last executing test programs:

1m8.608225438s ago: executing program 2 (id=8959):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x20, 0x3, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}, @CTA_ZONE={0x6}]}, 0x20}}, 0x0)

1m8.476914179s ago: executing program 2 (id=8962):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0xa4, 0x69, 0x60, 0x10, 0x602, 0x1001, 0xe904, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xff, 0x7e, 0xd0, 0x7, [{{0x9, 0x4, 0xbe, 0xe, 0x0, 0x87, 0x30, 0x2, 0x4}}, {{0x9, 0x4, 0x89, 0x9, 0x0, 0x31, 0x75, 0xee, 0x8}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0)

1m6.299216038s ago: executing program 2 (id=9004):
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
lseek(r0, 0x2004, 0x0)

1m6.101857971s ago: executing program 2 (id=9013):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="4b57e847ca97fe4b6468d5e3b1c8af6e644d82834f7f6415192ea618955c73aa164df482345e086f4d3eeab8150027a48e918d4fd9625eb5bbbda3abcbfb81f62a9f0bae4cdf14f1c7e660836a0ff1efeefa49a8eb3e395e0b9b42eaccbae5f0ee105aad7dee86f62c9ac34d9c489aeccbdcc43e382876a434a4a8099a697b7c86c89ef92d75b2882a9a01bf753884e7da7774a4d679a40f14baa67f2d7a6a2d0b44ae0c7a0fa9c53168755777b5237011e10adc830aedcc6714b8af1c083a8f77221e0488737fc02a13fa91c152", @ANYRES16], 0x1, 0x2ab, &(0x7f0000000440)="$eJzs3M9qE1EUx/FjU5s0pU0EKSioB93oZmjjA2iQFsSAWpuiLoSpnWjImJSZUImIzUbc+hzFpTtBfYFuxI17d0UQXdiFOGIm0ybttE3/JI3p9wPlnpl7f8xtS4czhczK3ddPCjnXyJll6Yup9IlUZVUk+a+qO1Yf+2r1gDSqyqWhn1/O3Ll3/0Y6k5mYUp1MT19OqerIufdPn785/7E8NPN25F1UlpMPVr6nvi6PLp9a+TP9OO9q3tViqaymzpZKZXPWtnQu7xYM1Vu2ZbqW5ouu5TTN5+zS/HxFzeLccHzesVxXzWJFC1ZFyyUtOxU1H5n5ohqGocNxOdr6W1iTXZqaMtNbTnuRA90R2m4w7KTjpKvhk9mlDuwJAAB0me37f7/X37r/z8z44wH3/yL0/21SbTraof9HT3CctBmv//02o/8HAAAAAAAAAAAAAAAAAAAAAOB/sOp5Cc/zEsEYfEVFJCYiwfFh7xPtsdPv/0d47Eqn94n2aPjgXkzEfrWQXcj6oz+fzklebLFkTBLyu3Y/qPPryeuZiTGt+eV53mI9v7iQjUg0yAeSYfmzJ8b9vMoHuyF/XOKN109JQk6GXz8Vmh+4ffFCQ96QhHx6KCWxZa52X1vPvxhXvXYzsyE/WFsHAAAAAEAvMHRNsvn513/3o1FbEJPN835+F/8f2PB83S+nW3lFJQAAAAAA2De38qxg2rbl7KGIisg+4r1aRKQrtrGhuCoiXbCNThUxEfHP6B7io9/W4i2lvBbW9IvIof9YdlEc9p0JAAAAwEFbb/p3Efr8so07AgAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6Gn1fWDB+k1TwcQ28YbLRTr+DQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd5G8AAAD//8NxHaE=")
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0)

1m5.789131475s ago: executing program 2 (id=9024):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xfc, 0xc53, &(0x7f0000000f40)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

1m4.989951436s ago: executing program 2 (id=9030):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0x3a)

1m4.66289551s ago: executing program 32 (id=9030):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f0000000000)=0x3a)

27.870654073s ago: executing program 0 (id=9539):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

27.651642175s ago: executing program 0 (id=9551):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

27.493610908s ago: executing program 0 (id=9542):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x100889a, &(0x7f0000000180)={[{@map_normal}, {@mode={'mode', 0x3d, 0x1}}, {@check_relaxed}, {@cruft}, {@sbsector}, {@map_acorn}, {@nojoliet}, {}, {@cruft}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@map_normal}]}, 0x1, 0xa14, &(0x7f0000000dc0)="$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")

27.023170774s ago: executing program 0 (id=9549):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e17ff850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc33, &(0x7f0000001780)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b/a9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qzrPwA8Vq769z8AAAAAAAAAAAAAABx0KYp4MlLMXVlL49Xzjvrldt+t22NDw9tXO5Kqmoeq8uVX/czZc+e/9MLghW5ebs98QP377bPx2ujVS42XZ2/OzU8tLExNNsZm2hOzk1O73sNe6291sjoAjZuv35q8fn2hcfb5c5tevj3wfv8TxwcuDj576plu2bGh4eHRjSL13vK1e25Ix04zPA5HEacixXPf+2lqRUQRez8W9Qc79lsdqTpxsurE2NBw1ZHpdmtmsXxxpHsgiohGT6Vm9xhtPxZR63ugfdhZM2KpbH7Z4JNl90bnWvOta9NTjZHW/GJ7sT07M5I6rS3704giLqSI5YhY7b97d31RRC1SfOfYWroWEYe6x+GL1cTgndtR7GMfd6FsZ6MvYrl4BMbsAOuPIl6NFD9750RM5PNMda75QsSrZf4g4q0yX4pI5QfjfMR723yOeDTVooi/LMf/4lqarM4H3fPK5a81vjJzfbanbPe88hGvD3edKR7S9eHIlnwwDvi5qR5FtKoz/lq69292AAAAAAAAAAAAAAAAALjfjkQRn4kUr/zHn1TziqOal37s4uAfDvxq75zxpz9kP2XZ5yNiqdjdnNzDeWLgSBpJ6SHPJX6c1aOIP83z/771sBsDAAAAAAAAAAAAAAAAAADwWCviJ5HixXdPpOXoXVO8PXOjcbV1bbqzKmx37d/umunr6+vrjdTJZs7xnEs5l3Ou5FzNGUWun7OZczznUs7lnCs5V3PGoVw/ZzPneM6lnMs5V3Ku5oxarp+zmXM851LO5ZwrOVdzxgFZuxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OOkiCJ+ESm+/Y21FCkimhHj0cmV/ofdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg1J+K+H6kaPxR8862WkSk6v+OE+Uf56N5uMxPRnOwzJeieSlnq8pa81sPof3sTV8q4seRor/+9p0Bz+Pf13l252MQb31z49lna5081H1x4P3+J44fuzg4/BtP7/Q4bdeAk5fbM7duN8aGhodHezbX8rt/smfbQH7f4v50nYhYeOPN11vT01Pz9/6g/Ajsofoj9CDVHpeeelA9iNqBaMbD6TuPgfL6/16k+N13/7N7we9c/+vxK51nd67w8fM/27j+v7h1R7u8/te21svX//Kavt31/8mebS/m70b6ahH1xZtzfccj6gtvvHmqfbN1Y+rG1Mz506e/PDj45XOn+w5H1K+3p6d6Ht2XwwUAAAAAAAAAAAAAAADw4KQifj9StH68lhoRcbuarzVwcfDZU88cikPVfKtN87ZfG716qfHy7M25+amFhanJxthMe2J2cmq3b1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2rx+tX7q2sDjfmtj+5TgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVr5nSkX8PFL8zl89HZ+v2nk07jpmudzfRYqTFz6Xy8Xhsly3DZ37CnRmBpZl/y9S/NMvNpftzod8cqPsmV0f2EdEOf7HIsX3/+K78Zt52+b7P2w//ke37mifxv+pnm1HN92vYM9dJ4//qUjx0pNvx2/lbR90/4/uvTdO5MJ37s+xT+P/qZ5tA/l9f/v+dB0AAAAAAAAAAOCR1peK+PtI8cPhWnohb9vN7/9Nbt3RPv3+16d7tk3en/WKPvTBng8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLa8Wv2c79eq+wbcz5//9RrI7zu+924DAAAAAAAAAAAAAAAAAADAgZJSES/k9dTHq/n8kzuup74SKV75n+dyuXS8LNddB36g+rN+ZXbm1KXp6dmJ1mLr2vRUY3SuNTFV1n0qUqz97edy3aJaX7273nxnjfeNtdjnI8XwP3TLdtZi765N/tRG2TNl2U9Eiv/+x81lu+tYf2qj7Nmy7N9Eiq//y/Zlj2+UPVeW/W6k+NHXG92yR8uy3fujfnqj7PMTs8U+jAoAAAAAAAAAAAAAAAAAAACPm75UxJ9Hiv+9uXxnLn9e/7+v52nlrW/2rPe/xe1qnf+Bav3/nR7fy/r/1X0FlnZ6VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S+fd9Qvt2du3R4bGt6+2pFU1TxUlS+/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UBaNx8/dbk9esLjbPPn9v08u2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3zu98l7bD9cBTx15Hiue/9NP2wP6KIvR+LD/ns7LcjVSdOVp0YGxquOjLdbs0sli+OdA9EEdHoqdTsHqMHMBZ70oxYKptfNvhk2b3RudZ869r0VGOkNb/YXmzPzoykTmvL/jSiiAspYjkiVvvv3l1fFPF6pPjOsbX0r/0Rh7rH4YtXRr96+uzO7Sj2sY+7ULaz0RexXDwCY3aA9UcR/xwpfvbOifi3/ohadL7iCxGvlvmDiLeiM96p/GCcj3hvm88Rj6ZaFPH/5fhfXEvv9Jfng+555fLXGl+ZuT7bU7Z7XuleH8q/eo/k9eFBOuDnpnoU8aPqjL+W/t3fawAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD78wpbs/caFxtXZvuTOvrzv3rzpleX19fb6RONnOO51zKuZxzJedqzihy/ZzNMuvr6+P5+VLO5ZwrOVdzxqFcP2cz53jOpZzLOVdyruaMWq6fs5lzPOdSzuWcKzlXc8YBmbsHAAAAAAAAAAAAAAAAAAB8vBTVfym+/Y21tN7fWV96PDq5Yj3Qj71fBgAA//8Ntfb5")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

26.515519601s ago: executing program 0 (id=9558):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents64(r0, 0xffffffffffffffff, 0x43)

25.921726059s ago: executing program 0 (id=9571):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40c9b, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x7}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8851}, 0x40000c8)

25.479327745s ago: executing program 33 (id=9571):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40c9b, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x7}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8851}, 0x40000c8)

2.534028657s ago: executing program 3 (id=9931):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
connect(r0, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80)

2.367539459s ago: executing program 3 (id=9934):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0xb})

2.322468189s ago: executing program 3 (id=9937):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000ac0)={{0x2, 0x0, @multicast2}, {0x1}, 0x2a, {0x2, 0x0, @empty}, 'bond_slave_1\x00'})

2.187210451s ago: executing program 3 (id=9940):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getlink={0x2c, 0x12, 0x6357c41d18cb5e71, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xa22, 0x40400}, [@IFLA_MASTER={0x8, 0x12}, @IFLA_PORT_SELF={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x810)

2.019527663s ago: executing program 3 (id=9945):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08800, &(0x7f0000000140)=ANY=[], 0x1, 0x67c, &(0x7f0000000440)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

1.735884927s ago: executing program 3 (id=9951):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
syz_usb_connect(0x5, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031ecd2b20101401a05bec0102030109022f0003064d400f0904030000817be9020904025a00ff00400b0904"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})

1.54066119s ago: executing program 6 (id=9954):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x11e, 0x1, 0x0, 0x0)

1.411725311s ago: executing program 6 (id=9957):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)

1.364376342s ago: executing program 6 (id=9958):
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)

1.361890042s ago: executing program 1 (id=9959):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050a00000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0)

1.308032673s ago: executing program 1 (id=9960):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x8000, &(0x7f0000000200)={[{@uid}, {@resize}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@usrquota}, {@errors_remount}, {@discard}, {@resize_size={'resize', 0x3d, 0x8}}, {@gid}, {@errors_continue}, {@uid}, {@errors_remount}, {@noquota}, {@quota}, {@resize_size={'resize', 0x3d, 0xad}}], [{@obj_user={'obj_user', 0x3d, ',\'('}}, {@subj_user={'subj_user', 0x3d, '('}}, {@uid_eq}, {@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'usrquota'}}, {@seclabel}]}, 0x0, 0x621a, &(0x7f000000c900)="$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")
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0)

