last executing test programs:

4m53.004371194s ago: executing program 32 (id=6321):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$eJzs3M9vFFUcAPDv7G5BfnZF/AGiomgk/mhpQeXgRRMTD5qY6AGPtRSCLNTQmghpbDEELyZKwt2YeDHxL/DkiagnE694NyTEcAE9rRl2dtlud8u2u91t3c8nGfpe9+2+73dm3s6bGaYBDKz96T9JxPaIuB4RwxGRq2+wpbKk7e7cmpv859bcZBLl8vt/J+nb4vatuclq0yT7ua1SKaQflLuURLFJvzPnL5yeKJWmzmX10dkzn4zOnL/w8qkzEyenTk6dHT969MjhsddeHX+lK3mmMd3e+/n0vj1vf3jl3cljVz769cdKvOXy1WuHFuXRHUMRMVdbJ42e625nfbejrpwU+hgIK7I5IgrZ3no9hiN/aWftteF464u+BgesqXK5XB5v/fJCGfgfS6LfEQD9UT3Qp+e/1aVHU4914eYblROgNO872VJ5pRAXszZDDee33bQ/Io4t/PttukTD9RQAgLXwczr/eanJ/K8Y8Uhdu53ZvaFiRDwYEbsi4qGI2B0RD0el7aMR8dgK+9/fUF86/8ndWF1m7Unnf69n97YWz/9qd8GK+ay2427+Q8mJU6WpQ9k6ORhDm9P6WNNPTyIW0p9/fN2q//r5X7qk/VfnglkcNwqbF7/n+MTsRMeJZ25ejNhbaJZ/EoV7WcSeiNi7yj5OvfDDvsW/yddK989/GV24z1T+LuL5yvZfiIb8q5Ll70+OPhClqUOj1b1iqd9+v/xeq/47yr8L0u2/ten+X8u/mNTfr51Z8hGb7tfH5T+/bHlOs9r9f1PywaLOP5uYnT03FrEpeWfp7+sucFfr1fZp/gcPNB//u+Lemng8ItKd+ImIeDIinspifzoinomIA8vk/8ubz368+vzXVpr//Iq2/8oL+dPXfmrVf3vb/0i1cjeodr7/2g2wk3UHAAAAG0UuIrZHkhuplXO5kZHK/5ffHVtzpemZ2RdPTH969njlGYFiDOWqV7qG666HjmXXhqv18aw+n9UPZ9eNr+a33K2PTE6Xjvc7eRhw21qM/9Rf+X5HB6w5z2vB4DL+YXCtfvz75oCN7j6jONerOIDecxSHwdVs/M/3IQ6g9xz/YXDVxv83bTSue9yr8eFNYONx/IfBZfzDQOrkuf51UYjvI5Zvk6yXUFdU+KqTtxd6EGHk1seK6mFhPB/RxzAK7f5Vizhfnu+4035/MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHfwEAAP//qO7n/A==")
quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

3m16.711716768s ago: executing program 33 (id=7491):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f0000000080))

2m56.501317575s ago: executing program 0 (id=7893):
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000))

2m56.210842689s ago: executing program 0 (id=7897):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4})

2m55.745831046s ago: executing program 0 (id=7906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}}, 0x0)

2m55.39939612s ago: executing program 0 (id=7911):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f0000000000)=ANY=[], 0x1, 0x1d6, &(0x7f0000000580)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2400, 0x88)

2m54.695287897s ago: executing program 0 (id=7917):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$eJzskr9OAkEQxr+9O/5oFDWxooGC+KdQjkONnZbY29lI4ETiocKRKITijDEUFsbSJ+A1THwBLYwPQE1BrM2ZvZ3bLL6C+yvu2/l2ZnZ2c+d+208B+JkOajhEhIkMPhiDBSDHhDcxhD6TfpI+CcE75R2Rf0+a9Xv9JAC+nceKMC6qnud28gC+I09a/sGdgUnU6ms6qPHFKYAwDEPu1QGejgUlxwTQVnKyFrAaXSKUORYNsA6g2G1dF/1ef6vZqjbchnvpmOU9e8e2d53iWdNzbfFlyhF0FXDdBJBKQ8L3EwAeKJ7HLEwZjfbZHE5kbTJ+www9IExZayi1sTK8yrlSSsUx1sDHugmWFLcQdbEQXakCBpOCkqXMJ85KRxvbtSuvPgQDi8tGsGSP0hgJGThqUN4PsChaDallgbRCOiIdk+b+/DJWwL+PFG0EQBK31W63U+KPJFYsXjnSc5YD9cH4qS/G7OXeDGg0Go1Go9FoNBrNf+c3AAD//8PfdhM=")
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)

2m53.529548255s ago: executing program 0 (id=7930):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000003c0), 0x4)

2m37.392473194s ago: executing program 34 (id=7930):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000003c0), 0x4)

1m42.580344892s ago: executing program 7 (id=8947):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

1m41.787738502s ago: executing program 7 (id=8958):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000380)={[{@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@uni_xlate}, {@fat=@check_normal}, {@shortname_lower}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@fat=@check_strict}, {@numtail}, {@uni_xlate}]}, 0x25, 0x34c, &(0x7f0000001740)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')

1m41.150565769s ago: executing program 7 (id=8968):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))

1m40.735814785s ago: executing program 7 (id=8974):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f000001fc40)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c756e695f786c6174653d312c696f636861727365743d63703835372c696f636861727365743d6d61636761656c69632c757466383d312c757466383d302c001238b07c058b8e0df5cedc75eeed5f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c757466383d3047756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c757466383d302c636865636b3d7374726963742c6e"], 0x1, 0x36b, &(0x7f0000000500)="$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")
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)

1m40.208959097s ago: executing program 7 (id=8979):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000100001042bbd7000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000300000000002000128009000100766c616e00000000100002800c000200000000000014000014000300766c616e30"], 0x54}}, 0x0)

1m39.653662843s ago: executing program 7 (id=8986):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a05000000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000034000038008000240000000000800014000006d"], 0xbc}}, 0x0)

1m38.82325861s ago: executing program 35 (id=8986):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a05000000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000034000038008000240000000000800014000006d"], 0xbc}}, 0x0)

1m14.850991945s ago: executing program 1 (id=9289):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="0200000000000000", 0x8)

1m14.601966434s ago: executing program 1 (id=9294):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x60}}, 0x0)

1m14.115917307s ago: executing program 1 (id=9301):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x42100}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd7}]}, 0x3c}}, 0x0)

1m13.733261068s ago: executing program 1 (id=9307):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000140)={[{@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@gid={'gid', 0x3d, 0xee00}}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'cp1251'}}, {}, {@barrier}]}, 0xfc, 0x6ea, &(0x7f0000000f80)="$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")
mount$bind(&(0x7f0000000200)='./file1\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x883042, 0x0)

1m13.407869151s ago: executing program 1 (id=9311):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0)
fallocate(r0, 0x1, 0x0, 0x7c000)

1m12.789420931s ago: executing program 1 (id=9320):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x807, 0x20002)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x9, @raw_data="aa1d33c716d5b6c598bb846045a4bcde20fce0759b5c056dddb296fe6a83dba0fddded3748767a86464e2d891fd2233e2e34bc803b4b8da2533af7268e8114063e523749d15932de0994c6b645832eb306dd6b2b142a27f2a2422a49a8d947ddcabfc37cb266e3ba7058137740598d04828e74eb7b413ec0847036eca4215e1f4fddca2e40b6ec95e1a190fb73954b3ada9faf3ef4d77d6cffe617981a6310195ddd8619b1a733a7122304db80ebb456edb8117402076cea30bccfc83eddbac4c369c3528b552ad4"})

1m12.278824957s ago: executing program 36 (id=9320):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x807, 0x20002)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x9, @raw_data="aa1d33c716d5b6c598bb846045a4bcde20fce0759b5c056dddb296fe6a83dba0fddded3748767a86464e2d891fd2233e2e34bc803b4b8da2533af7268e8114063e523749d15932de0994c6b645832eb306dd6b2b142a27f2a2422a49a8d947ddcabfc37cb266e3ba7058137740598d04828e74eb7b413ec0847036eca4215e1f4fddca2e40b6ec95e1a190fb73954b3ada9faf3ef4d77d6cffe617981a6310195ddd8619b1a733a7122304db80ebb456edb8117402076cea30bccfc83eddbac4c369c3528b552ad4"})

56.779791428s ago: executing program 8 (id=9506):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000380)=0x9, 0x4)

56.452582831s ago: executing program 8 (id=9508):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0)

56.223037963s ago: executing program 8 (id=9510):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)

55.495417753s ago: executing program 8 (id=9514):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)

55.259178883s ago: executing program 8 (id=9515):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f00000002c0))

54.695457371s ago: executing program 8 (id=9518):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0)

54.14625928s ago: executing program 37 (id=9518):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x100000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff22ff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0)

6.512262022s ago: executing program 2 (id=10099):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x6, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48)

6.205088631s ago: executing program 2 (id=10103):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x14})

5.933192585s ago: executing program 2 (id=10107):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000)

5.537849441s ago: executing program 2 (id=10113):
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@flushoncommit}, {@usebackuproot}]}, 0x1, 0x50f3, &(0x7f000000f3c0)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x2)

2.96445728s ago: executing program 2 (id=10128):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000540)={0x2, "2a123b084c7f8324cc76356ea2c2ef76068115ecfb56b46998cd6a640317a26f", 0x0, 0x1, 0x1, 0x1700, 0x2060501})

2.513287653s ago: executing program 6 (id=10133):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x49b2b26753be10f5}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x22}, 0x94)

2.299339673s ago: executing program 5 (id=10135):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)

1.933195991s ago: executing program 2 (id=10139):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x3, 0x4451, &(0x7f00000088c0)="$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")
symlink(0x0, 0x0)

1.900279614s ago: executing program 9 (id=10140):
arch_prctl$ARCH_SHSTK_DISABLE(0x5003, 0x1)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1)

1.824602263s ago: executing program 5 (id=10142):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), 0x4)

1.766426157s ago: executing program 4 (id=10143):
r0 = socket$kcm(0x21, 0x2, 0xa)
fdatasync(r0)

1.675038395s ago: executing program 3 (id=10144):
semop(0x0, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000000)=[{0x1, 0xffff, 0x1000}, {0x0, 0x7fc0, 0x800}], 0x2)

1.590015652s ago: executing program 5 (id=10145):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00')
pwritev(r0, 0x0, 0x0, 0xe94, 0xa)

1.533827045s ago: executing program 9 (id=10146):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0)

1.374661272s ago: executing program 3 (id=10147):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)

1.356153288s ago: executing program 4 (id=10148):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002500010324bd7006fddbdf2515"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24008002)

1.305814127s ago: executing program 5 (id=10149):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x9, 0x4)

1.257646039s ago: executing program 9 (id=10150):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000500", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)

1.234796786s ago: executing program 6 (id=10151):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48)

1.091041491s ago: executing program 5 (id=10152):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x11, r0, 0x0)

1.071433139s ago: executing program 3 (id=10153):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000080)={0xa, 0x98})

1.063441233s ago: executing program 4 (id=10154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f5968bb0c7e42fcca4c18376d00e189d388aa6af"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914)

994.840672ms ago: executing program 6 (id=10155):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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")
truncate(&(0x7f00000003c0)='./file2\x00', 0x8001bfc)

959.359565ms ago: executing program 9 (id=10156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000440000001a0a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000208000840000000013c0000000e0a01020000000000000000010000000900020073797a3200000000100003802f00008008000180040002800900010073797a30"], 0xc8}}, 0x0)

743.37409ms ago: executing program 3 (id=10157):
r0 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10)

742.345959ms ago: executing program 5 (id=10158):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x25000001)

730.804417ms ago: executing program 4 (id=10159):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18)

642.049094ms ago: executing program 6 (id=10160):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x1, @null, @netrom={'nr', 0x0}, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x560, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

578.168727ms ago: executing program 9 (id=10161):
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7be, &(0x7f00000005c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x53)

453.361257ms ago: executing program 3 (id=10162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, 0x38, 0x7d41d458b8e68aa9, 0x70bd2b, 0x25dfdbfc, {0x18}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)

428.441101ms ago: executing program 4 (id=10163):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pwritev(r0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000040)="0108f21d", 0x4}], 0x2, 0x3, 0x80000002)

284.706631ms ago: executing program 4 (id=10164):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f00000000c0)={[{@journal_async_commit}, {@noacl}, {@coherency_full}, {@heartbeat_none}, {@journal_async_commit}, {@user_xattr}]}, 0x1, 0x444c, &(0x7f000000cd40)="$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")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)

269.585402ms ago: executing program 6 (id=10165):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f}}], 0x1c)

221.44219ms ago: executing program 3 (id=10166):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x1, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x1a, 0x87, 0x70, 0x8, 0x10c4, 0x1601, 0x101c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x1, 0x40, 0x60, [{{0x9, 0x4, 0xe9, 0x7, 0x0, 0xfd, 0x58, 0x15, 0x7}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f0f00010a1003"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

32.630959ms ago: executing program 9 (id=10167):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x4e}], 0x2, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_tos_u8={{0x18, 0x0, 0x1, 0x8}}], 0x30}, 0x40010)

