last executing test programs:

2m53.56274445s ago: executing program 0 (id=1877):
syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x4, 0x661, &(0x7f0000000dc0)="$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")
statx(0xffffffffffffff9c, &(0x7f0000008380)='./file1\x00', 0x0, 0x4, &(0x7f00000083c0))

2m53.254129015s ago: executing program 0 (id=1882):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x11, 0x148, 0xa0, 0x0, 0x150, 0x2a8, 0x2a8, 0x150, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4}, {0xffffffffffffffff, 0x80, 0x7}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x1, "be92f87777596354668949a64ff46175eb6b1ba98fd7d954180ca0208614"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248)

2m52.844883442s ago: executing program 0 (id=1887):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x58}}, 0x0)

2m52.603960456s ago: executing program 0 (id=1891):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000500)={{0x1, 0x3, 0x0, 0x3}, 0x4d, 0x6cb5})

2m52.423463739s ago: executing program 0 (id=1895):
r0 = syz_open_dev$video4linux(&(0x7f0000000900), 0x7, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000b40)={0x0, @reserved})

2m52.219256192s ago: executing program 0 (id=1897):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',utf8,\x00'], 0x81, 0x14f5, &(0x7f0000002a80)="$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")
mount$afs(&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00'], &(0x7f0000000080)='./file0\x00', 0x0, 0x181000, 0x0)

2m40.329076858s ago: executing program 2 (id=2027):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0x40045108, &(0x7f0000000080)={"ecc9368677843d01349692bfebaf8f4a9b28245ebf2c4dcb6ef767fc2306"})

2m40.055952893s ago: executing program 2 (id=2032):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3f, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000100)={0x0, 0x0, 0x3013})

2m39.781302497s ago: executing program 2 (id=2034):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfa, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

2m39.60330256s ago: executing program 2 (id=2038):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000300)=@newtaction={0x4c, 0x58, 0x284f, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)

2m39.309481415s ago: executing program 2 (id=2041):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2018c80, &(0x7f00000065c0)=ANY=[@ANYBLOB='discard=0x0000000000000004,quota,errors=continue,nointegrity,errors=continue,usrquota,nodiscard\x00quota,discard,umask=0x0000000000000002,quota,gid=', @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB=',\x00'/17], 0x1, 0x61bc, &(0x7f0000000400)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103)

2m37.922056558s ago: executing program 2 (id=2053):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7}, 0x0)
sync()

2m37.108834951s ago: executing program 32 (id=1897):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',utf8,\x00'], 0x81, 0x14f5, &(0x7f0000002a80)="$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")
mount$afs(&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00'], &(0x7f0000000080)='./file0\x00', 0x0, 0x181000, 0x0)

2m22.757993858s ago: executing program 33 (id=2053):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7}, 0x0)
sync()

43.68591709s ago: executing program 3 (id=3265):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000900), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3})

43.434673744s ago: executing program 3 (id=3269):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

43.154629408s ago: executing program 3 (id=3273):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2)

43.001896671s ago: executing program 3 (id=3275):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x1, 0x102, 0x0, {0x1, 0x3, 0x7fff, 0x4}})

42.793960864s ago: executing program 3 (id=3277):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

42.111813886s ago: executing program 3 (id=3281):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
sync()

26.858765057s ago: executing program 34 (id=3281):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
sync()

4.381747027s ago: executing program 1 (id=3707):
r0 = syz_open_dev$video4linux(&(0x7f0000001540), 0x6, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0x0, 0x0, {0x11, 0x9, 0x300d, 0x5, 0x3, 0x2, 0x0, 0x6}})

4.105484072s ago: executing program 1 (id=3711):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x101, 0x4, {0x80, 0x6, 0x47ca, 0x1}})

3.825482306s ago: executing program 1 (id=3715):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x2d, 0x1, 0x0, "1c13ebdaf2f20d55806ba058e8edb1439bfcc1000000efffffffffffffff00", 0x56544943})

3.659758679s ago: executing program 1 (id=3716):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x24, 0x0)

1.887215448s ago: executing program 6 (id=3735):
prctl$PR_SET_SECUREBITS(0x1c, 0x1e)
setuid(0xee00)

1.755721371s ago: executing program 4 (id=3737):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1f0, 0x238, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428)

1.583851323s ago: executing program 5 (id=3739):
r0 = socket$l2tp(0x2, 0x2, 0x73)
connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1, 0x3}, 0x10)

1.489755804s ago: executing program 6 (id=3740):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000301050000000000000000000200000024000180140001"], 0x38}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

1.489495855s ago: executing program 7 (id=3741):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x1, 0x196, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x0, 0x40, 0x8809, 'vlan1\x00', 'nr0\x00', 'virt_wifi0\x00', 'ip_vti0\x00', @remote, [0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xb6, 0x106, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x9, 0x0, {0x7}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xa32e023, 'syz0\x00', {0x3}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x20e)

1.318342777s ago: executing program 4 (id=3742):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x4}]}, 0x24}}, 0x0)

1.202874999s ago: executing program 5 (id=3743):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.16577539s ago: executing program 7 (id=3744):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=@polexpire={0xcc, 0x1b, 0xc8dbc5159e5c15d1, 0x0, 0x0, {{{@in=@private, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xcc}}, 0x0)

1.097621421s ago: executing program 6 (id=3745):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010001000000080003000048"], 0x44}}, 0x0)

1.096606291s ago: executing program 1 (id=3746):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x400837f, 0x4, 0xb5})

1.002705553s ago: executing program 4 (id=3747):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080))

935.338754ms ago: executing program 7 (id=3748):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000b00000007000000010000060400000007000000000000000000000001000005ffff000001000000010000000000000000"], 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

869.853565ms ago: executing program 5 (id=3749):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x10, 0x0, 0x0)

804.902286ms ago: executing program 6 (id=3750):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138)

698.765148ms ago: executing program 7 (id=3751):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x10)

682.737388ms ago: executing program 5 (id=3752):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0xf, 0x0, 0x34524742, 0x1, 0x7, 0x38, 0xc, 0x1, 0x1, 0x3, 0x1, 0x4}})

578.63782ms ago: executing program 4 (id=3753):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x2d, 0x3, "91abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xb0}}, 0x0)

507.634731ms ago: executing program 6 (id=3754):
setreuid(0xffffffffffffffff, 0xee00)
setresuid(0xee00, 0x0, 0x0)

437.232142ms ago: executing program 7 (id=3755):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000200), 0x4)

386.306173ms ago: executing program 5 (id=3756):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

337.291833ms ago: executing program 4 (id=3757):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)

255.369355ms ago: executing program 6 (id=3758):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)='B', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x8000, 0xfff, 0x200, 0xa8, 0x9, 0x2, 0xff, 0xdb}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0xe2}}], 0x48, 0x20004000}, 0x240000c0)

157.638037ms ago: executing program 7 (id=3759):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0)

124.054687ms ago: executing program 4 (id=3760):
openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==")

41.436408ms ago: executing program 5 (id=3761):
syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x200000b, &(0x7f00000002c0), 0xfe, 0x10f4, &(0x7f00000022c0)="$eJzs2LGK1FAUBuD/JqNgNXK3DwtaKMjiMr7AFgrTWFjbDVZ2TqXM4/g4spX9sg+wxYK9ksToCoIsGxwYvg9Ccn9ycnLLcwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9RXI/yVGT1ClrkpSk687Xl0m6KX/4pW1S8ubdevvyw+rVdnwtfdak9FXDup4+qnVVV/W0vjg6e1y3Hz+9b2+0LOlycb3bPHh9NetW+t7trF8EAACAw/D9zpZ77g8AAAD8y2wHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqNNDk6QkXXe+vkzS7fe3AAAAgDsqafJ2+bd8PAb47Vm+LsuQT74Ni+f5PNY/vX33e7cvAQAAgANVbszjT7L4NZf32XEWOTkZ1z9vuTpL2mEy/9PF9W4zXMe7TfmfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6wA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAgKkCAAD//4CP0SQ=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)

0s ago: executing program 1 (id=3762):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0xe, [{@remote}]}]}}}], 0x20}, 0x0)

kernel console output (not intermixed with test programs):

236] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  262.857737][T12776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  262.882637][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  262.908377][T12776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.932947][T12776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.941057][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  262.964708][ T5236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  263.002124][T12776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  263.052382][ T5236] usb 4-1: string descriptor 0 read error: -22
[  263.092488][ T5236] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  263.123162][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.145313][ T5236] usb 4-1: config 0 descriptor??
[  263.177655][ T5236] hub 4-1:0.0: bad descriptor, ignoring hub
[  263.216514][ T5236] hub: probe of 4-1:0.0 failed with error -5
[  263.252700][ T5236] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[  263.323018][   T27] audit: type=1326 audit(1750473040.307:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.6.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  263.408657][   T27] audit: type=1326 audit(1750473040.357:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.6.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  263.454751][T13761] loop1: detected capacity change from 0 to 64
[  263.562487][   T27] audit: type=1326 audit(1750473040.357:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.6.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  263.611304][ T5236] usb 4-1: USB disconnect, device number 9
[  263.692541][   T27] audit: type=1326 audit(1750473040.357:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.6.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  263.778473][   T27] audit: type=1326 audit(1750473040.357:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.6.2204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  264.168795][   T27] audit: type=1326 audit(1750473041.157:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76918e929 code=0x7ffc0000
[  264.256110][   T27] audit: type=1326 audit(1750473041.177:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fc76918e929 code=0x7ffc0000
[  264.385675][   T27] audit: type=1326 audit(1750473041.177:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76918e929 code=0x7ffc0000
[  264.502403][   T27] audit: type=1326 audit(1750473041.177:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13798 comm="syz.4.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76918e929 code=0x7ffc0000
[  264.552196][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2339'.
[  264.762082][T13822] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  265.242428][   T22] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  265.285918][T13846] loop4: detected capacity change from 0 to 64
[  265.432420][   T22] usb 2-1: Using ep0 maxpacket: 32
[  265.440007][   T22] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  265.493159][   T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.538229][   T22] usb 2-1: config 0 has no interface number 0
[  265.572563][   T22] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  265.619979][   T22] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  265.658147][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.682395][   T22] usb 2-1: Product: syz
[  265.686617][   T22] usb 2-1: Manufacturer: syz
[  265.705670][   T22] usb 2-1: SerialNumber: syz
[  265.723365][   T22] usb 2-1: config 0 descriptor??
[  265.765026][   T22] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[  265.782890][   T22] radio-si470x: probe of 2-1:0.35 failed with error -5
[  265.882395][   T26] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  265.959777][   T22] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  265.972625][   T22] usbhid 2-1:0.35: couldn't find an input interrupt endpoint
[  266.090023][   T26] usb 5-1: Using ep0 maxpacket: 32
[  266.098445][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  266.164993][   T26] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  266.201644][ T2188] usb 2-1: USB disconnect, device number 8
[  266.237132][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.293879][   T26] usb 5-1: Product: syz
[  266.298205][   T26] usb 5-1: Manufacturer: syz
[  266.326148][   T26] usb 5-1: SerialNumber: syz
[  266.353816][   T26] usb 5-1: config 0 descriptor??
[  266.376857][T13898] netlink: 'syz.6.2360': attribute type 1 has an invalid length.
[  266.394195][   T26] hub 5-1:0.0: bad descriptor, ignoring hub
[  266.400197][   T26] hub: probe of 5-1:0.0 failed with error -5
[  266.432454][T13898] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2360'.
[  266.489756][   T26] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14
[  266.558076][   T26] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  266.643820][   T26] usbtouchscreen: probe of 5-1:0.0 failed with error -22
[  266.723117][   T26] usb 5-1: USB disconnect, device number 12
[  266.779398][T13921] loop3: detected capacity change from 0 to 164
[  267.115893][T13921] syz.3.2364: attempt to access beyond end of device
[  267.115893][T13921] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  267.208922][T13921] syz.3.2364: attempt to access beyond end of device
[  267.208922][T13921] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  267.242945][T13936] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  267.302520][T13936] overlayfs: conflicting options: userxattr,redirect_dir=off
[  267.462595][   T26] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  267.652411][   T26] usb 7-1: config 0 has an invalid interface number: 72 but max is 0
[  267.669656][   T26] usb 7-1: config 0 has no interface number 0
[  267.690607][   T26] usb 7-1: too many endpoints for config 0 interface 72 altsetting 65: 192, using maximum allowed: 30
[  267.746455][   T26] usb 7-1: config 0 interface 72 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 192
[  267.830248][   T26] usb 7-1: config 0 interface 72 has no altsetting 0
[  267.858669][   T26] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  267.908849][   T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.950271][   T26] usb 7-1: config 0 descriptor??
[  268.191152][   T26] usb 7-1: USB disconnect, device number 2
[  268.202682][ T5236] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  268.414356][ T5236] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  268.442927][ T5236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.491227][ T5236] usb 6-1: config 0 descriptor??
[  268.704992][ T5236] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00
[  268.722363][ T5236] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  268.916185][ T5236] [drm:udl_init] *ERROR* Selecting channel failed
[  269.015705][ T5236] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  269.052321][ T5236] [drm] Initialized udl on minor 2
[  269.061273][ T5236] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  269.145275][ T5236] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  269.193448][ T5236] usb 6-1: USB disconnect, device number 4
[  269.279610][T14039] loop4: detected capacity change from 0 to 1024
[  269.956029][T14075] loop6: detected capacity change from 0 to 512
[  270.003602][T14080] netlink: 'syz.4.2403': attribute type 16 has an invalid length.
[  270.042530][T14080] netlink: 'syz.4.2403': attribute type 17 has an invalid length.
[  270.140464][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  270.148721][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  270.156334][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  270.169226][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  270.178720][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  270.217936][T14075] EXT4-fs (loop6): 1 orphan inode deleted
[  270.263215][    T9] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  270.302524][T14075] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  270.320001][    T9] EXT4-fs error (device loop6): ext4_release_dquot:6850: comm kworker/u4:0: Failed to release dquot type 1
[  270.335867][   T27] audit: type=1326 audit(1750473047.327:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0e58e929 code=0x7ffc0000
[  270.358315][    C1] vkms_vblank_simulate: vblank timer overrun
[  270.391938][T14075] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.492479][   T27] audit: type=1326 audit(1750473047.377:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f0b0e58e929 code=0x7ffc0000
[  270.599874][   T27] audit: type=1326 audit(1750473047.397:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0e58e929 code=0x7ffc0000
[  270.670117][   T27] audit: type=1326 audit(1750473047.397:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14093 comm="syz.1.2407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0e58e929 code=0x7ffc0000
[  270.956791][T12971] EXT4-fs (loop6): unmounting filesystem.
[  271.301420][T14128] ptrace attach of "./syz-executor exec"[4252] was attempted by ""[14128]
[  271.444187][T14134] loop5: detected capacity change from 0 to 512
[  271.506407][T14134] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  271.563601][T14134] EXT4-fs (loop5): 1 truncate cleaned up
[  271.569510][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'.
[  271.578815][T14134] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  271.627714][T14134] EXT4-fs error (device loop5): ext4_map_blocks:635: inode #2: block 4: comm syz.5.2421: lblock 0 mapped to illegal pblock 4 (length 1)
[  271.829120][T12122] EXT4-fs (loop5): unmounting filesystem.
[  272.036689][T14153] loop3: detected capacity change from 0 to 2048
[  272.052614][T14155] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2426'.
[  272.076342][T14153] EXT4-fs: Ignoring removed nomblk_io_submit option
[  272.177617][T14153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  272.386029][T14153] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 5: comm syz.3.2425: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=56 fake=0
[  272.462641][T14153] EXT4-fs (loop3): Remounting filesystem read-only
[  272.623515][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  272.801164][T14180] loop4: detected capacity change from 0 to 4096
[  272.875969][T14180] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  273.017436][T14180] ntfs3: loop4: Failed to load $Extend.
[  273.164901][   T27] audit: type=1326 audit(1750473050.157:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14208 comm="syz.6.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  273.192546][ T9556] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  273.272403][   T27] audit: type=1326 audit(1750473050.167:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14208 comm="syz.6.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  273.382504][   T27] audit: type=1326 audit(1750473050.167:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14208 comm="syz.6.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  273.411104][ T9556] usb 6-1: Using ep0 maxpacket: 16
[  273.431786][ T9556] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  273.472612][ T9556] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.480756][ T9556] usb 6-1: Product: syz
[  273.520143][   T27] audit: type=1326 audit(1750473050.167:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14208 comm="syz.6.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  273.543644][ T9556] usb 6-1: Manufacturer: syz
[  273.548280][ T9556] usb 6-1: SerialNumber: syz
[  273.570779][ T9556] usb 6-1: config 0 descriptor??
[  273.584929][ T9556] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  273.612539][ T9556] usb 6-1: Detected FT-X
[  273.749709][T14216] loop4: detected capacity change from 0 to 4096
[  273.791630][ T9556] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  273.803794][T14216] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  273.816411][ T9556] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  273.874786][ T9556] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  273.903813][ T9556] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  273.943256][ T9556] usb 6-1: USB disconnect, device number 5
[  273.996698][ T9556] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  274.020610][ T9556] ftdi_sio 6-1:0.0: device disconnected
[  274.097758][T14216] ntfs3: loop4: mft corrupted
[  274.103964][T14216] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  274.170470][T14258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2451'.
[  274.190643][T14216] ntfs3: loop4: Failed to load $MFT.
[  274.222665][T14258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2451'.
[  274.250310][T14258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2451'.
[  274.512788][ T2188] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  274.712538][ T2188] usb 2-1: Using ep0 maxpacket: 32
[  274.719699][ T2188] usb 2-1: config 0 has an invalid interface number: 244 but max is 0
[  274.762298][ T2188] usb 2-1: config 0 has no interface number 0
[  274.768472][ T2188] usb 2-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  274.850734][ T2188] usb 2-1: config 0 interface 244 has no altsetting 0
[  274.885444][ T2188] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c
[  274.921133][ T2188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.941385][ T2188] usb 2-1: Product: syz
[  274.951493][ T2188] usb 2-1: Manufacturer: syz
[  274.980363][ T2188] usb 2-1: SerialNumber: syz
[  274.994208][ T2188] usb 2-1: config 0 descriptor??
[  275.026230][ T2188] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort found
[  275.181098][T14304] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2464'.
[  275.212117][T14305] netlink: 'syz.6.2463': attribute type 21 has an invalid length.
[  275.220371][T14305] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2463'.
[  275.253729][ T2188] snd_usb_toneport 2-1:0.244: cannot get proper max packet size
[  275.256119][T14304] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2464'.
[  275.266482][ T2188] snd_usb_toneport 2-1:0.244: Line 6 GuitarPort now disconnected
[  275.289435][ T2188] snd_usb_toneport: probe of 2-1:0.244 failed with error -22
[  275.541101][ T5229] usb 2-1: USB disconnect, device number 9
[  275.677448][T14321] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  275.696054][T14321] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  275.941438][T14285] loop3: detected capacity change from 0 to 32768
[  276.003853][T14333] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  276.023259][T14285] ea_get: invalid extended attribute
[  276.042434][T14285] ffff88804ac93ab0: 04 00 00 00                                      ....
[  276.289934][T14341] device bond1 entered promiscuous mode
[  276.348326][T14341] 8021q: adding VLAN 0 to HW filter on device bond1
[  277.485354][T14424] netlink: 'syz.3.2487': attribute type 7 has an invalid length.
[  277.514281][T14424] netlink: 'syz.3.2487': attribute type 8 has an invalid length.
[  278.022547][T14402] loop1: detected capacity change from 0 to 32768
[  278.066484][T14402] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2481 (14402)
[  278.123976][T14402] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  278.140099][T14404] loop5: detected capacity change from 0 to 32768
[  278.153655][T14402] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  278.215106][T14402] BTRFS info (device loop1): metadata ratio 4
[  278.225583][T14404] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt
[  278.225583][T14404] 
[  278.243049][T14402] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  278.306572][T14404] ERROR: (device loop5): remounting filesystem as read-only
[  278.326107][T14451] loop3: detected capacity change from 0 to 2044
[  278.330399][T14402] BTRFS info (device loop1): force lzo compression, level 0
[  278.376530][T14402] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  278.405514][T14451] Alternate GPT is invalid, using primary GPT.
[  278.418635][T14451]  loop3: p1 p2 p3
[  278.438771][T14402] BTRFS info (device loop1): trying to use backup root at mount time
[  278.504376][T14402] BTRFS info (device loop1): doing ref verification
[  278.511108][T14402] BTRFS info (device loop1): enabling ssd optimizations
[  278.532864][T14402] BTRFS info (device loop1): using spread ssd allocation scheme
[  278.542694][T14402] BTRFS info (device loop1): using free space tree
[  278.954283][   T11] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  279.053437][T14402] BTRFS warning (device loop1): couldn't read tree root
[  279.060804][T14402] BTRFS warning (device loop1): try to load backup roots slot 1
[  279.089232][   T11] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  279.145527][ T5427] udevd[5427]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  279.156469][T14402] BTRFS warning (device loop1): couldn't read tree root
[  279.161103][ T5421] udevd[5421]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  279.194572][T14402] BTRFS warning (device loop1): try to load backup roots slot 2