1.235685804s ago: executing program 6 (id=9962):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0x19, 0x0, &(0x7f00000001c0)=0x2)

1.128801315s ago: executing program 6 (id=9964):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xfe, 0x101800)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x4, 0x3009, 0x1})

1.033393376s ago: executing program 6 (id=9966):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="040f0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

798.538379ms ago: executing program 5 (id=9969):
unshare(0x22020600)
mq_notify(0xffffffffffffffff, 0x0)

697.547511ms ago: executing program 4 (id=9970):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$802154_dgram(r0, &(0x7f0000000180)={0x27, @short}, 0x14)

568.592042ms ago: executing program 5 (id=9971):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}})

492.980464ms ago: executing program 4 (id=9972):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0)

461.637824ms ago: executing program 4 (id=9973):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa3)

459.657524ms ago: executing program 5 (id=9974):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203"], 0x0)

359.675015ms ago: executing program 1 (id=9975):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x0, 0x1c}, {0xdb}, 0x1000, 0x1, 0x8})

345.747336ms ago: executing program 4 (id=9976):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0)

309.152036ms ago: executing program 5 (id=9977):
r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil)
shmctl$IPC_RMID(r0, 0x0)

255.879937ms ago: executing program 1 (id=9978):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setneightbl={0x13, 0x43, 0x1, 0x70bd29, 0x25dfd3f7, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2400c010)

222.308917ms ago: executing program 4 (id=9979):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0xd0e, 0xfff, 0x391, 0x2})

191.494508ms ago: executing program 5 (id=9980):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x2000)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x80045518, 0xffffffffffffffff)

152.434568ms ago: executing program 1 (id=9981):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x680)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0xa, @pix={0x4, 0x3, 0x38416761, 0x9, 0x1, 0x0, 0xc, 0x114c, 0x0, 0x3, 0x2, 0x5}})

128.020958ms ago: executing program 4 (id=9982):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100cc9a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x1, 0x2af, &(0x7f0000000240)="$eJzs3UFr1E4Yx/HfJNvt/v8tNbYVQTxVBU+lrRcRRJF9B148idrdQnGpoBXUi9Vz8eCxd9+CL8KTeBa8efIFFDxEZpI0yW6S3XbZxq3fD3TJJvMk83SyyTwLSwTgn3Wv/ePTjZ/2z0i+fKkpyZPUkhqSLuhi6+XO7vZur9up2pHvIuyfURRpBtps7nSLQm2ci4gF9l1D85l1zeIgjKv1/dghPv/8s8eEYRgWrPek2exon5WR36u7AzUzhzrUbN29AADUzc3+o4m/L/nz8fzd86Rr8W3fbk/v/9N7A/0dRuruR63c/f+VFpLKKzR2fM+5TWm950o4u91LqsTKnXrFq5vxNj/XgWFVpeuL99/Wdq+7uvms1/H0XndimWbL7rWTP3i2t+8Gd71SUJtWGCn3I28zJ9acy2HG5rBR0v+l8Y/ozJRu6RsV88V8NQ9NoAN13PhbjdDYYXIjFfSNVNT/NeWL9AyXZRC1KsnyvIu+lC/kK7P01deNrGa8z0Y2+SDtZ0XUYl8WUXbrQ6KWCqM2hkQt90elZ3N55KSZD+aBWdEvfVb7aPztWeJHl/rhn0zbxrWMz4zKfBquZeDuJ/Gnbu9yYcuSqwcmYl9PdFMLL16/efq41+s+Z2G0heQ6+7f050QLyUlw6kf33cJHSXXkvr96e8um7dYonuJO9KAazNTXiOGNcY6e3HdO3vkarkk4demgHzOweCqI6eO5r/9d/ZepV9bcZM2+BBXz9KFFdGaP6yW1waJ7/b+8gssx7quHufIKbtSa68p16WrJEdsHA7sN4n5OtbtKvsIxbX3To8z8HwAAAAAAAAAAAAAAAAAAAFNhvJ83hGH684aWyhrXnSMAAAAAAAAAAAAAAAAAAAAAANNu8Pm/ulXr83/vK3qXf/4vgAn4EwAA////Xngs")
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

528.44µs ago: executing program 5 (id=9983):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x4}}, 0x18)

0s ago: executing program 1 (id=9984):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
writev(r0, &(0x7f0000001440)=[{&(0x7f0000000940)="030000000002017c153c", 0xa}], 0x1)

kernel console output (not intermixed with test programs):