0s ago: executing program 6 (id=10168):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0)

kernel console output (not intermixed with test programs):

ter parsing attributes in process `syz.8.8835'.
[  850.289815][ T5896] ocfs2: Unmounting device (7,5) on (node local)
[  850.460822][ T7118] usb 3-1: USB disconnect, device number 122
[  850.515744][ T7118] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  850.779231][T26550] xt_hashlimit: size too large, truncated to 1048576
[  850.817259][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  850.827309][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  850.885654][T26552] loop5: detected capacity change from 0 to 4096
[  851.397684][T26570] loop8: detected capacity change from 0 to 8
[  852.403101][T26576] loop2: detected capacity change from 0 to 32768
[  852.757237][T26588] loop5: detected capacity change from 0 to 32768
[  852.847210][T26588] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  853.081248][T26588] XFS (loop5): Ending clean mount
[  853.097290][T26588] XFS (loop5): Quotacheck needed: Please wait.
[  853.124438][T26634] __nla_validate_parse: 47 callbacks suppressed
[  853.124455][T26634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8882'.
[  853.184911][T26588] XFS (loop5): Quotacheck: Done.
[  853.298232][T26640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8884'.
[  853.366389][T26640] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  853.373460][T26640] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  853.417800][ T5896] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  853.541576][T26643] : entered promiscuous mode
[  854.808844][T26650] comedi comedi3: reset error (fatal)
[  854.825252][T26674] comedi comedi2: no devices specified
[  855.179946][T26697] loop7: detected capacity change from 0 to 256
[  855.223961][T26697] FAT-fs (loop7): Directory bread(block 64) failed
[  855.244680][T26697] FAT-fs (loop7): Directory bread(block 65) failed
[  855.290711][T26697] FAT-fs (loop7): Directory bread(block 66) failed
[  855.297242][T26697] FAT-fs (loop7): Directory bread(block 67) failed
[  855.345747][T26697] FAT-fs (loop7): Directory bread(block 68) failed
[  855.352270][T26697] FAT-fs (loop7): Directory bread(block 69) failed
[  855.397640][T26697] FAT-fs (loop7): Directory bread(block 70) failed
[  855.425798][T26697] FAT-fs (loop7): Directory bread(block 71) failed
[  855.448405][T26697] FAT-fs (loop7): Directory bread(block 72) failed
[  855.468439][T26697] FAT-fs (loop7): Directory bread(block 73) failed
[  855.611434][T26712] loop2: detected capacity change from 0 to 512
[  855.719997][T26712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  856.161198][ T5894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.233028][    T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  856.238581][T26714] loop8: detected capacity change from 0 to 32768
[  856.307459][ T6353]  loop8: p1 p3 < >
[  856.364918][T26714]  loop8: p1 p3 < >
[  856.426292][    T9] usb 2-1: Using ep0 maxpacket: 16
[  856.451631][    T9] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  856.471504][T26716] loop3: detected capacity change from 0 to 32768
[  856.495024][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.546615][    T9] usb 2-1: Product: syz
[  856.559918][    T9] usb 2-1: Manufacturer: syz
[  856.571365][    T9] usb 2-1: SerialNumber: syz
[  856.587779][    T9] usb 2-1: config 0 descriptor??
[  856.605013][T26716] JBD2: Ignoring recovery information on journal
[  856.618833][    T9] visor 2-1:0.0: Sony Clie 3.5 converter detected
[  856.830381][T26716] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  857.027568][    T9] usb 2-1: clie_3_5_startup: get interface number failed: -71
[  857.061183][    T9] visor 2-1:0.0: probe with driver visor failed with error -71
[  857.087667][    T9] usb 2-1: USB disconnect, device number 127
[  857.207483][ T6353] udevd[6353]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  857.231907][ T6139] udevd[6139]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  857.349663][ T5893] ocfs2: Unmounting device (7,3) on (node local)
[  857.358631][T14405] udevd[14405]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  857.370463][ T6139] udevd[6139]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  857.380682][T26755] Scaler: =================  START STATUS  =================
[  857.398344][T26755] Scaler: ==================  END STATUS  ==================
[  857.517337][T26728] loop7: detected capacity change from 0 to 32768
[  857.565812][T26728] ea_get: invalid extended attribute
[  857.583603][T26728] ffff888053d1c348: 04 00 00 00                                      ....
[  858.040074][T26771] loop5: detected capacity change from 0 to 256
[  858.095544][T26771] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  858.627996][T26796] loop7: detected capacity change from 0 to 256
[  858.697645][T26796] FAT-fs (loop7): Directory bread(block 64) failed
[  858.727096][T26796] FAT-fs (loop7): Directory bread(block 65) failed
[  858.748045][T26796] FAT-fs (loop7): Directory bread(block 66) failed
[  858.774712][T26796] FAT-fs (loop7): Directory bread(block 67) failed
[  858.807963][T26796] FAT-fs (loop7): Directory bread(block 68) failed
[  858.814497][T26796] FAT-fs (loop7): Directory bread(block 69) failed
[  858.870519][T26796] FAT-fs (loop7): Directory bread(block 70) failed
[  858.900137][T26796] FAT-fs (loop7): Directory bread(block 71) failed
[  858.909355][T26805] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  858.928490][T26796] FAT-fs (loop7): Directory bread(block 72) failed
[  858.947664][T26796] FAT-fs (loop7): Directory bread(block 73) failed
[  859.025460][T26809] loop8: detected capacity change from 0 to 164
[  859.587237][T26826] netlink: 'syz.2.8972': attribute type 5 has an invalid length.
[  859.618331][T26826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8972'.
[  859.738019][T26832] loop7: detected capacity change from 0 to 256
[  859.762501][T26832] FAT-fs (loop7): Directory bread(block 64) failed
[  859.769114][T26832] FAT-fs (loop7): Directory bread(block 65) failed
[  859.775754][T26832] FAT-fs (loop7): Directory bread(block 66) failed
[  859.782501][T26832] FAT-fs (loop7): Directory bread(block 67) failed
[  859.789083][T26832] FAT-fs (loop7): Directory bread(block 68) failed
[  859.797964][T26832] FAT-fs (loop7): Directory bread(block 69) failed
[  859.804924][T26832] FAT-fs (loop7): Directory bread(block 70) failed
[  859.811878][T26832] FAT-fs (loop7): Directory bread(block 71) failed
[  859.844245][T26832] FAT-fs (loop7): Directory bread(block 72) failed
[  859.865556][T26832] FAT-fs (loop7): Directory bread(block 73) failed
[  860.075871][T26793] loop3: detected capacity change from 0 to 32768
[  860.080374][T23768] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  860.122701][T23768] FAT-fs (loop7): Filesystem has been set read-only
[  860.166875][T26793] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  860.259910][T26798] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  860.386611][T26793] XFS (loop3): Ending clean mount
[  860.440289][T26798] XFS (loop1): Ending clean mount
[  860.465546][T26793] XFS (loop3): syz.3.8957 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  860.556903][T26860] set_capacity_and_notify: 1 callbacks suppressed
[  860.556922][T26860] loop5: detected capacity change from 0 to 64
[  860.610083][ T5890] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  860.756217][ T5893] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  860.843953][T26838] loop2: detected capacity change from 0 to 32768
[  861.017207][T26838] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  861.047028][T26838] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  861.059718][ T6288] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.208290][T26838] XFS (loop2): Ending clean mount
[  861.242741][T26838] XFS (loop2): Quotacheck needed: Please wait.
[  861.315551][ T6288] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.316092][T26838] XFS (loop2): Quotacheck: Done.
[  861.567567][ T5894] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  861.590557][ T6288] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  861.619043][T26880] netlink: 'syz.1.8991': attribute type 1 has an invalid length.
[  861.657445][T26880] netlink: 'syz.1.8991': attribute type 2 has an invalid length.
[  861.734380][T26877] loop8: detected capacity change from 0 to 4096
[  861.770558][T26877] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  862.038590][ T5897] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  862.049193][ T5897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  862.056893][ T5897] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  862.064939][ T5897] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  862.072759][ T5897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  862.119785][ T6288] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  862.684327][T26904] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9000'.
[  862.799421][T20990] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  862.816940][T26907] netlink: 'syz.5.9001': attribute type 1 has an invalid length.
[  863.030301][T20990] usb 9-1: Using ep0 maxpacket: 8
[  863.083153][T20990] usb 9-1: unable to get BOS descriptor or descriptor too short
[  863.138241][T20990] usb 9-1: config 8 has an invalid interface number: 255 but max is 0
[  863.146424][T20990] usb 9-1: config 8 has no interface number 0
[  863.184684][T26920] loop1: detected capacity change from 0 to 256
[  863.237435][T20990] usb 9-1: config 8 interface 255 has no altsetting 0
[  863.287470][ T6288] bridge_slave_1: left allmulticast mode
[  863.293127][ T6288] bridge_slave_1: left promiscuous mode
[  863.318247][T26920] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  863.329698][T20990] usb 9-1: string descriptor 0 read error: -22
[  863.330090][T20990] usb 9-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  863.352158][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.381479][T20990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.411386][T26920] FAT-fs (loop1): Filesystem has been set read-only
[  863.432683][ T6288] bridge_slave_0: left allmulticast mode
[  863.453364][T26920] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  863.463710][ T6288] bridge_slave_0: left promiscuous mode
[  863.492212][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.500481][T26920] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  863.550776][T26929] loop3: detected capacity change from 0 to 2048
[  863.625519][T26933] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  863.698395][T26929] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  863.741075][T26929] Remounting filesystem read-only
[  863.784257][T26929] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  863.835818][T26929] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  863.882554][T26929] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  863.901527][T20990] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.8-1, 00:00:00:00:00:00.
[  863.925038][T26929] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  863.974725][T26929] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  864.013749][T26929] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  864.048829][T26929] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  864.088682][   T31] audit: type=1800 audit(825.436:160): pid=26929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9011" name="file2" dev="loop3" ino=16 res=0 errno=0
[  864.215538][T26948] netlink: 'syz.1.9017': attribute type 21 has an invalid length.
[  864.324471][   T52] Bluetooth: hci6: command tx timeout
[  864.707495][ T6288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  864.720494][ T6288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  864.732024][ T6288] bond0 (unregistering): Released all slaves
[  864.756540][ T6288] bond1 (unregistering): Released all slaves
[  864.846787][T20990] usb 9-1: USB disconnect, device number 3
[  865.120014][T26884] chnl_net:caif_netlink_parms(): no params data found
[  865.334693][   T31] audit: type=1326 audit(826.605:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26978 comm="syz.3.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba158f749 code=0x7ffc0000
[  865.421775][   T31] audit: type=1326 audit(826.624:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26978 comm="syz.3.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba158f749 code=0x7ffc0000
[  865.458436][T20990] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  865.516087][   T31] audit: type=1326 audit(826.643:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26978 comm="syz.3.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ba1591667 code=0x7ffc0000
[  865.621840][   T31] audit: type=1326 audit(826.643:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26978 comm="syz.3.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5ba15915dc code=0x7ffc0000
[  865.671187][T20990] usb 9-1: Using ep0 maxpacket: 16
[  865.694154][   T31] audit: type=1326 audit(826.643:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26978 comm="syz.3.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5ba1591514 code=0x7ffc0000
[  865.698180][T20990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  865.780820][T20990] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  865.781504][   T31] audit: type=1326 audit(826.643:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26978 comm="syz.3.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5ba1591514 code=0x7ffc0000
[  865.844485][T20990] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81
[  865.861018][T26996] loop1: detected capacity change from 0 to 512
[  865.885982][T26996] EXT4-fs: Ignoring removed nobh option
[  865.892031][   T31] audit: type=1326 audit(826.643:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26978 comm="syz.3.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5ba158e3aa code=0x7ffc0000
[  865.895722][T20990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  865.923528][   T31] audit: type=1326 audit(826.652:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26978 comm="syz.3.9029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba158f749 code=0x7ffc0000
[  865.999183][T26996] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.9037: corrupted inode contents
[  866.023103][T26996] EXT4-fs (loop1): Remounting filesystem read-only
[  866.046585][T20990] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  866.056981][T26996] Quota error (device loop1): write_blk: dquota write failed
[  866.076075][T26996] EXT4-fs (loop1): 1 truncate cleaned up
[  866.095687][T26996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  866.109734][   T30] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  866.151191][T20990] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  866.183641][T20990] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  866.198197][ T6288] hsr_slave_0: left promiscuous mode
[  866.202472][T20990] usb 9-1: Product: syz
[  866.210231][T20990] usb 9-1: Manufacturer: syz
[  866.227122][T20990] usb 9-1: SerialNumber: syz
[  866.234623][T20990] usb 9-1: config 0 descriptor??
[  866.243288][T20990] usb 9-1: NFC: intf ffff88807a4f2000 id ffffffff8e93cd60
[  866.258691][ T6288] hsr_slave_1: left promiscuous mode
[  866.270150][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  866.277872][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0
[  866.318973][   T30] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f
[  866.341079][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  866.351450][   T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.351779][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  866.379546][ T5890] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.392229][   T30] usb 4-1: config 0 descriptor??
[  866.423508][   T30] gspca_main: pac7311-2.14.0 probing 093a:2601
[  866.455386][ T6288] veth1_macvtap: left promiscuous mode
[  866.496923][ T6288] veth0_macvtap: left promiscuous mode
[  866.502589][ T6288] veth1_vlan: left promiscuous mode
[  866.538732][ T6288] veth0_vlan: left promiscuous mode
[  866.559044][   T52] Bluetooth: hci6: command tx timeout
[  866.560317][T20990] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[  866.622184][ T5859] usb 9-1: USB disconnect, device number 4
[  866.760337][T20990] usb 6-1: config 160 has an invalid interface number: 200 but max is 0
[  866.799548][T20990] usb 6-1: config 160 has no interface number 0
[  866.830927][T27026] xt_CT: You must specify a L4 protocol and not use inversions on it
[  866.833759][T20990] usb 6-1: config 160 interface 200 has no altsetting 0
[  866.849877][   T30] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  866.874311][T20990] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  866.884769][   T30] pac7311 4-1:0.0: probe with driver pac7311 failed with error -71
[  866.896965][T20990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.917878][T20990] usb 6-1: Product: syz
[  866.927073][   T30] usb 4-1: USB disconnect, device number 112
[  866.939802][T20990] usb 6-1: Manufacturer: syz
[  866.950910][T20990] usb 6-1: SerialNumber: syz
[  867.204130][T20990] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  867.234170][T20990] usb 6-1: MIDIStreaming interface descriptor not found
[  867.327926][T20990] usb 6-1: USB disconnect, device number 107
[  867.469564][T14415] udevd[14415]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  867.685495][T27045] loop8: detected capacity change from 0 to 16
[  868.240617][T27061] loop1: detected capacity change from 0 to 4096
[  868.284430][T27061] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  868.292263][T27063] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9060'.
[  868.352962][T27061] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  868.377616][T27061] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  868.487625][ T6288] team0 (unregistering): Port device team_slave_1 removed
