13*256kB (UM) 5*512kB (UME) 2*1024kB (U) 7*2048kB (M) 346*4096kB (UM) = 1482376kB
[  269.496441][T10526] loop3: detected capacity change from 0 to 8
[  269.511687][T10506] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  269.547697][T10526] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  269.552016][T10506] Node 1 Normal: 173*4kB (UME) 52*8kB (UME) 51*16kB (UME) 89*32kB (UME) 22*64kB (UME) 6*128kB (UME) 3*256kB (UME) 1*512kB (E) 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3895332kB
[  269.616943][ T9868] udevd[9868]: incorrect cramfs checksum on /dev/loop3
[  269.640226][T10526] cramfs: Error -3 while decompressing!
[  269.647995][T10506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  269.676889][T10526] cramfs: ffffffff96fcb368(1306)->ffff8880597ec000(4096)
[  269.702159][T10526] cramfs: bad data blocksize 3221485966
[  269.708217][T10506] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  269.708478][T10526] cramfs: Error -3 while decompressing!
[  269.748702][T10506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  269.766524][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop3
[  269.771860][T10526] cramfs: ffffffff96fcb368(1306)->ffff8880597ec000(4096)
[  269.788596][T10506] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  269.812699][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  269.812716][   T28] audit: type=1800 audit(1768147201.705:73): pid=10526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1951" name="file2" dev="loop3" ino=348 res=0 errno=0
[  269.865766][T10506] 53258 total pagecache pages
[  269.870556][T10506] 0 pages in swap cache
[  269.885053][T10506] Free swap  = 124996kB
[  269.893862][T10506] Total swap = 124996kB
[  269.908386][T10506] 2097051 pages RAM
[  269.947286][T10506] 0 pages HighMem/MovableOnly
[  269.965006][T10506] 416129 pages reserved
[  269.969247][T10506] 0 pages cma reserved
[  270.349019][T10544] netlink: 'syz.3.1957': attribute type 6 has an invalid length.
[  270.447904][   T28] audit: type=1326 audit(1768147202.345:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  270.526753][   T28] audit: type=1326 audit(1768147202.345:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  270.622740][   T28] audit: type=1326 audit(1768147202.345:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  270.722733][   T28] audit: type=1326 audit(1768147202.345:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  270.819543][   T28] audit: type=1326 audit(1768147202.345:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  270.830718][T10561] loop4: detected capacity change from 0 to 64
[  271.006064][T10561] syz.4.1964: attempt to access beyond end of device
[  271.006064][T10561] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  271.094118][T10561] Buffer I/O error on dev loop4, logical block 134217734, lost async page write
[  272.298143][T10613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1984'.
[  272.341824][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1984'.
[  273.199105][T10647] loop0: detected capacity change from 0 to 128
[  273.302085][T10647] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  273.441170][T10647] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  273.559271][T10647] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 9 (only 1 groups)
[  273.651685][T10664] netlink: 'syz.3.2002': attribute type 1 has an invalid length.
[  273.659860][T10664] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2002'.
[  273.783958][ T5764] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  274.083097][ T5813] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  274.293678][ T5813] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  274.323189][ T5813] usb 5-1: config 0 has no interface number 0
[  274.329795][ T5813] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  274.407960][T10688] bond0: Error: Cannot enslave bond to itself.
[  274.422854][ T5813] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  274.447723][T10691] loop2: detected capacity change from 0 to 64
[  274.461710][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.469804][ T5813] usb 5-1: Product: syz
[  274.502672][ T5813] usb 5-1: Manufacturer: syz
[  274.507406][ T5813] usb 5-1: SerialNumber: syz
[  274.553399][ T5813] usb 5-1: config 0 descriptor??
[  274.572730][T10670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  274.605219][ T5813] usb-storage 5-1:0.20: USB Mass Storage device detected
[  274.654254][ T5813] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  274.818511][ T5813] scsi host1: usb-storage 5-1:0.20
[  274.933416][T10707] tmpfs: Bad value for 'grpquota_inode_hardlimit'
[  275.137130][ T5813] usb 5-1: USB disconnect, device number 3
[  275.731853][  T968] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  275.928803][  T968] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  275.939455][  T968] usb 4-1: config 0 has no interface number 0
[  275.970998][  T968] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  276.001938][  T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.015392][  T968] usb 4-1: Product: syz
[  276.019640][  T968] usb 4-1: Manufacturer: syz
[  276.051300][  T968] usb 4-1: SerialNumber: syz
[  276.077517][  T968] usb 4-1: config 0 descriptor??
[  276.103729][  T968] hub 4-1:0.132: bad descriptor, ignoring hub
[  276.117730][T10751] netlink: 'syz.4.2032': attribute type 2 has an invalid length.
[  276.129220][  T968] hub: probe of 4-1:0.132 failed with error -5
[  276.165292][  T968] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input7
[  276.707075][   T28] audit: type=1326 audit(1768147208.605:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  276.768292][   T28] audit: type=1326 audit(1768147208.625:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  276.821717][   T28] audit: type=1326 audit(1768147208.635:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  276.882356][   T28] audit: type=1326 audit(1768147208.635:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  276.931661][   T28] audit: type=1326 audit(1768147208.645:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  276.957948][T10771] netlink: 'syz.0.2043': attribute type 10 has an invalid length.
[  276.981619][   T28] audit: type=1326 audit(1768147208.645:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  277.031696][   T28] audit: type=1326 audit(1768147208.645:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  277.076137][   T28] audit: type=1326 audit(1768147208.645:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  277.159579][   T28] audit: type=1326 audit(1768147208.645:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10766 comm="syz.0.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9ef5b8f749 code=0x7ffc0000
[  277.428529][T10757] loop4: detected capacity change from 0 to 32768
[  277.498001][T10757] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.557903][T10769] loop2: detected capacity change from 0 to 32768
[  277.592395][T10769] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.614388][T10791] loop3: detected capacity change from 0 to 16
[  277.663506][T10791] erofs: (device loop3): mounted with root inode @ nid 36.