511654][T23877] smc:    ib device syz0 port 1 has pnetid 
[  847.534456][T23903] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  847.540448][ T4945] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  848.158752][ T4939] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  848.343341][T23928] device  entered promiscuous mode
[  848.425696][T23934] kAFS: unable to lookup cell '(/'
[  848.472105][T23936] netlink: 'syz.2.8710': attribute type 4 has an invalid length.
[  848.572779][ T5727] usb 2-1: USB disconnect, device number 14
[  848.612104][T23944] loop4: detected capacity change from 0 to 256
[  848.682940][T23944] exfat: Deprecated parameter 'namecase'
[  848.701699][T23944] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  848.825104][   T21] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  848.882583][ T4932] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  848.969540][T23952] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8718'.
[  849.099945][T23956] loop4: detected capacity change from 0 to 2048
[  849.120891][ T4932] usb 1-1: Using ep0 maxpacket: 8
[  849.179064][T23958] loop1: detected capacity change from 0 to 4096
[  849.191682][T23956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  849.203502][T23962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8723'.
[  849.234909][ T4932] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  849.244777][ T4932] usb 1-1: config 179 has no interface number 0
[  849.257933][ T4932] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  849.276601][T23963] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  849.297976][ T4932] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  849.317830][ T4932] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  849.339623][ T4932] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  849.349334][T23958] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  849.358840][ T4939] usb 2-1: Service connection timeout for: 256
[  849.377656][ T4939] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  849.388420][ T4932] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  849.406694][ T4939] ath9k_htc: Failed to initialize the device
[  849.412669][   T21] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  849.412704][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.412727][   T21] usb 3-1: Product: syz
[  849.412742][   T21] usb 3-1: Manufacturer: syz
[  849.412758][   T21] usb 3-1: SerialNumber: syz
[  849.421962][T23958] Remounting filesystem read-only
[  849.450026][   T21] usb 3-1: config 0 descriptor??
[  849.452318][ T4932] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  849.482939][ T5727] usb 2-1: ath9k_htc: USB layer deinitialized
[  849.482993][ T4932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.530295][T23946] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  849.689955][T23973] xt_HMARK: spi-set and port-set can't be combined
[  849.720956][   T21] int51x1: probe of 3-1:0.0 failed with error -22
[  849.918797][   T21] usb 3-1: USB disconnect, device number 126
[  849.980280][ T4932] usb 1-1: USB disconnect, device number 17
[  849.987447][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  849.995767][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  850.082790][T23995] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8739'.
[  850.111359][T23995] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  850.162805][ T4938] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  850.250932][T24002] loop1: detected capacity change from 0 to 256
[  850.408795][ T4938] usb 4-1: Using ep0 maxpacket: 16
[  850.520791][ T4938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11
[  850.545964][ T4938] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  850.572399][ T4938] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  850.616307][ T4938] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  850.632314][ T4938] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  850.632573][T24019] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  850.673038][ T4938] usb 4-1: config 1 interface 0 has no altsetting 0
[  850.690017][ T4938] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  850.710357][ T4938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.712334][T24023] loop1: detected capacity change from 0 to 128
[  850.722384][T24019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  850.743901][T24019] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  850.779345][ T4938] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  850.861461][T24023] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  850.891971][T24023] ext4 filesystem being mounted at /1537/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  850.957595][T24009] loop4: detected capacity change from 0 to 32768
[  850.998097][T24031] loop0: detected capacity change from 0 to 256
[  851.034654][ T4938] ums-sddr09: probe of 4-1:1.0 failed with error -22
[  851.061717][ T4938] usb 4-1: USB disconnect, device number 2
[  851.134865][T24031] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  851.370161][T24043] loop1: detected capacity change from 0 to 8
[  851.451547][T24043] SQUASHFS error: Unable to read directory block [629:0]
[  851.481266][T24050] loop4: detected capacity change from 0 to 1024
[  851.601822][T24056] loop3: detected capacity change from 0 to 512
[  851.619288][T24050] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  851.737594][T24050] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none.
[  851.766303][    C1] vkms_vblank_simulate: vblank timer overrun
[  851.822021][T24050] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #11: comm syz.4.8764: missing EA_INODE flag
[  851.850181][T24050] EXT4-fs (loop4): Remounting filesystem read-only
[  851.853510][T24056] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,grpquota,,errors=continue. Quota mode: writeback.
[  851.858244][T24050] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.8764: error while reading EA inode 11 err=-117
[  851.883795][T24050] EXT4-fs (loop4): Remounting filesystem read-only
[  851.911762][T24056] ext4 filesystem being mounted at /1649/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  852.089712][T24075] loop0: detected capacity change from 0 to 256
[  852.302996][T24075] FAT-fs (loop0): Directory bread(block 64) failed
[  852.309693][T24075] FAT-fs (loop0): Directory bread(block 65) failed
[  852.369242][T24075] FAT-fs (loop0): Directory bread(block 66) failed
[  852.386416][T24075] FAT-fs (loop0): Directory bread(block 67) failed
[  852.405788][T24075] FAT-fs (loop0): Directory bread(block 68) failed
[  852.450980][T24075] FAT-fs (loop0): Directory bread(block 69) failed
[  852.486387][T24075] FAT-fs (loop0): Directory bread(block 70) failed
[  852.538936][T24075] FAT-fs (loop0): Directory bread(block 71) failed
[  852.594514][T24075] FAT-fs (loop0): Directory bread(block 72) failed
[  852.631405][T24075] FAT-fs (loop0): Directory bread(block 73) failed
[  852.848992][T24098] loop3: detected capacity change from 0 to 512
[  852.989760][T24098] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback.
[  853.097637][T24098] ext4 filesystem being mounted at /1652/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  853.274817][T24113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8789'.
[  853.461650][T24126] loop2: detected capacity change from 0 to 8
[  853.511169][T24129] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  853.593288][T24126] SQUASHFS error: Unable to read directory block [629:26]
[  853.597952][T24132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8800'.
[  853.747568][T24136] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8802'.
[  853.860237][T24142] loop1: detected capacity change from 0 to 1024
[  853.933106][T24140] loop2: detected capacity change from 0 to 4096
[  854.180406][T24158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8813'.
[  854.295345][T24163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8816'.
[  854.332577][T24163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8816'.
[  854.359475][T24163] tc_dump_action: action bad kind
[  854.510960][T24174] loop1: detected capacity change from 0 to 256
[  854.542602][T24169] loop0: detected capacity change from 0 to 4096
[  854.624010][T24178] loop4: detected capacity change from 0 to 4096
[  854.642724][T24174] FAT-fs (loop1): Directory bread(block 64) failed
[  854.654578][T24174] FAT-fs (loop1): Directory bread(block 65) failed
[  854.664356][T24178] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  854.671127][T24174] FAT-fs (loop1): Directory bread(block 66) failed
[  854.702161][T24174] FAT-fs (loop1): Directory bread(block 67) failed
[  854.712090][ T5727] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  854.759841][T20497] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  854.785129][T24174] FAT-fs (loop1): Directory bread(block 68) failed
[  854.839531][T24174] FAT-fs (loop1): Directory bread(block 69) failed
[  854.882962][T24174] FAT-fs (loop1): Directory bread(block 70) failed
[  854.890287][T24178] ntfs3: loop4: failed to convert "c46c" to macgaelic
[  854.909810][T24169] ntfs3: loop0: try to read out of volume at offset 0x3fffffc7000
[  854.924833][T24174] FAT-fs (loop1): Directory bread(block 71) failed
[  854.963124][T24174] FAT-fs (loop1): Directory bread(block 72) failed
[  854.992386][T24174] FAT-fs (loop1): Directory bread(block 73) failed
[  855.036560][T20497] usb 3-1: Using ep0 maxpacket: 16
[  855.160003][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short
[  855.240523][ T5727] usb 4-1: not running at top speed; connect to a high speed hub
[  855.350907][T20497] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d
[  855.369683][ T5727] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  855.388967][T20497] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.402125][ T5727] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  855.442721][T20497] usb 3-1: Product: syz
[  855.455539][T20497] usb 3-1: Manufacturer: syz
[  855.464500][ T5727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  855.481077][T20497] usb 3-1: SerialNumber: syz
[  855.511061][T24190] sctp: [Deprecated]: syz.4.8829 (pid 24190) Use of int in max_burst socket option deprecated.
[  855.511061][T24190] Use struct sctp_assoc_value instead
[  855.521004][ T5727] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  855.538745][T20497] usb 3-1: config 0 descriptor??
[  855.600257][ T5727] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  855.616322][T20497] ims_pcu 3-1:0.0: Missing CDC union descriptor
[  855.643442][T20497] ims_pcu: probe of 3-1:0.0 failed with error -22
[  855.810474][T20355] usb 3-1: USB disconnect, device number 127
[  855.855419][ T5727] usb 4-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90
[  855.864504][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.903071][ T5727] usb 4-1: Product: syz
[  855.907295][ T5727] usb 4-1: Manufacturer: syz
[  855.911913][ T5727] usb 4-1: SerialNumber: syz
[  856.018707][ T5727] ipaq 4-1:1.0: PocketPC PDA converter detected
[  856.102583][ T4939] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  856.229701][ T5727] usb 4-1: PocketPC PDA converter now attached to ttyUSB0
[  856.470745][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  856.473026][T24223] loop4: detected capacity change from 0 to 2048
[  856.484717][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  856.486025][ T4932] usb 4-1: USB disconnect, device number 3
[  856.492501][T24227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  856.512694][ T4932] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0
[  856.532493][ T4932] ipaq 4-1:1.0: device disconnected
[  856.599372][T24223] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=2362, location=2362
[  856.609699][ T4939] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  856.628953][ T4939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.645847][T24223] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  856.674166][ T4939] usb 1-1: Product: syz
[  856.678579][ T4939] usb 1-1: Manufacturer: syz
[  856.683201][ T4939] usb 1-1: SerialNumber: syz
[  856.689920][T24223] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  856.720066][T24223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  856.742335][ T4939] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  857.160019][ T4938] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  857.227283][T24247] rdma_rxe: rxe_register_device failed with error -23
[  857.254613][T24247] rdma_rxe: failed to add bond0
[  857.303180][ T4939] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  857.407812][ T4938] usb 3-1: Using ep0 maxpacket: 16
[  857.478566][T24253] loop4: detected capacity change from 0 to 64
[  857.523015][ T4938] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  857.551384][ T4938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  857.613790][ T4938] usb 3-1: config 0 has no interface number 0
[  857.752033][   T21] usb 1-1: USB disconnect, device number 18
[  857.769759][ T4938] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  857.778839][ T4938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.807931][ T4938] usb 3-1: Product: syz
[  857.812139][ T4938] usb 3-1: Manufacturer: syz
[  857.816783][ T4938] usb 3-1: SerialNumber: syz
[  857.838957][ T4938] usb 3-1: config 0 descriptor??
[  857.868874][T24246] loop3: detected capacity change from 0 to 32768
[  857.915341][T24246] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  857.929043][T24246] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  857.946202][T24246] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  857.957075][T20494] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  857.975417][T20494] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  858.058721][T20494] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 87ms
[  858.070516][T20494] gfs2: fsid=syz:syz.0: jid=0: Done
[  858.075882][T24246] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  858.098342][T20494] usb 3-1: USB disconnect, device number 2
[  858.350727][ T4939] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  858.361250][ T4939] ath9k_htc: Failed to initialize the device
[  858.367828][   T21] usb 1-1: ath9k_htc: USB layer deinitialized
[  858.511029][T24265] loop0: detected capacity change from 0 to 64
[  858.574359][T24267] device lo entered promiscuous mode
[  858.596066][T24267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  858.611923][T24269] rdma_rxe: rxe_register_device failed with error -23
[  858.636960][T24269] rdma_rxe: failed to add bond0
[  858.672774][T24271] loop3: detected capacity change from 0 to 256
[  858.944448][T24287] loop0: detected capacity change from 0 to 256
[  858.982782][T24289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8875'.
[  859.007075][T24289] unsupported nlmsg_type 40
[  859.207145][T24296] loop4: detected capacity change from 0 to 4096
[  859.267527][T24296] __ntfs_warning: 11 callbacks suppressed
[  859.267546][T24296] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  859.397167][T24296] ntfs: volume version 3.1.
[  859.442666][T24306] loop2: detected capacity change from 0 to 4096
[  859.831972][T24306] ntfs3: loop2: try to read out of volume at offset 0x3fffffc7000
[  860.175260][T24358] loop1: detected capacity change from 0 to 512
[  860.203856][T24360] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.8897'.
[  860.235073][T24360] openvswitch: netlink: IP tunnel dst address not specified
[  860.353197][T24358] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002]
[  860.422677][T24358] System zones: 1-12
[  860.435345][T24358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.8901: inode #1: comm syz.1.8901: iget: illegal inode #
[  860.451064][T24358] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.8901: error while reading EA inode 1 err=-117
[  860.475446][T24358] EXT4-fs (loop1): 1 orphan inode deleted
[  860.485916][T24364] loop3: detected capacity change from 0 to 4096
[  860.492431][T24358] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,journal_dev=0x0000000000000002,debug,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback.
[  860.514664][    C0] vkms_vblank_simulate: vblank timer overrun
[  860.547323][T24358] EXT4-fs error (device loop1): ext4_lookup:1855: inode #2: comm syz.1.8901: 'file0' linked to parent dir
[  860.699473][T24388] kAFS: unable to lookup cell 's‚z1'
[  861.076814][T24401] loop1: detected capacity change from 0 to 4096
[  861.108664][T24423] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  861.191476][T24423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  861.219356][T24423] infiniband syz0: set active
[  861.261749][T24423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  861.308012][T24423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  861.324021][T24401] ntfs3: loop1: try to read out of volume at offset 0x3fffffc7000
[  861.521296][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8927'.
[  861.632668][T24455] xt_hashlimit: max too large, truncated to 1048576