[  868.498102][T27067] comedi comedi0: pcmda12: I/O port conflict (0x3,16)
[  868.582069][T27070] xt_hashlimit: size too large, truncated to 1048576
[  868.603222][T27070] xt_hashlimit: max too large, truncated to 1048576
[  868.683265][ T6288] team0 (unregistering): Port device team_slave_0 removed
[  868.771653][   T52] Bluetooth: hci6: command tx timeout
[  868.922618][T27082] tmpfs: User quota block hardlimit too large.
[  869.140082][T27089] loop8: detected capacity change from 0 to 1024
[  869.146868][T27090] loop5: detected capacity change from 0 to 128
[  869.188785][T27090] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  869.277107][ T3498] hfsplus: b-tree write err: -5, ino 4
[  869.298715][T27090] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.9073: No space for directory leaf checksum. Please run e2fsck -D.
[  869.371352][T27090] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.9073: checksumming directory block 0
[  869.532930][ T5896] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  869.549111][   T52] Bluetooth: hci5: unexpected event for opcode 0x0c1b
[  870.329120][T27099] loop8: detected capacity change from 0 to 32768
[  870.344090][T26884] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.353438][T26884] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.384763][T26884] bridge_slave_0: entered allmulticast mode
[  870.425288][T26884] bridge_slave_0: entered promiscuous mode
[  870.465097][T26884] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.492786][T26884] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.500133][T26884] bridge_slave_1: entered allmulticast mode
[  870.533613][T27119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  870.552706][T26884] bridge_slave_1: entered promiscuous mode
[  870.884803][T27130] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9092'.
[  870.931922][T27130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9092'.
[  870.973915][T27130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9092'.
[  870.997421][   T52] Bluetooth: hci6: command tx timeout
[  871.052088][T26884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  871.139688][T26884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  871.448305][T27149] loop3: detected capacity change from 0 to 256
[  871.531998][T27149] FAT-fs (loop3): Directory bread(block 64) failed
[  871.564897][T27149] FAT-fs (loop3): Directory bread(block 65) failed
[  871.593879][T27149] FAT-fs (loop3): Directory bread(block 66) failed
[  871.595004][T27156] delete_channel: no stack
[  871.623723][T27149] FAT-fs (loop3): Directory bread(block 67) failed
[  871.649121][T27149] FAT-fs (loop3): Directory bread(block 68) failed
[  871.660757][T27151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9102'.
[  871.694046][T27149] FAT-fs (loop3): Directory bread(block 69) failed
[  871.714025][T27151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9102'.
[  871.717157][T27149] FAT-fs (loop3): Directory bread(block 70) failed
[  871.746284][T27149] FAT-fs (loop3): Directory bread(block 71) failed
[  871.770910][T27149] FAT-fs (loop3): Directory bread(block 72) failed
[  871.775540][T27151] netlink: 'syz.1.9102': attribute type 5 has an invalid length.
[  871.794257][T27149] FAT-fs (loop3): Directory bread(block 73) failed
[  871.838523][T26884] team0: Port device team_slave_0 added
[  871.891669][T26884] team0: Port device team_slave_1 added
[  871.945983][T27164] loop8: detected capacity change from 0 to 2048
[  871.948694][T27149] FAT-fs (loop3): Filesystem has been set read-only
[  871.966575][   T31] kauditd_printk_skb: 1 callbacks suppressed
[  871.966593][   T31] audit: type=1800 audit(832.807:169): pid=27149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9101" name="cgroup.controllers" dev="loop3" ino=1048763 res=0 errno=0
[  872.004950][T27164] NILFS (loop8): invalid segment: Inconsistency found
[  872.080760][T27164] NILFS (loop8): trying rollback from an earlier position
[  872.131080][T27170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9109'.
[  872.146156][T27167] loop5: detected capacity change from 0 to 4096
[  872.166318][T27164] NILFS (loop8): recovery complete
[  872.183603][T26884] batman_adv: batadv0: Adding interface: batadv_slave_0
[  872.196122][T27167] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  872.214056][T26884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.228211][T27174] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  872.253108][T26884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  872.397113][T26884] batman_adv: batadv0: Adding interface: batadv_slave_1
[  872.404078][T26884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.562977][T26884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  872.725592][T27189] loop8: detected capacity change from 0 to 1024
[  872.773355][T27189] hfsplus: found bad thread record in catalog
[  873.011758][   T73] hfsplus: b-tree write err: -5, ino 4
[  873.201190][T26884] hsr_slave_0: entered promiscuous mode
[  873.252069][T26884] hsr_slave_1: entered promiscuous mode
[  873.272332][T26884] debugfs: 'hsr0' already exists in 'hsr'
[  873.278104][T26884] Cannot create hsr debugfs directory
[  874.302537][T26884] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  874.418883][T26884] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  874.453942][T26884] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  874.470408][T27244] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9137'.
[  874.573963][T27212] loop1: detected capacity change from 0 to 32768
[  874.710709][T27248] bridge1: entered promiscuous mode
[  874.744035][T27248] bridge1: entered allmulticast mode
[  874.798787][T26884] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  875.026781][T27267] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.9144'.
[  875.566761][T26884] 8021q: adding VLAN 0 to HW filter on device bond0
[  875.693643][T26884] 8021q: adding VLAN 0 to HW filter on device team0
[  875.789380][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.796628][ T6224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.865912][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.873129][ T6224] bridge0: port 2(bridge_slave_1) entered forwarding state
[  875.966273][ T5977] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  876.056215][T26884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  876.088147][T27304] loop2: detected capacity change from 0 to 2048
[  876.149194][T27304] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  876.162729][ T5991] usb 6-1: new full-speed USB device number 108 using dummy_hcd
[  876.183576][ T5977] usb 4-1: unable to get BOS descriptor or descriptor too short
[  876.205499][ T5977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  876.227196][ T5977] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  876.268484][ T6139] udevd[6139]: incorrect nilfs2 checksum on /dev/loop2
[  876.281308][T27312] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  876.293177][ T5977] usb 4-1: config 1 interface 0 has no altsetting 1
[  876.328122][ T5977] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  876.363946][ T5991] usb 6-1: config index 0 descriptor too short (expected 35562, got 27)
[  876.386649][ T5977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.405125][ T5991] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  876.414821][ T5991] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  876.432920][ T5977] usb 4-1: Product: syz
[  876.442763][ T5977] usb 4-1: Manufacturer: syz
[  876.457833][ T5991] usb 6-1: config 1 has no interface number 0
[  876.479348][ T5977] usb 4-1: SerialNumber: syz
[  876.509617][ T5991] usb 6-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF
[  876.523792][ T5977] smsusb:smsusb_probe: board id=8, interface number 0
[  876.564863][ T5991] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  876.604528][ T5991] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  876.673168][ T5991] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  876.700533][ T5991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.749559][ T5977] smsusb:smsusb_probe: Device initialized with return code -19
[  876.767561][ T5991] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  876.934024][T26884] 8021q: adding VLAN 0 to HW filter on device batadv0
[  876.962275][T27331] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9168'.
[  876.983094][ T5991] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values
[  876.984309][ T5859] usb 4-1: USB disconnect, device number 113
[  876.991688][ T5991] snd_usb_pod 6-1:1.1: invalid control EP
[  877.008599][ T5991] snd_usb_pod 6-1:1.1: cannot start listening: -22
[  877.025008][ T5991] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  877.062637][ T5991] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22
[  877.227017][ T5991] usb 6-1: USB disconnect, device number 108
[  877.341550][T27345] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  877.876938][T26884] veth0_vlan: entered promiscuous mode
[  877.937153][T26884] veth1_vlan: entered promiscuous mode
[  878.063943][   T31] audit: type=1326 audit(838.513:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27369 comm="syz.8.9182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b98f749 code=0x7ffc0000
[  878.078635][T26884] veth0_macvtap: entered promiscuous mode
[  878.161967][T26884] veth1_macvtap: entered promiscuous mode
[  878.175714][   T31] audit: type=1326 audit(838.532:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27369 comm="syz.8.9182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b98f749 code=0x7ffc0000
[  878.265607][T26884] batman_adv: batadv0: Interface activated: batadv_slave_0
[  878.308032][   T31] audit: type=1326 audit(838.541:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27369 comm="syz.8.9182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f6a8b98f749 code=0x7ffc0000
[  878.316242][T26884] batman_adv: batadv0: Interface activated: batadv_slave_1
[  878.396968][   T31] audit: type=1326 audit(838.541:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27369 comm="syz.8.9182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b98f749 code=0x7ffc0000
[  878.420177][ T8259] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  878.468607][ T8259] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  878.477465][   T31] audit: type=1326 audit(838.541:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27369 comm="syz.8.9182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b98f749 code=0x7ffc0000
[  878.535209][ T8259] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  878.600582][ T8259] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  878.674850][   T31] audit: type=1326 audit(839.084:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27382 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba158f749 code=0x7ffc0000
[  878.771780][   T31] audit: type=1326 audit(839.084:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27382 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba158f749 code=0x7ffc0000
[  878.850487][   T31] audit: type=1326 audit(839.084:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27382 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f5ba158f749 code=0x7ffc0000
[  878.919186][   T31] audit: type=1326 audit(839.084:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27382 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba158f749 code=0x7ffc0000
[  878.944012][   T31] audit: type=1326 audit(839.084:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27382 comm="syz.3.9188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ba158f749 code=0x7ffc0000
[  879.214364][ T7907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.248894][ T7907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.375097][T27403] loop8: detected capacity change from 0 to 764
[  879.389434][ T7907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.413824][ T7907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.604020][T27374] loop5: detected capacity change from 0 to 32768
[  879.637284][T27374] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9184 (27374)
[  879.744165][T27374] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  879.787684][T27413] SET target dimension over the limit!
[  879.796443][T27374] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  879.840162][T27417] netlink: 'syz.9.8988': attribute type 1 has an invalid length.
[  879.893022][T27409] loop1: detected capacity change from 0 to 4096
[  879.901318][T27409] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  879.989956][T27409] ntfs3(loop1): ino=19, mi_enum_attr
[  880.037765][T27409] ntfs3(loop1): failed to convert "c46c" to iso8859-2
[  880.038200][T27409] ntfs3(loop1): ino=20, mi_enum_attr
[  880.187215][T27374] BTRFS info (device loop5): enabling ssd optimizations
[  880.212988][T27432] loop8: detected capacity change from 0 to 2048
[  880.228323][T27374] BTRFS info (device loop5): turning on async discard
[  880.245065][T27374] BTRFS info (device loop5): enabling free space tree
[  880.529810][ T5896] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  880.587224][  T788] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  880.789968][  T788] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.817314][  T788] usb 2-1: config 0 interface 0 has no altsetting 0
[  880.837038][  T788] usb 2-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00
[  880.837072][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  880.872294][  T788] usb 2-1: config 0 descriptor??
[  881.115060][T27441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  881.167071][T27441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  881.205034][  T788] usbhid 2-1:0.0: can't add hid device: -71
[  881.252359][  T788] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  881.279723][  T788] usb 2-1: USB disconnect, device number 2
[  881.512140][T27438] loop9: detected capacity change from 0 to 32768
[  881.874893][T27474] loop2: detected capacity change from 0 to 4096
[  881.938501][T27474] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  881.998369][T27479] loop8: detected capacity change from 0 to 4096
[  882.006240][T27483] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9230'.
[  882.021827][T27484] openvswitch: netlink: Unknown key attributes 2
[  882.037342][T27479] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  882.091933][T27474] ntfs3(loop2): ino=19, mi_enum_attr
[  882.108186][T27474] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  882.188224][T27479] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  882.238472][T27474] ntfs3(loop2): failed to convert "c46c" to iso8859-5
[  882.348926][T27474] ntfs3(loop2): ino=20, mi_enum_attr
[  882.503780][T27493] loop9: detected capacity change from 0 to 128
[  882.551488][T27490] loop3: detected capacity change from 0 to 4096
[  882.672088][T27499] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  883.376746][T27528] kAFS: unable to lookup cell '\/'
[  883.561451][T27534] loop9: detected capacity change from 0 to 8
[  884.530158][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9270'.
[  884.572246][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9270'.
[  884.583962][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9270'.
[  885.176050][T27597] loop9: detected capacity change from 0 to 2048
[  885.259006][T27545] loop8: detected capacity change from 0 to 40427
[  885.278589][T27601] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  885.288755][T27597] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1
[  885.296103][T27545] F2FS-fs (loop8): Fix alignment : internally, start(4096) end(16896) block(12288)
[  885.356881][T27545] F2FS-fs (loop8): invalid crc value
[  885.363135][T27597] Remounting filesystem read-only
[  885.700959][T27545] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  885.750136][T27545] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  885.807654][T27622] loop9: detected capacity change from 0 to 128
[  885.841868][T27545] F2FS-fs (loop8): Try to recover all the superblocks, ret: 0
[  885.934125][T27622] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  886.000032][T27632] loop5: detected capacity change from 0 to 8
[  886.021470][T27632] cramfs: Error -3 while decompressing!
[  886.036883][T27632] cramfs: ffffffff999ce2e8(26)->ffff88804a0ae000(4096)
[  886.049139][T27632] cramfs: Error -3 while decompressing!
[  886.060570][T27632] cramfs: ffffffff999ce302(26)->ffff888073cba000(4096)
[  886.071005][T27632] cramfs: Error -3 while decompressing!
[  886.076648][T27632] cramfs: ffffffff999ce31c(16)->ffff88804b968000(4096)
[  886.103990][T26884] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  886.109631][ T5889] udevd[5889]: incorrect cramfs checksum on /dev/loop5
[  886.157363][T27632] cramfs: Error -3 while decompressing!
[  886.198188][T27632] cramfs: ffffffff999ce2e8(26)->ffff88804a0ae000(4096)
[  886.238872][   T31] kauditd_printk_skb: 21 callbacks suppressed
[  886.238891][   T31] audit: type=1800 audit(846.155:201): pid=27632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9296" name="file2" dev="loop5" ino=348 res=0 errno=0
[  886.432992][T27640] batadv0: entered promiscuous mode
[  886.654346][T27650] netlink: 'syz.2.9306': attribute type 10 has an invalid length.
[  886.692842][T27652] loop1: detected capacity change from 0 to 1024
[  886.824238][T27654] loop5: detected capacity change from 0 to 128
[  886.897282][ T5890] hfsplus: walked past end of dir
[  887.485857][T27673] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  887.774741][ T6288] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.870884][T27645] loop3: detected capacity change from 0 to 32768
[  887.925719][T27645] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9304 (27645)
[  887.957507][ T6288] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.969005][T27645] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  887.993376][T27645] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  888.173547][T27645] BTRFS info (device loop3): enabling ssd optimizations