[  277.726010][T10757] XFS (loop4): Ending clean mount
[  277.762192][T10769] XFS (loop2): Ending clean mount
[  277.791851][T10769] XFS (loop2): Quotacheck needed: Please wait.
[  277.821896][T10791] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639]
[  277.842315][T10791] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 39 of nid 36
[  277.939515][T10769] XFS (loop2): Quotacheck: Done.
[  277.944807][ T9470] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  278.104232][ T5765] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  278.659165][T10799] loop4: detected capacity change from 0 to 1024
[  278.688184][T10801] loop2: detected capacity change from 0 to 1024
[  278.777814][T10801] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  278.795187][T10801] hfsplus: xattr searching failed
[  278.839320][T10801] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  278.849777][T10801] hfsplus: xattr searching failed
[  278.876012][  T742] hfsplus: b-tree write err: -5, ino 4
[  278.953031][T10795] loop0: detected capacity change from 0 to 32768
[  279.025662][T10795] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  279.076196][T10795] (syz.0.2046,10795,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64
[  279.126317][T10795] (syz.0.2046,10795,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2
[  279.136088][T10795] (syz.0.2046,10795,1):ocfs2_mknod:298 ERROR: status = -2
[  279.147980][T10795] (syz.0.2046,10795,1):ocfs2_mknod:502 ERROR: status = -2
[  279.157449][T10795] (syz.0.2046,10795,1):ocfs2_create:676 ERROR: status = -2
[  279.290796][ T5764] ocfs2: Unmounting device (7,0) on (node local)
[  279.329318][T10812] loop4: detected capacity change from 0 to 256
[  279.365074][T10812] exfat: Deprecated parameter 'utf8'
[  279.370599][T10812] exfat: Deprecated parameter 'namecase'
[  279.427910][T10813] loop2: detected capacity change from 0 to 4096
[  279.439436][T10812] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  279.457013][T10813] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  279.600385][T10813] ntfs3: loop2: Failed to initialize $Extend/$Reparse.
[  279.690751][T10815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2056'.
[  279.730367][T10813] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  279.741908][T10815] openvswitch: netlink: Missing key (keys=40, expected=100)
[  279.757376][T10817] loop4: detected capacity change from 0 to 256
[  279.925939][T10819] loop0: detected capacity change from 0 to 2048
[  279.976657][T10819] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  280.414601][T10825] ntfs3: loop4: ino=3, Correct links count -> 2.
[  280.590727][T10825] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  280.847080][   T27] usb 4-1: USB disconnect, device number 10
[  281.009610][T10849] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2073'.
[  281.064351][T10849] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2073'.
[  281.100098][T10849] netlink: 'syz.3.2073': attribute type 5 has an invalid length.
[  281.123232][T10849] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2073'.
[  281.402517][T10860] UDF-fs: bad mount option "obj_user=..*" or missing value
[  281.681329][   T28] audit: type=1326 audit(1768147213.575:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  281.778074][   T28] audit: type=1326 audit(1768147213.605:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  281.853539][   T28] audit: type=1326 audit(1768147213.605:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  281.904648][T10878] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28)
[  281.949829][   T28] audit: type=1326 audit(1768147213.605:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  282.019774][   T28] audit: type=1326 audit(1768147213.615:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  282.122507][   T28] audit: type=1326 audit(1768147213.675:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc4e9c2005 code=0x7ffc0000
[  282.177094][   T28] audit: type=1326 audit(1768147213.675:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc4e9c2005 code=0x7ffc0000
[  282.241692][   T28] audit: type=1326 audit(1768147213.675:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc4e9c2005 code=0x7ffc0000
[  282.306227][   T28] audit: type=1326 audit(1768147213.675:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc4e9c2005 code=0x7ffc0000
[  282.366845][   T28] audit: type=1326 audit(1768147213.675:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc4e9c2005 code=0x7ffc0000
[  282.438535][T10891] set_capacity_and_notify: 2 callbacks suppressed
[  282.438552][T10891] loop2: detected capacity change from 0 to 512
[  282.456004][   T28] audit: type=1326 audit(1768147213.675:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc4e9c2005 code=0x7ffc0000
[  282.488030][T10891] EXT4-fs: Ignoring removed nobh option
[  282.521687][T10891] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  282.549114][T10891] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2094: attempt to clear invalid blocks 1 len 1
[  282.612662][T10891] EXT4-fs (loop2): Remounting filesystem read-only
[  282.620706][T10891] EXT4-fs (loop2): 1 truncate cleaned up
[  282.668471][T10891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.857343][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.938307][T10901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2097'.
[  283.060943][T10905] loop0: detected capacity change from 0 to 2048
[  283.119373][T10905] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.166530][T10909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'.
[  283.271915][T10913] netlink: 'syz.2.2103': attribute type 3 has an invalid length.
[  283.659648][T10921] netlink: 'syz.0.2107': attribute type 21 has an invalid length.
[  283.691887][T10921] netlink: 'syz.0.2107': attribute type 1 has an invalid length.
[  283.992072][T10929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2111'.
[  284.050032][T10911] loop4: detected capacity change from 0 to 32768
[  284.094893][T10911] (syz.4.2102,10911,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  284.131125][T10911] (syz.4.2102,10911,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  284.220281][T10911] JBD2: Ignoring recovery information on journal
[  284.332590][T10911] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  284.631155][T10923] loop2: detected capacity change from 0 to 32768
[  284.742750][ T9470] ocfs2: Unmounting device (7,4) on (node local)
[  284.749520][T10923] ERROR: (device loop2): dbAllocAG: unable to allocate blocks
[  284.749520][T10923] 
[  284.779162][T10923] ERROR: (device loop2): remounting filesystem as read-only
[  284.812165][T10923] jfs_create: dtInsert returned -EIO
[  284.835586][T10923] ERROR: (device loop2): jfs_create: 
[  284.835586][T10923] 
[  285.085663][T10951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'.