[  861.666137][T24455] xt_hashlimit: overflow, rate too high: 0
[  861.703591][T24464] tmpfs: Bad value for 'mpol'
[  861.906142][T24484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8942'.
[  862.058820][T24470] loop2: detected capacity change from 0 to 4096
[  862.085372][ T4932] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  862.108749][T24499] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  862.140428][T24499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  862.145432][T24470] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  862.168058][    C1] vkms_vblank_simulate: vblank timer overrun
[  862.184275][T24499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  862.202739][T24499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  862.328513][T24510] loop1: detected capacity change from 0 to 64
[  862.349281][T24470] ntfs: volume version 3.1.
[  862.480180][ T4932] usb 5-1: unable to get BOS descriptor or descriptor too short
[  862.570766][ T4932] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  862.617785][ T4932] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  862.672228][ T4932] usb 5-1: config 1 interface 0 has no altsetting 1
[  862.764053][T24533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8957'.
[  862.856660][ T4932] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  862.879391][ T4932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.893477][ T4932] usb 5-1: Product: syz
[  862.898334][ T4932] usb 5-1: Manufacturer: syz
[  862.902953][ T4932] usb 5-1: SerialNumber: syz
[  862.954442][ T4932] smsusb:smsusb_probe: board id=8, interface number 0
[  862.977687][T24558] kAFS: No cell specified
[  863.063631][T24559] loop3: detected capacity change from 0 to 4096
[  863.092434][T24562] loop0: detected capacity change from 0 to 4096
[  863.134463][T24562] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  863.154911][    C1] vkms_vblank_simulate: vblank timer overrun
[  863.170588][ T4945] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  863.180837][ T4932] smsusb:smsusb_probe: Device initialized with return code -19
[  863.195130][T24559] ntfs3: loop3: try to read out of volume at offset 0x3fffffc7000
[  863.237051][T24562] ntfs: volume version 3.1.
[  863.247006][   T21] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  863.422162][T20355] usb 5-1: USB disconnect, device number 7
[  863.430632][T24576] tmpfs: Bad value for 'mpol'
[  863.475840][ T4945] usb 3-1: Using ep0 maxpacket: 16
[  863.494788][   T21] usb 2-1: Using ep0 maxpacket: 32
[  863.574155][T24582] loop0: detected capacity change from 0 to 2048
[  863.608172][T24582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  863.638352][   T21] usb 2-1: config 2 has an invalid interface number: 7 but max is 0
[  863.653478][   T21] usb 2-1: config 2 has no interface number 0
[  863.656973][ T4945] usb 3-1: unable to get BOS descriptor or descriptor too short
[  863.674272][T24594] ntfs3: nbd3: try to read out of volume at offset 0x0
[  863.762367][ T4945] usb 3-1: config 255 has an invalid interface number: 190 but max is 1
[  863.788515][ T4945] usb 3-1: config 255 has an invalid interface number: 137 but max is 1
[  863.812780][ T4945] usb 3-1: config 255 has no interface number 0
[  863.836113][ T4945] usb 3-1: config 255 has no interface number 1
[  863.847243][   T21] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=ec.00
[  863.854541][ T4945] usb 3-1: config 255 interface 190 has no altsetting 0
[  863.867332][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.875364][   T21] usb 2-1: Product: syz
[  863.879887][ T4945] usb 3-1: config 255 interface 137 has no altsetting 0
[  863.913954][   T21] usb 2-1: Manufacturer: syz
[  863.918602][   T21] usb 2-1: SerialNumber: syz
[  863.991428][   T21] rtl8150 2-1:2.7: couldn't find required endpoints
[  863.998213][   T21] rtl8150: probe of 2-1:2.7 failed with error -5
[  864.047980][ T4945] usb 3-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=e9.04
[  864.066418][ T4945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.074449][ T4945] usb 3-1: Product: syz
[  864.112644][ T4945] usb 3-1: Manufacturer: syz
[  864.131516][ T4945] usb 3-1: SerialNumber: syz
[  864.173442][T24629] loop3: detected capacity change from 0 to 512
[  864.205477][   T21] usb 2-1: USB disconnect, device number 15
[  864.212364][T24629] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  864.231444][T24629] EXT4-fs (loop3): inline encryption not supported
[  864.262879][T24629] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5
[  864.262879][T24629] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  864.262879][T24629] 
[  864.291883][T24629] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  864.291883][T24629] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  864.291883][T24629] 
[  864.310167][    C1] vkms_vblank_simulate: vblank timer overrun
[  864.377409][T24629] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.8982: inode #13: comm syz.3.8982: iget: illegal inode #
[  864.414630][T24629] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.8982: couldn't read orphan inode 13 (err -117)
[  864.443187][T24629] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,i_version,noblock_validity,abort,mblk_io_submit,inlinecrypt,noacl,delalloc,nouser_xattr,,errors=continue. Quota mode: none.
[  864.544329][ T4945] usb 3-1: USB disconnect, device number 3
[  864.807082][T24687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8996'.
[  864.852330][T24694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8997'.
[  864.937766][   T26] audit: type=1400 audit(1747883059.153:44): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=24696 comm="syz.4.9000"
[  865.055889][T24713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9006'.
[  865.244891][T24730] loop2: detected capacity change from 0 to 128
[  865.330297][T24730] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  865.388300][T24740] binder: 24738:24740 ioctl c0306201 200000001940 returned -14
[  865.524270][ T4967] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  865.545018][T24762] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9022'.
[  865.564632][ T4967] FAT-fs (loop2): Filesystem has been set read-only
[  865.602394][ T4967] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  865.662398][T24762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  865.790097][ T4945] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  865.814944][T24762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  865.869024][T24762] bond0 (unregistering): Released all slaves
[  865.940807][T24775] loop1: detected capacity change from 0 to 4096
[  865.984380][T24775] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  866.089944][T24775] ntfs3: loop1: failed to convert "c46c" to cp1255
[  866.133546][ T4945] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  866.229055][ T4945] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  866.247601][T24759] loop3: detected capacity change from 0 to 32768
[  866.281512][ T4945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  866.308057][ T4945] usb 5-1: SerialNumber: syz
[  866.308088][ T1266] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.377890][T24759] ERROR: (device loop3): diAllocBit: iag inconsistent
[  866.377890][T24759] 
[  866.400753][ T4945] cdc_ether 5-1:1.0: invalid descriptor buffer length
[  866.407574][ T4945] usb 5-1: bad CDC descriptors
[  866.475459][T24759] ERROR: (device loop3): remounting filesystem as read-only
[  866.512758][ T1266] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.556384][T24759] ialloc: diAlloc returned -5!
[  866.604954][ T1266] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.612446][ T4945] usb 5-1: USB disconnect, device number 8
[  866.665604][T24840] loop0: detected capacity change from 0 to 512
[  866.682874][ T1266] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.869707][T24840] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  866.891110][T24840] ext4 filesystem being mounted at /1722/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  867.230536][T24880] netlink: 'syz.4.9040': attribute type 10 has an invalid length.
[  867.809749][ T4939] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  867.852380][T24916] loop3: detected capacity change from 0 to 4096
[  867.910796][T24916] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  868.131857][T24916] ntfs: volume version 3.1.
[  868.153198][ T4939] usb 1-1: descriptor type invalid, skip
[  868.174219][T24970] autofs4:pid:24970:autofs_fill_super: called with bogus options
[  868.238609][ T4939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  868.259749][ T4939] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  868.457747][ T4939] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  868.505269][ T4939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.539621][ T4939] usb 1-1: Product: syz
[  868.552927][ T4939] usb 1-1: Manufacturer: syz
[  868.573806][ T4939] usb 1-1: SerialNumber: syz
[  868.589671][ T4939] usb 1-1: config 0 descriptor??
[  868.630388][T25063] netlink: 'syz.1.9060': attribute type 13 has an invalid length.
[  868.678407][T25063] device macvtap0 entered promiscuous mode
[  868.690219][T25063] macvtap0: refused to change device tx_queue_len
[  868.703529][T24868] chnl_net:caif_netlink_parms(): no params data found
[  868.726840][T25081] loop3: detected capacity change from 0 to 64
[  868.882364][ T4939] usb 1-1: USB disconnect, device number 19
[  868.899401][T25110] netlink: 'syz.1.9064': attribute type 9 has an invalid length.
[  868.974834][T25126] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  869.180088][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[  869.207399][T25153] loop3: detected capacity change from 0 to 4096
[  869.221788][T25153] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  869.230044][T25153] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  869.237902][T25153] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  869.247123][T25153] ntfs3: loop3: try to read out of volume at offset 0x3fffffc0c00
[  869.256162][T25153] ntfs3: loop3: try to read out of volume at offset 0x3fffffc1c00
[  869.264637][T25153] ntfs3: loop3: try to read out of volume at offset 0x3fffffc2c00
[  869.272984][T25153] ntfs3: loop3: try to read out of volume at offset 0x3fffffc4c00
[  869.303195][T25153] ntfs3: loop3: try to read out of volume at offset 0x3fffffc8c00
[  869.323888][T25153] ntfs3: loop3: try to read out of volume at offset 0x3fffffd0c00
[  869.325735][T24868] bridge0: port 1(bridge_slave_0) entered blocking state
[  869.345912][T25153] ntfs3: loop3: try to read out of volume at offset 0x3fffffe0c00
[  869.396111][T24868] bridge0: port 1(bridge_slave_0) entered disabled state
[  869.460571][T24868] device bridge_slave_0 entered promiscuous mode
[  869.483435][T24868] bridge0: port 2(bridge_slave_1) entered blocking state
[  869.527349][T24868] bridge0: port 2(bridge_slave_1) entered disabled state
[  869.564776][T24868] device bridge_slave_1 entered promiscuous mode
[  869.614605][ T1266] device hsr_slave_0 left promiscuous mode
[  869.663229][ T1266] device hsr_slave_1 left promiscuous mode
[  869.678583][ T1266] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  869.719454][ T1266] batman_adv: batadv0: Removing interface: batadv_slave_0
[  869.764152][ T1266] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  869.771621][ T1266] batman_adv: batadv0: Removing interface: batadv_slave_1
[  869.783404][T25202] loop1: detected capacity change from 0 to 24
[  869.869295][ T1266] device bridge_slave_1 left promiscuous mode
[  869.895475][ T1266] bridge0: port 2(bridge_slave_1) entered disabled state
[  869.950494][ T1266] device bridge_slave_0 left promiscuous mode
[  869.960593][T25218] AppArmor: change_hat: Invalid input '°'
[  869.970772][ T1266] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.106157][ T1266] device veth1_macvtap left promiscuous mode
[  870.119018][ T1266] device veth0_macvtap left promiscuous mode
[  870.150480][ T1266] device veth1_vlan left promiscuous mode
[  870.164414][ T1266] device veth0_vlan left promiscuous mode
[  870.583952][T25257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9093'.
[  870.636728][ T1266] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  870.759974][ T1266] team0 (unregistering): Port device team_slave_1 removed
[  870.784287][ T1266] team0 (unregistering): Port device team_slave_0 removed
[  870.800017][ T1266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  870.818154][ T1266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  870.915825][ T1266] bond0 (unregistering): Released all slaves
[  870.984983][T25211] netlink: 'syz.0.9080': attribute type 1 has an invalid length.
[  871.095099][T24868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  871.140934][T24868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  871.155405][T20355] Bluetooth: hci1: command 0x041b tx timeout
[  871.190785][T25314] loop3: detected capacity change from 0 to 256
[  871.213507][T25312] loop4: detected capacity change from 0 to 512
[  871.229118][T25307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9101'.
[  871.294947][T25312] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  871.350459][T24868] team0: Port device team_slave_0 added
[  871.393964][T25342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9105'.
[  871.460403][T25312] EXT4-fs (loop4): orphan cleanup on readonly fs
[  871.475428][T24868] team0: Port device team_slave_1 added
[  871.503831][T25312] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.9103: Block bitmap for bg 0 marked uninitialized
[  871.525178][T25312] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem
[  871.577719][T25312] EXT4-fs (loop4): 1 orphan inode deleted
[  871.592564][T25312] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  871.688936][T24868] batman_adv: batadv0: Adding interface: batadv_slave_0
[  871.739405][T24868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  871.841823][T24868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  871.858315][ T4932] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  871.914910][T24868] batman_adv: batadv0: Adding interface: batadv_slave_1
[  871.941628][T24868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  872.059010][T24868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  872.079506][T25404] netlink: 'syz.4.9113': attribute type 1 has an invalid length.
[  872.253769][T24868] device hsr_slave_0 entered promiscuous mode
[  872.281677][T24868] device hsr_slave_1 entered promiscuous mode
[  872.363186][ T4932] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  872.386095][ T4932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.427983][ T4932] usb 1-1: Product: syz
[  872.443690][T25344] loop1: detected capacity change from 0 to 32768
[  872.456559][ T4932] usb 1-1: Manufacturer: syz
[  872.462955][ T4932] usb 1-1: SerialNumber: syz
[  872.490185][ T4932] usb 1-1: config 0 descriptor??
[  872.533725][T25344] XFS (loop1): Mounting V5 Filesystem
[  872.547756][ T4972] Bluetooth: hci5: urb ffff88801a5f2e00 submission failed (2)
[  872.778087][T20494] usb 1-1: USB disconnect, device number 20
[  872.896860][T25344] XFS (loop1): Ending clean mount
[  873.058633][   T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  873.097667][ T4965] XFS (loop1): Unmounting Filesystem
[  873.163422][T24868] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  873.192036][T20355] Bluetooth: hci1: command 0x040f tx timeout
[  873.224594][T24868] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  873.256775][T24868] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  873.295683][T24868] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  873.334944][   T21] usb 4-1: Using ep0 maxpacket: 32
[  873.478181][   T21] usb 4-1: config 0 has an invalid interface number: 16 but max is 0
[  873.486358][   T21] usb 4-1: config 0 has no interface number 0
[  873.522660][   T21] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  873.572308][   T21] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  873.761712][T24868] 8021q: adding VLAN 0 to HW filter on device bond0
[  873.780716][T25591] 9pnet: Insufficient options for proto=fd
[  873.801661][   T21] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  873.810750][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.824848][T24868] 8021q: adding VLAN 0 to HW filter on device team0
[  873.851908][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  873.856599][   T21] usb 4-1: Product: syz
[  873.874766][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  873.877880][   T21] usb 4-1: Manufacturer: syz
[  873.886596][   T21] usb 4-1: SerialNumber: syz
[  873.913759][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  873.955210][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  873.977797][   T21] usb 4-1: config 0 descriptor??
[  873.997225][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state
[  874.004453][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state