[  888.249845][T27645] BTRFS info (device loop3): turning on async discard
[  888.251922][ T6288] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.284575][T27645] BTRFS info (device loop3): enabling free space tree
[  888.363069][ T5897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  888.394570][ T5897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  888.405051][ T5897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  888.413014][ T5897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  888.420661][ T5897] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  888.500984][ T5893] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  888.807666][ T6288] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.868819][T27724] netlink: 'syz.3.9332': attribute type 17 has an invalid length.
[  888.903787][T27724] netlink: 148 bytes leftover after parsing attributes in process `syz.3.9332'.
[  889.668291][T27753] loop3: detected capacity change from 0 to 128
[  889.768954][ T6288] bridge_slave_1: left allmulticast mode
[  889.780050][ T6288] bridge_slave_1: left promiscuous mode
[  889.800063][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state
[  889.886418][ T6288] bridge_slave_0: left allmulticast mode
[  889.892090][ T6288] bridge_slave_0: left promiscuous mode
[  889.929848][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state
[  890.186656][T27762] loop9: detected capacity change from 0 to 4096
[  890.203677][T27769] loop3: detected capacity change from 0 to 2048
[  890.270077][T27762] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  890.281946][   T31] audit: type=1326 audit(849.944:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27771 comm="syz.8.9353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b98f749 code=0x7ffc0000
[  890.334173][   T31] audit: type=1326 audit(849.972:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27771 comm="syz.8.9353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f6a8b98f749 code=0x7ffc0000
[  890.357002][   T31] audit: type=1326 audit(849.972:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27771 comm="syz.8.9353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b98f749 code=0x7ffc0000
[  890.379223][T27776] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  890.552693][   T31] audit: type=1326 audit(849.972:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27771 comm="syz.8.9353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a8b98f749 code=0x7ffc0000
[  890.677207][   T52] Bluetooth: hci1: command tx timeout
[  890.684788][   T31] audit: type=1800 audit(850.121:206): pid=27769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9352" name="bus" dev="loop3" ino=2097152 res=0 errno=0
[  890.767559][T26884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  891.539274][T27806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9366'.
[  891.550683][ T6288] dvmrp0 (unregistering): left allmulticast mode
[  891.559558][T27806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9366'.
[  891.662490][T27780] loop5: detected capacity change from 0 to 32768
[  891.679026][T27780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9355 (27780)
[  891.743507][T27780] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  891.787394][T27780] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  891.973695][T27780] BTRFS info (device loop5): enabling ssd optimizations
[  892.002162][T27780] BTRFS info (device loop5): turning on async discard
[  892.032630][T27780] BTRFS info (device loop5): enabling free space tree
[  892.105724][T27780] BTRFS error: failed to open device for path ¶ÆBKÔ/Æ't-=4\9˜ªŒéìFŽ’å„�MÛ§sç%.bÅ9*c¾DqßþçuæRÐøö1{³òsV9ÿlmŸõ|´Ê²â'ÝÍ\Âd*UU´5®áoSØö> with flags 0x1: -2
[  892.219741][ T5896] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  892.567975][ T6288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  892.582071][ T6288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  892.582285][T27846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9379'.
[  892.608146][ T6288] bond0 (unregistering): Released all slaves
[  892.652537][ T6288] bond1 (unregistering): Released all slaves
[  892.745526][T20990] infiniband syb2: ib_query_port failed (-19)
[  892.840013][ T6288] : left promiscuous mode
[  892.909526][   T52] Bluetooth: hci1: command tx timeout
[  892.959113][T27854] loop8: detected capacity change from 0 to 256
[  893.030857][T27854] FAT-fs (loop8): Directory bread(block 64) failed
[  893.052161][T27854] FAT-fs (loop8): Directory bread(block 65) failed
[  893.069736][T27854] FAT-fs (loop8): Directory bread(block 66) failed
[  893.106122][T27856] loop2: detected capacity change from 0 to 512
[  893.130185][T27854] FAT-fs (loop8): Directory bread(block 67) failed
[  893.131100][T27705] chnl_net:caif_netlink_parms(): no params data found
[  893.162084][T27854] FAT-fs (loop8): Directory bread(block 68) failed
[  893.195716][T27856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  893.220852][T27854] FAT-fs (loop8): Directory bread(block 69) failed
[  893.232544][T27854] FAT-fs (loop8): Directory bread(block 70) failed
[  893.283342][T27854] FAT-fs (loop8): Directory bread(block 71) failed
[  893.286635][T27856] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.9382: corrupted xattr block 33: e_value out of bounds
[  893.290895][T27854] FAT-fs (loop8): Directory bread(block 72) failed
[  893.310453][T27854] FAT-fs (loop8): Directory bread(block 73) failed
[  893.317987][ T6288] IPVS: stopping backup sync thread 27345 ...
[  893.456459][T27854] syz.8.9381: attempt to access beyond end of device
[  893.456459][T27854] loop8: rw=8388608, sector=1192, nr_sectors = 4 limit=256
[  893.572270][ T5894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  894.019018][T27889] overlayfs: missing 'lowerdir'
[  894.285444][T27705] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.329733][T27705] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.379216][T27705] bridge_slave_0: entered allmulticast mode
[  894.408037][T27902] openvswitch: netlink: Tunnel attr 193 out of range max 16
[  894.419894][T27705] bridge_slave_0: entered promiscuous mode
[  894.547252][T27705] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.574673][T27705] bridge0: port 2(bridge_slave_1) entered disabled state
[  894.612858][T27705] bridge_slave_1: entered allmulticast mode
[  894.637692][T27705] bridge_slave_1: entered promiscuous mode
[  894.770593][T27866] loop9: detected capacity change from 0 to 32768
[  894.845904][T20990] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[  894.922274][T27866] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  894.985486][T27929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9405'.
[  895.007670][T27930] netlink: 'syz.2.9407': attribute type 30 has an invalid length.
[  895.034403][T20990] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  895.068894][T20990] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  895.115315][   T52] Bluetooth: hci1: command tx timeout
[  895.134244][T27705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  895.172348][T27866] XFS (loop9): Ending clean mount
[  895.188775][T20990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  895.263219][T20990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  895.272977][T20990] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  895.298720][T27705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  895.364488][T20990] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  895.381092][T20990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  895.393304][T20990] usb 9-1: Product: syz
[  895.398544][T20990] usb 9-1: Manufacturer: syz
[  895.403526][T20990] usb 9-1: SerialNumber: syz
[  895.422968][T20990] usb 9-1: config 0 descriptor??
[  895.530489][T26884] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  895.559684][T27941] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  895.566192][T27941] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  895.618152][T27941] vhci_hcd vhci_hcd.0: Device attached
[  895.630059][T27942] vhci_hcd: connection closed
[  895.630433][ T6099] vhci_hcd vhci_hcd.3: stop threads
[  895.653114][ T6099] vhci_hcd vhci_hcd.3: release socket
[  895.682449][ T6099] vhci_hcd vhci_hcd.3: disconnect device
[  895.682638][T20990] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  895.705935][T20990] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  895.740494][T27947] loop5: detected capacity change from 0 to 2048
[  895.793501][T27705] team0: Port device team_slave_0 added
[  895.835782][T27950] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  895.896129][T27705] team0: Port device team_slave_1 added
[  895.903205][T20990] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -71
[  895.955392][T20990] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  895.990586][T20990] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5
[  896.049056][T20990] usb 9-1: USB disconnect, device number 5
[  896.077150][T27950] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  896.128510][T27950] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  896.205878][T27950] Remounting filesystem read-only
[  896.219214][ T5896] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  896.408991][T27705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  896.455927][T27705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  896.554590][T27705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  896.739625][ T6288] hsr_slave_0: left promiscuous mode
[  896.790915][ T6288] hsr_slave_1: left promiscuous mode
[  896.803026][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  896.810425][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_0
[  896.903034][ T6288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  896.935583][ T6288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  896.970229][T27985] loop5: detected capacity change from 0 to 16
[  897.014498][T27985] erofs (device loop5): mounted with root inode @ nid 36.
[  897.041056][ T6288] veth1_macvtap: left allmulticast mode
[  897.046827][ T6288] veth1_macvtap: left promiscuous mode
[  897.054269][T27985] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  897.059407][ T6288] veth0_macvtap: left allmulticast mode
[  897.074837][T27983] loop2: detected capacity change from 0 to 1024
[  897.081798][ T6288] veth0_macvtap: left promiscuous mode
[  897.095134][ T6288] veth1_vlan: left promiscuous mode
[  897.095981][T27985] erofs (device loop5): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851
[  897.109283][ T6288] veth0_vlan: left promiscuous mode
[  897.125375][T27983] EXT4-fs: Ignoring removed nomblk_io_submit option
[  897.149263][T27985] erofs (device loop5): read error -117 @ 43 of nid 36
[  897.174978][T27983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  897.338392][ T5897] Bluetooth: hci1: command tx timeout
[  897.351137][T27997] loop8: detected capacity change from 0 to 128
[  897.393143][ T5894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  897.575495][T28001] loop2: detected capacity change from 0 to 512
[  897.612698][T28003] netlink: 'syz.8.9433': attribute type 21 has an invalid length.
[  897.661073][T28001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  897.753991][ T5894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  898.116995][T28013] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  898.126139][T28013] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  898.135952][T28013] overlayfs: missing 'lowerdir'
[  898.297145][ T6288] team0 (unregistering): Port device team_slave_1 removed
[  898.335314][ T6288] team0 (unregistering): Port device team_slave_0 removed
[  898.745629][T27705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  898.757222][T27705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  898.796556][T27705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  898.820251][T28003] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9433'.
[  899.038020][T28023] netlink: 'syz.3.9441': attribute type 30 has an invalid length.
[  899.343826][T28037] tmpfs: Bad value for 'mpol'
[  899.353037][T27705] hsr_slave_0: entered promiscuous mode
[  899.405962][T27705] hsr_slave_1: entered promiscuous mode
[  899.440268][T27705] debugfs: 'hsr0' already exists in 'hsr'
[  899.471889][T27705] Cannot create hsr debugfs directory
[  899.989072][T28060] overlayfs: failed to resolve './file2': -2
[  900.178140][T28070] loop8: detected capacity change from 0 to 512
[  900.243789][T28068] loop3: detected capacity change from 0 to 1024
[  900.265161][T28070] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  900.284383][T28071] loop5: detected capacity change from 0 to 1764
[  900.319046][T28068] hfsplus: unable to find HFS+ superblock
[  900.338310][T28070] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  900.370853][T28070] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002]
[  900.414483][T28070] EXT4-fs (loop8): orphan cleanup on readonly fs
[  900.439955][T28070] EXT4-fs error (device loop8): ext4_quota_enable:7173: comm syz.8.9461: Bad quota inum: 4294967291, type: 0
[  900.509279][T28070] EXT4-fs (loop8): Remounting filesystem read-only
[  900.548239][T28070] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[  900.632214][T28084] xt_CT: You must specify a L4 protocol and not use inversions on it
[  900.653030][T28070] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  900.693348][T28070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  900.997895][T24975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  901.476633][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9480'.
[  901.742458][  T788] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  901.766615][T28122] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  901.811585][T28122] overlayfs: conflicting options: userxattr,metacopy=on
[  901.975721][  T788] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  902.005754][  T788] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.042845][  T788] usb 9-1: Product: syz
[  902.047034][  T788] usb 9-1: Manufacturer: syz
[  902.084130][  T788] usb 9-1: SerialNumber: syz
[  902.102933][  T788] usb 9-1: config 0 descriptor??
[  902.184896][T27705] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  902.260043][T27705] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  902.301935][T27705] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  902.354339][  T788] hso 9-1:0.0: Failed to find BULK IN ep
[  902.374991][  T788] usb-storage 9-1:0.0: USB Mass Storage device detected
[  902.405843][T27705] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  902.418013][   T31] audit: type=1326 audit(861.290:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.5.9493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fabb8f749 code=0x7ffc0000
[  902.561609][   T31] audit: type=1326 audit(861.309:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.5.9493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f7fabb8f749 code=0x7ffc0000
[  902.610230][  T788] usb 9-1: USB disconnect, device number 6
[  902.702809][   T31] audit: type=1326 audit(861.309:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.5.9493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fabb8f749 code=0x7ffc0000
[  902.789236][   T31] audit: type=1326 audit(861.309:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28144 comm="syz.5.9493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fabb8f749 code=0x7ffc0000
[  902.991824][T27705] 8021q: adding VLAN 0 to HW filter on device bond0
[  903.074505][T27705] 8021q: adding VLAN 0 to HW filter on device team0
[  903.115100][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.122276][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  903.242594][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state
[  903.249797][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  903.487461][T28137] loop9: detected capacity change from 0 to 40427
[  903.522816][T28137] F2FS-fs (loop9): build fault injection rate: 174
[  903.564471][T28137] F2FS-fs (loop9): build fault injection type: 0x3bfe8c
[  903.598744][T28137] F2FS-fs (loop9): invalid crc value
[  903.796467][T28163] Bluetooth: hci0: Opcode 0x080f failed: -4
[  903.923181][  T788] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  903.942409][T28137] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  903.986430][T28137] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  904.125506][  T788] usb 6-1: Using ep0 maxpacket: 32
[  904.135653][T27705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  904.154951][  T788] usb 6-1: config 0 has an invalid interface number: 243 but max is 0
[  904.180263][  T788] usb 6-1: config 0 has no interface number 0
[  904.208349][  T788] usb 6-1: config 0 interface 243 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  904.234878][T28206] x_tables: ip_tables: osf match: only valid for protocol 6
[  904.246545][T26884] syz-executor: attempt to access beyond end of device
[  904.246545][T26884] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  904.275341][  T788] usb 6-1: config 0 interface 243 has no altsetting 0
[  904.285236][  T788] usb 6-1: New USB device found, idVendor=0846, idProduct=9030, bcdDevice=1c.5e
[  904.316298][T26884] CPU: 0 UID: 0 PID: 26884 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  904.316335][T26884] Tainted: [L]=SOFTLOCKUP
[  904.316351][T26884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  904.316367][T26884] Call Trace:
[  904.316377][T26884]  <TASK>
[  904.316390][T26884]  dump_stack_lvl+0x189/0x250
[  904.316433][T26884]  ? __pfx_dump_stack_lvl+0x10/0x10
[  904.316466][T26884]  ? __pfx_queue_work_on+0x10/0x10
[  904.316495][T26884]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  904.316534][T26884]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  904.316589][T26884]  f2fs_handle_critical_error+0x37c/0x540
[  904.316631][T26884]  f2fs_write_end_io+0x886/0xb60