[  285.213403][T10951] ~ÿ: entered promiscuous mode
[  285.520951][T10967] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  285.562329][T10963] loop4: detected capacity change from 0 to 1024
[  285.770417][T10973] netlink: 'syz.0.2131': attribute type 32 has an invalid length.
[  285.878801][T10979] loop2: detected capacity change from 0 to 64
[  286.691802][   T27] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  286.740031][T11006] loop2: detected capacity change from 0 to 4096
[  286.835167][T11006] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  286.893612][   T27] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  286.921725][   T27] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  286.952841][   T27] usb 5-1: Product: syz
[  286.957096][   T27] usb 5-1: Manufacturer: syz
[  286.968884][   T27] usb 5-1: SerialNumber: syz
[  286.976752][T11006] ntfs3: loop2: Failed to load $Extend (-22).
[  286.999152][T11006] ntfs3: loop2: Failed to initialize $Extend.
[  287.022666][   T27] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  287.258351][T11017] netlink: 'syz.2.2154': attribute type 7 has an invalid length.
[  287.270308][T11017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2154'.
[  287.282465][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2154'.
[  287.436876][   T27] vp7045: USB control message 'in' went wrong.
[  287.454948][   T27] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  287.481703][   T27] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  287.529910][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2158'.
[  287.539500][   T27] usb 5-1: USB disconnect, device number 4
[  287.555687][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'.
[  287.900056][T11037] loop3: detected capacity change from 0 to 4096
[  287.917672][T11037] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  288.051246][T11037] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  288.138976][T11037] ntfs3: loop3: failed to convert "c46c" to cp874
[  288.353950][T11048] loop2: detected capacity change from 0 to 16
[  288.361219][T11048] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  288.411821][  T968] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  288.457019][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2169'.
[  288.636660][  T968] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  288.646142][T11033] loop0: detected capacity change from 0 to 32768
[  288.646151][  T968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.674826][T11033] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  288.679380][  T968] usb 5-1: Product: syz
[  288.730602][  T968] usb 5-1: Manufacturer: syz
[  288.740902][  T968] usb 5-1: SerialNumber: syz
[  288.769336][  T968] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  288.849282][ T5813] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  288.928836][ T5782] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  288.959707][T11058] loop3: detected capacity change from 0 to 512
[  289.036114][T11058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.077852][T11058] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.277952][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.284317][  T968] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  289.413473][    T8] usb 5-1: USB disconnect, device number 5
[  289.614600][  T968] usb 3-1: Using ep0 maxpacket: 8
[  289.635990][  T968] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  289.653259][  T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.671733][  T968] usb 3-1: Product: syz
[  289.688033][  T968] usb 3-1: Manufacturer: syz
[  289.702601][  T968] usb 3-1: SerialNumber: syz
[  289.866633][T11080] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  289.910182][ T5813] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  289.930878][ T5813] ath9k_htc: Failed to initialize the device
[  289.973091][    T8] usb 5-1: ath9k_htc: USB layer deinitialized
[  290.135255][  T968] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[  290.145903][  T968] mxuport: probe of 3-1:254.0 failed with error -5
[  290.203700][  T968] usb 3-1: USB disconnect, device number 9
[  290.249722][T11089] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2188'.
[  290.424359][T11097] ubi31: attaching mtd0
[  290.456897][T11097] ubi31: scanning is finished
[  290.480018][T11097] ubi31: empty MTD device detected
[  290.593389][T11097] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  290.618883][T11097] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  290.635819][T11097] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  290.681841][T11097] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  290.689409][T11097] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  290.748209][T11097] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  290.805383][T11097] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1910636955
[  290.851714][T11097] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  290.905149][T11104] ubi31: background thread "ubi_bgt31d" started, PID 11104
[  291.289006][T11124] loop0: detected capacity change from 0 to 128
[  291.403564][T11124] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.427247][T11124] ext4 filesystem being mounted at /543/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  291.519039][ T5764] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.561632][ T5857] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  291.639001][T11134] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2207'.
[  291.791656][ T5857] usb 5-1: Using ep0 maxpacket: 8
[  291.815802][T11140] loop2: detected capacity change from 0 to 1764
[  291.819146][ T5857] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  291.845285][ T5857] usb 5-1: config 179 has no interface number 0
[  291.864001][ T5857] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  291.900063][ T5857] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  291.931776][ T5857] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  291.947837][ T5857] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  291.977900][ T5857] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  291.999734][ T5857] usb 5-1: config 179 interface 65 has no altsetting 0
[  292.019460][ T5857] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  292.051060][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.080467][T11146] netlink: 'syz.3.2213': attribute type 24 has an invalid length.
[  292.108790][T11146] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2213'.
[  292.140325][ T5857] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8
[  292.154910][   T28] kauditd_printk_skb: 64 callbacks suppressed
[  292.154926][   T28] audit: type=1326 audit(1768147224.045:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  292.261694][ T5122] input input8: unable to receive magic message: -110
[  292.311615][   T28] audit: type=1326 audit(1768147224.055:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  292.340293][   T28] audit: type=1326 audit(1768147224.095:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  292.370247][T11151] x_tables: unsorted entry at hook 3
[  292.378785][   T28] audit: type=1326 audit(1768147224.095:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  292.410809][ T5122] input input8: unable to receive magic message: -32
[  292.484539][ T9868] input input8: unable to receive magic message: -32
[  292.531678][   T28] audit: type=1326 audit(1768147224.095:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11147 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4678f749 code=0x7ffc0000
[  292.583844][  T788] usb 5-1: USB disconnect, device number 6
[  292.583907][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  292.598958][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  292.637230][  T788] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  293.075126][T11173] loop0: detected capacity change from 0 to 64
[  293.454507][T11179] loop4: detected capacity change from 0 to 4096
[  293.618088][T11179] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  293.647027][T11190] loop0: detected capacity change from 0 to 8
[  293.672717][T11190] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  293.699167][ T5767] udevd[5767]: incorrect cramfs checksum on /dev/loop0
[  293.721244][T11179] ntfs3: loop4: Failed to load $Extend (-22).