[  874.026914][T25504] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  874.049936][T25504] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  874.095270][T25607] netlink: 'syz.4.9132': attribute type 1 has an invalid length.
[  874.105630][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  874.115685][T25607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9132'.
[  874.127819][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  874.142439][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state
[  874.149662][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  874.417114][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9133'.
[  874.429654][T25629] loop1: detected capacity change from 0 to 256
[  874.467665][ T5727] usb 4-1: USB disconnect, device number 4
[  874.473100][T25628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9133'.
[  874.525403][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  874.555427][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  874.577834][T25628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9133'.
[  874.610115][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  874.611074][T25628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9133'.
[  874.717552][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  874.727492][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  874.737998][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  874.784023][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  874.825560][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  874.866888][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  874.906629][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  874.921703][T24868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  874.947946][T25656] loop1: detected capacity change from 0 to 4096
[  874.972733][T24868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  874.996188][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  875.010881][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  875.111576][T25656] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  875.125367][ T5727] Bluetooth: hci1: command 0x0419 tx timeout
[  875.239933][ T4945] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  875.347359][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  875.447660][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  875.461666][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  875.478077][ T4945] usb 5-1: Using ep0 maxpacket: 16
[  875.510444][T24868] 8021q: adding VLAN 0 to HW filter on device batadv0
[  875.592582][ T4945] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  875.601179][ T4945] usb 5-1: config 0 has no interface number 0
[  875.642900][ T4945] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  875.672001][T25703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9145'.
[  875.811421][ T4945] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  875.840361][ T4945] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  875.874711][ T4945] usb 5-1: Product: syz
[  875.905188][ T4945] usb 5-1: SerialNumber: syz
[  875.930881][ T4945] usb 5-1: config 0 descriptor??
[  875.994173][ T4945] cm109 5-1:0.8: invalid payload size 208, expected 4
[  876.018113][T25722] loop0: detected capacity change from 0 to 8
[  876.035496][ T4945] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input67
[  876.107148][T25722] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  876.135761][ T8080] udevd[8080]: incorrect cramfs checksum on /dev/loop0
[  876.252336][ T8080] udevd[8080]: incorrect cramfs checksum on /dev/loop0
[  876.349210][T25681] loop3: detected capacity change from 0 to 32768
[  876.431065][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  876.442459][T25681] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.9142 (25681)
[  876.467166][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  876.488158][    C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71
[  876.506812][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  876.525874][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  876.544928][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  876.563729][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  876.583016][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  876.585542][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  876.591436][ T4945] usb 5-1: USB disconnect, device number 9
[  876.603727][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  876.603760][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  876.632202][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  876.660353][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  876.668248][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  876.686464][ T4945] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  876.718365][T25681] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  876.743067][T24868] device veth0_vlan entered promiscuous mode
[  876.749816][T25681] BTRFS info (device loop3): force zlib compression, level 3
[  876.762443][T25681] BTRFS info (device loop3): force clearing of disk cache
[  876.787558][T24868] device veth1_vlan entered promiscuous mode
[  876.798015][T25681] BTRFS info (device loop3): setting nodatasum
[  876.820243][T25681] BTRFS info (device loop3): doing ref verification
[  876.871988][T25681] BTRFS info (device loop3): allowing degraded mounts
[  876.908428][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  876.928464][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  876.937127][T25681] BTRFS info (device loop3): enabling disk space caching
[  876.944197][T25681] BTRFS info (device loop3): disk space caching is enabled
[  876.977207][T24868] device veth0_macvtap entered promiscuous mode
[  877.022968][T24868] device veth1_macvtap entered promiscuous mode
[  877.030995][T25681] BTRFS info (device loop3): has skinny extents
[  877.123849][T25772] loop1: detected capacity change from 0 to 4096
[  877.152507][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  877.163204][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.174299][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9159'.
[  877.182444][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  877.193984][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.203371][T25785] kAFS: unparsable volume name
[  877.206270][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  877.220246][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.230548][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  877.241073][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.252120][T25783] netlink: 'syz.0.9159': attribute type 1 has an invalid length.
[  877.253164][T24868] batman_adv: batadv0: Interface activated: batadv_slave_0
[  877.289051][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  877.302279][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  877.320777][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  877.356516][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  877.364524][T25772] ntfs: volume version 3.1.
[  877.435795][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  877.450368][T25772] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Size of index buffer (VCN 0x0) of directory inode 0x5 exceeds maximum size.
[  877.464219][T25772] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  877.476990][T25772] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  877.487271][T25681] BTRFS info (device loop3): enabling ssd optimizations
[  877.493128][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.509145][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  877.530293][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.548124][T25681] BTRFS info (device loop3): clearing free space tree
[  877.552899][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  877.588167][T25681] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  877.607154][T25681] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  877.623270][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.667570][T24868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  877.705717][T24868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  877.758098][T24868] batman_adv: batadv0: Interface activated: batadv_slave_1
[  877.791972][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  877.841249][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  877.911099][T24868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  877.938348][T24868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  877.962642][T25829] netlink: 'syz.4.9165': attribute type 3 has an invalid length.
[  877.976323][T24868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  877.984431][T25829] netlink: 'syz.4.9165': attribute type 1 has an invalid length.
[  878.007993][T24868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  878.884181][T25886] loop4: detected capacity change from 0 to 1024
[  879.080702][T25889] loop0: detected capacity change from 0 to 4096
[  879.112936][ T1266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.130888][  T144] hfsplus: b-tree write err: -5, ino 4
[  879.133027][ T1266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.191577][T25933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9185'.
[  879.210035][T25889] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  879.235808][ T7196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.244761][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  879.253325][T25889] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  879.300762][T25933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9185'.
[  879.329519][ T7196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.330400][T25889] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  879.346743][T25933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9185'.
[  879.383646][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  879.405422][T25889] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  879.496937][T25889] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  879.603815][T25889] ntfs: volume version 3.1.
[  879.648390][T25889] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  879.723965][T25889] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  879.884508][T25977] sctp: [Deprecated]: syz.4.9193 (pid 25977) Use of struct sctp_assoc_value in delayed_ack socket option.
[  879.884508][T25977] Use struct sctp_sack_info instead
[  879.945584][T25976] libceph: resolve '400' (ret=-3): failed
[  880.240960][ T4931] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  880.313329][T26015] loop1: detected capacity change from 0 to 64
[  880.431211][T20493] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  880.469489][ T4931] usb 6-1: Using ep0 maxpacket: 32
[  880.583687][ T4931] usb 6-1: config 0 has an invalid interface number: 242 but max is 0
[  880.591906][ T4931] usb 6-1: config 0 has no interface number 0
[  880.764673][ T4931] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=eb.4e
[  880.787427][ T4931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.801601][T26048] loop1: detected capacity change from 0 to 512
[  880.808676][ T4931] usb 6-1: Product: syz
[  880.813963][ T4931] usb 6-1: Manufacturer: syz
[  880.819984][ T4931] usb 6-1: SerialNumber: syz
[  880.828007][ T4931] usb 6-1: config 0 descriptor??
[  880.918195][T26048] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  881.002139][T26048] EXT4-fs error (device loop1): __ext4_iget:4893: inode #4: block 127744: comm syz.1.9210: invalid block
[  881.025136][T20493] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  881.040872][T20493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.047534][T26048] EXT4-fs error (device loop1): ext4_quota_enable:6415: comm syz.1.9210: Bad quota inode: 4, type: 1
[  881.049052][T20493] usb 1-1: Product: syz
[  881.074464][T20493] usb 1-1: Manufacturer: syz
[  881.079574][ T4931] cdc_subset: probe of 6-1:0.242 failed with error -22
[  881.084404][T20493] usb 1-1: SerialNumber: syz
[  881.114233][T26048] EXT4-fs warning (device loop1): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  881.133586][T26048] EXT4-fs (loop1): mount failed
[  881.158129][T20493] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  881.282776][ T4931] usb 6-1: USB disconnect, device number 2
[  881.501337][T26095] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9217'.
[  881.590638][T26043] loop4: detected capacity change from 0 to 40427
[  881.620291][T26043] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  881.638628][T26095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  881.638811][T26043] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  881.687083][T26043] F2FS-fs (loop4): invalid crc value
[  881.695938][T26095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  881.725282][T26043] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  881.744471][T26095] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  881.796790][T26095] bond0 (unregistering): Released all slaves
[  881.831296][T20493] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  881.954333][T26043] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  881.964827][T26043] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  882.216297][ T5727] usb 1-1: USB disconnect, device number 21
[  882.319024][T26167] netlink: 'syz.5.9224': attribute type 2 has an invalid length.
[  882.443089][T26176] usb usb8: usbfs: process 26176 (syz.5.9228) did not claim interface 0 before use
[  882.596092][T26186] libceph: resolve '400' (ret=-3): failed
[  882.678140][T26191] netlink: 'syz.5.9232': attribute type 1 has an invalid length.
[  882.889075][T20493] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  882.896135][T20493] ath9k_htc: Failed to initialize the device
[  882.948807][ T5727] usb 1-1: ath9k_htc: USB layer deinitialized
[  883.583888][T26260] loop1: detected capacity change from 0 to 4096
[  883.638886][T26260] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  883.828776][T26293] loop0: detected capacity change from 0 to 512
[  883.911626][ T5039] ntfs3: loop1: ino=1b, Internal error
[  883.932663][ T5039] ntfs3: loop1: ntfs3_write_inode r=1b failed, -22.
[  883.949785][T26293] EXT4-fs (loop0): 1 orphan inode deleted
[  883.988823][T26293] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  884.006146][ T5039] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  884.051097][T26293] ext4 filesystem being mounted at /1762/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  884.157232][T26312] netlink: 'syz.3.9264': attribute type 1 has an invalid length.
[  884.180701][T26312] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9264'.
[  884.552061][T26336] loop3: detected capacity change from 0 to 512
[  884.590982][T26263] loop5: detected capacity change from 0 to 32768
[  884.685568][T26340] loop1: detected capacity change from 0 to 4096
[  884.687101][T26263] ialloc: diAlloc returned -5!
[  884.765638][T26336] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  884.836676][T26340] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  884.849200][T26336] ext4 filesystem being mounted at /1760/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  884.873100][T26362] loop4: detected capacity change from 0 to 512
[  884.939609][T26362] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  884.939634][T26340] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22.
[  884.971118][T26340] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  884.975019][T26336] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:338: inode #15: comm syz.3.9273: verity file corrupted; can't find descriptor
[  884.978849][ T4931] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  885.001002][T26340] ntfs3: loop1: ntfs_set_state r=3 failed, -22.
[  885.010861][T26362] ext4 filesystem being mounted at /1823/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  885.052388][T26336] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  885.232535][ T4931] usb 1-1: Using ep0 maxpacket: 32
[  885.239070][T26362] __quota_error: 9 callbacks suppressed
[  885.239089][T26362] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  885.318518][T26362] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  885.346520][ T4931] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  885.361683][T26362] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.9278: Failed to acquire dquot type 0
[  885.384129][ T4931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.427123][ T4931] usb 1-1: config 0 descriptor??
[  885.445916][T26388] (syz.1.9283,26388,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  885.487571][T26388] (syz.1.9283,26388,1):ocfs2_fill_super:1177 ERROR: status = -22
[  885.515607][ T4931] as10x_usb: device has been detected
[  885.530040][ T4931] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  885.567127][ T4931] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  885.708748][T26406] loop5: detected capacity change from 0 to 256