[  904.316700][T26884]  __submit_merged_bio+0x256/0x660
[  904.316739][T26884]  __submit_merged_write_cond+0x269/0x530
[  904.316781][T26884]  f2fs_write_data_pages+0x2756/0x3290
[  904.316813][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.316843][T26884]  ? __lock_acquire+0x6b6/0x2cf0
[  904.316918][T26884]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  904.317016][T26884]  ? __mod_zone_page_state+0xd7/0x140
[  904.317070][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.317100][T26884]  ? folios_put_refs+0x58b/0x670
[  904.317148][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.317177][T26884]  ? __lock_acquire+0x6b6/0x2cf0
[  904.317217][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.317246][T26884]  ? __lock_acquire+0x6b6/0x2cf0
[  904.317282][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.317324][T26884]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  904.317362][T26884]  do_writepages+0x32e/0x550
[  904.317405][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.317440][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.317468][T26884]  ? do_raw_spin_unlock+0x122/0x240
[  904.317513][T26884]  filemap_fdatawrite+0x199/0x240
[  904.317552][T26884]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  904.317649][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.317693][T26884]  ? do_raw_spin_unlock+0x122/0x240
[  904.317738][T26884]  f2fs_sync_dirty_inodes+0x30f/0x810
[  904.317798][T26884]  f2fs_write_checkpoint+0x935/0x2430
[  904.317834][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.317863][T26884]  ? trace_pelt_se_tp+0x39/0x120
[  904.317940][T26884]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  904.318059][T26884]  kill_f2fs_super+0x2d2/0x6c0
[  904.318095][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.318133][T26884]  ? __pfx_kill_f2fs_super+0x10/0x10
[  904.318196][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.318226][T26884]  ? shrinker_free+0x2ce/0x3e0
[  904.318262][T26884]  deactivate_locked_super+0xbc/0x130
[  904.318305][T26884]  cleanup_mnt+0x425/0x4c0
[  904.318344][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.318373][T26884]  ? lockdep_hardirqs_on+0x98/0x140
[  904.318418][T26884]  task_work_run+0x1d4/0x260
[  904.318462][T26884]  ? __pfx_task_work_run+0x10/0x10
[  904.318508][T26884]  ? exit_to_user_mode_loop+0x55/0x4f0
[  904.318543][T26884]  exit_to_user_mode_loop+0xff/0x4f0
[  904.318569][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.318599][T26884]  ? rcu_is_watching+0x15/0xb0
[  904.318639][T26884]  do_syscall_64+0x2e3/0xf80
[  904.318687][T26884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.318712][T26884]  ? srso_alias_return_thunk+0x5/0xfbef5
[  904.318742][T26884]  ? exc_page_fault+0xab/0x100
[  904.318785][T26884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.318811][T26884] RIP: 0033:0x7f6bf0190a77
[  904.318834][T26884] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  904.318856][T26884] RSP: 002b:00007ffcdd168718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  904.318883][T26884] RAX: 0000000000000000 RBX: 00007f6bf0213d7d RCX: 00007f6bf0190a77
[  904.318901][T26884] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdd1687d0
[  904.318918][T26884] RBP: 00007ffcdd1687d0 R08: 0000000000000000 R09: 0000000000000000
[  904.318935][T26884] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcdd169860
[  904.318953][T26884] R13: 00007f6bf0213d7d R14: 00000000000d2ad0 R15: 00007ffcdd1698a0
[  904.319001][T26884]  </TASK>
[  904.749359][  T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.757558][  T788] usb 6-1: Product: syz
[  904.761719][  T788] usb 6-1: Manufacturer: syz
[  904.766317][  T788] usb 6-1: SerialNumber: syz
[  904.773919][  T788] usb 6-1: config 0 descriptor??
[  904.795054][  T788] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  904.873680][T26884] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  905.072855][ T7118] usb 6-1: USB disconnect, device number 109
[  905.131718][T28188] loop3: detected capacity change from 0 to 32768
[  905.260653][T28188] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  905.371419][T28188] XFS (loop3): Ending clean mount
[  905.419961][T28188] XFS (loop3): Quotacheck needed: Please wait.
[  905.552562][T27705] veth0_vlan: entered promiscuous mode
[  905.573718][T28188] XFS (loop3): Quotacheck: Done.
[  905.774657][T27705] veth1_vlan: entered promiscuous mode
[  905.838938][ T5893] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  906.001042][ T6671] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.482639][T28248] loop9: detected capacity change from 0 to 4096
[  906.497476][ T6671] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.608942][   T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  906.621141][   T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  906.629444][   T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  906.637488][   T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  906.646822][   T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  906.785350][T28256] loop3: detected capacity change from 0 to 16
[  906.807595][T28256] erofs (device loop3): mounted with root inode @ nid 36.
[  907.020091][ T6671] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.072785][T28239] loop2: detected capacity change from 0 to 32768
[  907.131328][T27705] veth0_macvtap: entered promiscuous mode
[  907.153179][T28239] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  907.153179][T28239] 
[  907.176479][T27705] veth1_macvtap: entered promiscuous mode
[  907.191911][T28239] ialloc: diAlloc returned -5!
[  907.311440][T28265] loop3: detected capacity change from 0 to 4096
[  907.318846][   T31] audit: type=1326 audit(865.873:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.9.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf018f749 code=0x7ffc0000
[  907.368029][ T6671] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.415324][T28265] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  907.440670][   T31] audit: type=1326 audit(865.873:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.9.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf018f749 code=0x7ffc0000
[  907.515199][T28265] ntfs3(loop3): Failed to load $Extend (-22).
[  907.521294][T28265] ntfs3(loop3): Failed to initialize $Extend.
[  907.567934][   T31] audit: type=1326 audit(865.873:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.9.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf018f749 code=0x7ffc0000
[  907.686646][   T31] audit: type=1326 audit(865.873:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.9.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf018f749 code=0x7ffc0000
[  907.713251][   T31] audit: type=1326 audit(865.901:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.9.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f6bf018f749 code=0x7ffc0000
[  907.783020][   T31] audit: type=1326 audit(865.901:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.9.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf018f749 code=0x7ffc0000
[  907.813105][T27705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  907.883156][   T31] audit: type=1326 audit(865.901:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.9.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf018f749 code=0x7ffc0000
[  907.909519][T27705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  908.033505][   T31] audit: type=1326 audit(865.901:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.9.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf018f749 code=0x7ffc0000
[  908.136082][   T31] audit: type=1326 audit(865.901:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.9.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6bf018f749 code=0x7ffc0000
[  908.249662][ T8259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  908.285261][   T31] audit: type=1326 audit(865.901:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28270 comm="syz.9.9528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6bf018f749 code=0x7ffc0000
[  908.396997][ T8259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  908.422064][ T8259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  908.504258][ T6288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  908.736738][ T6671] bridge_slave_1: left allmulticast mode
[  908.765784][ T6671] bridge_slave_1: left promiscuous mode
[  908.771556][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state
[  908.852377][ T6671] bridge_slave_0: left allmulticast mode
[  908.883129][ T6671] bridge_slave_0: left promiscuous mode
[  908.888893][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.889358][ T5897] Bluetooth: hci5: command tx timeout
[  908.999223][T28314] netlink: 548 bytes leftover after parsing attributes in process `syz.2.9546'.
[  909.067359][T28317] netlink: 256 bytes leftover after parsing attributes in process `syz.9.9547'.
[  909.087203][T28317] unsupported nlmsg_type 40
[  909.115962][T28319] usb usb8: usbfs: process 28319 (syz.2.9549) did not claim interface 0 before use
[  909.136668][T28319] usb usb8: selecting invalid altsetting 2047
[  909.745664][ T6671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  909.758133][ T6671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  909.771790][ T6671] bond0 (unregistering): Released all slaves
[  909.866924][ T6671] bond1 (unregistering): Released all slaves
[  910.183609][T28340] netlink: 'syz.3.9558': attribute type 1 has an invalid length.
[  910.569877][T28251] chnl_net:caif_netlink_parms(): no params data found
[  910.686171][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  910.729920][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  910.866410][T28367] loop2: detected capacity change from 0 to 16
[  911.112336][ T5897] Bluetooth: hci5: command tx timeout
[  911.177162][T28363] netlink: 'syz.9.9569': attribute type 3 has an invalid length.
[  911.186422][T28363] netlink: 'syz.9.9569': attribute type 1 has an invalid length.
[  911.195141][T28363] netlink: 228 bytes leftover after parsing attributes in process `syz.9.9569'.
[  911.372842][ T6671] hsr_slave_0: left promiscuous mode
[  911.438033][ T6671] hsr_slave_1: left promiscuous mode
[  911.451148][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  911.459061][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  911.510933][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  911.540294][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  911.595164][ T6671] veth1_macvtap: left promiscuous mode
[  911.622787][ T6671] veth0_macvtap: left promiscuous mode
[  911.628438][ T6671] veth1_vlan: left promiscuous mode
[  911.655207][ T6671] veth0_vlan: left promiscuous mode
[  911.932723][T28384] loop3: detected capacity change from 0 to 32768
[  911.958531][T28384] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.9577 (28384)
[  911.999865][T28384] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  912.025095][T28384] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  912.175842][T28384] BTRFS info (device loop3): enabling ssd optimizations
[  912.183136][T28384] BTRFS info (device loop3): turning on async discard
[  912.190188][T28384] BTRFS info (device loop3): enabling free space tree
[  912.251559][ T5893] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  912.421287][T28419] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9587'.
[  912.692870][T28421] loop3: detected capacity change from 0 to 4096
[  912.712187][T28421] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  912.787480][ T6671] team0 (unregistering): Port device team_slave_1 removed
[  912.857867][ T6671] team0 (unregistering): Port device team_slave_0 removed
[  913.329932][ T5897] Bluetooth: hci5: command tx timeout
[  913.475831][T27993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  913.486921][T28251] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.518451][T27993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  913.525875][   T31] audit: type=1326 audit(871.673:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28428 comm="syz.2.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  913.556769][T28251] bridge0: port 1(bridge_slave_0) entered disabled state
[  913.564033][T28251] bridge_slave_0: entered allmulticast mode
[  913.620295][   T31] audit: type=1326 audit(871.673:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28428 comm="syz.2.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  913.626047][T28251] bridge_slave_0: entered promiscuous mode
[  913.714278][   T31] audit: type=1326 audit(871.682:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28428 comm="syz.2.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  913.739085][T28251] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.764811][T28251] bridge0: port 2(bridge_slave_1) entered disabled state
[  913.811247][   T31] audit: type=1326 audit(871.682:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28428 comm="syz.2.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  913.821840][T28251] bridge_slave_1: entered allmulticast mode
[  913.864701][   T31] audit: type=1326 audit(871.682:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28428 comm="syz.2.9592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  913.899703][T28251] bridge_slave_1: entered promiscuous mode
[  914.331802][T28446] bond4: option arp_all_targets: invalid value (16777216)
[  914.405245][T28446] bond4 (unregistering): Released all slaves
[  914.573802][T28251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  914.589228][T28461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9323'.
[  914.633039][T28431] loop9: detected capacity change from 0 to 32768
[  914.656508][T28251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  914.768968][T28431] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  914.908338][T28431] XFS (loop9): Ending clean mount
[  914.962470][T28431] XFS (loop9): Quotacheck needed: Please wait.
[  915.029871][T28481] netlink: 'syz.5.9605': attribute type 1 has an invalid length.
[  915.057540][T28431] XFS (loop9): Quotacheck: Done.
[  915.148237][T28251] team0: Port device team_slave_0 added
[  915.156982][T28251] team0: Port device team_slave_1 added
[  915.223656][T26884] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  915.400922][T28492] loop3: detected capacity change from 0 to 512
[  915.453242][T28492] EXT4-fs: Ignoring removed orlov option
[  915.459256][T28251] batman_adv: batadv0: Adding interface: batadv_slave_0
[  915.466196][T28251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  915.538246][T28495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9613'.
[  915.553915][ T5897] Bluetooth: hci5: command tx timeout
[  915.565992][T28492] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  915.616947][T28251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  915.671493][T28495] [†’Ì: entered promiscuous mode
[  915.684393][T28492] EXT4-fs (loop3): 1 truncate cleaned up
[  915.691859][T28492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  915.726496][T28251] batman_adv: batadv0: Adding interface: batadv_slave_1
[  915.733458][T28251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  915.789851][T28251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  915.876264][T28505] loop5: detected capacity change from 0 to 512
[  915.919450][T28505] EXT4-fs: Ignoring removed nobh option
[  915.969730][T28505] EXT4-fs (loop5): orphan cleanup on readonly fs
[  915.989591][ T5893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  916.064887][T28505] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.9615: ea_inode file size=4 entry size=6
[  916.112673][T28513] loop4: detected capacity change from 0 to 4096
[  916.130718][T28505] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  916.142263][T28513] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  916.157337][T28505] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.9615: corrupted inode contents
[  916.180326][T28505] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.9615: mark_inode_dirty error
[  916.224266][T28518] loop3: detected capacity change from 0 to 128
[  916.247500][T28505] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.9615: corrupted inode contents
[  916.304532][T28513] ntfs3(loop4): ino=19, mi_enum_attr
[  916.331865][T28513] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  916.346215][T28505] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.9615: mark_inode_dirty error
[  916.390106][T28505] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.9615: mark inode dirty (error -117)
[  916.441359][T28505] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117)
[  916.451754][T28505] EXT4-fs (loop5): 1 orphan inode deleted
[  916.459296][T28505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  916.492679][T28251] hsr_slave_0: entered promiscuous mode
[  916.531967][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  916.539172][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  916.549886][T28251] hsr_slave_1: entered promiscuous mode
[  916.556282][T28251] debugfs: 'hsr0' already exists in 'hsr'
[  916.562168][T28251] Cannot create hsr debugfs directory
[  916.770723][T28530] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9622'.
[  916.795741][ T5896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  916.893362][T28533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9625'.
[  917.277633][T28544] loop9: detected capacity change from 0 to 512
[  917.346632][T28547] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  917.370444][T28549] loop2: detected capacity change from 0 to 64
[  917.402312][T28544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  917.404193][T28547] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  917.451685][T28544] EXT4-fs error (device loop9): ext4_xattr_block_find:1878: inode #12: comm syz.9.9628: corrupted xattr block 6: invalid header
[  917.526228][T28547] overlayfs: missing 'lowerdir'
[  917.584216][T26884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  917.821867][T28560] netlink: 'syz.3.9636': attribute type 46 has an invalid length.