[  293.729858][T11190] cramfs: bad data blocksize 4293972856
[  293.756164][T11190] cramfs: bad data blocksize 4293972856
[  293.761765][T11179] ntfs3: loop4: Failed to initialize $Extend.
[  293.836502][ T9868] udevd[9868]: incorrect cramfs checksum on /dev/loop0
[  294.357435][T11211] sctp: [Deprecated]: syz.0.2243 (pid 11211) Use of struct sctp_assoc_value in delayed_ack socket option.
[  294.357435][T11211] Use struct sctp_sack_info instead
[  294.476060][T11218] cgroup: none used incorrectly
[  294.567357][T11221] loop2: detected capacity change from 0 to 512
[  294.664739][T11223] loop0: detected capacity change from 0 to 512
[  294.683898][T11221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.728104][T11223] EXT4-fs: Ignoring removed nomblk_io_submit option
[  294.745825][T11230] loop3: detected capacity change from 0 to 256
[  294.755240][T11221] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.816209][T11223] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  294.900681][T11223] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  294.929068][T11221] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.2246: invalid size
[  294.972078][T11223] EXT4-fs (loop0): orphan cleanup on readonly fs
[  294.981899][T11223] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  295.013882][T11223] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  295.055168][T11230] FAT-fs (loop3): Directory bread(block 64) failed
[  295.061956][T11223] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  295.081892][T11221] EXT4-fs (loop2): Remounting filesystem read-only
[  295.081898][T11223] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.2247: bg 0: block 40: padding at end of block bitmap is not set
[  295.093315][T11223] EXT4-fs (loop0): Remounting filesystem read-only
[  295.109903][T11230] FAT-fs (loop3): Directory bread(block 65) failed
[  295.119269][T11230] FAT-fs (loop3): Directory bread(block 66) failed
[  295.132499][T11230] FAT-fs (loop3): Directory bread(block 67) failed
[  295.139232][T11230] FAT-fs (loop3): Directory bread(block 68) failed
[  295.146197][T11223] EXT4-fs (loop0): 1 truncate cleaned up
[  295.147396][T11230] FAT-fs (loop3): Directory bread(block 69) failed
[  295.158991][T11230] FAT-fs (loop3): Directory bread(block 70) failed
[  295.176643][T11223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  295.182448][T11230] FAT-fs (loop3): Directory bread(block 71) failed
[  295.221833][T11230] FAT-fs (loop3): Directory bread(block 72) failed
[  295.238420][T11230] FAT-fs (loop3): Directory bread(block 73) failed
[  295.306252][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.317398][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.342029][  T742] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  295.364708][  T742] Quota error (device loop2): write_blk: dquota write failed
[  295.389811][  T742] Quota error (device loop2): free_dqentry: Can't write quota data block 5
[  295.431866][  T742] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  295.478942][  T742] Quota error (device loop2): write_blk: dquota write failed
[  295.488106][  T742] Quota error (device loop2): free_dqentry: Can't write quota data block 5
[  295.713281][T11246] loop0: detected capacity change from 0 to 8
[  295.727351][T11246] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  295.770133][T11246] cramfs: Error -5 while decompressing!
[  295.773893][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop0
[  295.791868][T11246] cramfs: ffffffff96fcf368(26)->ffff888056751000(4096)
[  295.819285][T11246] cramfs: Error -3 while decompressing!
[  295.840811][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop0
[  295.848733][T11246] cramfs: ffffffff96fcf382(26)->ffff888073601000(4096)
[  295.879997][T11246] cramfs: Error -3 while decompressing!
[  295.903087][T11246] cramfs: ffffffff96fcf39c(16)->ffff888059e05000(4096)
[  295.919341][T11246] cramfs: Error -5 while decompressing!
[  295.935148][T11246] cramfs: ffffffff96fcf368(26)->ffff888056751000(4096)
[  296.671058][T11272] loop3: detected capacity change from 0 to 4096
[  296.749581][T11272] NILFS (loop3): invalid segment: Checksum error in segment payload
[  296.792867][T11278] bond1: entered allmulticast mode
[  296.812613][T11272] NILFS (loop3): trying rollback from an earlier position
[  296.887638][T11272] NILFS (loop3): norecovery option specified, skipping roll-forward recovery
[  296.981884][T11272] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state
[  297.200117][T11294] loop2: detected capacity change from 0 to 8
[  297.219251][T11294] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  297.237352][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop2
[  297.266502][T11294] cramfs: Error -3 while decompressing!
[  297.285118][T11294] cramfs: ffffffff96fcb368(1306)->ffff888054948000(4096)
[  297.317945][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop2
[  297.325088][T11294] cramfs: bad data blocksize 3221485966
[  297.330737][T11294] cramfs: Error -3 while decompressing!
[  297.368644][T11294] cramfs: ffffffff96fcb368(1306)->ffff888054948000(4096)
[  297.402112][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  297.402127][   T28] audit: type=1800 audit(1768147229.305:173): pid=11294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2281" name="file2" dev="loop2" ino=348 res=0 errno=0
[  297.813989][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'.
[  297.832785][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'.
[  298.048891][T11325] loop3: detected capacity change from 0 to 64
[  298.740591][T11347] netlink: 'syz.0.2306': attribute type 1 has an invalid length.
[  299.037772][T11356] loop4: detected capacity change from 0 to 4096
[  299.073774][T11356] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  299.198377][T11356] ntfs3: loop4: failed to convert "c46c" to cp855
[  299.872725][T11388] netlink: 'syz.2.2326': attribute type 10 has an invalid length.
[  300.374967][T11402] netlink: 'syz.4.2333': attribute type 21 has an invalid length.
[  300.389970][T11402] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2333'.