[  279.202385][ T9556] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  279.214331][ T5425] udevd[5425]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  279.322015][T14402] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  279.354924][T14508] loop6: detected capacity change from 0 to 64
[  279.362915][T14402] BTRFS warning (device loop1): couldn't read tree root
[  279.370124][T14402] BTRFS warning (device loop1): try to load backup roots slot 3
[  279.382517][ T9556] usb 4-1: Using ep0 maxpacket: 8
[  279.391887][ T9556] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  279.433151][ T9556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.441601][ T9556] usb 4-1: Product: syz
[  279.501368][T14402] BTRFS info (device loop1): rebuilding free space tree
[  279.504167][ T9556] usb 4-1: Manufacturer: syz
[  279.544200][ T9556] usb 4-1: SerialNumber: syz
[  279.608082][T14402] BTRFS info (device loop1): checking UUID tree
[  279.619913][ T9556] usb 4-1: config 0 descriptor??
[  279.861667][ T9556] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  280.013807][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.081236][ T9556] usb write operation failed. (-71)
[  280.098690][ T9556] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  280.163346][ T9556] dvbdev: DVB: registering new adapter (Terratec H7)
[  280.170736][ T9556] usb 4-1: media controller created
[  280.245149][ T9556] usb read operation failed. (-71)
[  280.272123][ T9556] usb write operation failed. (-71)
[  280.313508][ T9556] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  280.341895][ T9556] usb 4-1: USB disconnect, device number 10
[  280.885088][T14573] netlink: 'syz.5.2516': attribute type 6 has an invalid length.
[  281.122408][   T26] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  281.324224][   T26] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  281.348013][   T26] usb 5-1: config 0 has no interface number 0
[  281.376558][   T26] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  281.422730][   T26] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  281.473365][   T26] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  281.542356][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.582459][   T26] usb 5-1: Product: syz
[  281.586715][   T26] usb 5-1: Manufacturer: syz
[  281.620884][   T26] usb 5-1: SerialNumber: syz
[  281.650783][   T26] usb 5-1: config 0 descriptor??
[  281.683422][T14574] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  281.692740][   T26] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  281.756951][   T26] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  281.767841][T14615] netlink: 'syz.3.2528': attribute type 21 has an invalid length.
[  281.842426][T14615] netlink: 'syz.3.2528': attribute type 1 has an invalid length.
[  281.975832][    C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  282.007948][T14618] loop1: detected capacity change from 0 to 4096
[  282.075600][T14618] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  282.178866][   T26] usb 5-1: USB disconnect, device number 13
[  282.198694][T14618] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  282.199606][   T26] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  282.279218][   T26] cyberjack 5-1:0.69: device disconnected
[  282.333118][T14642] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2532'.
[  282.349975][T14648] loop5: detected capacity change from 0 to 128
[  282.370468][T14618] ntfs3: loop1: ino=1b, "file0" The size of extended attributes must not exceed 64KiB
[  282.411047][T14648] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  282.474977][T14648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  282.581217][T14648] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05
[  282.604024][ T4252] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  282.652393][T14648] UDF-fs: error (device loop5): udf_count_free_bitmap: udf_count_free failed
[  282.796103][T14659] tmpfs: Bad value for 'mpol'
[  283.045484][T14698] loop6: detected capacity change from 0 to 128
[  283.123201][T14669] device bond1 entered promiscuous mode
[  283.172772][T14669] 8021q: adding VLAN 0 to HW filter on device bond1
[  283.189776][T14698] EXT4-fs (loop6): Test dummy encryption mode enabled
[  283.237193][T14698] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  283.294906][T14698] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  284.035304][T12971] EXT4-fs (loop6): unmounting filesystem.
[  284.048267][T14733] loop3: detected capacity change from 0 to 4096
[  284.106806][T14733] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  284.140426][T14662] loop1: detected capacity change from 0 to 32768
[  284.364976][T14662] JBD2: Ignoring recovery information on journal
[  284.425046][T14733] ntfs3: loop3: ino=1b, "file0" attr_set_size
[  284.431314][T14733] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  284.568873][T14662] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  284.777365][ T4252] ocfs2: Unmounting device (7,1) on (node local)
[  284.943251][   T27] audit: type=1326 audit(1750473061.937:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14770 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0e58e929 code=0x7ffc0000
[  285.031479][   T27] audit: type=1326 audit(1750473061.937:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14770 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b0e58d290 code=0x7ffc0000
[  285.051331][T14776] loop6: detected capacity change from 0 to 2048
[  285.134414][   T27] audit: type=1326 audit(1750473061.937:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14770 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0b0e590157 code=0x7ffc0000
[  285.189342][T14776] Alternate GPT is invalid, using primary GPT.
[  285.226345][T14776]  loop6: p1 p2 p3
[  285.299164][T14758] Bluetooth: hci0: Opcode 0x080f failed: -4
[  285.311649][T14786] ipt_CLUSTERIP: Please specify destination IP
[  285.343986][   T27] audit: type=1326 audit(1750473061.937:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14770 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b0e58e929 code=0x7ffc0000
[  285.515935][   T27] audit: type=1326 audit(1750473061.937:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14770 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0b0e590157 code=0x7ffc0000
[  285.613800][   T27] audit: type=1326 audit(1750473061.937:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14770 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0b0e58d58a code=0x7ffc0000
[  285.741813][T14800] netlink: 'syz.6.2561': attribute type 2 has an invalid length.
[  285.762390][   T27] audit: type=1326 audit(1750473061.937:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14770 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0e58e929 code=0x7ffc0000
[  285.782361][T14800] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2561'.
[  285.795147][ T5425] udevd[5425]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  285.824746][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  285.832759][T14807] xt_nfacct: accounting object `syz1' does not exists
[  285.849258][ T5310] udevd[5310]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  285.892769][   T27] audit: type=1326 audit(1750473061.937:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14770 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0e58e929 code=0x7ffc0000
[  286.471134][T14775] loop3: detected capacity change from 0 to 32768
[  286.484983][T14818] loop6: detected capacity change from 0 to 4096
[  286.513818][ T4268] Bluetooth: hci0: command 0x080f tx timeout
[  286.645001][T14775] JBD2: Ignoring recovery information on journal
[  286.860495][T14775] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  287.137017][ T4253] (syz-executor,4253,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 22
[  287.186531][ T4253] ocfs2: Unmounting device (7,3) on (node local)
[  287.217395][T14845] loop4: detected capacity change from 0 to 128
[  287.304374][T14845] EXT4-fs (loop4): Test dummy encryption mode enabled
[  287.310295][T14839] loop5: detected capacity change from 0 to 4096
[  287.397727][T14845] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  287.407684][T14855] netlink: 'syz.1.2577': attribute type 1 has an invalid length.
[  287.434127][T14839] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  287.469197][T14845] ext4 filesystem being mounted at /512/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  287.518130][T14839] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  288.173063][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  288.509325][T14900] ieee802154 phy0 wpan0: encryption failed: -90
[  289.099788][T14922] loop5: detected capacity change from 0 to 1024
[  289.165163][T14922] EXT4-fs: Ignoring removed mblk_io_submit option
[  289.247116][T14922] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  289.499800][T14938] loop4: detected capacity change from 0 to 1024
[  289.655257][T14938] hfsplus: bad catalog entry type
[  289.674004][T12122] EXT4-fs (loop5): unmounting filesystem.
[  289.722713][T14945] loop1: detected capacity change from 0 to 1024
[  289.803895][T14945] EXT4-fs: Ignoring removed bh option
[  289.809384][T14945] EXT4-fs: inline encryption not supported
[  289.887835][T14892] loop3: detected capacity change from 0 to 32768
[  289.910209][T14945] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  289.935615][T14958] loop5: detected capacity change from 0 to 512
[  289.966362][T14892] (syz.3.2584,14892,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  289.994679][T14945] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.2593: lblock 2 mapped to illegal pblock 2 (length 1)
[  290.053597][T14958] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  290.098179][T14892] (syz.3.2584,14892,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  290.132444][T14945] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  290.140656][T14945] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.2593: lblock 0 mapped to illegal pblock 48 (length 1)
[  290.169367][T14958] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  290.244427][T14892] (syz.3.2584,14892,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  290.253910][T14969] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2596'.
[  290.268981][T14958] Quota error (device loop5): write_blk: dquota write failed
[  290.282599][T14958] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  290.302440][T14969] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  290.310275][T14945] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  290.362635][T14969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.383120][T14892] JBD2: Ignoring recovery information on journal
[  290.391403][T14945] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.2593: Failed to acquire dquot type 0
[  290.403283][T14958] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.2594: Failed to acquire dquot type 0
[  290.473286][T14958] EXT4-fs (loop5): 1 truncate cleaned up
[  290.479364][T14945] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  290.511545][T14958] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  290.526347][T14892] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  290.531783][T14945] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.2593: mark_inode_dirty error
[  290.669985][T14945] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  290.740900][T14945] EXT4-fs (loop1): 1 orphan inode deleted
[  290.754701][T12776] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  290.781399][T14945] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  290.828639][T12776] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  290.885543][T12776] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:8: Failed to release dquot type 0
[  290.902430][ T2188] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  290.964606][ T4253] ocfs2: Unmounting device (7,3) on (node local)
[  291.037011][T12776] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm kworker/u4:8: lblock 2 mapped to illegal pblock 2 (length 1)
[  291.094705][ T2188] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  291.116165][T12776] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  291.132404][ T2188] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 62709, setting to 1024
[  291.172873][T12776] EXT4-fs error (device loop1): ext4_write_dquot:6794: comm kworker/u4:8: Failed to commit dquot type 0
[  291.204533][ T2188] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024
[  291.230565][T14956] loop6: detected capacity change from 0 to 32768
[  291.242517][T12776] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  291.255395][ T2188] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  291.302322][ T2188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.346515][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  291.369590][ T4252] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0
[  291.371752][T14958] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  291.394056][ T2188] usb 6-1: invalid MIDI out EP 0
[  291.443650][ T4252] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  291.516463][ T2188] snd-usb-audio: probe of 6-1:27.0 failed with error -22
[  291.551667][ T4252] EXT4-fs error (device loop1): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error
[  291.568329][T14956] XFS (loop6): Mounting V5 Filesystem
[  291.648695][ T4243] udevd[4243]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  291.894600][T14956] XFS (loop6): Ending clean mount
[  291.949695][T14956] XFS (loop6): Quotacheck needed: Please wait.
[  291.992047][ T5229] usb 6-1: USB disconnect, device number 6
[  292.168969][T14956] XFS (loop6): Quotacheck: Done.
[  292.446805][T12971] XFS (loop6): Unmounting Filesystem
[  292.692562][T15071] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2611'.
[  292.773262][T12122] EXT4-fs (loop5): unmounting filesystem.
[  293.546240][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  293.618061][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  293.666460][T15103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  294.577617][T15151] loop5: detected capacity change from 0 to 64
[  294.701082][T15155] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  295.231481][T15123] loop1: detected capacity change from 0 to 32768
[  295.310123][T15123] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2623 (15123)
[  295.310403][T15180] loop5: detected capacity change from 0 to 256
[  295.397746][T15123] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  295.465323][T15123] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  295.467692][T15180] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005)
[  295.495190][T15123] BTRFS info (device loop1): enabling disk space caching
[  295.525185][T15123] BTRFS info (device loop1): turning off barriers
[  295.549524][T15123] BTRFS info (device loop1): force clearing of disk cache
[  295.572549][T15180] FAT-fs (loop5): Filesystem has been set read-only
[  295.599479][T15123] BTRFS info (device loop1): enabling ssd optimizations
[  295.682331][T15123] BTRFS info (device loop1): using spread ssd allocation scheme
[  295.712965][T15123] BTRFS info (device loop1): enabling free space tree
[  295.719979][T15123] BTRFS info (device loop1): using free space tree
[  295.985989][T12122] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005)
[  296.171346][T15123] BTRFS info (device loop1): rebuilding free space tree
[  296.199802][T15123] BTRFS info (device loop1): checking UUID tree
[  296.231694][T15233] netlink: 'syz.5.2644': attribute type 1 has an invalid length.
[  296.280772][T15239] cifs: Unknown parameter 'no'�a��N�[G�zob,er��;%j��
[  296.280772][T15239] ��z�,�@q�������J#�"��h/.�W1ȱ�nNC�"�C�׈�E)�8+����'
[  296.510743][ T4252] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  296.553813][T15244] loop6: detected capacity change from 0 to 1024
[  296.632561][T15247] sctp: [Deprecated]: syz.5.2650 (pid 15247) Use of int in maxseg socket option.
[  296.632561][T15247] Use struct sctp_assoc_value instead
[  296.709477][ T4437] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop1 scanned by udevd (4437)
[  297.022835][ T4321] hfsplus: b-tree write err: -5, ino 4
[  297.222723][T15269] dlm: no locking on control device
[  297.239633][T15271] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  297.453649][T15280] loop3: detected capacity change from 0 to 8
[  297.795476][T15300] netlink: 'syz.4.2664': attribute type 12 has an invalid length.
[  297.856091][T15303] netlink: zone id is out of range
[  297.864719][T15300] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2664'.
[  298.399265][T15327] loop5: detected capacity change from 0 to 512
[  298.472611][T15327] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  298.650842][T15327] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #15: comm syz.5.2673: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  298.808978][T15327] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2673: couldn't read orphan inode 15 (err -117)
[  298.890380][T15327] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  298.929416][T15327] ext2 filesystem being mounted at /113/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.113771][T15360] loop1: detected capacity change from 0 to 1024