[  885.717623][T26406] exfat: Deprecated parameter 'namecase'
[  885.746411][ T4931] as10x_usb: error during firmware upload part1
[  885.761541][ T4931] Registered device nBox DVB-T Dongle
[  885.774225][T26406] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  885.819764][ T4931] usb 1-1: USB disconnect, device number 22
[  885.898210][ T4931] Unregistered device nBox DVB-T Dongle
[  885.908937][ T4931] as10x_usb: device has been disconnected
[  886.164806][T26437] loop4: detected capacity change from 0 to 4096
[  886.220768][T26448] loop5: detected capacity change from 0 to 256
[  886.227494][ T4936] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  886.292414][T26437] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  886.327096][T26454] loop1: detected capacity change from 0 to 8
[  886.365955][T26448] FAT-fs (loop5): Directory bread(block 64) failed
[  886.372547][T26448] FAT-fs (loop5): Directory bread(block 65) failed
[  886.381344][T26437] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22.
[  886.394560][T26448] FAT-fs (loop5): Directory bread(block 66) failed
[  886.411312][T26448] FAT-fs (loop5): Directory bread(block 67) failed
[  886.419545][T26454] SQUASHFS error: Failed to read block 0x63a: -5
[  886.421415][T26437] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  886.446726][T26454] SQUASHFS error: Unable to read metadata cache entry [638]
[  886.470784][ T4936] usb 4-1: Using ep0 maxpacket: 32
[  886.480056][T26448] FAT-fs (loop5): Directory bread(block 68) failed
[  886.480379][T26437] ntfs3: loop4: ntfs_set_state r=3 failed, -22.
[  886.496748][T26448] FAT-fs (loop5): Directory bread(block 69) failed
[  886.504440][T26454] SQUASHFS error: Unable to read directory block [26067d:0]
[  886.536306][T26448] FAT-fs (loop5): Directory bread(block 70) failed
[  886.565794][T26448] FAT-fs (loop5): Directory bread(block 71) failed
[  886.584727][ T4936] usb 4-1: config 0 has an invalid interface number: 9 but max is 0
[  886.595662][ T4936] usb 4-1: config 0 has no interface number 0
[  886.628880][T26448] FAT-fs (loop5): Directory bread(block 72) failed
[  886.658654][T26448] FAT-fs (loop5): Directory bread(block 73) failed
[  886.756357][ T4936] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  886.810708][ T4936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.833289][ T4936] usb 4-1: Product: syz
[  886.837502][ T4936] usb 4-1: Manufacturer: syz
[  886.870534][ T4936] usb 4-1: SerialNumber: syz
[  886.895775][ T4936] usb 4-1: config 0 descriptor??
[  886.986987][ T4936] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  886.993160][T26485] loop4: detected capacity change from 0 to 1024
[  887.294580][T26509] xt_l2tp: invalid flags combination: c
[  887.403890][ T4936] gspca_topro: reg_w err -71
[  887.419115][T26522] netlink: 'syz.5.9313': attribute type 1 has an invalid length.
[  887.442047][ T4936] gspca_topro: Sensor soi763a
[  887.464097][ T4936] usb 4-1: USB disconnect, device number 5
[  887.526327][T26522] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9313'.
[  887.601258][T26536] netlink: 'syz.4.9315': attribute type 1 has an invalid length.
[  887.689507][ T4931] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  887.689529][T26536] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9315'.
[  887.918484][ T4931] usb 2-1: Using ep0 maxpacket: 16
[  888.032816][ T4931] usb 2-1: config 0 has no interfaces?
[  888.174883][T26586] loop3: detected capacity change from 0 to 64
[  888.185375][ T4931] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  888.218516][ T4931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.232755][ T4931] usb 2-1: Product: syz
[  888.249426][ T4931] usb 2-1: Manufacturer: syz
[  888.256956][T26591] loop5: detected capacity change from 0 to 512
[  888.263947][ T4931] usb 2-1: SerialNumber: syz
[  888.270126][ T4931] r8152-cfgselector 2-1: config 0 descriptor??
[  888.308843][T26591] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  888.418579][T26591] EXT4-fs error (device loop5): __ext4_iget:4893: inode #4: block 127744: comm syz.5.9332: invalid block
[  888.487098][T26591] EXT4-fs error (device loop5): ext4_quota_enable:6415: comm syz.5.9332: Bad quota inode: 4, type: 1
[  888.528729][ T4931] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  888.547872][T26623] trusted_key: encrypted_key: keyword 'bew' not recognized
[  888.554944][T26591] EXT4-fs warning (device loop5): ext4_enable_quotas:6456: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  888.573379][T26591] EXT4-fs (loop5): mount failed
[  888.735291][ T4931] usb 2-1: USB disconnect, device number 16
[  888.776141][T26643] loop0: detected capacity change from 0 to 256
[  889.667707][T26692] loop1: detected capacity change from 0 to 128
[  889.722120][T26654] loop5: detected capacity change from 0 to 32768
[  889.774567][T26642] loop3: detected capacity change from 0 to 32768
[  889.777945][T26701] loop4: detected capacity change from 0 to 16
[  889.857688][T26701] erofs: (device loop4): mounted with root inode @ nid 36.
[  889.888507][T26701] erofs: (device loop4): erofs_read_inode: unsupported i_format 36 of nid 37
[  889.993214][T26714] NILFS (nullb0): couldn't find nilfs on the device
[  890.477415][T26742] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9370'.
[  890.499902][T26742] rdma_rxe: ignoring netdev event = 10 for bond0
[  890.536544][T26747] loop1: detected capacity change from 0 to 512
[  890.548834][T26742] infiniband syz0: set down
[  890.582359][ T5727] infiniband syz0: ib_query_port failed (-19)
[  890.622533][T26742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  890.632429][ T1266] smc: removing ib device syz0
[  890.650851][T26747] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  890.663922][T26742] rdma_rxe: ignoring netdev event = 12 for bond0
[  890.698422][T26742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  890.732664][T26747] EXT4-fs (loop1): 1 truncate cleaned up
[  890.775549][T26747] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,block_validity,debug_want_extra_isize=0x0000000000000068,quota,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: writeback.
[  890.822379][T26742] rdma_rxe: ignoring netdev event = 12 for bond0
[  890.828778][T26720] loop4: detected capacity change from 0 to 32768
[  890.882164][T26742] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  890.911920][T26742] rdma_rxe: ignoring netdev event = 8 for bond0
[  890.919918][T26764] loop0: detected capacity change from 0 to 256
[  890.929497][T26720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9366 (26720)
[  890.949819][T26742] rdma_rxe: ignoring netdev event = 18 for bond0
[  890.989752][T26742] rdma_rxe: ignoring netdev event = 12 for bond0
[  891.029184][T26720] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  891.053469][T26742] bond0 (unregistering): Released all slaves
[  891.062047][T26720] BTRFS info (device loop4): using free space tree
[  891.100593][T26720] BTRFS info (device loop4): has skinny extents
[  891.367830][T26831] loop1: detected capacity change from 0 to 1024
[  891.461857][T26720] BTRFS info (device loop4): enabling ssd optimizations
[  891.473189][T26831] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  891.481331][T26843] netlink: 'syz.5.9383': attribute type 11 has an invalid length.
[  891.494325][T26843] netlink: 140 bytes leftover after parsing attributes in process `syz.5.9383'.
[  891.571796][T26831] hfsplus: filesystem is marked journaled, leaving read-only.
[  891.863583][T26870] netlink: 'syz.1.9386': attribute type 9 has an invalid length.
[  891.990709][T26875] netlink: 'syz.1.9389': attribute type 11 has an invalid length.
[  892.210585][T26886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9394'.
[  892.263745][ T8080] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (8080)
[  892.393212][T26896] loop0: detected capacity change from 0 to 256
[  892.667253][T26910] kernel read not supported for file / 
 (pid: 26910 comm: syz.5.9399)
[  892.706203][   T26] audit: type=1800 audit(1747883088.306:45): pid=26910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9399" name=2001 dev="mqueue" ino=93460 res=0 errno=0
[  893.294318][T26953] loop0: detected capacity change from 0 to 256
[  893.382453][T26958] loop1: detected capacity change from 0 to 2048
[  893.449879][T26965] loop5: detected capacity change from 0 to 256
[  893.462632][T26953] FAT-fs (loop0): Directory bread(block 64) failed
[  893.486122][T26953] FAT-fs (loop0): Directory bread(block 65) failed
[  893.511664][T26953] FAT-fs (loop0): Directory bread(block 66) failed
[  893.518243][T26953] FAT-fs (loop0): Directory bread(block 67) failed
[  893.531232][T26958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  893.555495][T26972] cgroup: Name too long
[  893.564034][T26953] FAT-fs (loop0): Directory bread(block 68) failed
[  893.615051][T26953] FAT-fs (loop0): Directory bread(block 69) failed
[  893.631443][T26953] FAT-fs (loop0): Directory bread(block 70) failed
[  893.662621][T26953] FAT-fs (loop0): Directory bread(block 71) failed
[  893.694044][T26953] FAT-fs (loop0): Directory bread(block 72) failed
[  893.715222][T26953] FAT-fs (loop0): Directory bread(block 73) failed
[  894.448677][T27050] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  894.508018][T27050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  894.523501][T27057] netlink: 'syz.5.9434': attribute type 1 has an invalid length.
[  894.538520][ T4931] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  894.767262][ T4931] usb 2-1: Using ep0 maxpacket: 16
[  894.851881][T27088] netlink: 14 bytes leftover after parsing attributes in process `syz.5.9442'.
[  894.881679][ T4931] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  894.889934][ T4931] usb 2-1: config 0 has no interface number 0
[  894.927779][ T4931] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11
[  894.955765][ T4931] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[  895.110272][ T4931] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  895.152335][ T4931] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  895.183391][ T4931] usb 2-1: Manufacturer: syz
[  895.215262][ T4931] usb 2-1: SerialNumber: syz
[  895.251650][ T4931] usb 2-1: config 0 descriptor??
[  895.272031][T27088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  895.300989][T27026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  895.373679][T27088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  895.461994][T27088] bond0 (unregistering): Released all slaves
[  895.529776][ T4931] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71
[  895.537505][ T4931] usbtouchscreen: probe of 2-1:0.214 failed with error -71
[  895.574019][ T4931] usb 2-1: USB disconnect, device number 17
[  895.637298][T27116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9448'.
[  895.728338][T27159] netlink: 'syz.4.9449': attribute type 10 has an invalid length.
[  895.805751][T27159] 8021q: adding VLAN 0 to HW filter on device team0
[  895.823726][T27159] bond0: (slave team0): Enslaving as an active interface with an up link
[  895.995239][T27173] loop5: detected capacity change from 0 to 1764
[  896.031439][T27102] loop3: detected capacity change from 0 to 32768
[  896.138056][T27102] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  896.226907][T27102] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  896.378546][T27102] (syz.3.9445,27102,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=64
[  896.463058][T27102] (syz.3.9445,27102,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  896.541657][T27102] (syz.3.9445,27102,0):ocfs2_mknod:298 ERROR: status = -2
[  896.611162][T27102] (syz.3.9445,27102,0):ocfs2_mknod:502 ERROR: status = -2
[  896.643868][T27220] netlink: 'syz.1.9463': attribute type 11 has an invalid length.
[  896.680882][T27220] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9463'.
[  896.728842][ T4974] ocfs2: Unmounting device (7,3) on (node local)
[  896.917578][T27179] loop4: detected capacity change from 0 to 32768
[  897.026089][T27179] (syz.4.9454,27179,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  897.075245][T27179] (syz.4.9454,27179,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  897.302435][T27179] JBD2: Ignoring recovery information on journal
[  897.378747][T27179] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  897.595064][ T4970] ocfs2: Unmounting device (7,4) on (node local)
[  897.723878][T27298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9476'.
[  897.743168][T27296] netlink: 'syz.3.9477': attribute type 11 has an invalid length.
[  897.797020][T27296] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9477'.
[  898.257254][T27253] loop1: detected capacity change from 0 to 32768
[  898.319855][T27323] loop4: detected capacity change from 0 to 8192
[  898.399496][T27323] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  898.408698][T27252] loop5: detected capacity change from 0 to 32768
[  898.445029][T27344] loop0: detected capacity change from 0 to 4096
[  898.452409][T27323] REISERFS (device loop4): using ordered data mode
[  898.459800][T27323] reiserfs: using flush barriers
[  898.471904][T27351] loop3: detected capacity change from 0 to 1024
[  898.505953][T27323] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  898.524180][T27323] REISERFS (device loop4): checking transaction log (loop4)
[  898.544642][T27253] XFS (loop1): Mounting V5 Filesystem
[  898.581532][T27351] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  898.607305][T27351] EXT4-fs (loop3): orphan cleanup on readonly fs
[  898.670868][T27351] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.9487: Invalid inode table block 0 in block_group 0
[  898.820038][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  898.890766][T27373] device netdevsim0 entered promiscuous mode
[  898.900798][T27351] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5835: Corrupt filesystem
[  899.007038][T27323] REISERFS (device loop4): Using tea hash to sort names
[  899.033110][T27323] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  899.044821][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  899.051413][T27351] EXT4-fs error (device loop3): ext4_quota_write:6616: inode #3: comm syz.3.9487: mark_inode_dirty error
[  899.074240][T27253] XFS (loop1): Ending clean mount
[  899.151722][T27386] netlink: 'syz.0.9491': attribute type 11 has an invalid length.
[  899.197760][T27253] XFS (loop1): Quotacheck needed: Please wait.
[  899.205057][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  899.216207][T27386] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9491'.
[  899.252331][T27351] Quota error (device loop3): write_blk: dquota write failed
[  899.330346][T27351] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  899.369804][T27351] EXT4-fs error (device loop3): ext4_acquire_dquot:6204: comm syz.3.9487: Failed to acquire dquot type 0
[  899.370159][T27253] XFS (loop1): Quotacheck: Done.
[  899.435131][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  899.463375][T27351] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.9487: Invalid inode table block 0 in block_group 0
[  899.530242][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  899.536793][T27351] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5835: Corrupt filesystem
[  899.577282][T27408] loop0: detected capacity change from 0 to 8
[  899.623591][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  899.672602][T27351] EXT4-fs error (device loop3): ext4_ext_truncate:4454: inode #15: comm syz.3.9487: mark_inode_dirty error
[  899.729919][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  899.736549][T27351] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.9487: Invalid inode table block 0 in block_group 0
[  899.802138][ T4965] XFS (loop1): Unmounting Filesystem
[  899.821983][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  899.853258][T27351] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5835: Corrupt filesystem
[  899.951563][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  899.958768][T27423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9498'.
[  899.995189][T27351] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  900.040920][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  900.057794][T27351] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.9487: Invalid inode table block 0 in block_group 0
[  900.120543][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  900.134650][T27351] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5835: Corrupt filesystem
[  900.147355][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  900.177903][T27351] EXT4-fs error (device loop3): ext4_truncate:4273: inode #15: comm syz.3.9487: mark_inode_dirty error
[  900.216099][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  900.255417][T27437] loop4: detected capacity change from 0 to 512
[  900.262009][T27351] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  900.324169][T27351] EXT4-fs (loop3): Remounting filesystem read-only
[  900.376396][T27351] EXT4-fs (loop3): 1 truncate cleaned up