[  300.405548][T11402] netlink: 'syz.4.2333': attribute type 4 has an invalid length.
[  300.418501][T11402] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2333'.
[  300.534536][T11406] loop4: detected capacity change from 0 to 256
[  300.620032][T11406] FAT-fs (loop4): Directory bread(block 64) failed
[  300.655994][T11406] FAT-fs (loop4): Directory bread(block 65) failed
[  300.682586][T11406] FAT-fs (loop4): Directory bread(block 66) failed
[  300.689211][T11406] FAT-fs (loop4): Directory bread(block 67) failed
[  300.724119][T11406] FAT-fs (loop4): Directory bread(block 68) failed
[  300.730742][T11406] FAT-fs (loop4): Directory bread(block 69) failed
[  300.792027][T11406] FAT-fs (loop4): Directory bread(block 70) failed
[  300.798653][T11406] FAT-fs (loop4): Directory bread(block 71) failed
[  300.851346][T11406] FAT-fs (loop4): Directory bread(block 72) failed
[  300.865941][T11406] FAT-fs (loop4): Directory bread(block 73) failed
[  301.082333][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2343'.
[  301.625382][T11440] loop2: detected capacity change from 0 to 512
[  301.724398][T11440] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2352: error while reading EA inode 32 err=-116
[  301.753077][T11440] EXT4-fs (loop2): Remounting filesystem read-only
[  301.759943][T11440] EXT4-fs warning (device loop2): ext4_evict_inode:255: couldn't mark inode dirty (err -5)
[  301.772336][T11440] EXT4-fs (loop2): 1 orphan inode deleted
[  301.782990][T11440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.804811][T11445] loop4: detected capacity change from 0 to 1024
[  301.813634][T11440] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.824009][T11445] EXT4-fs: Ignoring removed orlov option
[  301.918469][T11445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.129353][ T9470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.318955][T11463] loop0: detected capacity change from 0 to 164
[  302.359172][T11466] loop4: detected capacity change from 0 to 256
[  302.385845][T11463] iso9660: Corrupted directory entry in block 2 of inode 1920
[  302.686900][T11475] loop4: detected capacity change from 0 to 256
[  302.860436][T11475] FAT-fs (loop4): Directory bread(block 64) failed
[  302.860477][T11475] FAT-fs (loop4): Directory bread(block 65) failed
[  302.860589][T11475] FAT-fs (loop4): Directory bread(block 66) failed
[  302.860619][T11475] FAT-fs (loop4): Directory bread(block 67) failed
[  302.860813][T11475] FAT-fs (loop4): Directory bread(block 68) failed
[  302.958348][T11475] FAT-fs (loop4): Directory bread(block 69) failed
[  302.958506][T11475] FAT-fs (loop4): Directory bread(block 70) failed
[  302.958539][T11475] FAT-fs (loop4): Directory bread(block 71) failed
[  302.958638][T11475] FAT-fs (loop4): Directory bread(block 72) failed
[  302.958667][T11475] FAT-fs (loop4): Directory bread(block 73) failed
[  303.141712][T11483] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2370' sets config #1
[  303.292654][T11487] loop0: detected capacity change from 0 to 8
[  303.293823][T11487] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  303.330630][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop0
[  303.363416][T11487] cramfs: Error -3 while decompressing!
[  303.363437][T11487] cramfs: ffffffff96fcb368(26)->ffff888059d9b000(4096)
[  303.363467][T11487] cramfs: Error -3 while decompressing!
[  303.363477][T11487] cramfs: ffffffff96fcb382(26)->ffff8880563ed000(4096)
[  303.363506][T11487] cramfs: Error -3 while decompressing!
[  303.363516][T11487] cramfs: ffffffff96fcb39c(16)->ffff888073f2c000(4096)
[  303.363572][T11487] cramfs: Error -3 while decompressing!
[  303.363582][T11487] cramfs: ffffffff96fcb368(26)->ffff888059d9b000(4096)
[  303.401976][T11489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2373'.
[  303.402049][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2373'.
[  303.420999][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop0
[  303.423623][T11489] ip6gretap2: entered allmulticast mode
[  303.983420][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2382'.
[  304.007893][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2382'.
[  304.277504][T11518] netlink: 'syz.2.2388': attribute type 1 has an invalid length.
[  304.311782][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  304.512084][    T8] usb 4-1: Using ep0 maxpacket: 16
[  304.524938][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  304.535965][    T8] usb 4-1: config 1 has an invalid interface number: 231 but max is 0
[  304.563537][    T8] usb 4-1: config 1 has no interface number 0
[  304.569745][    T8] usb 4-1: config 1 interface 231 has no altsetting 0
[  304.600155][    T8] usb 4-1: string descriptor 0 read error: -22
[  304.622014][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5
[  304.650112][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.794185][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2395'.
[  304.869673][T11535] fuse: Unknown parameter 'no'
[  304.925941][T11537] kAFS: unable to lookup cell '.,'
[  304.940911][    T8] usbtest 4-1:1.231: Linux gadget zero
[  304.956927][    T8] usbtest 4-1:1.231: high-speed {control in/out int-out} tests (+alt)
[  305.222168][   T27] usb 4-1: USB disconnect, device number 11
[  305.469134][T11554] loop4: detected capacity change from 0 to 1024
[  305.553078][  T742] hfsplus: b-tree write err: -5, ino 4
[  305.770072][T11561] netlink: 'syz.4.2409': attribute type 10 has an invalid length.
[  305.835127][T11564] comedi comedi4: bad chanlist[0]=0x00001001 chan=4097 range length=2
[  306.084498][T11572] loop0: detected capacity change from 0 to 16
[  306.118741][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2414'.
[  306.145966][T11572] erofs: (device loop0): mounted with root inode @ nid 36.
[  306.240452][T11572] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  306.269159][T11575] loop2: detected capacity change from 0 to 1024
[  306.292328][T11572] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851]
[  306.305163][T11575] EXT4-fs: Ignoring removed orlov option
[  306.342242][T11572] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  306.373103][T11575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.576074][T11583] netlink: 'syz.3.2418': attribute type 3 has an invalid length.