[  917.869937][T28560] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9636'.
[  918.163196][T28528] loop4: detected capacity change from 0 to 32768
[  918.216584][T28528] ERROR: (device loop4): diNewExt: no free extents
[  918.216584][T28528] 
[  918.281969][T28528] ERROR: (device loop4): remounting filesystem as read-only
[  918.345334][T28580] openvswitch: netlink: Flow key attr not present in new flow.
[  918.347359][T28528] ialloc: diAlloc returned -5!
[  918.944173][T28596] loop3: detected capacity change from 0 to 1024
[  919.011947][T28596] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[  919.079264][T28596] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.9648: lblock 2 mapped to illegal pblock 2 (length 1)
[  919.092417][T28602] netlink: 'syz.9.9650': attribute type 1 has an invalid length.
[  919.100890][T28602] netlink: 96 bytes leftover after parsing attributes in process `syz.9.9650'.
[  919.113324][T28596] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  919.127382][T28596] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.9648: lblock 0 mapped to illegal pblock 48 (length 1)
[  919.147478][T28602] netlink: 1 bytes leftover after parsing attributes in process `syz.9.9650'.
[  919.157806][T28602] netlink: 658 bytes leftover after parsing attributes in process `syz.9.9650'.
[  919.171353][T28596] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  919.202579][T28599] loop5: detected capacity change from 0 to 4096
[  919.214318][T28596] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.9648: Failed to acquire dquot type 0
[  919.235207][T28599] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  919.268308][T28596] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  919.384007][T28596] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.9648: mark_inode_dirty error
[  919.453414][T28599] ntfs3(loop5): ino=19, mi_enum_attr
[  919.467481][T28596] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  919.544124][T28596] EXT4-fs (loop3): 1 orphan inode deleted
[  919.551730][T28596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  919.560197][T28599] ntfs3(loop5): failed to convert "c46c" to cp865
[  919.579005][T28612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9655'.
[  919.617325][ T8259] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1)
[  919.640931][T28599] ntfs3(loop5): ino=20, mi_enum_attr
[  919.677708][ T8259] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  919.683843][T28251] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  919.722650][ T8259] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:22: Failed to release dquot type 0
[  919.767400][T28617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  919.780591][T28251] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  919.846700][ T5893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  919.866879][T28251] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  919.878447][T27296] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  919.926424][T27296] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  919.945548][T27296] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0
[  919.962766][T28251] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  920.008224][ T5893] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0
[  920.061247][ T5893] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  920.103880][ T5893] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[  920.477453][T28251] 8021q: adding VLAN 0 to HW filter on device bond0
[  920.586230][T28251] 8021q: adding VLAN 0 to HW filter on device team0
[  920.625593][T28653] loop4: detected capacity change from 0 to 8
[  920.637166][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.644339][ T8259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  920.769015][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state
[  920.776230][ T6671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  921.042394][T28664] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  921.706157][T28632] loop5: detected capacity change from 0 to 32768
[  921.724575][T28691] loop9: detected capacity change from 0 to 64
[  922.002941][T28251] 8021q: adding VLAN 0 to HW filter on device batadv0
[  922.544572][T28723] loop9: detected capacity change from 0 to 256
[  922.605298][T28723] exfat: Deprecated parameter 'utf8'
[  922.626694][T28723] exfat: Deprecated parameter 'namecase'
[  922.696710][T28723] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x32796214, utbl_chksum : 0xe619d30d)
[  922.979785][T28734] tmpfs: Bad value for 'mpol'
[  922.988896][T28733] loop5: detected capacity change from 0 to 1024
[  923.109855][T28737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9698'.
[  923.217054][T28744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9700'.
[  923.277768][T28744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9700'.
[  923.308990][   T60] hfsplus: b-tree write err: -5, ino 4
[  923.548951][T28251] veth0_vlan: entered promiscuous mode
[  923.580404][T28754] loop5: detected capacity change from 0 to 512
[  923.595468][T28756] netlink: 'syz.3.9705': attribute type 21 has an invalid length.
[  923.611015][T28251] veth1_vlan: entered promiscuous mode
[  923.646624][T28756] IPv6: NLM_F_CREATE should be specified when creating new route
[  923.681647][T28754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  923.694252][T28756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  923.701494][T28756] IPv6: NLM_F_CREATE should be set when creating new route
[  923.708756][T28756] IPv6: NLM_F_CREATE should be set when creating new route
[  923.715995][T28756] IPv6: NLM_F_CREATE should be set when creating new route
[  923.817635][T28750] loop2: detected capacity change from 0 to 4096
[  923.851046][T28251] veth0_macvtap: entered promiscuous mode
[  923.870728][T28750] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  923.898869][T28251] veth1_macvtap: entered promiscuous mode
[  923.987995][ T5896] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  923.999942][T28750] ntfs3(loop2): ino=19, mi_enum_attr
[  924.027457][T28251] batman_adv: batadv0: Interface activated: batadv_slave_0
[  924.080511][T28750] ntfs3(loop2): failed to convert "076c" to cp949
[  924.127090][T28750] ntfs3(loop2): ino=20, mi_enum_attr
[  924.132447][T28251] batman_adv: batadv0: Interface activated: batadv_slave_1
[  924.176197][   T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  924.271331][   T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  924.364086][   T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  924.418675][   T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  924.775074][T28790] loop4: detected capacity change from 0 to 1024
[  924.802508][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  924.853520][T28790] EXT4-fs: Ignoring removed bh option
[  924.858966][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  924.972989][T28790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  924.990255][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  925.039169][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  925.077988][T28790] EXT4-fs error (device loop4): ext4_get_first_dir_block:3538: inode #11: comm syz.4.9716: directory missing '.'
[  925.148801][T28790] EXT4-fs (loop4): Remounting filesystem read-only
[  925.339333][T27705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  925.480759][ T5897] Bluetooth: hci4: unexpected event for opcode 0x0c1b
[  925.575024][T28818] xt_ecn: cannot match TCP bits for non-tcp packets
[  926.505456][T28856] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9740'.
[  926.629313][T28788] loop9: detected capacity change from 0 to 40427
[  926.670008][T28788] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  926.706517][T28788] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  927.103426][T28788] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  927.162511][T28788] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  927.171488][T28788] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  927.242040][T28788] fscrypt (loop9, inode 3): Error -61 getting encryption context
[  927.285033][T28885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9751'.
[  927.313248][T28885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9751'.
[  927.593109][T28887] loop4: detected capacity change from 0 to 4096
[  927.644747][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9755'.
[  927.654897][T28848] loop6: detected capacity change from 0 to 32768
[  927.672320][T28887] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  927.720778][T28887] ntfs3(loop4): ino=3, mi_enum_attr
[  927.766492][T28848] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.9739 (28848)
[  927.929858][T28848] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  927.954864][T28848] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  928.359659][T28848] BTRFS info (device loop6): rebuilding free space tree
[  928.501117][T28848] BTRFS info (device loop6): setting nodatasum
[  928.574778][T28848] BTRFS info (device loop6): allowing degraded mounts
[  928.628655][T28848] BTRFS info (device loop6): setting nodatacow
[  928.676757][T28848] BTRFS info (device loop6): enabling ssd optimizations
[  928.715445][T28848] BTRFS info (device loop6): turning on async discard
[  928.760190][T28848] BTRFS info (device loop6): enabling free space tree
[  928.810406][T28848] BTRFS info (device loop6): force clearing of disk cache
[  928.920656][T28938] bridge_slave_0: left allmulticast mode
[  928.926338][T28938] bridge_slave_0: left promiscuous mode
[  929.014570][T28938] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.134258][T28251] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  929.173737][T28938] bridge_slave_1: left allmulticast mode
[  929.218791][T28938] bridge_slave_1: left promiscuous mode
[  929.248416][T28938] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.395844][T28938] bond0: (slave bond_slave_0): Releasing backup interface
[  929.508031][T28938] bond0: (slave bond_slave_1): Releasing backup interface
[  929.823197][T28938] team0: Port device team_slave_0 removed
[  929.906977][T28938] team0: Port device team_slave_1 removed
[  929.955802][T28938] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  929.987678][T28938] batman_adv: batadv0: Removing interface: batadv_slave_0
[  930.038678][T28938] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  930.070799][T28938] batman_adv: batadv0: Removing interface: batadv_slave_1
[  930.130310][T28938] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  930.511348][T28992] netlink: 'syz.2.9785': attribute type 2 has an invalid length.
[  930.570425][T28992] netlink: 'syz.2.9785': attribute type 1 has an invalid length.
[  930.702495][T28999] genirq: Flags mismatch irq 5. 00200000 (aio_iiro_16) vs. 00200000 (pcl818)
[  931.176201][T29020] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  931.536236][T29030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  932.009388][T29047] nvme_fabrics: missing parameter 'transport=%s'
[  932.046171][T29047] nvme_fabrics: missing parameter 'nqn=%s'
[  932.059745][T29054] loop6: detected capacity change from 0 to 2048
[  932.060207][T20990] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  932.108992][T29054] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  932.297589][T20990] usb 5-1: unable to get BOS descriptor or descriptor too short
[  932.334571][T20990] usb 5-1: config 129 has an invalid interface number: 135 but max is 0
[  932.380409][T20990] usb 5-1: config 129 has an invalid interface number: 5 but max is 0
[  932.418269][T20990] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  932.432769][T29069] loop9: detected capacity change from 0 to 512
[  932.439207][T20990] usb 5-1: config 129 has no interface number 0
[  932.455521][T20990] usb 5-1: config 129 has no interface number 1
[  932.485162][T20990] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  932.511968][T29069] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.9815: corrupted in-inode xattr: e_value size too large
[  932.530265][T20990] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  932.542344][T20990] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  932.562732][T29069] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.9815: couldn't read orphan inode 15 (err -117)
[  932.563107][T20990] usb 5-1: config 129 interface 135 has no altsetting 0
[  932.581511][T20990] usb 5-1: config 129 interface 5 has no altsetting 0
[  932.606020][T20990] usb 5-1: string descriptor 0 read error: -22
[  932.612309][T20990] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00
[  932.639012][T20990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.664480][T29077] loop3: detected capacity change from 0 to 1024
[  932.677636][T29077] EXT4-fs: Ignoring removed bh option
[  932.683283][ T6064] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  932.692728][T29069] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  932.722011][T20990] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  932.732380][T29077] EXT4-fs: inline encryption not supported
[  932.742280][T29077] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  932.756215][T20990] usb 5-1: MIDIStreaming interface descriptor not found
[  932.806153][T29077] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  932.844491][T29077] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.9820: lblock 2 mapped to illegal pblock 2 (length 1)
[  932.885320][ T6064] usb 7-1: unable to get BOS descriptor or descriptor too short
[  932.937925][ T6064] usb 7-1: config 6 has an invalid interface number: 158 but max is 0
[  932.988853][T29077] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  933.011374][ T6064] usb 7-1: config 6 has no interface number 0
[  933.017486][ T6064] usb 7-1: config 6 interface 158 has no altsetting 0
[  933.044421][T29077] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.9820: lblock 0 mapped to illegal pblock 48 (length 1)
[  933.093340][ T6064] usb 7-1: string descriptor 0 read error: -22
[  933.103244][T29077] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  933.112532][ T6064] usb 7-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  933.134691][T26884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.138838][ T7118] usb 5-1: USB disconnect, device number 116
[  933.149364][ T6064] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.157990][T29077] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.9820: Failed to acquire dquot type 0
[  933.211698][T29090] loop5: detected capacity change from 0 to 256
[  933.224582][T29077] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  933.275576][T29077] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.9820: mark_inode_dirty error
[  933.341353][T29077] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  933.417409][T29077] EXT4-fs (loop3): 1 orphan inode deleted
[  933.472188][ T3498] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1)
[  933.489020][T29077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  933.537407][ T6064] rtsx_usb 7-1:6.158: probe with driver rtsx_usb failed with error -71
[  933.573857][ T3498] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  933.601303][ T6064] usb 7-1: USB disconnect, device number 3
[  933.616008][ T3498] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0
[  933.675997][ T3498] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm kworker/u8:12: lblock 2 mapped to illegal pblock 2 (length 1)
[  933.709999][ T3498] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  933.718829][ T7118] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  933.738525][ T3498] EXT4-fs error (device loop3): ext4_write_dquot:6966: comm kworker/u8:12: Failed to commit dquot type 0
[  933.803482][ T3498] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  933.852825][ T5893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.905837][ T5893] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0
[  933.918894][ T7118] usb 3-1: Using ep0 maxpacket: 8
[  933.929157][ T7118] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  933.940761][ T5893] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  933.951972][ T7118] usb 3-1: config 179 has no interface number 0
[  933.959011][ T7118] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  933.971066][ T5893] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[  933.982684][ T7118] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  934.018726][ T7118] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  934.053444][ T7118] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  934.109202][ T7118] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  934.182519][ T7118] usb 3-1: config 179 interface 65 has no altsetting 0
[  934.191049][T29118] tc_dump_action: action bad kind
[  934.200487][ T7118] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  934.245255][ T7118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.371587][ T7118] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input71
[  934.490341][ T5177] input input71: unable to receive magic message: -110
[  934.701324][ T5177] input input71: unable to receive magic message: -32
[  934.820747][ T6064] usb 3-1: USB disconnect, device number 123
[  934.821346][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  934.835367][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  934.943484][ T5177] input input71: unable to receive magic message: -71
[  935.261444][T29160] loop6: detected capacity change from 0 to 256
[  935.418558][T29160] FAT-fs (loop6): Directory bread(block 64) failed
[  935.449434][T29167] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9853'.
[  935.459148][T29160] FAT-fs (loop6): Directory bread(block 65) failed
[  935.511795][T29160] FAT-fs (loop6): Directory bread(block 66) failed
[  935.555669][T29160] FAT-fs (loop6): Directory bread(block 67) failed
[  935.562272][T29160] FAT-fs (loop6): Directory bread(block 68) failed