[  299.125921][T15327] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.2673: Directory hole found for htree leaf block 0
[  299.204556][T15360] hfsplus: xattr searching failed
[  299.302597][T15370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2685'.
[  299.364697][T15370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2685'.
[  299.474695][T12122] EXT4-fs (loop5): unmounting filesystem.
[  299.609992][T15381] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  299.939568][T15397] loop3: detected capacity change from 0 to 164
[  300.020886][T15400] netlink: 'syz.6.2693': attribute type 5 has an invalid length.
[  300.031770][T15397] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  300.081439][T15408] netlink: 'syz.5.2694': attribute type 10 has an invalid length.
[  300.184415][T15409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2696'.
[  300.345319][T15418] netlink: 193 bytes leftover after parsing attributes in process `syz.6.2698'.
[  300.584216][T15429] IPv6: NLM_F_REPLACE set, but no existing node found!
[  300.726538][T15431] loop6: detected capacity change from 0 to 2048
[  300.751837][T15439] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2703'.
[  300.778329][T15438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  300.779396][T15431] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.866933][T15444] netlink: 'syz.1.2706': attribute type 24 has an invalid length.
[  301.483744][T15472] program syz.3.2715 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  301.670132][T15479] loop4: detected capacity change from 0 to 512
[  301.744458][T15479] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  301.853502][T15479] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.2716: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0)
[  301.985043][T15479] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2716: couldn't read orphan inode 15 (err -117)
[  302.062992][T15479] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  302.081941][T15479] ext2 filesystem being mounted at /549/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.185335][T15479] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.2716: Directory hole found for htree leaf block 0
[  302.230714][T15507] loop1: detected capacity change from 0 to 64
[  302.445938][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  302.636235][T15527] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2730'.
[  303.172458][ T5928] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  303.405625][ T5928] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  303.432317][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.457607][ T5928] usb 6-1: config 0 descriptor??
[  303.474215][ T5928] cp210x 6-1:0.0: cp210x converter detected
[  303.499594][T15578] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2744'.
[  303.562524][T15578] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2744'.
[  303.684616][ T5928] usb 6-1: cp210x converter now attached to ttyUSB0
[  303.918103][ T5231] usb 6-1: USB disconnect, device number 7
[  303.952130][ T5231] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  304.005160][ T5231] cp210x 6-1:0.0: device disconnected
[  304.331371][T15626] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  304.435164][T15626] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  304.489509][T15626] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  304.531459][T15626] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  304.605822][T15626] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  304.671688][T15626] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  304.705220][T15626] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  305.191028][T15669] xt_cluster: node mask cannot exceed total number of nodes
[  305.508407][T15680] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2773'.
[  305.720693][T15693] loop5: detected capacity change from 0 to 16
[  305.757183][   T27] audit: type=1326 audit(1750473082.747:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83898e929 code=0x7ffc0000
[  305.783067][ T2188] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  305.800008][T15693] erofs: (device loop5): mounted with root inode @ nid 36.
[  305.846433][   T27] audit: type=1326 audit(1750473082.747:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fa83898e929 code=0x7ffc0000
[  305.915725][T15700] loop1: detected capacity change from 0 to 1764
[  305.972456][ T2188] usb 7-1: Using ep0 maxpacket: 8
[  305.973778][   T27] audit: type=1326 audit(1750473082.747:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83898e929 code=0x7ffc0000
[  305.979440][ T2188] usb 7-1: config 1 has an invalid interface number: 128 but max is 1
[  306.093333][   T27] audit: type=1326 audit(1750473082.747:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.3.2777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83898e929 code=0x7ffc0000
[  306.122872][ T5231] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  306.146049][ T2188] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.180413][ T2188] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  306.190022][ T2188] usb 7-1: config 1 has no interface number 0
[  306.233208][ T2188] usb 7-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  306.284162][ T2188] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  306.332343][ T5231] usb 5-1: Using ep0 maxpacket: 8
[  306.337532][ T2188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.354141][ T5231] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  306.382861][ T5231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.393732][ T2188] usb 7-1: Product: syz
[  306.397907][ T2188] usb 7-1: Manufacturer: syz
[  306.429454][ T2188] usb 7-1: SerialNumber: syz
[  306.434473][ T5231] usb 5-1: config 0 has no interface number 0
[  306.440601][ T5231] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  306.465013][ T2188] cdc_wdm 7-1:1.128: skipping garbage
[  306.470443][ T2188] cdc_wdm 7-1:1.128: invalid descriptor buffer length
[  306.498187][ T5231] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  306.508478][ T2188] cdc_wdm: probe of 7-1:1.128 failed with error -22
[  306.532422][ T5231] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  306.565634][ T5231] usb 5-1: config 0 interface 52 has no altsetting 0
[  306.590543][ T5231] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  306.592606][ T5335] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  306.616782][ T5231] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  306.650397][ T5231] usb 5-1: Product: syz
[  306.654923][ T5231] usb 5-1: SerialNumber: syz
[  306.672445][   T22] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  306.685702][ T5231] usb 5-1: config 0 descriptor??
[  306.792415][ T5335] usb 6-1: Using ep0 maxpacket: 16
[  306.794807][ T5928] usb 7-1: USB disconnect, device number 3
[  306.799275][ T5335] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  306.844485][ T5335] usb 6-1: config 0 has no interface number 0
[  306.851206][ T5335] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  306.885395][ T5335] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  306.903350][ T5231] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input15
[  306.914239][   T22] usb 4-1: config 1 has an invalid interface descriptor of length 6, skipping
[  306.924720][ T3609] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  306.944258][   T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.962360][ T5335] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  306.972400][   T22] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  306.984662][ T5335] usb 6-1: Product: syz
[  306.988963][ T5335] usb 6-1: SerialNumber: syz
[  306.995546][   T22] usb 4-1: config 1 has no interface number 1
[  307.022875][ T5335] usb 6-1: config 0 descriptor??
[  307.030482][   T22] usb 4-1: string descriptor 0 read error: -22
[  307.046323][ T5335] cm109 6-1:0.8: invalid payload size 208, expected 4
[  307.054075][   T22] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  307.072037][ T5335] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input16
[  307.082560][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.093643][T15757] loop1: detected capacity change from 0 to 512
[  307.122735][ T5231] usb 5-1: USB disconnect, device number 14
[  307.140932][T15757] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  307.150005][ T3609] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -19
[  307.211412][   T22] usb 4-1: MIDIStreaming interface descriptor not found
[  307.257307][   T22] snd-usb-audio: probe of 4-1:1.2 failed with error -16
[  307.283724][T15757] EXT4-fs (loop1): 1 truncate cleaned up
[  307.344110][T15757] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  307.467257][ T5335] usb 4-1: USB disconnect, device number 11
[  307.505930][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  307.744773][    C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71
[  307.745334][ T5231] usb 6-1: USB disconnect, device number 8
[  307.751966][    C1] cm109 6-1:0.8: cm109_urb_irq_callback: usb_submit_urb (urb_ctl) failed -19
[  307.788969][ T5231] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  308.140685][T15832] netlink: 'syz.6.2793': attribute type 10 has an invalid length.
[  308.234928][T15832] team0: Cannot enslave team device to itself
[  308.263453][T15834] device hsr0 entered promiscuous mode
[  308.282581][T15834] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[  308.629170][T15854] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  309.171995][T15875] cgroup: Invalid name
[  309.198335][T15881] loop1: detected capacity change from 0 to 16
[  309.243472][T15881] erofs: (device loop1): mounted with root inode @ nid 36.
[  309.388791][T15881] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  309.449336][T15881] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36
[  309.492580][T15881] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[  309.735543][T15903] loop6: detected capacity change from 0 to 256
[  310.073065][T15920] netlink: 'syz.3.2821': attribute type 3 has an invalid length.
[  311.812518][ T9557] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  312.002425][ T9557] usb 7-1: Using ep0 maxpacket: 16
[  312.002624][T16025] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2852'.
[  312.019410][ T9557] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4
[  312.066041][ T9557] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.104867][ T9557] usb 7-1: Product: syz
[  312.109131][ T9557] usb 7-1: Manufacturer: syz
[  312.152851][ T9557] usb 7-1: SerialNumber: syz
[  312.176950][T16034] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  312.193440][ T9557] usb 7-1: config 0 descriptor??
[  312.265098][ T9557] usb_ehset_test: probe of 7-1:0.0 failed with error -32
[  312.275151][T16034] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  312.345238][T16034] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  312.386323][T16034] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  312.407239][T16034] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  312.456807][T16034] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  312.495702][   T26] usb 7-1: USB disconnect, device number 4
[  313.555603][T16107] netlink: 'syz.4.2873': attribute type 10 has an invalid length.
[  313.572462][   T26] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  313.589118][T16107] device team0 left promiscuous mode
[  313.602190][T16107] device team_slave_0 left promiscuous mode
[  313.615319][T16107] device team_slave_1 left promiscuous mode
[  313.649950][T16107] team0: Cannot enslave team device to itself
[  313.777972][   T26] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  313.799001][   T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.834959][   T26] usb 6-1: Product: syz
[  313.853235][   T26] usb 6-1: Manufacturer: syz
[  313.871307][   T26] usb 6-1: SerialNumber: syz
[  313.906760][   T26] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  313.913134][T16121] Cannot find map_set index 0 as target
[  314.035939][   T26] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  314.111367][T16088] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  314.227178][T16133] random: crng reseeded on system resumption
[  314.431593][T16141] I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  314.463429][T16141] gfs2: error 10 reading superblock
[  314.603751][ T9557] usb 6-1: USB disconnect, device number 9
[  315.148222][T16166] loop6: detected capacity change from 0 to 128
[  315.152493][   T26] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  315.201742][   T26] ath9k_htc: Failed to initialize the device
[  315.203660][T16166] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  315.225986][ T9557] usb 6-1: ath9k_htc: USB layer deinitialized
[  315.259902][T16166] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  315.323154][ T4268] Bluetooth: hci0: command 0x0c20 tx timeout
[  315.517591][T12971] EXT4-fs (loop6): unmounting filesystem.
[  315.725635][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2894'.
[  315.949385][T16200] netlink: 'syz.3.2898': attribute type 10 has an invalid length.
[  316.001000][   T27] audit: type=1326 audit(1750473092.987:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16202 comm="syz.6.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  316.036653][T16205] loop5: detected capacity change from 0 to 256
[  316.086022][T16200] team0: Cannot enslave team device to itself
[  316.100442][   T27] audit: type=1326 audit(1750473093.017:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16202 comm="syz.6.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  316.188531][T16205] FAT-fs (loop5): Directory bread(block 64) failed
[  316.232399][T16205] FAT-fs (loop5): Directory bread(block 65) failed
[  316.239078][T16205] FAT-fs (loop5): Directory bread(block 66) failed
[  316.252535][   T27] audit: type=1326 audit(1750473093.017:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16202 comm="syz.6.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  316.292817][T16205] FAT-fs (loop5): Directory bread(block 67) failed
[  316.299614][T16205] FAT-fs (loop5): Directory bread(block 68) failed
[  316.337235][T16205] FAT-fs (loop5): Directory bread(block 69) failed
[  316.351104][T16162] loop1: detected capacity change from 0 to 32768
[  316.362634][T16205] FAT-fs (loop5): Directory bread(block 70) failed
[  316.369343][   T27] audit: type=1326 audit(1750473093.017:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16202 comm="syz.6.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc912f8e929 code=0x7ffc0000
[  316.395113][T16205] FAT-fs (loop5): Directory bread(block 71) failed
[  316.429304][T16216] loop3: detected capacity change from 0 to 164
[  316.439994][T16205] FAT-fs (loop5): Directory bread(block 72) failed
[  316.457393][T16162] 
[  316.457393][T16162]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  316.457393][T16162] 
[  316.469019][T16205] FAT-fs (loop5): Directory bread(block 73) failed
[  316.514203][T16216] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  316.532855][T16162] ERROR: (device loop1): diWrite: ixpxd invalid
[  316.532855][T16162] 
[  316.568120][T16216] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  316.583706][T16162] ERROR: (device loop1): txCommit: 
[  316.583706][T16162] 
[  316.815608][ T4252] 
[  316.815608][ T4252]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  316.815608][ T4252] 
[  316.862421][ T4252] 
[  316.862421][ T4252]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  316.862421][ T4252] 
[  317.027539][T16236] Cannot find del_set index 0 as target
[  317.240371][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  317.246821][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  317.410794][T16255] loop1: detected capacity change from 0 to 190
[  317.473762][T16255] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum.
[  317.506117][T16255] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  317.583240][T16255] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  317.692123][T16255] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr.
[  317.727530][T16255] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  317.802824][T16255] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  317.853290][T16255] ntfs: volume version 3.1.
[  317.873707][T16255] syz.1.2915: attempt to access beyond end of device
[  317.873707][T16255] loop1: rw=0, sector=552, nr_sectors = 8 limit=190
[  318.004457][T16255] syz.1.2915: attempt to access beyond end of device
[  318.004457][T16255] loop1: rw=0, sector=552, nr_sectors = 8 limit=190
[  318.040464][T16281] loop6: detected capacity change from 0 to 1764
[  318.119803][T16281] iso9660: Corrupted directory entry in block 2 of inode 1920
[  318.343839][T16298] netlink: 'syz.4.2926': attribute type 1 has an invalid length.
[  318.384401][T16298] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2926'.
[  318.649602][T16312] [U] v�3��f��"S��/��4:�XTz�W�t��lW��=
[  318.682517][T16312] [U] J"�e:��"