[  306.630884][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.707287][T11585] loop0: detected capacity change from 0 to 512
[  306.722767][T11585] EXT4-fs: Ignoring removed nobh option
[  306.807346][T11585] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  306.883614][T11585] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2420: attempt to clear invalid blocks 1 len 1
[  306.952296][T11590] loop3: detected capacity change from 0 to 512
[  306.960281][T11585] EXT4-fs (loop0): Remounting filesystem read-only
[  307.008162][T11585] EXT4-fs (loop0): 1 truncate cleaned up
[  307.028597][T11585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.034835][T11597] ntfs: (device loop4): ntfs_fill_super(): Unable to determine device size.
[  307.070355][T11590] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2421: error while reading EA inode 32 err=-116
[  307.084901][T11590] EXT4-fs (loop3): Remounting filesystem read-only
[  307.117483][T11590] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -5)
[  307.174300][T11590] EXT4-fs (loop3): 1 orphan inode deleted
[  307.192898][T11590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.247401][T11590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.279981][T11602] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  307.323366][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.529669][T11608] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2429'.
[  307.578507][T11610] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2430'.
[  307.664868][T11612] netlink: 'syz.2.2432': attribute type 46 has an invalid length.
[  307.808585][T11617] loop4: detected capacity change from 0 to 8
[  307.824085][T11617] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  307.882925][T11617] cramfs: Error -3 while decompressing!
[  307.909224][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop4
[  307.921638][T11617] cramfs: ffffffff96fcf368(26)->ffff888073e18000(4096)
[  307.929559][T11617] cramfs: Error -3 while decompressing!
[  307.949380][T11622] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  307.972855][T11617] cramfs: ffffffff96fcf382(26)->ffff888055c6f000(4096)
[  307.979908][T11622] overlayfs: conflicting options: metacopy=off,verity=require
[  307.991933][T11617] cramfs: Error -3 while decompressing!
[  308.002139][T11617] cramfs: ffffffff96fcf39c(16)->ffff888056238000(4096)
[  308.018894][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop4
[  308.039893][T11617] cramfs: Error -3 while decompressing!
[  308.071949][T11617] cramfs: ffffffff96fcf368(26)->ffff888073e18000(4096)
[  308.540113][T11641] netlink: 'syz.4.2446': attribute type 1 has an invalid length.
[  308.729954][T11649] loop2: detected capacity change from 0 to 8
[  308.759693][T11649] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  308.811461][T11649] cramfs: Error -3 while decompressing!
[  308.819107][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop2
[  308.841729][T11649] cramfs: ffffffff96fcb368(26)->ffff888054c9f000(4096)
[  308.857862][T11652] netlink: 'syz.0.2458': attribute type 1 has an invalid length.
[  308.871682][T11649] cramfs: Error -3 while decompressing!
[  308.882029][T11649] cramfs: ffffffff96fcb382(26)->ffff888054b2f000(4096)
[  308.888988][T11649] cramfs: Error -3 while decompressing!
[  308.903868][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop2
[  308.924176][T11649] cramfs: ffffffff96fcb39c(16)->ffff888059914000(4096)
[  308.941823][T11649] cramfs: Error -3 while decompressing!
[  308.954871][T11649] cramfs: ffffffff96fcb368(26)->ffff888054c9f000(4096)
[  309.042363][ T5782] udevd[5782]: incorrect cramfs checksum on /dev/loop2
[  309.414285][T11669] loop4: detected capacity change from 0 to 512
[  309.482683][T11669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.514319][T11669] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.733481][ T9470] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.955755][   T51] Bluetooth: hci0: unexpected event for opcode 0x203d
[  309.967862][T11689] loop3: detected capacity change from 0 to 8
[  309.981371][T11689] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  310.016244][ T9868] udevd[9868]: incorrect cramfs checksum on /dev/loop3
[  310.031336][T11689] cramfs: Error -3 while decompressing!
[  310.031356][T11689] cramfs: ffffffff96fcf368(26)->ffff888057c52000(4096)
[  310.031386][T11689] cramfs: Error -3 while decompressing!
[  310.031396][T11689] cramfs: ffffffff96fcf382(26)->ffff888059f5d000(4096)
[  310.031426][T11689] cramfs: Error -3 while decompressing!
[  310.031446][T11689] cramfs: ffffffff96fcf39c(16)->ffff88805981e000(4096)
[  310.031823][T11689] cramfs: Error -3 while decompressing!
[  310.031834][T11689] cramfs: ffffffff96fcf368(26)->ffff888057c52000(4096)
[  311.200801][   T28] audit: type=1326 audit(1768147243.095:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11730 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b318f749 code=0x7ffc0000
[  311.291821][   T28] audit: type=1326 audit(1768147243.095:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11730 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b318f749 code=0x7ffc0000
[  311.339931][T11735] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2492'.
[  311.383044][   T28] audit: type=1326 audit(1768147243.145:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11730 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f94b318f749 code=0x7ffc0000
[  311.458132][   T28] audit: type=1326 audit(1768147243.145:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11730 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b318f749 code=0x7ffc0000
[  311.530028][   T28] audit: type=1326 audit(1768147243.145:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11730 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b318f749 code=0x7ffc0000
[  311.858391][T11753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2499'.
[  311.879657][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'.
[  311.898683][T11753] ip6gretap1: entered allmulticast mode
[  311.992806][T11758] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2502'.
[  312.201607][   T28] audit: type=1326 audit(1768147244.095:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  312.295077][   T28] audit: type=1326 audit(1768147244.095:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  312.317474][    C1] vkms_vblank_simulate: vblank timer overrun
[  312.376220][   T28] audit: type=1326 audit(1768147244.135:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  312.398727][    C1] vkms_vblank_simulate: vblank timer overrun
[  312.486674][   T28] audit: type=1326 audit(1768147244.135:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  312.517459][T11774] netlink: 'syz.4.2511': attribute type 10 has an invalid length.