[  935.644521][T29160] FAT-fs (loop6): Directory bread(block 69) failed
[  935.646089][T29171] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  935.697652][T29160] FAT-fs (loop6): Directory bread(block 70) failed
[  935.704194][T29160] FAT-fs (loop6): Directory bread(block 71) failed
[  935.781127][   T31] audit: type=1326 audit(892.504:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29174 comm="syz.2.9857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  935.799768][T29160] FAT-fs (loop6): Directory bread(block 72) failed
[  935.810469][T29160] FAT-fs (loop6): Directory bread(block 73) failed
[  935.860251][   T31] audit: type=1326 audit(892.523:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29174 comm="syz.2.9857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  936.024201][   T31] audit: type=1326 audit(892.523:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29174 comm="syz.2.9857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  936.135027][   T31] audit: type=1326 audit(892.523:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29174 comm="syz.2.9857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  936.145415][T29186] loop9: detected capacity change from 0 to 64
[  936.229952][   T31] audit: type=1326 audit(892.523:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29174 comm="syz.2.9857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  936.567603][T29158] loop5: detected capacity change from 0 to 32768
[  936.627696][T29158] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.9850 (29158)
[  936.703843][T29158] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  936.746023][T29158] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  936.990478][T29158] BTRFS info (device loop5): enabling ssd optimizations
[  937.076146][T29158] BTRFS info (device loop5): turning on flush-on-commit
[  937.122213][T29158] BTRFS info (device loop5): turning on async discard
[  937.167586][T29158] BTRFS info (device loop5): enabling free space tree
[  937.186762][T29222] bond2 (unregistering): Released all slaves
[  937.240240][T29158] BTRFS info (device loop5): force zlib compression, level 3
[  937.298364][T29158] BTRFS info (device loop5): max_inline set to 4096
[  937.565661][T29249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9879'.
[  937.614056][T29249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9879'.
[  937.646940][ T5896] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  937.938181][T29257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9884'.
[  937.993170][ T7118] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  938.141547][T29254] loop6: detected capacity change from 0 to 4096
[  938.153228][T29264] netlink: 'syz.9.9886': attribute type 4 has an invalid length.
[  938.174398][T29265] loop2: detected capacity change from 0 to 128
[  938.185912][T29254] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  938.196750][ T7118] usb 5-1: Using ep0 maxpacket: 32
[  938.230815][ T7118] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  938.255694][ T7118] usb 5-1: config 0 has no interface number 0
[  938.273391][ T7118] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  938.290877][ T7118] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.303287][ T7118] usb 5-1: Product: syz
[  938.307456][ T7118] usb 5-1: Manufacturer: syz
[  938.314357][T29265] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  938.336645][ T7118] usb 5-1: SerialNumber: syz
[  938.350229][ T7118] usb 5-1: config 0 descriptor??
[  938.359380][ T7118] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  938.368310][ T7118] usb 5-1: selecting invalid altsetting 1
[  938.374036][ T7118] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  938.375711][T29254] ntfs3(loop6): ino=19, mi_enum_attr
[  938.394724][ T7118] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  938.463898][ T7118] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  938.472204][ T7118] usb 5-1: media controller created
[  938.616276][T29254] ntfs3(loop6): failed to convert "c46c" to cp866
[  938.632216][ T7118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  938.684934][T29254] ntfs3(loop6): ino=20, mi_enum_attr
[  938.725710][ T5894] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  939.027203][ T7118] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  939.269456][ T7118] usb 5-1: USB disconnect, device number 117
[  939.340210][ T5991] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[  939.348950][T29293] loop3: detected capacity change from 0 to 24
[  939.430545][T29293] romfs: read error for inode 0x8000
[  939.544477][ T5991] usb 6-1: Using ep0 maxpacket: 8
[  939.562861][ T5991] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  939.599917][ T5991] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  939.640307][ T5991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.659225][ T5991] usb 6-1: Product: syz
[  939.678704][ T5991] usb 6-1: Manufacturer: syz
[  939.715960][ T5991] usb 6-1: SerialNumber: syz
[  939.740873][ T5991] usb 6-1: config 0 descriptor??
[  939.823672][T29304] xt_time: invalid argument - start or stop time greater than 23:59:59
[  939.824075][ T5991] gspca_main: stk014-2.14.0 probing 05e1:0893
[  939.867133][ T5991] usb 6-1: selecting invalid altsetting 1
[  940.119303][T29315] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  940.192878][T29275] loop9: detected capacity change from 0 to 32768
[  940.280311][T29275] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.9889 (29275)
[  940.323053][ T7118] usb 6-1: USB disconnect, device number 110
[  940.385735][T29275] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  940.458029][T29275] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  940.502311][T29325] xt_TPROXY: Can be used only with -p tcp or -p udp
[  940.550070][T29330] loop6: detected capacity change from 0 to 16
[  940.593709][T29330] erofs (device loop6): mounted with root inode @ nid 36.
[  940.607572][T29320] loop4: detected capacity change from 0 to 8192
[  940.702828][T29320] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  940.786020][T29320] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1046)
[  940.831236][T29275] BTRFS info (device loop9): enabling ssd optimizations
[  940.847905][T29320] FAT-fs (loop4): Filesystem has been set read-only
[  940.859143][T29275] BTRFS info (device loop9): turning on async discard
[  940.887720][T29275] BTRFS info (device loop9): enabling free space tree
[  941.007281][T27705] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1046)
[  941.070570][T29354] loop6: detected capacity change from 0 to 64
[  941.351397][T26884] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  941.786247][T29373] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  941.969633][T29380] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  941.972009][T29379] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9925'.
[  942.019266][T29383] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  942.055880][T29383] batman_adv: batadv0: Removing interface: batadv_slave_0
[  942.150823][T29383] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  942.196843][T29383] batman_adv: batadv0: Removing interface: batadv_slave_1
[  942.234080][T29387] loop3: detected capacity change from 0 to 2048
[  942.354064][T29387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  943.003486][T29417] loop2: detected capacity change from 0 to 512
[  943.195505][T29417] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  943.296136][T29417] EXT4-fs (loop2): 1 truncate cleaned up
[  943.382872][T29417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  943.516738][T29417] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.9940: unexpected EA_INODE flag
[  943.696119][ T5894] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  944.627790][T29487] loop6: detected capacity change from 0 to 164
[  944.663119][T29489] netlink: 'syz.5.9971': attribute type 10 has an invalid length.
[  944.787120][T29493] ipt_REJECT: ECHOREPLY no longer supported.
[  945.053324][T29503] loop5: detected capacity change from 0 to 256
[  945.117185][T29503] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  945.136548][T29508] netlink: set zone limit has 4 unknown bytes
[  945.375502][T29515] IPVS: length: 149 != 8
[  945.469117][T29519] loop4: detected capacity change from 0 to 16
[  945.507376][T29519] erofs (device loop4): mounted with root inode @ nid 36.
[  945.520235][T29518] xt_hashlimit: max too large, truncated to 1048576
[  945.893704][T29533] loop2: detected capacity change from 0 to 2048
[  945.944709][T29533] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  945.955910][T29470] loop9: detected capacity change from 0 to 40427
[  945.999534][T29470] F2FS-fs (loop9): build fault injection rate: 11
[  946.044003][T29470] F2FS-fs (loop9): build fault injection type: 0x3bfe8f
[  946.062546][T29541] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  946.073667][T29533] syz.2.9988: attempt to access beyond end of device
[  946.073667][T29533] loop2: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  946.098804][    C1] F2FS-fs (loop9): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  946.134990][T29470] F2FS-fs (loop9): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4388/0x6ec0
[  946.146315][T29470] F2FS-fs (loop9): Failed to initialize F2FS segment manager (-12)
[  946.185065][T29533] syz.2.9988: attempt to access beyond end of device
[  946.185065][T29533] loop2: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  946.291016][T29533] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3)
[  946.925788][T29572] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  946.955220][T29570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10002'.
[  948.231453][T29567] loop2: detected capacity change from 0 to 32768
[  948.264470][T29567] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.9998 (29567)
[  948.368369][T29567] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  948.427219][T29567] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  948.680095][T29567] BTRFS info (device loop2): enabling ssd optimizations
[  948.732472][T29567] BTRFS info (device loop2): turning on async discard
[  948.758696][T29567] BTRFS info (device loop2): enabling free space tree
[  949.019264][T29668] loop6: detected capacity change from 0 to 512
[  949.070626][T29668] EXT4-fs: Ignoring removed orlov option
[  949.076454][T29668] EXT4-fs: Ignoring removed i_version option
[  949.101059][ T5894] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  949.187514][T29668] EXT4-fs: Ignoring removed nomblk_io_submit option
[  949.228561][T29668] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  949.263579][T29668] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  949.285928][T29675] loop4: detected capacity change from 0 to 2048
[  949.286466][T29668] EXT4-fs (loop6): orphan cleanup on readonly fs
[  949.352702][T29679] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  949.417268][T29668] __quota_error: 5 callbacks suppressed
[  949.417291][T29668] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  949.479546][T29675] NILFS (loop4): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  949.521127][T29668] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  949.561149][T29675] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16)
[  949.622460][T29668] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  949.656819][T29675] Remounting filesystem read-only
[  949.661856][T29675] NILFS (loop4): error -5 truncating bmap (ino=16)
[  949.686513][T29668] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.10036: bg 0: block 40: padding at end of block bitmap is not set
[  949.759617][T29668] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  949.823685][T29668] EXT4-fs (loop6): 1 truncate cleaned up
[  949.861605][T29668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  949.942517][T27705] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  950.126305][T29668] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  950.182027][T29668] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  950.454376][T28251] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.883179][T29726] loop6: detected capacity change from 0 to 4096
[  950.894110][T29726] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  951.046221][T29726] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  951.283360][  T788] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  951.477546][  T788] usb 10-1: config 8 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  951.527495][  T788] usb 10-1: config 8 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  951.554157][   T31] audit: type=1326 audit(907.255:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  951.597691][  T788] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  951.627887][  T788] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.669472][   T31] audit: type=1326 audit(907.274:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  951.694670][T29734] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  951.729315][  T788] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  951.796347][  T788] usb 10-1: invalid MIDI in EP 0
[  951.804923][   T31] audit: type=1326 audit(907.293:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  951.943568][   T31] audit: type=1326 audit(907.293:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  952.085180][T14405] udevd[14405]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  952.121738][  T788] snd-usb-audio 10-1:8.0: probe with driver snd-usb-audio failed with error -22
[  952.163475][   T31] audit: type=1326 audit(907.293:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29752 comm="syz.2.10070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e39f8f749 code=0x7ffc0000
[  952.286518][  T788] usb 10-1: USB disconnect, device number 2
[  952.513007][T29797] loop6: detected capacity change from 0 to 16
[  952.647235][T29797] erofs (device loop6): mounted with root inode @ nid 36.
[  953.125150][T29819] netlink: 'syz.6.10086': attribute type 13 has an invalid length.
[  953.195455][T29819] netlink: 'syz.6.10086': attribute type 27 has an invalid length.
[  953.536276][T29827] bond4 (unregistering): Released all slaves
[  953.550891][T29839] loop6: detected capacity change from 0 to 512
[  953.571447][T29837] loop9: detected capacity change from 0 to 1764
[  953.618329][T29837] iso9660: Corrupted directory entry in block 2 of inode 1920
[  953.679767][T29839] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  953.734691][T29839] EXT4-fs (loop6): mount failed
[  954.071461][T29808] loop4: detected capacity change from 0 to 32768
[  954.221933][T29808] read_mapping_page failed!
[  954.236132][T29808] jfs_create: dtInsert returned -EIO
[  954.241848][T29808] ERROR: (device loop4): jfs_create: 
[  954.241848][T29808] 
[  954.341280][T29808] ERROR: (device loop4): remounting filesystem as read-only
[  954.402989][T29865] loop9: detected capacity change from 0 to 512
[  954.432862][T29866] loop6: detected capacity change from 0 to 2048
[  954.467540][T29865] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  954.521935][T29865] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  954.541745][T29866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  954.591928][T29865] EXT4-fs (loop9): orphan cleanup on readonly fs
[  954.631746][T29865] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.10104: bad orphan inode 11
[  954.664960][T29865] ext4_test_bit(bit=10, block=2) = 0
[  954.759769][T29865] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  954.798949][T29879] netlink: 760 bytes leftover after parsing attributes in process `syz.5.10109'.
[  954.808105][T29879] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  954.879776][T29865] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  954.983606][T29879] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  955.078734][T26884] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  955.421057][T29893] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10116'.
[  955.473258][T29893] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  955.847700][ T6064] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  956.007129][T29877] loop3: detected capacity change from 0 to 40427
[  956.022862][T29884] loop2: detected capacity change from 0 to 32768
[  956.028305][ T6064] usb 10-1: Using ep0 maxpacket: 32
[  956.029387][T29877] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  956.059846][ T6064] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  956.061466][T29884] btrfs: Deprecated parameter 'usebackuproot'
[  956.090617][T29877] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  956.104480][ T6064] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  956.116948][T29884] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  956.141455][T29884] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.10113 (29884)
[  956.160811][ T6064] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  956.209903][ T6064] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  956.240237][ T6064] usb 10-1: Product: syz
[  956.247995][T29884] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  956.266323][ T6064] usb 10-1: Manufacturer: syz
[  956.313072][T29884] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  956.324716][ T6064] hub 10-1:4.0: USB hub found
[  956.479921][T29877] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  956.531172][ T6064] hub 10-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  956.560554][T29877] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  956.628946][T29877] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  956.637785][T29884] BTRFS info (device loop2): rebuilding free space tree
[  956.713372][T29884] BTRFS info (device loop2): allowing degraded mounts
[  956.720150][T29884] BTRFS info (device loop2): enabling ssd optimizations
[  956.784389][T29884] BTRFS info (device loop2): turning on flush-on-commit
[  956.834940][T29884] BTRFS info (device loop2): enabling free space tree