[  318.763203][ T4297] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  318.894709][T16277] loop5: detected capacity change from 0 to 32768
[  318.964827][ T4297] usb 7-1: unable to get BOS descriptor or descriptor too short
[  318.983867][ T4297] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.005950][T16277] 
[  319.005950][T16277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  319.005950][T16277] 
[  319.055418][ T4297] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  319.102566][ T4297] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  319.114332][T16277] 
[  319.114332][T16277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  319.114332][T16277] 
[  319.160161][ T4297] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  319.200311][ T4297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.201173][T16277] 
[  319.201173][T16277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  319.201173][T16277] 
[  319.239436][ T4297] usb 7-1: Product: syz
[  319.250858][ T4297] usb 7-1: Manufacturer: syz
[  319.273034][ T4297] usb 7-1: SerialNumber: syz
[  319.282633][T16277] 
[  319.282633][T16277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  319.282633][T16277] 
[  319.334715][ T4297] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  319.335541][T16277] 
[  319.335541][T16277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  319.335541][T16277] 
[  319.341732][ T4297] cdc_ncm 7-1:1.0: bind() failure
[  319.430776][T16277] 
[  319.430776][T16277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  319.430776][T16277] 
[  319.473064][T16277] 
[  319.473064][T16277]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  319.473064][T16277] 
[  319.525358][  T108] 
[  319.525358][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  319.525358][  T108] 
[  319.675625][ T4297] usb 7-1: USB disconnect, device number 5
[  319.776243][T12122] 
[  319.776243][T12122]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  319.776243][T12122] 
[  319.852372][T12122] 
[  319.852372][T12122]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  319.852372][T12122] 
[  319.970814][T16373] xt_CT: You must specify a L4 protocol and not use inversions on it
[  320.083999][T16369] loop3: detected capacity change from 0 to 4096
[  320.150436][T16369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  320.411579][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  321.551138][T16388] loop5: detected capacity change from 0 to 32768
[  321.618476][T16388] read_mapping_page failed!
[  321.666589][T16433] device geneve2 entered promiscuous mode
[  322.262523][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2970'.
[  322.643147][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'.
[  322.662462][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2977'.
[  322.942812][T16488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2979'.
[  323.160520][T16502] loop6: detected capacity change from 0 to 512
[  323.244200][T16502] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  323.281759][T16502] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  323.628443][T12971] EXT4-fs (loop6): unmounting filesystem.
[  323.841461][   T27] kauditd_printk_skb: 13 callbacks suppressed
[  323.841479][   T27] audit: type=1326 audit(1750473100.827:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16536 comm="syz.4.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76918e929 code=0x7ffc0000
[  323.870096][    C0] vkms_vblank_simulate: vblank timer overrun
[  323.978452][   T27] audit: type=1326 audit(1750473100.847:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16536 comm="syz.4.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fc76918e929 code=0x7ffc0000
[  324.029758][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2997'.
[  324.111759][T16548] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2997'.
[  324.122663][   T27] audit: type=1326 audit(1750473100.847:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16536 comm="syz.4.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76918e929 code=0x7ffc0000
[  324.157811][T16552] netlink: 'syz.6.2998': attribute type 3 has an invalid length.
[  324.207740][   T27] audit: type=1326 audit(1750473100.847:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16536 comm="syz.4.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc76918e929 code=0x7ffc0000
[  324.242354][T16552] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2998'.
[  324.477334][T16603] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  324.583135][T16561] loop3: detected capacity change from 0 to 4096
[  324.638615][T16561] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  324.740731][T16561] ntfs3: loop3: Failed to load $Extend.
[  324.741943][T16617] loop4: detected capacity change from 0 to 16
[  324.874243][T16617] erofs: (device loop4): mounted with root inode @ nid 36.
[  324.967780][T16617] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  325.057813][T16617] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851]
[  325.106154][T16629] tmpfs: Bad value for 'mpol'
[  325.113504][T16617] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  325.926313][T16668] xfrm0 speed is unknown, defaulting to 1000
[  326.048533][T16610] loop1: detected capacity change from 0 to 32768
[  327.162562][T16736] device netdevsim0 entered promiscuous mode
[  327.169344][T16736] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3033'.
[  327.199181][T16739] loop1: detected capacity change from 0 to 16
[  327.250490][T16744] loop4: detected capacity change from 0 to 64
[  327.273427][T16739] erofs: (device loop1): mounted with root inode @ nid 36.
[  327.314251][T16739] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89
[  327.372440][T16739] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89
[  327.427413][ T4268] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  327.441691][T16739] erofs: (device loop1): z_erofs_readahead: readahead error at page 11 @ nid 89
[  327.533083][T16739] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 89
[  327.572452][T16739] erofs: (device loop1): z_erofs_readahead: readahead error at page 9 @ nid 89
[  327.624828][T16739] erofs: (device loop1): z_erofs_readahead: readahead error at page 8 @ nid 89
[  327.662425][T16739] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89
[  327.722378][T16739] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89
[  327.760705][T16739] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89
[  327.816234][T16739] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89
[  327.892832][T16739] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 4 @ nid 89
[  327.941890][T16739] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192]
[  328.042798][   T27] audit: type=1800 audit(1750473105.037:1823): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3034" name="file3" dev="loop1" ino=89 res=0 errno=0
[  328.106235][T16739] syz.1.3034 (16739) used greatest stack depth: 20392 bytes left
[  328.177241][T16768] loop5: detected capacity change from 0 to 2048
[  328.297917][T16768] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  328.662648][ T4297] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  328.796141][T16794] netlink: 'syz.6.3048': attribute type 21 has an invalid length.
[  328.834870][T16794] netlink: 160 bytes leftover after parsing attributes in process `syz.6.3048'.
[  328.862425][ T4297] usb 6-1: Using ep0 maxpacket: 16
[  328.869700][ T4297] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  328.905881][ T4297] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.943975][ T4297] usb 6-1: config 0 has no interface number 0
[  328.967119][ T4297] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  328.999439][ T4297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.031069][ T4297] usb 6-1: Product: syz
[  329.056998][ T4297] usb 6-1: Manufacturer: syz
[  329.079686][ T4297] usb 6-1: SerialNumber: syz
[  329.115166][ T4297] usb 6-1: config 0 descriptor??
[  329.147224][T16806] xt_bpf: check failed: parse error
[  329.154307][ T4297] usb 6-1: Found UVC 0.00 device syz (046d:08f3)
[  329.173281][ T4297] usb 6-1: No valid video chain found.
[  329.349564][ T4297] usb 6-1: USB disconnect, device number 10
[  329.398848][T16816] netlink: 'syz.6.3054': attribute type 10 has an invalid length.
[  329.474645][T16816] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  329.510174][T16816] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  329.539073][T16824] loop4: detected capacity change from 0 to 1024
[  329.589421][T16816] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  329.704807][T16816] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  330.710302][T16822] loop3: detected capacity change from 0 to 32768
[  330.894906][T16822] XFS (loop3): Mounting V5 Filesystem
[  331.183246][T16822] XFS (loop3): Ending clean mount
[  331.233527][T16822] XFS (loop3): Quotacheck needed: Please wait.
[  331.357246][T16822] XFS (loop3): Quotacheck: Done.
[  331.594137][ T4253] XFS (loop3): Unmounting Filesystem
[  331.945208][T16920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'.
[  332.032630][ T4304] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  332.239222][ T4304] usb 6-1: Using ep0 maxpacket: 32
[  332.246496][ T4304] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.274344][ T4304] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  332.310611][ T4304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.346169][ T4304] usb 6-1: Product: syz
[  332.350406][ T4304] usb 6-1: Manufacturer: syz
[  332.392325][ T4304] usb 6-1: SerialNumber: syz
[  332.434764][ T4304] usb 6-1: config 0 descriptor??
[  332.473141][ T4304] usb 6-1: bad CDC descriptors
[  332.478345][ T4304] usb 6-1: unsupported MDLM descriptors
[  332.650111][ T2188] usb 6-1: USB disconnect, device number 11
[  332.828778][T16946] loop4: detected capacity change from 0 to 4096
[  333.726356][T16994] netlink: 'syz.3.3101': attribute type 21 has an invalid length.
[  333.992392][ T2188] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  334.194992][ T2188] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  334.242775][ T2188] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  334.313139][ T2188] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  334.340782][ T2188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  334.361285][ T2188] usb 7-1: SerialNumber: syz
[  334.410908][T17024] loop1: detected capacity change from 0 to 512
[  334.414820][ T2188] usb 7-1: 0:2 : does not exist
[  334.586996][T17024] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  334.626730][T17024] ext4 filesystem being mounted at /647/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  334.885791][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  335.006406][ T9557] usb 7-1: USB disconnect, device number 6
[  336.175692][T17116] loop6: detected capacity change from 0 to 128
[  336.362190][T17116] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  336.372823][T17127] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3132'.
[  336.455142][T17116] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  336.613968][T17116] EXT4-fs (loop6): resizing filesystem from 64 to 1 blocks
[  336.742664][T17116] EXT4-fs warning (device loop6): ext4_resize_fs:2051: can't shrink FS - resize aborted
[  336.766979][T17141] overlayfs: missing 'lowerdir'
[  336.821313][T17146] loop4: detected capacity change from 0 to 24
[  336.924475][T17146] romfs: read error for inode 0x8000
[  336.983751][T12971] EXT4-fs (loop6): unmounting filesystem.
[  337.366334][T17178] loop5: detected capacity change from 0 to 64
[  337.434358][ T5231] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  337.634549][ T5231] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  337.661680][ T5231] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  337.707791][ T5231] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  337.761117][ T5231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.785052][T17185] loop1: detected capacity change from 0 to 4096
[  337.800825][T17163] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  337.831127][T17185] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  338.004691][T17185] ntfs3: loop1: failed to convert "c46c" to cp864
[  338.033597][T17215] netlink: 344 bytes leftover after parsing attributes in process `syz.4.3153'.
[  338.378184][ T4297] usb 7-1: USB disconnect, device number 7
[  338.522070][T17250] loop3: detected capacity change from 0 to 256
[  338.764781][T17253] loop5: detected capacity change from 0 to 4096
[  338.892394][ T2188] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  339.082330][ T2188] usb 4-1: Using ep0 maxpacket: 32
[  339.089421][ T2188] usb 4-1: config 4 has an invalid interface number: 228 but max is 0
[  339.124527][ T2188] usb 4-1: config 4 has no interface number 0
[  339.130748][ T2188] usb 4-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11
[  339.200197][ T2188] usb 4-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024
[  339.236998][ T2188] usb 4-1: config 4 interface 228 has no altsetting 0
[  339.273459][ T2188] usb 4-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  339.312722][ T2188] usb 4-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  339.337573][ T2188] usb 4-1: Product: syz
[  339.356483][ T2188] usb 4-1: Manufacturer: syz
[  339.376153][ T2188] usb 4-1: SerialNumber: syz
[  339.662876][ T2188] usb 4-1: invalid MIDI in EP 0
[  339.769227][ T2188] snd-usb-audio: probe of 4-1:4.228 failed with error -22
[  339.832838][ T2188] usb 4-1: USB disconnect, device number 12
[  340.073264][ T5421] udevd[5421]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  340.294127][T17335] loop6: detected capacity change from 0 to 4096
[  340.353145][T17335] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00
[  340.361101][T17335] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00
[  340.471144][T17335] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00
[  340.506843][T17335] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00
[  340.534786][T17362] netlink: 'syz.1.3185': attribute type 21 has an invalid length.
[  340.552954][T17335] ntfs3: loop6: try to read out of volume at offset 0x3fffffc1c00
[  340.572692][T17335] ntfs3: loop6: try to read out of volume at offset 0x3fffffc2c00
[  340.580777][T17335] ntfs3: loop6: try to read out of volume at offset 0x3fffffc4c00
[  340.582361][T17362] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3185'.
[  340.642572][T17362] netlink: 'syz.1.3185': attribute type 4 has an invalid length.
[  340.675359][T17335] ntfs3: loop6: try to read out of volume at offset 0x3fffffc8c00
[  340.690316][T17362] netlink: 'syz.1.3185': attribute type 5 has an invalid length.
[  340.704709][T17366] program syz.4.3186 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  340.712530][T17335] ntfs3: loop6: try to read out of volume at offset 0x3fffffd0c00
[  340.729777][T17362] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3185'.
[  340.749918][T17366] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  340.762640][T17335] ntfs3: loop6: try to read out of volume at offset 0x3fffffe0c00
[  341.208148][T17375] xfrm0 speed is unknown, defaulting to 1000
[  341.243097][T17381] sp0: Synchronizing with TNC
[  341.299014][T17379] [U] �
[  342.725454][T17464] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  342.839282][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3211'.
[  342.988052][T17404] loop4: detected capacity change from 0 to 40427
[  343.050898][T17404] F2FS-fs (loop4): invalid crc value
[  343.082805][T17404] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  343.118109][T17479] loop6: detected capacity change from 0 to 256
[  343.139180][T17404] F2FS-fs (loop4): Found nat_bits in checkpoint
[  343.404406][T17404] F2FS-fs (loop4): recover fsync data on readonly fs
[  343.411451][T17404] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  343.482131][T17404] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  343.545159][T17404] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  344.234587][T17461] loop3: detected capacity change from 0 to 40427
[  344.289959][T17461] F2FS-fs (loop3): invalid crc value
[  344.304730][T17461] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  344.352511][T17461] F2FS-fs (loop3): Found nat_bits in checkpoint
[  344.514991][T17461] F2FS-fs (loop3): recover fsync data on readonly fs
[  344.522059][T17461] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[  344.613511][T17461] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  344.757689][T17561] kAFS: unable to lookup cell '׭��6W���6߾����%�$ɆJJ��=1��U���x��'
[  345.260953][T17570] loop4: detected capacity change from 0 to 4096
[  345.321106][T17570] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  345.440559][T17570] ntfs3: loop4: failed to convert "c46c" to cp852
[  345.482570][ T4304] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  345.734480][ T4304] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  345.772439][ T4304] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  345.822646][ T4304] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  345.831788][ T4304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.910989][T17580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  346.316970][ T4297] usb 2-1: USB disconnect, device number 10
[  346.397540][T17645] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  346.559555][T17634] loop6: detected capacity change from 0 to 4096
[  346.603390][T17634] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  346.628511][T17576] loop5: detected capacity change from 0 to 32768