[  312.555570][   T28] audit: type=1326 audit(1768147244.135:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11762 comm="syz.4.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  312.637557][T11774] team0: Port device wlan1 added
[  312.703967][T11779] ax25_connect(): syz.0.2513 uses autobind, please contact jreuter@yaina.de
[  313.315409][T11797] loop2: detected capacity change from 0 to 4096
[  313.323929][T11797] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  313.375437][T11797] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  313.461766][  T788] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  313.677642][  T788] usb 4-1: Using ep0 maxpacket: 16
[  313.713575][  T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.739876][  T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  313.773141][  T788] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  313.788905][  T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.805965][  T788] usb 4-1: Product: syz
[  313.810318][  T788] usb 4-1: Manufacturer: syz
[  313.815596][  T788] usb 4-1: SerialNumber: syz
[  314.259501][  T788] usb 4-1: cannot find UAC_HEADER
[  314.348391][  T788] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  314.361652][   T28] audit: type=1326 audit(1768147246.255:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  314.384303][    C1] vkms_vblank_simulate: vblank timer overrun
[  314.399117][  T788] usb 4-1: USB disconnect, device number 12
[  314.416899][   T28] audit: type=1326 audit(1768147246.255:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  314.447536][   T28] audit: type=1326 audit(1768147246.285:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  314.552956][   T28] audit: type=1326 audit(1768147246.285:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  314.578667][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  314.591798][   T28] audit: type=1326 audit(1768147246.285:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11834 comm="syz.4.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4e98f749 code=0x7ffc0000
[  314.616763][    C1] vkms_vblank_simulate: vblank timer overrun
[  314.651159][T11833] loop0: detected capacity change from 0 to 4096
[  314.694031][T11833] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  315.157244][T11853] loop4: detected capacity change from 0 to 128
[  315.253621][T11853] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  315.366833][T11853] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  315.598283][ T9470] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  315.971771][T11881] ieee802154 phy0 wpan0: encryption failed: -22
[  316.500902][T11903] loop2: detected capacity change from 0 to 1024
[  316.539353][T11903] hfsplus: invalid file type 0113366 for inode 2
[  316.547990][T11903] hfsplus: failed to load root directory
[  316.685717][T11909] nftables ruleset with unbound chain
[  316.837759][T11912] bond3: entered promiscuous mode
[  316.848184][T11912] bond3: entered allmulticast mode
[  316.860410][T11912] 8021q: adding VLAN 0 to HW filter on device bond3
[  317.113406][T11926] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2582'.
[  317.230514][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2584'.
[  317.507096][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  317.514301][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  317.781397][T11950] loop0: detected capacity change from 0 to 512
[  317.865478][T11950] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.2595: ea_inode with extended attributes
[  317.987544][T11950] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2595: error while reading EA inode 11 err=-117
[  318.046967][T11950] EXT4-fs (loop0): 1 orphan inode deleted
[  318.090953][T11950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.164598][T11964] loop3: detected capacity change from 0 to 128
[  318.303353][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.791874][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2611'.
[  319.090467][T11996] loop0: detected capacity change from 0 to 16
[  319.122607][T11996] erofs: (device loop0): mounted with root inode @ nid 36.
[  319.368742][T12007] delete_channel: no stack
[  319.667100][T12019] bridge1: entered promiscuous mode
[  319.695852][T12019] bridge1: entered allmulticast mode
[  319.875609][T12023] bond1: entered allmulticast mode
[  320.044289][T12032] netlink: 'syz.0.2631': attribute type 11 has an invalid length.
[  320.072110][T12032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2631'.
[  320.138913][T12034] loop2: detected capacity change from 0 to 8
[  320.149782][T12034] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  320.532001][T12042] netlink: 'syz.4.2639': attribute type 10 has an invalid length.
[  320.611349][T12014] loop3: detected capacity change from 0 to 32768
[  320.705383][T12042] veth0_vlan: left promiscuous mode
[  320.761338][T12042] veth0_vlan: entered promiscuous mode
[  320.818893][T12042] team0: Device veth0_vlan failed to register rx_handler
[  321.167229][T12042] syz.4.2639 (12042) used greatest stack depth: 20584 bytes left
[  321.559211][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2653'.
[  321.858522][T12080] loop0: detected capacity change from 0 to 256
[  321.927985][T12080] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  322.136665][T12086] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2661'.
[  322.241845][T12090] netlink: 'syz.0.2663': attribute type 32 has an invalid length.
[  322.347471][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2665'.
[  322.440795][T12064] loop3: detected capacity change from 0 to 32768
[  322.467284][T12064] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  322.482347][T12096] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  322.774437][ T5782] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9
[  323.600154][T12127] loop2: detected capacity change from 0 to 8192
[  323.639621][T12127] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  323.667431][T12127] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  323.682852][T12127] REISERFS (device loop2): using journaled data mode
[  323.689714][T12127] reiserfs: using flush barriers
[  323.706139][T12127] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  323.742520][T12127] REISERFS (device loop2): checking transaction log (loop2)
[  323.755820][T12127] REISERFS (device loop2): Using r5 hash to sort names
[  323.772204][T12127] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  323.788677][T12127] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  323.846520][T12134] loop0: detected capacity change from 0 to 8192
[  323.898897][T12134] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  323.992736][T12134] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  324.046067][T12134] REISERFS (device loop0): using ordered data mode
[  324.094053][T12134] reiserfs: using flush barriers
[  324.124982][T12134] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  324.207462][T12134] REISERFS (device loop0): checking transaction log (loop0)
[  324.253277][T12134] REISERFS (device loop0): Using r5 hash to sort names
[  324.299429][T12134] reiserfs: enabling write barrier flush mode
[  324.342927][T12134] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  324.401799][T12134] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  324.443742][T12134] REISERFS (device loop0): Remounting filesystem read-only
[  324.461426][T12134] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  324.494906][T12129] loop3: detected capacity change from 0 to 32768
[  324.514462][T12134] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  324.565105][T12134] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  324.603023][T12134] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error
[  324.612809][T12134] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  324.676217][T12134] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  324.707449][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'.