[  956.856547][T29884] BTRFS info (device loop2): force clearing of disk cache
[  956.894193][T29884] BTRFS info (device loop2): trying to use backup root at mount time
[  956.904017][T29898] loop6: detected capacity change from 0 to 32768
[  956.909758][  T788] usb 10-1: USB disconnect, device number 3
[  956.933530][T29884] BTRFS info (device loop2): use zstd compression, level 3
[  956.995621][T29903] loop4: detected capacity change from 0 to 32768
[  957.003451][T29898] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  957.330177][T29898] XFS (loop6): Ending clean mount
[  957.366487][T29898] XFS (loop6): Quotacheck needed: Please wait.
[  957.409045][ T5894] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  957.513978][T29898] XFS (loop6): Quotacheck: Done.
[  957.977893][T28251] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  957.996427][T29967] xfrm0: entered promiscuous mode
[  958.239604][T29973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  959.060559][T30006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10148'.
[  959.486097][T30026] loop6: detected capacity change from 0 to 64
[  959.514483][T30027] netlink: 'syz.9.10156': attribute type 2 has an invalid length.
[  959.808243][T29992] loop2: detected capacity change from 0 to 32768
[  959.939278][T29992] (syz.2.10139,29992,0):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #66: directory entry overrun - offset=248, inode=327755, rec_len=3096, name_len=12
[  959.968154][T30041] loop9: detected capacity change from 0 to 764
[  960.059209][T29992] (syz.2.10139,29992,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=10, slot=0
[  960.069907][T30041] Symlink component flag not implemented
[  960.075621][T30041] Symlink component flag not implemented (101)
[  960.117502][T29992] (syz.2.10139,29992,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  960.167245][T29992] (syz.2.10139,29992,1):ocfs2_mount_volume:1758 ERROR: status = -22
[  960.211509][T29992] (syz.2.10139,29992,1):ocfs2_fill_super:1177 ERROR: status = -22
[  960.291396][   T32] INFO: task syz-executor:5888 blocked for more than 143 seconds.
[  960.321039][   T32]       Tainted: G             L      syzkaller #0
[  960.343159][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  960.366706][   T32] task:syz-executor    state:D stack:21368 pid:5888  tgid:5888  ppid:1      task_flags:0x400140 flags:0x00080002
[  960.408058][   T32] Call Trace:
[  960.427054][   T32]  <TASK>
[  960.430962][   T32]  __schedule+0x14bc/0x5000
[  960.439381][   T32]  ? __pfx___schedule+0x10/0x10
[  960.446150][   T32]  ? schedule+0x91/0x360
[  960.450538][   T32]  schedule+0x165/0x360
[  960.461385][   T32]  io_schedule+0x80/0xd0
[  960.469278][   T32]  folio_wait_bit_common+0x6b0/0xb80
[  960.487970][   T32]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  960.503843][   T32]  ? __pfx_wake_page_function+0x10/0x10
[  960.519727][ T7118] usb 4-1: new low-speed USB device number 114 using dummy_hcd
[  960.530876][   T32]  ? folios_put_refs+0x584/0x670
[  960.546185][   T32]  ? __pfx_find_lock_entries+0x10/0x10
[  960.559057][   T32]  ? __filemap_get_folio_mpol+0x81/0xb00
[  960.570795][   T32]  __filemap_get_folio_mpol+0x13e/0xb00
[  960.582351][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  960.594280][   T32]  truncate_inode_pages_range+0x3f0/0xd90
[  960.606147][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  960.620123][   T32]  ? kasan_save_stack+0x4d/0x60
[  960.630608][   T32]  ? kasan_save_stack+0x3e/0x60
[  960.643609][   T32]  ? kasan_record_aux_stack+0xbd/0xd0
[  960.655007][   T32]  ? deactivate_locked_super+0xbc/0x130
[  960.667869][   T32]  ? task_work_run+0x1d4/0x260
[  960.677620][   T32]  ? exit_to_user_mode_loop+0xff/0x4f0
[  960.690301][   T32]  ? do_syscall_64+0x2e3/0xf80
[  960.700509][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  960.715298][ T7118] usb 4-1: config 8 has an invalid interface number: 233 but max is 0
[  960.725927][   T32]  ? __pfx_truncate_inode_pages_range+0x10/0x10
[  960.739077][ T7118] usb 4-1: config 8 has no interface number 0
[  960.750252][   T32]  ? __lock_acquire+0x6b6/0x2cf0
[  960.761276][ T7118] usb 4-1: config 8 interface 233 has no altsetting 0
[  960.770720][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  960.778384][   T32]  ? lockdep_hardirqs_on+0x98/0x140
[  960.792390][ T7118] usb 4-1: string descriptor 0 read error: -22
[  960.801534][   T32]  evict+0x607/0xae0
[  960.809950][ T7118] usb 4-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c
[  960.819420][   T32]  ? __pfx_evict+0x10/0x10
[  960.830034][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  960.844885][ T7118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.857866][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  960.875096][   T32]  ? do_raw_spin_unlock+0x122/0x240
[  960.893990][ T7118] cp210x 4-1:8.233: cp210x converter detected
[  960.903119][   T32]  evict_inodes+0x753/0x7e0
[  960.915986][   T32]  ? __pfx_evict_inodes+0x10/0x10
[  960.928222][   T32]  generic_shutdown_super+0x9a/0x2c0
[  960.941976][   T32]  kill_block_super+0x44/0x90
[  960.955658][   T32]  deactivate_locked_super+0xbc/0x130
[  960.968226][   T32]  cleanup_mnt+0x425/0x4c0
[  960.980930][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  960.987271][   T32]  ? lockdep_hardirqs_on+0x98/0x140
[  960.993346][   T32]  task_work_run+0x1d4/0x260
[  960.998227][   T32]  ? __pfx_task_work_run+0x10/0x10
[  961.003896][   T32]  ? exit_to_user_mode_loop+0x55/0x4f0
[  961.009656][   T32]  exit_to_user_mode_loop+0xff/0x4f0
[  961.015452][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.021708][   T32]  ? rcu_is_watching+0x15/0xb0
[  961.026617][   T32]  do_syscall_64+0x2e3/0xf80
[  961.031988][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.038402][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.044615][   T32]  ? exc_page_fault+0xab/0x100
[  961.049646][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.056105][   T32] RIP: 0033:0x7f88fdf90a77
[  961.060771][   T32] RSP: 002b:00007ffd82330c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  961.074239][   T32] RAX: 0000000000000000 RBX: 00007f88fe013d7d RCX: 00007f88fdf90a77
[  961.095297][   T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd82330cc0
[  961.108195][ T7118] cp210x 4-1:8.233: failed to get vendor val 0x370b size 1: -71
[  961.125702][   T32] RBP: 00007ffd82330cc0 R08: 0000000000000000 R09: 0000000000000000
[  961.135028][ T7118] cp210x 4-1:8.233: querying part number failed
[  961.150916][   T32] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd82331d50
[  961.161962][ T7118] usb 4-1: cp210x converter now attached to ttyUSB0
[  961.176273][   T32] R13: 00007f88fe013d7d R14: 00000000000b7da4 R15: 00007ffd82331d90
[  961.190583][T30050] loop4: detected capacity change from 0 to 32768
[  961.193166][ T7118] usb 4-1: USB disconnect, device number 114
[  961.224210][   T32]  </TASK>
[  961.239668][   T32] 
[  961.239668][   T32] Showing all locks held in the system:
[  961.262549][T30050] JBD2: Ignoring recovery information on journal
[  961.327093][   T32] 1 lock held by khungtaskd/32:
[  961.333006][ T7118] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  961.340837][   T32]  #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  961.351473][ T7118] cp210x 4-1:8.233: device disconnected
[  961.357551][   T32] 2 locks held by getty/5578:
[  961.367360][   T32]  #0: ffff88814e3f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  961.377520][   T32]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  961.387927][   T32] 1 lock held by syz-executor/5888:
[  961.393265][   T32]  #0: ffff8880314ea0e0 (&type->s_umount_key#95){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  961.403863][   T32] 3 locks held by kworker/1:8/7118:
[  961.410745][   T32]  #0: ffff88801f6e2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  961.440650][   T32]  #1: ffffc90003acfb80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  961.461233][   T32]  #2: ffff8880282a2198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0
[  961.473631][   T32] 2 locks held by udevd/14405:
[  961.478809][   T32]  #0: ffff888148cfaa28 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440
[  961.527532][   T32]  #1: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0
[  961.531304][T30050] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  961.538423][   T32] 6 locks held by syz.4.10164/30050:
[  961.551841][   T32] 2 locks held by sed/30064:
[  961.589439][   T32]  #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  961.630060][   T32]  #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  961.662135][   T32] 3 locks held by dhcpcd-run-hook/30070:
[  961.667797][   T32] 
[  961.670118][   T32] =============================================
[  961.670118][   T32] 
[  961.715603][   T32] NMI backtrace for cpu 0
[  961.715625][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  961.715659][   T32] Tainted: [L]=SOFTLOCKUP
[  961.715670][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  961.715687][   T32] Call Trace:
[  961.715697][   T32]  <TASK>
[  961.715708][   T32]  dump_stack_lvl+0x189/0x250
[  961.715753][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[  961.715785][   T32]  ? __pfx__printk+0x10/0x10
[  961.715838][   T32]  nmi_cpu_backtrace+0x39e/0x3d0
[  961.715875][   T32]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  961.715910][   T32]  ? __pfx__printk+0x10/0x10
[  961.715948][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.715982][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  961.716028][   T32]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  961.716063][   T32]  sys_info+0x135/0x170
[  961.716089][   T32]  watchdog+0xf95/0xfe0
[  961.716131][   T32]  ? watchdog+0x20a/0xfe0
[  961.716176][   T32]  kthread+0x711/0x8a0
[  961.716214][   T32]  ? __pfx_watchdog+0x10/0x10
[  961.716250][   T32]  ? __pfx_kthread+0x10/0x10
[  961.716280][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.716314][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  961.716349][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.716378][   T32]  ? lockdep_hardirqs_on+0x98/0x140
[  961.716415][   T32]  ? __pfx_kthread+0x10/0x10
[  961.716450][   T32]  ret_from_fork+0x599/0xb30
[  961.716479][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  961.716517][   T32]  ? __switch_to_asm+0x39/0x70
[  961.716550][   T32]  ? __switch_to_asm+0x33/0x70
[  961.716583][   T32]  ? __pfx_kthread+0x10/0x10
[  961.716620][   T32]  ret_from_fork_asm+0x1a/0x30
[  961.716674][   T32]  </TASK>
[  961.716684][   T32] Sending NMI from CPU 0 to CPUs 1:
[  961.898546][    C1] NMI backtrace for cpu 1
[  961.898567][    C1] CPU: 1 UID: 0 PID: 30073 Comm: dhcpcd-run-hook Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  961.898598][    C1] Tainted: [L]=SOFTLOCKUP
[  961.898607][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  961.898621][    C1] RIP: 0010:__lock_acquire+0x274/0x2cf0
[  961.898650][    C1] Code: e8 d1 39 29 03 4d 89 f1 48 8b 74 24 18 44 8b 74 24 20 48 83 bc 24 20 01 00 00 00 0f 85 ce fe ff ff 44 89 74 24 20 44 89 3c 24 <8b> bc 24 38 01 00 00 4c 8b 84 24 28 01 00 00 4c 8b 74 24 08 4d 8d
[  961.898669][    C1] RSP: 0018:ffffc90018566fe8 EFLAGS: 00000046
[  961.898690][    C1] RAX: 00000000000000af RBX: 0000000000000000 RCX: ffffffff932713b0
[  961.898706][    C1] RDX: 0000000000000005 RSI: 0000000000000007 RDI: ffffffff8df419e0
[  961.898722][    C1] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffff8df419e0
[  961.898737][    C1] R10: dffffc0000000000 R11: fffff94000093121 R12: 0000000000000000
[  961.898754][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000
[  961.898771][    C1] FS:  0000000000000000(0000) GS:ffff888125f3a000(0000) knlGS:0000000000000000
[  961.898790][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  961.898806][    C1] CR2: 00007fe3db716286 CR3: 00000000a7903000 CR4: 0000000000350ef0
[  961.898828][    C1] Call Trace:
[  961.898836][    C1]  <TASK>
[  961.898849][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.898877][    C1]  ? do_raw_spin_lock+0x121/0x290
[  961.898916][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.898944][    C1]  ? page_table_check_clear+0x144/0x5f0
[  961.898967][    C1]  lock_acquire+0x117/0x340
[  961.898989][    C1]  ? page_table_check_clear+0x144/0x5f0
[  961.899014][    C1]  ? pfn_valid+0xba/0x490
[  961.899037][    C1]  ? pfn_valid+0xba/0x490
[  961.899061][    C1]  page_table_check_clear+0x164/0x5f0
[  961.899083][    C1]  ? page_table_check_clear+0x144/0x5f0
[  961.899105][    C1]  ? page_table_check_clear+0x144/0x5f0
[  961.899127][    C1]  ? vm_normal_page+0x10d/0x240
[  961.899153][    C1]  unmap_page_range+0x3257/0x4170
[  961.899198][    C1]  ? mas_next_slot+0xc20/0xcf0
[  961.899236][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  961.899265][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.899291][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.899317][    C1]  ? unmap_vmas+0x144/0x580
[  961.899344][    C1]  unmap_vmas+0x399/0x580
[  961.899368][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.899399][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  961.899435][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.899463][    C1]  exit_mmap+0x239/0xb10
[  961.899488][    C1]  ? uprobe_clear_state+0x20f/0x290
[  961.899514][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  961.899533][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  961.899562][    C1]  ? __pfx_exit_aio+0x10/0x10
[  961.899599][    C1]  ? uprobe_clear_state+0x27c/0x290
[  961.899621][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.899650][    C1]  __mmput+0x118/0x430
[  961.899676][    C1]  exec_mmap+0x44d/0x520
[  961.899713][    C1]  ? __pfx_exec_mmap+0x10/0x10
[  961.899749][    C1]  ? rcu_is_watching+0x15/0xb0
[  961.899777][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.899806][    C1]  begin_new_exec+0x1353/0x2400
[  961.899842][    C1]  ? __kmalloc_noprof+0x43e/0x800
[  961.899868][    C1]  ? load_elf_phdrs+0x1a0/0x230
[  961.899904][    C1]  ? __pfx_begin_new_exec+0x10/0x10
[  961.899937][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.899963][    C1]  ? security_inode_permission+0xb7/0x310
[  961.899996][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.900025][    C1]  load_elf_binary+0x998/0x2740
[  961.900059][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.900092][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.900123][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.900153][    C1]  ? __pfx_load_elf_binary+0x10/0x10
[  961.900189][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.900222][    C1]  bprm_execve+0x92e/0x1400
[  961.900252][    C1]  ? __pfx_bprm_execve+0x10/0x10
[  961.900279][    C1]  do_execveat_common+0x510/0x6a0
[  961.900308][    C1]  __x64_sys_execve+0x94/0xb0
[  961.900330][    C1]  do_syscall_64+0xfa/0xf80
[  961.900366][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.900388][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  961.900414][    C1]  ? exc_page_fault+0xab/0x100
[  961.900448][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.900470][    C1] RIP: 0033:0x7fe3db65c107
[  961.900497][    C1] Code: Unable to access opcode bytes at 0x7fe3db65c0dd.
[  961.900508][    C1] RSP: 002b:00007ffdbca01598 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  961.900530][    C1] RAX: ffffffffffffffda RBX: 0000558273c16080 RCX: 00007fe3db65c107
[  961.900547][    C1] RDX: 0000558273c160a8 RSI: 0000558273c16080 RDI: 0000558273c16138
[  961.900564][    C1] RBP: 0000558273c16138 R08: 00007ffdbca06e7c R09: 0000000000000000
[  961.900580][    C1] R10: 0000000000000008 R11: 0000000000000246 R12: 0000558273c160a8
[  961.900595][    C1] R13: 00007fe3db821e8b R14: 0000558273c160a8 R15: 0000000000000000
[  961.900621][    C1]  </TASK>
[  962.425377][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  962.432234][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  962.442913][   T32] Tainted: [L]=SOFTLOCKUP
[  962.447229][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  962.457280][   T32] Call Trace:
[  962.460554][   T32]  <TASK>
[  962.463482][   T32]  dump_stack_lvl+0x99/0x250
[  962.468086][   T32]  ? __asan_memcpy+0x40/0x70
[  962.472680][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[  962.477897][   T32]  ? __pfx__printk+0x10/0x10
[  962.482512][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  962.488155][   T32]  vpanic+0x237/0x6d0
[  962.492144][   T32]  ? __pfx_vpanic+0x10/0x10
[  962.496654][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  962.502298][   T32]  ? preempt_schedule_common+0x83/0xd0
[  962.507783][   T32]  panic+0xb9/0xc0
[  962.511517][   T32]  ? __pfx_panic+0x10/0x10
[  962.515945][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  962.521587][   T32]  ? preempt_schedule_thunk+0x16/0x30
[  962.526969][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  962.532611][   T32]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  962.538783][   T32]  watchdog+0xfdf/0xfe0
[  962.542959][   T32]  ? watchdog+0x20a/0xfe0
[  962.547305][   T32]  kthread+0x711/0x8a0
[  962.551395][   T32]  ? __pfx_watchdog+0x10/0x10
[  962.556073][   T32]  ? __pfx_kthread+0x10/0x10
[  962.560662][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  962.566300][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  962.571502][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  962.577128][   T32]  ? lockdep_hardirqs_on+0x98/0x140
[  962.582328][   T32]  ? __pfx_kthread+0x10/0x10
[  962.586917][   T32]  ret_from_fork+0x599/0xb30
[  962.591499][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  962.596619][   T32]  ? __switch_to_asm+0x39/0x70
[  962.601385][   T32]  ? __switch_to_asm+0x33/0x70
[  962.606145][   T32]  ? __pfx_kthread+0x10/0x10
[  962.610735][   T32]  ret_from_fork_asm+0x1a/0x30
[  962.615517][   T32]  </TASK>
[  962.618804][   T32] Kernel Offset: disabled
[  962.623114][   T32] Rebooting in 86400 seconds..