[  900.394242][T27437] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  900.422086][T27351] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,nojournal_checksum,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback.
[  900.446765][    C1] vkms_vblank_simulate: vblank timer overrun
[  900.502788][T27351] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.9487: Invalid inode table block 0 in block_group 0
[  900.517981][T27437] ext4 filesystem being mounted at /1868/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  900.816098][T27468] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9505'.
[  900.984322][T27468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  901.051624][T27468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  901.125852][T27468] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  901.171058][T27433] loop5: detected capacity change from 0 to 32768
[  901.192135][T27468] bond0 (unregistering): (slave team0): Releasing backup interface
[  901.289479][T27433] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  901.290339][T27468] bond0 (unregistering): Released all slaves
[  901.327771][T27433] (syz.5.9501,27433,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[  901.361819][T27433] (syz.5.9501,27433,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  901.371995][T27433] (syz.5.9501,27433,1):ocfs2_mknod:298 ERROR: status = -2
[  901.379629][T27433] (syz.5.9501,27433,1):ocfs2_mknod:502 ERROR: status = -2
[  901.390344][T27433] (syz.5.9501,27433,1):ocfs2_mkdir:659 ERROR: status = -2
[  901.543837][T24868] ocfs2: Unmounting device (7,5) on (node local)
[  901.806573][T27555] loop4: detected capacity change from 0 to 256
[  901.825753][ T4939] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  901.866929][T27555] exfat: Deprecated parameter 'utf8'
[  901.878535][T27555] exfat: Deprecated parameter 'namecase'
[  901.878605][T27555] exfat: Deprecated parameter 'utf8'
[  901.896884][T27555] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc348802e, utbl_chksum : 0xe619d30d)
[  901.899503][T27568] loop1: detected capacity change from 0 to 512
[  902.037811][T27568] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13
[  902.073251][ T4939] usb 1-1: Using ep0 maxpacket: 16
[  902.080137][T27568] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13
[  902.091384][T27568] EXT4-fs (loop1): 1 truncate cleaned up
[  902.097615][T27568] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  902.187772][ T4939] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  902.212318][ T4939] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  902.242398][ T4939] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  902.262250][ T4939] usb 1-1: config 1 has no interface number 1
[  902.278509][ T4939] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  902.308922][ T4939] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  902.313968][T27583] loop4: detected capacity change from 0 to 4096
[  902.441878][T27595] loop1: detected capacity change from 0 to 16
[  902.483466][ T4939] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  902.502471][ T4939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.527213][T27595] erofs: (device loop1): mounted with root inode @ nid 36.
[  902.562467][ T4939] usb 1-1: Product: syz
[  902.597176][ T4939] usb 1-1: Manufacturer: syz
[  902.602600][ T4939] usb 1-1: SerialNumber: syz
[  902.746203][T27611] loop1: detected capacity change from 0 to 512
[  902.781221][ T5727] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  902.804349][T27580] loop5: detected capacity change from 0 to 32768
[  902.819956][T27611] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback.
[  902.848729][T27619] loop4: detected capacity change from 0 to 16
[  902.857185][T27611] ext4 filesystem being mounted at /1718/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  902.869409][T27619] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  902.887293][T27619] erofs: (device loop4): mounted with root inode @ nid 36.
[  902.976675][ T4939] usb 1-1: USB disconnect, device number 23
[  903.054492][ T5727] usb 4-1: Using ep0 maxpacket: 32
[  903.197562][ T5727] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  903.208172][ T8084] udevd[8084]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  903.237632][ T5727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  903.267768][T27655] loop1: detected capacity change from 0 to 64
[  903.271364][ T5727] usb 4-1: config 0 descriptor??
[  903.378998][ T5727] as10x_usb: device has been detected
[  903.395391][ T5727] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  903.500404][ T5727] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  903.612307][ T5727] as10x_usb: error during firmware upload part1
[  903.640516][ T5727] Registered device nBox DVB-T Dongle
[  903.647474][ T5727] usb 4-1: USB disconnect, device number 6
[  903.720487][ T5727] Unregistered device nBox DVB-T Dongle
[  903.732814][T27691] loop1: detected capacity change from 0 to 8
[  903.735422][ T5727] as10x_usb: device has been disconnected
[  903.954881][T27699] loop0: detected capacity change from 0 to 1764
[  904.183079][T27717] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9545'.
[  904.226525][T27707] loop1: detected capacity change from 0 to 4096
[  904.244307][T27662] loop5: detected capacity change from 0 to 32768
[  904.287807][T27707] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  904.307249][T27723] loop4: detected capacity change from 0 to 256
[  904.377290][T27728] loop0: detected capacity change from 0 to 2048
[  904.387720][T27723] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  904.388810][T27707] ntfs3: loop1: failed to convert "c46c" to iso8859-15
[  904.499870][T27728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  904.708944][T27752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9557'.
[  904.836133][ T4968] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  904.882938][ T4968] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  905.011645][T27778] netlink: 'syz.3.9562': attribute type 1 has an invalid length.
[  905.043492][T27781] loop4: detected capacity change from 0 to 64
[  905.045652][T27778] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9562'.
[  905.123012][T27778] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9562'.
[  905.327121][T27800] netlink: 'syz.4.9566': attribute type 24 has an invalid length.
[  905.392061][ T4874] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.500350][T27808] loop5: detected capacity change from 0 to 256
[  905.560436][T27808] exfat: Deprecated parameter 'utf8'
[  905.571504][ T4874] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.698124][T27754] loop1: detected capacity change from 0 to 32768
[  905.752318][ T4874] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.870107][T27831] loop5: detected capacity change from 0 to 8
[  905.888065][ T4874] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.343218][ T4874] device  left promiscuous mode
[  906.710341][T27884] trusted_key: encrypted_key: master key parameter '' is invalid
[  906.909041][T27914] netlink: 'syz.5.9589': attribute type 10 has an invalid length.
[  906.938088][T27914] netlink: 'syz.5.9589': attribute type 17 has an invalid length.
[  906.978530][T27914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  907.075431][T27927] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9592'.
[  907.108740][T27927] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9592'.
[  907.143555][T27927] netlink: 'syz.4.9592': attribute type 3 has an invalid length.
[  907.188239][T27927] netlink: 11 bytes leftover after parsing attributes in process `syz.4.9592'.
[  907.201423][T27940] loop1: detected capacity change from 0 to 1024
[  907.343358][ T5085] hfsplus: b-tree write err: -5, ino 4
[  907.839677][T27872] chnl_net:caif_netlink_parms(): no params data found
[  907.894031][T28046] loop3: detected capacity change from 0 to 4096
[  907.980410][T28046] ntfs: (device loop3): parse_options(): NLS character set ií^åÀÒÄeÔKÜö+Uso8ow_sys_films=ŽHš
[  907.980410][T28046] ~Yì˜tc’ÝHye`Íer not found. Using previous one ascii.
[  908.086916][T28046] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  908.126794][T28110] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.9613'.
[  908.136413][T28110] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  908.179323][T28046] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  908.259349][T28046] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  908.351641][T28122] xt_bpf: check failed: parse error
[  908.369768][T28046] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  908.402840][T28046] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  908.469822][T28046] ntfs: volume version 3.1.
[  908.487228][T28046] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  908.514009][T28046] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  908.554764][T27872] bridge0: port 1(bridge_slave_0) entered blocking state
[  908.565060][T27872] bridge0: port 1(bridge_slave_0) entered disabled state
[  908.569901][ T4936] Bluetooth: hci2: command 0x0409 tx timeout
[  908.595836][T28046] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  908.615439][T27872] device bridge_slave_0 entered promiscuous mode
[  908.645780][T28046] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  908.733637][T27872] bridge0: port 2(bridge_slave_1) entered blocking state
[  908.739939][T28174] netlink: 'syz.1.9621': attribute type 1 has an invalid length.
[  908.740733][T27872] bridge0: port 2(bridge_slave_1) entered disabled state
[  908.758869][T28178] loop4: detected capacity change from 0 to 64
[  908.835697][T27872] device bridge_slave_1 entered promiscuous mode
[  909.025313][T28196] loop1: detected capacity change from 0 to 1024
[  909.100254][T28196] EXT4-fs (loop1): Ignoring removed bh option
[  909.107312][T27872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  909.117731][T28196] EXT4-fs (loop1): inline encryption not supported
[  909.190431][T28196] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  909.209790][ T4874] device hsr_slave_0 left promiscuous mode
[  909.231857][ T4874] device hsr_slave_1 left promiscuous mode
[  909.259380][T28196] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.9626: lblock 2 mapped to illegal pblock 2 (length 1)
[  909.334098][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  909.389332][ T4874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  909.404261][T28196] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.9626: lblock 0 mapped to illegal pblock 48 (length 1)
[  909.419765][ T4874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  909.437058][ T4874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  909.464140][ T4874] batman_adv: batadv0: Removing interface: ipvlan1
[  909.472380][T28196] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.9626: Failed to acquire dquot type 0
[  909.519243][ T4874] device bridge_slave_1 left promiscuous mode
[  909.542963][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.566554][T28196] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5835: Corrupt filesystem
[  909.579628][ T4931] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  909.589040][ T4874] device bridge_slave_0 left promiscuous mode
[  909.598705][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.606437][T28196] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.9626: mark_inode_dirty error
[  909.660109][T28196] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117)
[  909.676277][ T4874] device veth1_macvtap left promiscuous mode
[  909.690620][ T4874] device veth0_macvtap left promiscuous mode
[  909.703825][ T4874] device veth1_vlan left promiscuous mode
[  909.710892][ T4874] device veth0_vlan left promiscuous mode
[  909.720622][T28196] EXT4-fs (loop1): 1 orphan inode deleted
[  909.732270][T28196] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,noblock_validity,bh,max_batch_time=0x00000000000008c9,debug,inlinecrypt,,errors=continue. Quota mode: writeback.
[  909.745956][  T144] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  909.798216][  T144] EXT4-fs error (device loop1): ext4_release_dquot:6240: comm kworker/u4:1: Failed to release dquot type 0
[  909.834331][ T4931] usb 5-1: Using ep0 maxpacket: 16
[  909.853625][T28196] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm syz.1.9626: lblock 1 mapped to illegal pblock 1 (length 1)
[  909.939387][ T4965] EXT4-fs error (device loop1): __ext4_get_inode_loc:4321: comm syz-executor: Invalid inode table block 1 in block_group 0
[  909.970206][ T4965] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5835: Corrupt filesystem
[  909.990624][ T4931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  909.992015][ T4965] EXT4-fs error (device loop1): ext4_quota_off:6510: inode #3: comm syz-executor: mark_inode_dirty error
[  910.082107][ T4874] bond0 (unregistering): Released all slaves
[  910.145627][ T4874] bond2 (unregistering): Released all slaves
[  910.160815][ T4931] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  910.176813][ T4931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.195920][ T4874] bond1 (unregistering): Released all slaves
[  910.201273][ T4931] usb 5-1: Product: syz
[  910.209736][ T4931] usb 5-1: Manufacturer: syz
[  910.218879][ T4931] usb 5-1: SerialNumber: syz
[  910.240212][ T4931] usb 5-1: config 0 descriptor??
[  910.290109][ T4931] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  910.515171][   T21] usb 5-1: USB disconnect, device number 10
[  910.551385][ T4931] Bluetooth: hci2: command 0x041b tx timeout
[  910.567192][ T4874] team0 (unregistering): Port device team_slave_1 removed
[  910.600700][ T4874] team0 (unregistering): Port device team_slave_0 removed
[  910.731798][T28305] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  910.753623][T28305] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  910.849057][ T4874] team0 (unregistering): Port device bridge0 removed
[  910.958746][T27872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  911.053627][T28327] tipc: Can't bind to reserved service type 1
[  911.361525][T27872] team0: Port device team_slave_0 added
[  911.430213][T27872] team0: Port device team_slave_1 added
[  911.568003][T27872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  911.619705][T27872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  911.633727][T28390] loop5: detected capacity change from 0 to 512
[  911.819066][T27872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  911.884572][T27872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  911.913586][T27872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  912.055443][T27872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  912.234223][T27872] device hsr_slave_0 entered promiscuous mode
[  912.278018][T27872] device hsr_slave_1 entered promiscuous mode
[  912.287154][T27872] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  912.310526][T27872] Cannot create hsr debugfs directory
[  912.321145][T28474] loop3: detected capacity change from 0 to 256
[  912.325780][T28390] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  912.415100][T28390] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  912.532425][ T4931] Bluetooth: hci2: command 0x040f tx timeout
[  912.924998][T27872] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  912.949387][T27872] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  912.961443][ T4931] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  913.008418][T27872] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  913.130069][T27872] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  913.304557][ T4931] usb 4-1: config 4 has an invalid interface number: 231 but max is 0
[  913.323215][ T4931] usb 4-1: config 4 has no interface number 0
[  913.442118][T27872] 8021q: adding VLAN 0 to HW filter on device bond0
[  913.477077][ T4931] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  913.492627][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  913.496133][ T4931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.542153][ T4931] usb 4-1: Product: syz
[  913.543781][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  913.554718][ T4931] usb 4-1: Manufacturer: syz
[  913.569487][ T4931] usb 4-1: SerialNumber: syz
[  913.616110][T27872] 8021q: adding VLAN 0 to HW filter on device team0
[  913.630645][ T4931] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  913.662275][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  913.707625][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  913.743011][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.750148][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  913.808452][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  913.838785][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  913.868570][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  913.935697][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.942862][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  914.001386][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  914.037701][ T4931] vp7045: USB control message 'in' went wrong.