[  346.643094][T17634] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  346.680797][T17576] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.3231 (17576)
[  346.704207][T17634] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing.
[  346.742715][T17634] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  346.764209][T17576] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  346.804510][T17576] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  346.816104][T17634] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  346.857935][T17576] BTRFS info (device loop5): max_inline at 0
[  346.872599][T17576] BTRFS info (device loop5): using free space tree
[  346.896336][T17634] ntfs: volume version 3.1.
[  346.901073][T17634] ntfs: (device loop6): ntfs_read_locked_inode(): Inode is not in use!
[  346.920496][T17634] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  346.952471][T17634] ntfs: (device loop6): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  347.059513][T17634] ntfs: (device loop6): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing.
[  347.130734][T17634] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  347.249700][T17576] BTRFS info (device loop5): enabling ssd optimizations
[  347.608914][T12122] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  347.897984][T17749] loop1: detected capacity change from 0 to 128
[  347.976618][T17749] befs: Unrecognized mount option "syzkaller0" or missing value
[  348.423309][T17774] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3254'.
[  348.452734][T17774] unsupported nlmsg_type 40
[  348.873962][T17790] loop4: detected capacity change from 0 to 512
[  348.975449][T17790] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  349.052927][T17790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  349.120696][T17806] loop6: detected capacity change from 0 to 256
[  349.162758][T17790] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.3270: corrupted in-inode xattr
[  349.253752][T17790] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.3270: couldn't read orphan inode 15 (err -117)
[  349.365923][T17790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  349.500920][T17823] loop3: detected capacity change from 0 to 512
[  349.534400][T14561] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  349.683547][T17823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  349.734906][T14561] usb 7-1: Using ep0 maxpacket: 32
[  349.743963][T14561] usb 7-1: config 4 has an invalid interface number: 228 but max is 0
[  349.762983][T17823] ext4 filesystem being mounted at /704/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.796995][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  349.803670][T14561] usb 7-1: config 4 has no interface number 0
[  349.843314][T14561] usb 7-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11
[  349.846872][T17823] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.3277: Failed to acquire dquot type 0
[  349.895427][T14561] usb 7-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024
[  349.972736][T14561] usb 7-1: config 4 interface 228 has no altsetting 0
[  349.979898][T17776] loop1: detected capacity change from 0 to 32768
[  350.021602][T14561] usb 7-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  350.062445][ T4253] EXT4-fs (loop3): unmounting filesystem.
[  350.079829][T14561] usb 7-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  350.122497][T14561] usb 7-1: Product: syz
[  350.126729][T14561] usb 7-1: Manufacturer: syz
[  350.131612][T14561] usb 7-1: SerialNumber: syz
[  350.173116][T17776] XFS (loop1): Mounting V5 Filesystem
[  350.324990][T17776] XFS (loop1): Ending clean mount
[  350.398255][T14561] usb 7-1: invalid MIDI in EP 0
[  350.529740][T14561] snd-usb-audio: probe of 7-1:4.228 failed with error -22
[  350.571181][T14561] usb 7-1: USB disconnect, device number 8
[  350.607793][ T4243] udevd[4243]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  350.658414][ T4252] XFS (loop1): Unmounting Filesystem
[  350.864038][T17884] device netdevsim0 entered promiscuous mode
[  350.888230][T17884] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  351.414485][T17899] xfrm0 speed is unknown, defaulting to 1000
[  351.424034][T17905] device vlan0 entered promiscuous mode
[  351.485729][T17913] netlink: 'syz.4.3287': attribute type 2 has an invalid length.
[  351.962487][ T4297] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  352.152555][ T4297] usb 2-1: Using ep0 maxpacket: 16
[  352.163018][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.233116][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.245997][T17961] loop6: detected capacity change from 0 to 2048
[  352.255167][T17957] netlink: 1392 bytes leftover after parsing attributes in process `syz.5.3297'.
[  352.282325][ T4297] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  352.324002][ T4297] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  352.348434][T17965] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  352.363399][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.454910][ T4297] usb 2-1: config 0 descriptor??
[  352.495935][ T4297] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17
[  352.529563][ T3609] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  352.601778][ T3609] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  352.632764][ T3609] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  352.721279][ T5425] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  352.830462][T17936] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  352.852677][ T3609] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  352.874197][ T5236] usb 2-1: USB disconnect, device number 11
[  353.042419][ T5231] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  353.135969][   T27] kauditd_printk_skb: 15 callbacks suppressed
[  353.135986][   T27] audit: type=1326 audit(1750473130.127:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb178e929 code=0x7ffc0000
[  353.192464][   T27] audit: type=1326 audit(1750473130.157:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5cb178e929 code=0x7ffc0000
[  353.240874][   T27] audit: type=1326 audit(1750473130.157:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.5.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb178e929 code=0x7ffc0000
[  353.277210][ T5231] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  353.288854][ T5231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.297579][ T5231] usb 5-1: Product: syz
[  353.312512][ T5231] usb 5-1: Manufacturer: syz
[  353.317159][ T5231] usb 5-1: SerialNumber: syz
[  353.328703][ T5231] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  353.373186][ T5231] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  353.620232][    C0] usb 5-1: ath: unknown panic pattern!
[  353.879519][ T5236] usb 5-1: USB disconnect, device number 15
[  353.984168][T18033] bridge0: port 3(netdevsim0) entered blocking state
[  354.053379][T18033] bridge0: port 3(netdevsim0) entered disabled state
[  354.100789][T18033] device netdevsim0 entered promiscuous mode
[  354.161372][T18033] bridge0: port 3(netdevsim0) entered blocking state
[  354.170484][T18033] bridge0: port 3(netdevsim0) entered forwarding state
[  354.253938][T18018] loop5: detected capacity change from 0 to 32768
[  354.283508][T18018] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  354.432636][ T5231] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  354.439790][ T5231] ath9k_htc: Failed to initialize the device
[  354.483584][ T5236] usb 5-1: ath9k_htc: USB layer deinitialized
[  354.718480][ T4437] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9
[  354.810828][T18061] xt_bpf: check failed: parse error
[  355.044078][T18067] xfrm0 speed is unknown, defaulting to 1000
[  355.266379][T18087] loop4: detected capacity change from 0 to 4096
[  355.320114][T18087] ntfs: volume version 3.1.
[  355.680788][T18112] netlink: 'syz.5.3328': attribute type 3 has an invalid length.
[  356.230002][T18131] syz.4.3334 (18131) used greatest stack depth: 19584 bytes left
[  356.463361][T18147] loop6: detected capacity change from 0 to 164
[  356.550743][T18147] iso9660: Corrupted directory entry in block 2 of inode 1920
[  356.986543][T18173] loop1: detected capacity change from 0 to 512
[  357.043091][T18173] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  357.052185][T18173] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  357.164971][T18173] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended
[  357.194340][T18184] netlink: 'syz.5.3350': attribute type 10 has an invalid length.
[  357.231546][T18173] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.3347: inode #15: comm syz.1.3347: iget: illegal inode #
[  357.244830][T18184] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3350'.
[  357.276811][T18173] EXT4-fs (loop1): Remounting filesystem read-only
[  357.286792][T18184] batman_adv: batadv0: Adding interface: vlan1
[  357.309433][T18173] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3347: couldn't read orphan inode 15 (err -117)
[  357.336317][T18184] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.382796][T18173] EXT4-fs (loop1): Remounting filesystem read-only
[  357.389478][T18173] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  357.412410][T18184] batman_adv: batadv0: Interface activated: vlan1
[  357.443751][T18173] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.3347: inode #15: comm syz.1.3347: iget: illegal inode #
[  357.512644][T18173] EXT4-fs (loop1): Remounting filesystem read-only
[  357.762881][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  357.902476][T14561] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  358.094044][T14561] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  358.120908][T14561] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  358.143889][T14561] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  358.177043][T14561] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.185880][T18226] UBIFS error (pid: 18226): cannot open "", error -22
[  358.424908][T14561] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  358.469536][T14561] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input18
[  358.511477][T14561] input: failed to attach handler kbd to device input18, error: -5
[  358.566489][T14561] usb 5-1: USB disconnect, device number 16
[  358.695801][T18259] tmpfs: Bad value for 'mpol'
[  358.848586][T18265] xt_TCPMSS: Only works on TCP SYN packets
[  359.175082][T18278] loop1: detected capacity change from 0 to 1764
[  359.641851][T18304] loop6: detected capacity change from 0 to 256
[  360.273716][ T4268] Bluetooth: hci5: command 0x0406 tx timeout
[  360.532348][   T26] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  360.724661][   T26] usb 2-1: config 0 has an invalid interface number: 207 but max is 0
[  360.750508][   T26] usb 2-1: config 0 has no interface number 0
[  360.778454][   T26] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  360.829434][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.848571][   T26] usb 2-1: Product: syz
[  360.879560][   T26] usb 2-1: Manufacturer: syz
[  360.894861][   T26] usb 2-1: SerialNumber: syz
[  360.920775][   T26] usb 2-1: config 0 descriptor??
[  360.965883][   T26] qmi_wwan 2-1:0.207: bogus CDC Union: master=0, slave=1
[  361.159060][   T26] qmi_wwan: probe of 2-1:0.207 failed with error -22
[  361.369752][   T26] usb 2-1: USB disconnect, device number 12
[  362.594511][T18443] loop6: detected capacity change from 0 to 16
[  362.645574][T18443] cramfs: Error -3 while decompressing!
[  362.675990][T18443] cramfs: ffffffff96b4c568(27)->ffff888050a41000(4096)
[  362.725776][T18443] cramfs: Error -3 while decompressing!
[  362.748146][T18443] cramfs: ffffffff96b4c583(16)->ffff8880713c6000(4096)
[  362.776062][T18443] cramfs: Error -3 while decompressing!
[  362.804670][T18443] cramfs: ffffffff96b4c568(27)->ffff888050a41000(4096)
[  362.834130][   T27] audit: type=1800 audit(1750473139.827:1840): pid=18443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3421" name="file2" dev="loop6" ino=348 res=0 errno=0
[  363.721541][T18475] loop1: detected capacity change from 0 to 4096
[  363.789235][T18475] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  363.812107][T18493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3435'.
[  363.842417][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3435'.
[  363.924328][ T5231] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  364.145372][ T5231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  364.172308][ T5231] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  364.212437][ T5231] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  364.236757][   T51] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22.
[  364.244169][ T5231] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  364.272523][ T5231] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  364.277908][ T4252] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22.
[  364.291957][ T5231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.302076][ T5231] usb 6-1: Product: syz
[  364.312448][ T5231] usb 6-1: Manufacturer: syz
[  364.317123][ T5231] usb 6-1: SerialNumber: syz
[  364.339069][ T4252] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  364.349403][ T5231] usb 6-1: config 0 descriptor??
[  364.383724][ T5231] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected
[  364.454408][ T5231] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  364.459338][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3441'.
[  364.514707][ T5231] garmin_gps: probe of ttyUSB0 failed with error -8
[  364.517146][T18516] netlink: 'syz.6.3442': attribute type 1 has an invalid length.
[  364.579312][ T5231] usb 6-1: USB disconnect, device number 12
[  364.617336][ T5231] garmin_gps 6-1:0.0: device disconnected
[  364.889032][T18541] loop4: detected capacity change from 0 to 8
[  364.985593][T18541] cramfs: bad data blocksize 4294963715
[  365.003202][ T4437] udevd[4437]: incorrect cramfs checksum on /dev/loop4
[  365.013227][T18541] cramfs: bad data blocksize 4294963715
[  365.042387][   T27] audit: type=1800 audit(1750473142.027:1841): pid=18541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3446" name="file2" dev="loop4" ino=348 res=0 errno=0
[  365.633735][T18563] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3452'.
[  366.258344][T18547] loop1: detected capacity change from 0 to 32768
[  366.304515][T18547] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  366.328208][ T4268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  366.346773][ T4268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  366.356716][ T4268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  366.370194][ T4268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  366.380493][ T4268] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  366.397748][T18591] netlink: 'syz.6.3460': attribute type 1 has an invalid length.
[  366.405816][ T4268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  366.579390][T18582] xfrm0 speed is unknown, defaulting to 1000
[  367.080756][ T4437] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  367.535488][T18582] chnl_net:caif_netlink_parms(): no params data found
[  367.541989][T18731] loop6: detected capacity change from 0 to 2048
[  367.634427][T18731] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  368.139447][T18582] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.172838][T18582] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.181097][T18582] device bridge_slave_0 entered promiscuous mode
[  368.207126][T18806] loop5: detected capacity change from 0 to 1764
[  368.241861][T18582] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.266364][T18582] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.300339][T18806] iso9660: Corrupted directory entry in block 2 of inode 1920
[  368.331075][T18582] device bridge_slave_1 entered promiscuous mode
[  368.455389][T18582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.512543][ T4270] Bluetooth: hci7: command 0x0409 tx timeout
[  368.523051][T18582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.770038][T18582] team0: Port device team_slave_0 added
[  368.788358][T18582] team0: Port device team_slave_1 added
[  368.883073][T18892] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  368.889740][T18866] loop1: detected capacity change from 0 to 4096
[  368.917344][T18582] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.945080][T18582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.997888][T18866] ntfs: volume version 3.1.
[  369.038364][T18918] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3491'.
[  369.065789][T18582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  369.084507][T18866] ntfs: (device loop1): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80.  Aborting truncate.
[  369.090138][T18918] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3491'.
[  369.123269][T18582] batman_adv: batadv0: Adding interface: batadv_slave_1
[  369.179159][T18582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.284458][T18582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.566917][T18582] device hsr_slave_0 entered promiscuous mode
[  369.621696][T18582] device hsr_slave_1 entered promiscuous mode
[  369.656506][T18582] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  369.682676][T18582] Cannot create hsr debugfs directory
[  369.998495][T19015] loop1: detected capacity change from 0 to 256
[  370.577033][T18582] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  370.580707][T18924] loop5: detected capacity change from 0 to 32768
[  370.592568][ T4270] Bluetooth: hci7: command 0x041b tx timeout