[  324.729995][T12134] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  324.757836][T12134] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  324.813816][T12151] netlink: 'syz.4.2691': attribute type 1 has an invalid length.
[  324.856326][T12151] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.2691'.
[  324.891041][ T5764] ------------[ cut here ]------------
[  324.896805][ T5764] kernel BUG at fs/reiserfs/journal.c:1916!
[  324.924800][ T5764] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  324.930954][ T5764] CPU: 0 PID: 5764 Comm: syz-executor Not tainted syzkaller #0
[  324.938725][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  324.948835][ T5764] RIP: 0010:do_journal_release+0x53a/0x550
[  324.954705][ T5764] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 d0 bd b6 ff e9 ac fc ff ff e8 d6 4d 5f ff <0f> 0b e8 cf 4d 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00
[  324.974448][ T5764] RSP: 0018:ffffc9000475fb00 EFLAGS: 00010293
[  324.980570][ T5764] RAX: ffffffff82265d2a RBX: ffff88805be00000 RCX: ffff88802df65a00
[  324.988587][ T5764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  324.996604][ T5764] RBP: ffffc9000475fbf8 R08: ffffc9000475fb77 R09: 0000000000000000
[  325.004621][ T5764] R10: ffffc9000475fb40 R11: fffff520008ebf6f R12: ffffc9000cb09000
[  325.012640][ T5764] R13: 1ffff920008ebf64 R14: ffff88805be00630 R15: 0000000000000000
[  325.020662][ T5764] FS:  000055555cec3500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  325.029644][ T5764] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  325.036269][ T5764] CR2: 0000001b33a1eff8 CR3: 00000000623fa000 CR4: 00000000003506f0
[  325.044306][ T5764] Call Trace:
[  325.047710][ T5764]  <TASK>
[  325.050678][ T5764]  ? journal_release+0x30/0x30
[  325.055511][ T5764]  journal_release+0x1f/0x30
[  325.060160][ T5764]  reiserfs_put_super+0x222/0x480
[  325.065251][ T5764]  ? hook_inode_free_security+0xb0/0xb0
[  325.071045][ T5764]  ? reiserfs_dirty_inode+0x240/0x240
[  325.076481][ T5764]  ? fscrypt_destroy_keyring+0x288/0x2a0
[  325.082177][ T5764]  ? reiserfs_dirty_inode+0x240/0x240
[  325.087613][ T5764]  generic_shutdown_super+0x134/0x2b0
[  325.093057][ T5764]  kill_block_super+0x44/0x90
[  325.097782][ T5764]  deactivate_locked_super+0x97/0x100
[  325.103295][ T5764]  cleanup_mnt+0x429/0x4c0
[  325.107771][ T5764]  task_work_run+0x1ce/0x250
[  325.112421][ T5764]  ? task_work_cancel+0x240/0x240
[  325.117514][ T5764]  ? exit_to_user_mode_loop+0x3b/0x110
[  325.123026][ T5764]  exit_to_user_mode_loop+0xe6/0x110
[  325.128356][ T5764]  exit_to_user_mode_prepare+0xf6/0x180
[  325.133951][ T5764]  syscall_exit_to_user_mode+0x1a/0x50
[  325.139456][ T5764]  do_syscall_64+0x61/0xb0
[  325.143911][ T5764]  ? clear_bhb_loop+0x40/0x90
[  325.148650][ T5764]  ? clear_bhb_loop+0x40/0x90
[  325.153374][ T5764]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  325.159314][ T5764] RIP: 0033:0x7f9ef5b90a77
[  325.163765][ T5764] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  325.183428][ T5764] RSP: 002b:00007ffe29bfa078 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  325.191890][ T5764] RAX: 0000000000000000 RBX: 00007f9ef5c13d7d RCX: 00007f9ef5b90a77
[  325.199901][ T5764] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe29bfa130
[  325.207920][ T5764] RBP: 00007ffe29bfa130 R08: 0000000000000000 R09: 0000000000000000
[  325.215946][ T5764] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe29bfb1c0
[  325.223962][ T5764] R13: 00007f9ef5c13d7d R14: 000000000004f499 R15: 00007ffe29bfb200
[  325.231990][ T5764]  </TASK>
[  325.235058][ T5764] Modules linked in:
[  325.291584][ T5764] ---[ end trace 0000000000000000 ]---
[  325.308279][ T5764] RIP: 0010:do_journal_release+0x53a/0x550
[  325.320843][ T5764] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 d0 bd b6 ff e9 ac fc ff ff e8 d6 4d 5f ff <0f> 0b e8 cf 4d 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00
[  325.344788][ T5764] RSP: 0018:ffffc9000475fb00 EFLAGS: 00010293
[  325.351006][ T5764] RAX: ffffffff82265d2a RBX: ffff88805be00000 RCX: ffff88802df65a00
[  325.359557][ T5764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  325.375783][ T5764] RBP: ffffc9000475fbf8 R08: ffffc9000475fb77 R09: 0000000000000000
[  325.385812][ T5764] R10: ffffc9000475fb40 R11: fffff520008ebf6f R12: ffffc9000cb09000
[  325.394012][ T5764] R13: 1ffff920008ebf64 R14: ffff88805be00630 R15: 0000000000000000
[  325.402130][ T5764] FS:  000055555cec3500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  325.411195][ T5764] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  325.418469][ T5764] CR2: 00007f94b33b42f8 CR3: 00000000623fa000 CR4: 00000000003506e0
[  325.426654][ T5764] Kernel panic - not syncing: Fatal exception
[  325.433334][ T5764] Kernel Offset: disabled
[  325.437678][ T5764] Rebooting in 86400 seconds..