[  370.641637][T18582] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  370.655218][T18924] syz.5.3493: attempt to access beyond end of device
[  370.655218][T18924] loop5: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  370.701765][T18582] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  370.710174][T18924] metapage_write_end_io: I/O error
[  370.785954][T18582] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  370.806575][T18924] blkno = 8ed2c, nblocks = 1
[  370.831398][T18924] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  370.831398][T18924] 
[  370.919887][T18924] ERROR: (device loop5): remounting filesystem as read-only
[  370.948957][T18924] UFO tlock:0xffffc9000288a120
[  371.158587][T18582] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.190608][  T108] blkno = 8ed2c, nblocks = 4
[  371.196268][  T108] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  371.196268][  T108] 
[  371.222583][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  371.244989][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  371.259170][T12122] syz-executor: attempt to access beyond end of device
[  371.259170][T12122] loop5: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  371.296041][T18582] 8021q: adding VLAN 0 to HW filter on device team0
[  371.309580][T18994] loop4: detected capacity change from 0 to 32768
[  371.316757][T12122] metapage_write_end_io: I/O error
[  371.333023][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  371.334450][T12122] JFS: metapage_get_blocks failed
[  371.361844][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  371.399443][T12122] JFS: metapage_get_blocks failed
[  371.408753][T12122] JFS: metapage_get_blocks failed
[  371.438746][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state
[  371.445947][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  371.453705][T18994] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  371.455338][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  371.473229][T12122] JFS: metapage_get_blocks failed
[  371.491253][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  371.544204][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  371.575688][T18994] (syz.4.3499,18994,0):ocfs2_mknod:502 ERROR: status = -2
[  371.592070][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state
[  371.599299][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.607419][T18994] (syz.4.3499,18994,0):ocfs2_create:676 ERROR: status = -2
[  371.660509][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  371.723666][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  371.733061][T19080] loop6: detected capacity change from 0 to 1024
[  371.781368][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  371.804143][T19080] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5
[  371.822044][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  371.895826][ T4251] (syz-executor,4251,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode.
[  371.925377][T19080] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  371.935129][T19080] EXT4-fs error (device loop6): ext4_acquire_dquot:6814: comm syz.6.3511: Failed to acquire dquot type 0
[  371.947624][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  371.965323][ T4251] ocfs2: Unmounting device (7,4) on (node local)
[  371.994092][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  372.013272][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  372.039733][T19080] EXT4-fs error (device loop6): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  372.065081][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  372.101686][T18582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  372.116946][T19080] EXT4-fs error (device loop6): ext4_do_update_inode:5253: inode #13: comm syz.6.3511: corrupted inode contents
[  372.131865][T18582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  372.140098][T19080] EXT4-fs error (device loop6): ext4_dirty_inode:6118: inode #13: comm syz.6.3511: mark_inode_dirty error
[  372.161837][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  372.171899][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  372.211167][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  372.220316][T19080] EXT4-fs error (device loop6): ext4_do_update_inode:5253: inode #13: comm syz.6.3511: corrupted inode contents
[  372.293834][T19080] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #13: comm syz.6.3511: mark_inode_dirty error
[  372.362651][T19080] EXT4-fs error (device loop6): ext4_do_update_inode:5253: inode #13: comm syz.6.3511: corrupted inode contents
[  372.416227][T19101] kAFS: unable to lookup cell '\/'
[  372.422952][T19080] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem
[  372.451255][T19080] EXT4-fs error (device loop6): ext4_do_update_inode:5253: inode #13: comm syz.6.3511: corrupted inode contents
[  372.482633][T19080] EXT4-fs error (device loop6): ext4_truncate:4312: inode #13: comm syz.6.3511: mark_inode_dirty error
[  372.554318][T19080] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem
[  372.579992][T19080] EXT4-fs (loop6): 1 truncate cleaned up
[  372.596178][T19080] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  372.673327][ T4270] Bluetooth: hci7: command 0x040f tx timeout
[  372.910248][T12971] EXT4-fs (loop6): unmounting filesystem.
[  373.273256][T19135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3524'.
[  373.297613][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  373.320616][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  373.335646][T19128] loop6: detected capacity change from 0 to 4096
[  373.383193][T18582] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.391490][T19128] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512)
[  373.449085][T19128] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  373.563856][T19147] loop4: detected capacity change from 0 to 512
[  373.598546][T19128] ntfs3: loop6: ino=1c, "file0" attr_set_size
[  373.640509][T19147] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  373.711907][T19154] netlink: 1096 bytes leftover after parsing attributes in process `syz.5.3529'.
[  373.732826][T19147] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3527: bg 0: block 384: padding at end of block bitmap is not set
[  373.762078][T12971] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22.
[  373.882393][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  373.889118][T19147] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  373.943398][T19162] loop1: detected capacity change from 0 to 8
[  373.953148][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  374.023019][T19147] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.3527: attempt to clear invalid blocks 983260 len 1
[  374.146398][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  374.219322][T19147] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.3527: Invalid inode table block 0 in block_group 0
[  374.290757][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  374.313362][T19147] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  374.371227][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  374.412534][T19147] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  374.425099][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  374.447433][T19147] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.3527: Invalid inode table block 0 in block_group 0
[  374.516117][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  374.542446][T19147] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  374.583353][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  374.622513][T19147] EXT4-fs error (device loop4): ext4_truncate:4312: inode #11: comm syz.4.3527: mark_inode_dirty error
[  374.680303][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  374.723029][T19147] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  374.723075][T19190] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3538'.
[  374.752507][ T4268] Bluetooth: hci7: command 0x0419 tx timeout
[  374.774566][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  374.785763][T19147] EXT4-fs (loop4): 1 truncate cleaned up
[  374.826880][T19147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  374.945231][T19147] EXT4-fs error (device loop4): __ext4_get_inode_loc:4507: comm syz.4.3527: Invalid inode table block 0 in block_group 0
[  374.982409][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  374.991786][T19147] EXT4-fs (loop4): Remounting filesystem read-only
[  375.013617][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  375.103776][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  375.120248][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  375.164982][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  375.167584][T18582] device veth0_vlan entered promiscuous mode
[  375.203069][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  375.233999][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  375.283383][T18582] device veth1_vlan entered promiscuous mode
[  375.383443][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  375.403050][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  375.433777][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  375.476488][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  375.510667][T18582] device veth0_macvtap entered promiscuous mode
[  375.529625][T19214] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3544'.
[  375.542033][T18582] device veth1_macvtap entered promiscuous mode
[  375.589145][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.632480][ T4270] Bluetooth: hci6: command 0x0406 tx timeout
[  375.655430][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.666003][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.677173][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.689602][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.700460][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.729432][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.772554][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.788785][T19231] loop5: detected capacity change from 0 to 512
[  375.792497][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.882651][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.903815][T19231] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  375.922770][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  375.932306][T19231] System zones: 0-2, 18-18, 34-34
[  375.959772][T19231] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3547: bg 0: block 248: padding at end of block bitmap is not set
[  376.032571][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.062299][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  376.074339][T19231] Quota error (device loop5): write_blk: dquota write failed
[  376.081827][T19231] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  376.107254][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.132507][T19231] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.3547: Failed to acquire dquot type 1
[  376.158516][T18582] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.204431][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  376.220338][T19231] EXT4-fs (loop5): 1 truncate cleaned up
[  376.227962][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  376.277717][T19231] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  376.302643][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  376.322821][T19231] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  376.355879][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  376.392047][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.432475][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.461719][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.482797][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.502082][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.529984][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.543044][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.565777][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.587687][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.614063][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.633856][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.652385][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.675788][T18582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  376.700376][T18582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  376.717284][T12122] EXT4-fs (loop5): unmounting filesystem.
[  376.733296][T18582] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.751806][T19251] netlink: 'syz.4.3554': attribute type 21 has an invalid length.
[  376.783329][T19251] IPv6: NLM_F_CREATE should be specified when creating new route
[  376.791325][T19251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  376.798627][T19251] IPv6: NLM_F_CREATE should be set when creating new route
[  376.806064][T19251] IPv6: NLM_F_CREATE should be set when creating new route
[  376.813457][T19251] IPv6: NLM_F_CREATE should be set when creating new route
[  376.833470][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  376.905341][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  376.949293][T18582] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.973531][T18582] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.032639][T18582] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.062310][T18582] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.145701][T19263] netlink: 'syz.4.3558': attribute type 4 has an invalid length.
[  377.193004][T19263] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3558'.
[  377.227639][T19246] loop6: detected capacity change from 0 to 32768
[  377.265780][T19263] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  377.329113][   T27] audit: type=1800 audit(1750473154.317:1842): pid=19246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3553" name="file1" dev="loop6" ino=4 res=0 errno=0
[  377.596795][T19297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3561'.
[  377.677277][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3561'.
[  377.866690][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.895747][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.958222][T14887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  377.995271][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  378.014867][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.068966][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  378.284864][T19333] loop1: detected capacity change from 0 to 16
[  378.340229][T19333] erofs: (device loop1): mounted with root inode @ nid 36.
[  378.442549][T19333] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 0
[  378.677431][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  378.683959][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  378.757659][T19358] netlink: 'syz.7.3574': attribute type 5 has an invalid length.
[  378.802716][T19358] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3574'.
[  378.807465][T19360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3575'.
[  378.994484][T19368] loop5: detected capacity change from 0 to 8
[  379.096163][T19368] SQUASHFS error: Failed to read block 0x636: -5
[  379.142560][T19368] SQUASHFS error: Unable to read metadata cache entry [634]
[  379.151612][T19378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3581'.
[  379.167030][T19368] SQUASHFS error: Unable to read metadata cache entry [634]
[  379.190072][T19368] SQUASHFS error: Unable to read directory block [629:0]
[  379.830307][T19413] loop1: detected capacity change from 0 to 47
[  380.483736][T19448] netlink: 'syz.4.3601': attribute type 1 has an invalid length.
[  380.611416][T19456] cgroup: No subsys list or none specified
[  380.652437][ T2188] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  380.864174][ T2188] usb 6-1: config index 0 descriptor too short (expected 69, got 36)
[  380.902275][ T2188] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  380.935225][ T2188] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  380.976107][ T2188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.022408][ T2188] usb 6-1: Product: syz
[  381.026757][ T2188] usb 6-1: Manufacturer: syz
[  381.062348][ T2188] usb 6-1: SerialNumber: syz
[  381.077320][ T2188] usb 6-1: config 0 descriptor??
[  381.107412][ T2188] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  381.171325][T19482] netlink: 'syz.6.3612': attribute type 8 has an invalid length.
[  381.180255][T19475] loop7: detected capacity change from 0 to 4096
[  381.243813][T19475] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  381.325873][T19475] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  381.364749][T19475] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  381.396966][T19475] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  381.450408][T19475] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  381.490616][T19475] ntfs: volume version 3.1.
[  381.503261][T19475] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  381.521387][ T2188] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[  381.558775][ T2188] gspca_pac7302: probe of 6-1:0.0 failed with error -71
[  381.584721][T19475] ntfs: (device loop7): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  381.605575][ T2188] usb 6-1: USB disconnect, device number 13
[  381.681376][T19475] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  381.707579][T19475] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  381.760468][T19475] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  382.506635][T19543] loop1: detected capacity change from 0 to 256
[  382.623536][T19543] FAT-fs (loop1): Directory bread(block 64) failed
[  382.630362][T19543] FAT-fs (loop1): Directory bread(block 65) failed
[  382.682570][T19543] FAT-fs (loop1): Directory bread(block 66) failed
[  382.689208][T19543] FAT-fs (loop1): Directory bread(block 67) failed
[  382.753089][T19543] FAT-fs (loop1): Directory bread(block 68) failed
[  382.792447][T19543] FAT-fs (loop1): Directory bread(block 69) failed
[  382.799203][T19543] FAT-fs (loop1): Directory bread(block 70) failed
[  382.875399][T19543] FAT-fs (loop1): Directory bread(block 71) failed
[  382.916537][T19543] FAT-fs (loop1): Directory bread(block 72) failed
[  382.993200][T19543] FAT-fs (loop1): Directory bread(block 73) failed
[  383.242509][T19573] raw_sendmsg: syz.7.3636 forgot to set AF_INET. Fix it!
[  384.781710][T19661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3661'.
[  384.842786][T19661] bond0: (slave bond_slave_0): Slave does not support ipsec offload
[  385.159828][T19679] loop4: detected capacity change from 0 to 164
[  385.232966][T19686] xt_ecn: cannot match TCP bits for non-tcp packets
[  385.252407][T19679] iso9660: Corrupted directory entry in block 2 of inode 1920
[  386.536639][T19744] loop7: detected capacity change from 0 to 8
[  386.678059][T19750] binder: 19749:19750 ioctl c00c6211 9999999999999999 returned -14
[  386.716761][T19754] netlink: zone id is out of range
[  386.729849][T19754] netlink: zone id is out of range
[  386.752009][T19754] netlink: zone id is out of range
[  386.772437][T19754] netlink: zone id is out of range
[  386.792621][T19754] netlink: zone id is out of range
[  386.797984][T19754] netlink: zone id is out of range
[  386.804474][T19754] netlink: zone id is out of range
[  386.809688][T19754] netlink: zone id is out of range
[  386.880315][T19754] netlink: zone id is out of range
[  386.920612][T19754] netlink: zone id is out of range
[  387.023956][T19768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3692'.
[  387.425406][    C1] sd 0:0:1:0: [sda] tag#2049 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  387.435989][    C1] sd 0:0:1:0: [sda] tag#2049 CDB: Read(6) 08 1e df d0 ec f7
[  387.892336][ T2188] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  387.912850][T19818] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 19818 comm: syz.4.3708)
[  388.047048][T19822] __vm_enough_memory: pid: 19822, comm: syz.6.3709, no enough memory for the allocation
[  388.092442][ T2188] usb 8-1: Using ep0 maxpacket: 32
[  388.103779][ T2188] usb 8-1: config 0 interface 0 has no altsetting 0
[  388.134001][ T2188] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  388.161911][ T2188] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.173483][T19827] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  388.183209][ T2188] usb 8-1: Product: syz
[  388.187427][ T2188] usb 8-1: Manufacturer: syz
[  388.212270][ T2188] usb 8-1: SerialNumber: syz
[  388.223210][T19827] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  388.231967][T19827] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  388.254917][ T2188] usb 8-1: config 0 descriptor??
[  388.723161][ T2188] gs_usb 8-1:0.0: Couldn't get device config: (err=-71)
[  388.730220][ T2188] gs_usb: probe of 8-1:0.0 failed with error -71
[  388.804439][ T2188] usb 8-1: USB disconnect, device number 2
[  389.529090][T19882] netlink: 'syz.7.3726': attribute type 6 has an invalid length.
[  389.579422][T19883] netlink: 'syz.5.3725': attribute type 30 has an invalid length.
[  389.944840][T19898] loop5: detected capacity change from 0 to 8
[  390.131138][T19847] loop1: detected capacity change from 0 to 40427
[  390.254052][T19847] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff
[  390.369401][T19847] F2FS-fs (loop1): invalid crc value
[  390.421832][T19847] F2FS-fs (loop1): Found nat_bits in checkpoint
[  390.438763][   T27] kauditd_printk_skb: 11 callbacks suppressed
[  390.438780][   T27] audit: type=1400 audit(1750473167.427:1848): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=19917 comm="syz.5.3734"
[  390.558895][T19927] ipt_rpfilter: unknown options
[  390.651752][T19847] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  390.775474][T19935] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3740'.
[  390.812470][T19935] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3740'.
[  390.852484][T19935] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3740'.
[  392.112689][   T28] INFO: task syz.2.2053:12071 blocked for more than 143 seconds.
[  392.120488][   T28]       Not tainted 6.1.141-syzkaller #0
[  392.172430][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  392.181173][   T28] task:syz.2.2053      state:D stack:28744 pid:12071 ppid:4258   flags:0x00004004
[  392.267488][   T28] Call Trace:
[  392.280072][   T28]  <TASK>
[  392.296928][   T28]  __schedule+0x10e9/0x40d0
[  392.316255][   T28]  ? release_firmware_map_entry+0x18a/0x18a
[  392.340291][   T28]  ? lock_chain_count+0x20/0x20
[  392.361016][   T28]  ? _raw_spin_lock_irq+0xab/0xe0
[  392.399835][T19994] xt_CT: No such helper "syz0"
[  392.402534][   T28]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  392.410122][   T28]  ? rwsem_down_read_slowpath+0x50a/0x840
[  392.462379][   T28]  schedule+0xb9/0x180
[  392.466552][   T28]  schedule_preempt_disabled+0xf/0x20
[  392.470805][T19998] loop4: detected capacity change from 0 to 8192
[  392.471948][   T28]  rwsem_down_read_slowpath+0x4f4/0x840
[  392.471991][   T28]  ? down_write_killable_nested+0x90/0x90
[  392.516047][T19998] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  392.554442][T20003] loop5: detected capacity change from 0 to 8192
[  392.574273][T19998] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  392.581911][   T28]  ? read_lock_is_recursive+0x10/0x10
[  392.583740][T19998] REISERFS (device loop4): using ordered data mode
[  392.590009][T20003] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  392.595890][T19998] reiserfs: using flush barriers
[  392.622327][T19998] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  392.628925][   T28]  ? __rwlock_init+0x140/0x140
[  392.653781][T19998] REISERFS (device loop4): checking transaction log (loop4)
[  392.671421][T20003] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  392.688500][T19998] REISERFS (device loop4): Using r5 hash to sort names
[  392.689728][   T28]  ? ksys_sync+0x150/0x150
[  392.713459][   T28]  down_read+0x94/0x2d0
[  392.720381][T20003] REISERFS (device loop5): using ordered data mode
[  392.732360][T20003] reiserfs: using flush barriers
[  392.736737][   T28]  ? ksys_sync+0x150/0x150
[  392.750674][T20003] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  392.752838][   T28]  iterate_supers+0xa4/0x1d0
[  392.809286][   T28]  ksys_sync+0x91/0x150
[  392.823779][   T28]  ? sync_filesystem+0x220/0x220
[  392.828897][   T28]  ? syscall_enter_from_user_mode+0x21/0x80
[  392.829364][T20003] REISERFS (device loop5): checking transaction log (loop5)
[  392.847666][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  392.858337][   T28]  __ia32_sys_sync+0xa/0x10
[  392.869318][   T28]  do_syscall_64+0x4c/0xa0
[  392.874403][   T28]  ? clear_bhb_loop+0x60/0xb0
[  392.879132][   T28]  ? clear_bhb_loop+0x60/0xb0
[  392.887415][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  392.911581][   T28] RIP: 0033:0x7f8979f8e929
[  392.922325][   T28] RSP: 002b:00007f897aeac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  392.945271][   T28] RAX: ffffffffffffffda RBX: 00007f897a1b5fa0 RCX: 00007f8979f8e929
[  392.985249][   T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  393.018330][   T28] RBP: 00007f897a1b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  393.052519][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.090838][   T28] R13: 0000000000000000 R14: 00007f897a1b5fa0 R15: 00007fffe5ed7008
[  393.099953][   T28]  </TASK>
[  393.103440][T20003] REISERFS (device loop5): Using tea hash to sort names
[  393.111929][   T28] 
[  393.111929][   T28] Showing all locks held in the system:
[  393.121188][   T28] 1 lock held by rcu_tasks_kthre/12:
[  393.127087][   T28]  #0: ffffffff8c92b430 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  393.144067][   T28] 1 lock held by rcu_tasks_trace/13:
[  393.149534][   T28]  #0: ffffffff8c92bc50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[  393.181728][   T28] 1 lock held by khungtaskd/28:
[  393.192304][   T28]  #0: ffffffff8c92aaa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  393.211423][   T28] 2 locks held by getty/4019:
[  393.222550][   T28]  #0: ffff88814cb9b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  393.244753][   T28]  #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380
[  393.266575][   T28] 1 lock held by udevd/4437:
[  393.276064][   T28] 1 lock held by syz.0.1897/11444:
[  393.281377][   T28] 1 lock held by syz.2.2053/12071:
[  393.287096][   T28]  #0: ffff888073b8a0e0 (&type->s_umount_key#55){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0
[  393.297909][   T28] 1 lock held by syz-executor/12122:
[  393.324011][   T28]  #0: ffffffff8c930778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830
[  393.343650][   T28] 1 lock held by syz.3.3281/17854:
[  393.348859][   T28]  #0: ffff888073b8a0e0 (&type->s_umount_key#55){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0
[  393.370213][   T28] 
[  393.386447][   T28] =============================================
[  393.386447][   T28] 
[  393.434363][   T28] NMI backtrace for cpu 0
[  393.438790][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0
[  393.446814][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  393.456903][   T28] Call Trace:
[  393.460208][   T28]  <TASK>
[  393.463255][   T28]  dump_stack_lvl+0x168/0x22e
[  393.467983][   T28]  ? irq_work_queue+0xb8/0x140
[  393.472801][   T28]  ? show_regs_print_info+0x12/0x12
[  393.478054][   T28]  ? load_image+0x3b0/0x3b0
[  393.482594][   T28]  ? vprintk_emit+0x571/0x680
[  393.487310][   T28]  ? printk_sprint+0x460/0x460
[  393.492117][   T28]  nmi_cpu_backtrace+0x3f4/0x470
[  393.497537][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  393.503740][   T28]  ? _printk+0xcc/0x110
[  393.507928][   T28]  ? load_image+0x3b0/0x3b0
[  393.512458][   T28]  ? load_image+0x3b0/0x3b0
[  393.517080][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  393.523201][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  393.529223][   T28]  watchdog+0xeee/0xf30
[  393.534046][   T28]  ? watchdog+0x1ed/0xf30
[  393.538421][   T28]  kthread+0x29d/0x330
[  393.542616][   T28]  ? hungtask_pm_notify+0x40/0x40
[  393.547687][   T28]  ? kthread_blkcg+0xd0/0xd0
[  393.552419][   T28]  ret_from_fork+0x1f/0x30
[  393.556896][   T28]  </TASK>
[  393.560118][    C0] vkms_vblank_simulate: vblank timer overrun
[  393.566942][   T28] Sending NMI from CPU 0 to CPUs 1:
[  393.572337][    C1] NMI backtrace for cpu 1
[  393.572347][    C1] CPU: 1 PID: 12776 Comm: kworker/u4:8 Not tainted 6.1.141-syzkaller #0
[  393.572365][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  393.572374][    C1] Workqueue: events_unbound toggle_allocation_gate
[  393.572399][    C1] RIP: 0010:match_held_lock+0x0/0xb0
[  393.572417][    C1] Code: 03 00 75 cf 48 c7 c7 80 fe 6b 8a 48 c7 c6 c0 fe 6b 8a e8 e3 52 3d f7 0f 0b eb b6 e8 ca fa ff ff 66 2e 0f 1f 84 00 00 00 00 00 <b9> 01 00 00 00 48 39 77 10 74 6c 53 81 7f 20 00 00 10 00 72 5f 48
[  393.572430][    C1] RSP: 0018:ffffc900001e0a48 EFLAGS: 00000083
[  393.572443][    C1] RAX: 0000000000000008 RBX: ffff88802e0c9dc0 RCX: 0000000000000000
[  393.572453][    C1] RDX: ffff88802e0c9dc0 RSI: ffff888017479818 RDI: ffff88802e0ca990
[  393.572464][    C1] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100b00aadd
[  393.572475][    C1] R10: ffffed100b00aadd R11: 1ffff1100b00aadc R12: 0000000000000006
[  393.572485][    C1] R13: 0000000000000046 R14: ffff888017479818 R15: ffff88802e0ca990
[  393.572496][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  393.572508][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  393.572519][    C1] CR2: 00007f160afb7000 CR3: 000000000c68e000 CR4: 00000000003506e0
[  393.572535][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  393.572543][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  393.572553][    C1] Call Trace:
[  393.572558][    C1]  <IRQ>
[  393.572563][    C1]  lock_is_held_type+0xa6/0x190
[  393.572580][    C1]  insert_work+0x209/0x3c0
[  393.572595][    C1]  __queue_work+0xba3/0xfb0
[  393.572614][    C1]  ? __queue_work+0xeb/0xfb0
[  393.572635][    C1]  call_timer_fn+0x1a0/0x670
[  393.572650][    C1]  ? queue_work_node+0x3f0/0x3f0
[  393.572667][    C1]  ? call_timer_fn+0xc1/0x670
[  393.572680][    C1]  ? __run_timers+0x7c0/0x7c0
[  393.572695][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[  393.572715][    C1]  ? queue_work_node+0x3f0/0x3f0
[  393.572734][    C1]  __run_timers+0x550/0x7c0
[  393.572750][    C1]  ? detach_timer+0x350/0x350
[  393.572773][    C1]  ? lock_chain_count+0x20/0x20
[  393.572791][    C1]  run_timer_softirq+0x63/0xf0
[  393.572813][    C1]  handle_softirqs+0x2a1/0x920
[  393.572835][    C1]  ? __irq_exit_rcu+0x12f/0x220
[  393.572856][    C1]  ? do_softirq+0x200/0x200
[  393.572875][    C1]  ? irqtime_account_irq+0xb2/0x1b0
[  393.572896][    C1]  __irq_exit_rcu+0x12f/0x220
[  393.572915][    C1]  ? irq_exit_rcu+0x20/0x20
[  393.572937][    C1]  irq_exit_rcu+0x5/0x20
[  393.572959][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  393.572979][    C1]  </IRQ>
[  393.572983][    C1]  <TASK>
[  393.572988][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  393.573003][    C1] RIP: 0010:x2apic_send_IPI+0x70/0xd0
[  393.573020][    C1] Code: f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 3b 41 0f b7 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 89 fe 89 fd 48 c7 c7 40 6b 79 8c
[  393.573031][    C1] RSP: 0018:ffffc9001c737710 EFLAGS: 00000206
[  393.573042][    C1] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830
[  393.573051][    C1] RDX: 0000000000000000 RSI: 00000000000000fb RDI: 0000000000000000
[  393.573059][    C1] RBP: ffffc9001c7377f0 R08: dffffc0000000000 R09: ffffed10171e776b
[  393.573070][    C1] R10: ffffed10171e776b R11: 1ffff110171e776a R12: dffffc0000000000
[  393.573080][    C1] R13: 1ffff920038e6eec R14: ffff8880b8e219b0 R15: ffffffff8c3d0970
[  393.573097][    C1]  send_call_function_single_ipi+0x14d/0x200
[  393.573116][    C1]  ? ttwu_do_activate+0x340/0x340
[  393.573132][    C1]  ? __bitmap_and+0x30c/0x330
[  393.573151][    C1]  ? _find_next_bit+0xea/0x130
[  393.573167][    C1]  smp_call_function_many_cond+0xb66/0x1270
[  393.573187][    C1]  ? text_poke_sync+0x20/0x20
[  393.573205][    C1]  ? smp_call_function_many+0x30/0x30
[  393.573218][    C1]  ? kmem_cache_alloc_bulk+0x11a/0x4e0
[  393.573234][    C1]  ? perf_event_bpf_output+0x270/0x270
[  393.573248][    C1]  ? trace_raw_output_contention_end+0xd0/0xd0
[  393.573263][    C1]  ? text_poke_loc_init+0xd6/0x570
[  393.573280][    C1]  ? text_poke_sync+0x20/0x20
[  393.573295][    C1]  on_each_cpu_cond_mask+0x3b/0x80
[  393.573310][    C1]  text_poke_bp_batch+0x541/0x7d0
[  393.573329][    C1]  ? kmem_cache_alloc_bulk+0x11b/0x4e0
[  393.573350][    C1]  ? text_poke_loc_init+0x570/0x570
[  393.573367][    C1]  ? arch_jump_label_transform_queue+0x76/0xd0
[  393.573384][    C1]  text_poke_finish+0x16/0x30
[  393.573400][    C1]  arch_jump_label_transform_apply+0x13/0x20
[  393.573414][    C1]  static_key_enable_cpuslocked+0x11f/0x240
[  393.573431][    C1]  static_key_enable+0x16/0x20
[  393.573445][    C1]  toggle_allocation_gate+0xb4/0x430
[  393.573461][    C1]  ? show_object+0xa0/0xa0
[  393.573476][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  393.573494][    C1]  ? read_lock_is_recursive+0x10/0x10
[  393.573513][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  393.573533][    C1]  ? process_one_work+0x7a1/0x1160
[  393.573547][    C1]  process_one_work+0x898/0x1160
[  393.573566][    C1]  ? worker_detach_from_pool+0x240/0x240
[  393.573582][    C1]  ? _raw_spin_lock_irq+0xab/0xe0
[  393.573600][    C1]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  393.573617][    C1]  ? kthread_data+0x4b/0xc0
[  393.573636][    C1]  worker_thread+0xaa2/0x1250
[  393.573656][    C1]  ? __kthread_parkme+0x162/0x1c0
[  393.573675][    C1]  kthread+0x29d/0x330
[  393.573692][    C1]  ? worker_clr_flags+0x1a0/0x1a0
[  393.573706][    C1]  ? kthread_blkcg+0xd0/0xd0
[  393.573725][    C1]  ret_from_fork+0x1f/0x30
[  393.573747][    C1]  </TASK>
[  394.117197][    C0] vkms_vblank_simulate: vblank timer overrun
[  394.296030][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  394.302970][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0
[  394.310895][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  394.320977][   T28] Call Trace:
[  394.324275][   T28]  <TASK>
[  394.327228][   T28]  dump_stack_lvl+0x168/0x22e
[  394.331939][   T28]  ? memcpy+0x3c/0x60
[  394.336135][   T28]  ? show_regs_print_info+0x12/0x12
[  394.341369][   T28]  ? load_image+0x3b0/0x3b0
[  394.345906][   T28]  panic+0x2c9/0x710
[  394.349910][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  394.355578][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  394.360115][   T28]  ? __irq_work_queue_local+0x12c/0x190
[  394.365700][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  394.371911][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  394.378097][   T28]  watchdog+0xf2d/0xf30
[  394.382285][   T28]  ? watchdog+0x1ed/0xf30
[  394.386660][   T28]  kthread+0x29d/0x330
[  394.390769][   T28]  ? hungtask_pm_notify+0x40/0x40
[  394.395817][   T28]  ? kthread_blkcg+0xd0/0xd0
[  394.400438][   T28]  ret_from_fork+0x1f/0x30
[  394.404903][   T28]  </TASK>
[  394.408231][   T28] Kernel Offset: disabled
[  394.412587][   T28] Rebooting in 86400 seconds..