[  914.044092][ T4931] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  914.123461][ T4931] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  914.135399][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  914.155662][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  914.163845][ T4931] usb 4-1: USB disconnect, device number 7
[  914.236766][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  914.276691][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  914.325679][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  914.367936][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  914.382508][T28662] loop4: detected capacity change from 0 to 512
[  914.397612][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  914.431404][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  914.446613][T28662] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  914.486616][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  914.506646][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  914.514373][ T4939] Bluetooth: hci2: command 0x0419 tx timeout
[  914.570405][T28662] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.9698: invalid indirect mapped block 8 (level 2)
[  914.603757][T28662] EXT4-fs (loop4): 1 truncate cleaned up
[  914.620815][T27872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  914.643713][T28662] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,noauto_da_alloc,nomblk_io_submit,auto_da_alloc=0x0000000000000002,nouid32,barrier=0x0000000000000009,noauto_da_alloc,,errors=continue. Quota mode: none.
[  914.678401][T28677] loop3: detected capacity change from 0 to 256
[  914.743569][T28677] exfat: Deprecated parameter 'namecase'
[  914.809915][T28677] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  915.174877][T28711] loop1: detected capacity change from 0 to 256
[  915.292739][T28716] xt_ecn: cannot match TCP bits for non-tcp packets
[  915.314985][T28711] exfat: Deprecated parameter 'namecase'
[  915.339936][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  915.395916][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  915.423616][T28711] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  915.471694][T27872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  916.014134][T28748] loop4: detected capacity change from 0 to 4096
[  916.075615][T28752] loop3: detected capacity change from 0 to 8192
[  916.179175][T28752] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  916.246692][T28752] REISERFS (device loop3): using ordered data mode
[  916.276593][T20499] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  916.333336][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  916.344601][T28752] reiserfs: using flush barriers
[  916.369907][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  916.371653][T28752] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  916.430553][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  916.444963][T28752] REISERFS (device loop3): checking transaction log (loop3)
[  916.487225][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  916.523849][T27872] device veth0_vlan entered promiscuous mode
[  916.533667][T20499] usb 6-1: Using ep0 maxpacket: 32
[  916.579361][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  916.591382][T28776] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  916.618370][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  916.639591][T28776] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  916.654190][T27872] device veth1_vlan entered promiscuous mode
[  916.780581][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  916.839530][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  916.857788][T20499] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf
[  916.866275][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  916.868038][T28752] REISERFS (device loop3): Using tea hash to sort names
[  916.909338][T20499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.915701][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  916.926408][T28752] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  916.941410][T20499] usb 6-1: Product: syz
[  916.951162][T20499] usb 6-1: Manufacturer: syz
[  916.968974][T20499] usb 6-1: SerialNumber: syz
[  917.002373][T27872] device veth0_macvtap entered promiscuous mode
[  917.046711][T27872] device veth1_macvtap entered promiscuous mode
[  917.048128][T20499] usb 6-1: config 0 descriptor??
[  917.094253][T28795] loop1: detected capacity change from 0 to 512
[  917.110758][T20499] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  917.152104][T27872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.205992][T27872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.240405][T27872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.261236][T27872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.273406][T27872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.284343][T27872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.294584][T27872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  917.314791][T27872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.337740][T27872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  917.358697][T28795] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  917.359646][ T4802] usb 6-1: USB disconnect, device number 3
[  917.396391][T28795] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  917.428345][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  917.437145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  917.492352][T28795] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  917.496975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  917.514817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  917.532467][T27872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  917.532483][T28795] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  917.553286][T28795] System zones: 0-2, 18-18, 34-35
[  917.562027][T27872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.571257][T28795] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  917.586325][T27872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  917.618664][T27872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.629475][T27872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  917.640071][T27872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.650428][T27872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  917.665991][T27872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  917.684569][T27872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  917.685513][T28818] netlink: 'syz.4.9726': attribute type 21 has an invalid length.
[  917.783756][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  917.810545][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  917.860818][T27872] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  917.914967][T27872] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  917.934669][T27872] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  917.949933][T27872] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  918.065868][T28840] loop1: detected capacity change from 0 to 512
[  918.247959][T28840] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  918.315782][ T5085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.348182][ T5085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.349476][T28868] netlink: 'syz.4.9734': attribute type 2 has an invalid length.
[  918.364014][T28840] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  918.381574][T28868] netlink: 'syz.4.9734': attribute type 3 has an invalid length.
[  918.404832][T28840] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[  918.430550][ T5039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  918.447585][T28840] System zones: 1-12
[  918.524604][ T5039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.533085][ T5039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.609407][T28840] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2228: inode #15: comm syz.1.9727: corrupted in-inode xattr
[  918.677828][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  918.688188][T28888] program syz.5.9738 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  918.694547][T28840] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.9727: couldn't read orphan inode 15 (err -117)
[  918.749475][T28880] loop4: detected capacity change from 0 to 4096
[  918.762157][T28840] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none.
[  918.896450][T28880] __ntfs_error: 11 callbacks suppressed
[  918.896468][T28880] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  918.957105][T28880] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  919.068202][T28880] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  919.116990][T28880] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  919.195521][T28880] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  919.261633][T28880] ntfs: volume version 3.1.
[  919.279441][T28880] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  919.322342][T28880] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  919.381574][T28880] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  919.457544][T28880] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  919.507822][T28880] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  919.543873][ T4802] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  919.786425][ T4802] usb 4-1: Using ep0 maxpacket: 8
[  919.924697][ T4802] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  919.934710][ T4802] usb 4-1: config 0 has no interface number 0
[  920.097403][ T4802] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  920.108866][ T4802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.147765][ T4802] usb 4-1: Product: syz
[  920.151982][ T4802] usb 4-1: Manufacturer: syz
[  920.175030][T28976] loop5: detected capacity change from 0 to 2048
[  920.199778][ T4802] usb 4-1: SerialNumber: syz
[  920.221242][ T4802] usb 4-1: config 0 descriptor??
[  920.265420][T28976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  920.446939][T28925] loop6: detected capacity change from 0 to 32768
[  920.714979][ T4802] usb 4-1: Found UVC 0.04 device syz (046d:08c3)
[  920.721414][ T4802] uvcvideo 4-1:0.31: Entity type for entity Ї was not initialized!
[  920.762215][ T4802] usb 4-1: Failed to create links for entity 5
[  920.789821][ T4802] usb 4-1: Failed to register entities (-22).
[  920.882991][ T4802] usb 4-1: USB disconnect, device number 8
[  921.468867][T29123] cgroup: name respecified
[  921.571589][T29133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9789'.
[  921.628279][T29133] netlink: 492 bytes leftover after parsing attributes in process `syz.1.9789'.
[  921.628446][T29124] loop6: detected capacity change from 0 to 4096
[  921.722009][T29143] device vti0 entered promiscuous mode
[  921.752296][T29124] ntfs: volume version 3.1.
[  921.903080][T29163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9797'.
[  922.067518][ T4945] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  922.250406][T29181] loop6: detected capacity change from 0 to 1024
[  922.298028][ T4945] usb 2-1: Using ep0 maxpacket: 32
[  922.412620][T29196] loop5: detected capacity change from 0 to 128
[  922.480834][T29196] VFS: Found a Xenix FS (block size = 1024) on device loop5
[  922.512951][T29196] sysv_free_block: flc_count > flc_size
[  922.533950][T29196] sysv_free_block: flc_count > flc_size
[  922.563478][ T4945] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  922.582400][ T4945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  922.590433][ T4945] usb 2-1: Product: syz
[  922.595184][T29196] sysv_free_block: flc_count > flc_size
[  922.600748][T29196] sysv_free_block: flc_count > flc_size
[  922.607025][ T4945] usb 2-1: Manufacturer: syz
[  922.611904][T29196] sysv_free_block: flc_count > flc_size
[  922.617587][ T4945] usb 2-1: SerialNumber: syz
[  922.637555][T29196] sysv_free_block: flc_count > flc_size
[  922.653556][T29210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9811'.
[  922.678748][ T4945] usb 2-1: config 0 descriptor??
[  922.693766][T29196] sysv_free_block: flc_count > flc_size
[  922.702741][T29196] sysv_free_block: flc_count > flc_size
[  922.723408][T29196] sysv_free_block: flc_count > flc_size
[  922.760194][T29196] sysv_free_block: flc_count > flc_size
[  922.804379][T29208] loop3: detected capacity change from 0 to 4096
[  922.808035][T29196] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  922.913203][T29208] ntfs3: loop3: ino=3, Correct links count -> 2.
[  923.137317][ T4945] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  923.176559][ T4945] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  923.308267][T29259] loop4: detected capacity change from 0 to 512
[  923.325755][ T4945] peak_usb: probe of 2-1:0.0 failed with error -71
[  923.362797][ T4945] usb 2-1: USB disconnect, device number 18
[  923.430779][T29259] EXT4-fs (loop4): orphan cleanup on readonly fs
[  923.448380][T29259] EXT4-fs error (device loop4): ext4_quota_enable:6408: comm syz.4.9819: Bad quota inum: 1280, type: 0
[  923.473209][T29259] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-117, ino=1280). Please run e2fsck to fix.
[  923.490437][T29259] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  923.517616][T29259] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  923.579184][T29259] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  923.608228][T29259] EXT4-fs error (device loop4): ext4_quota_enable:6408: comm syz.4.9819: Bad quota inum: 1280, type: 0
[  923.641234][ T5727] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  923.646707][T29259] EXT4-fs warning (device loop4): ext4_enable_quotas:6456: Failed to enable quota tracking (type=0, err=-117, ino=1280). Please run e2fsck to fix.
[  923.678476][T29286] No such timeout policy "syz1"
[  923.725538][T20499] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  923.726508][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9826'.
[  923.906001][ T5727] usb 7-1: Using ep0 maxpacket: 16
[  923.984864][T29316] netlink: 'syz.1.9831': attribute type 10 has an invalid length.
[  924.003383][T20499] usb 6-1: Using ep0 maxpacket: 32
[  924.036718][T29316] team0: Device hsr_slave_0 failed to register rx_handler
[  924.041477][ T5727] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  924.063984][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  924.064003][   T26] audit: type=1800 audit(1747883121.227:47): pid=29301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.9828" name="/newroot/1956/file0" dev="tmpfs" ino=10266 res=0 errno=0
[  924.093774][ T5727] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64
[  924.115525][ T5727] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  924.173154][T20499] usb 6-1: unable to get BOS descriptor or descriptor too short
[  924.192251][T29324] netlink: 'syz.4.9833': attribute type 3 has an invalid length.
[  924.230859][ T5727] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  924.259368][ T5727] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  924.276352][ T5727] usb 7-1: Manufacturer: syz
[  924.281884][T20499] usb 6-1: config 5 has an invalid interface number: 61 but max is 0
[  924.309340][T20499] usb 6-1: config 5 has no interface number 0
[  924.329902][T29333] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969)
[  924.336416][ T5727] usb 7-1: config 0 descriptor??
[  924.345903][T20499] usb 6-1: config 5 interface 61 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 64
[  924.348211][T29333] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  924.375875][T20499] usb 6-1: config 5 interface 61 has no altsetting 0
[  924.439136][T29337] loop4: detected capacity change from 0 to 2048
[  924.564164][T20499] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 0.0a
[  924.567566][T29353] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  924.581732][T20499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.613299][T29337] NILFS (loop4): failed to count free inodes: err=-34
[  924.659500][T20499] usb 6-1: Product: syz
[  924.663708][T20499] usb 6-1: Manufacturer: syz
[  924.702737][T20499] usb 6-1: SerialNumber: syz
[  924.721531][T20349] usb 7-1: USB disconnect, device number 2
[  924.747652][T29272] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  924.914551][T29375] loop3: detected capacity change from 0 to 4096
[  925.030080][T20499] ath6kl: Failed to submit usb control message: -71
[  925.032878][T29375] ntfs: volume version 3.1.
[  925.041430][T20499] ath6kl: unable to send the bmi data to the device: -71
[  925.055076][T20499] ath6kl: Unable to send get target info: -71
[  925.071889][T20499] ath6kl: Failed to init ath6kl core: -71
[  925.104538][T29395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9849'.
[  925.115196][T20499] ath6kl_usb: probe of 6-1:5.61 failed with error -71
[  925.135051][   T21] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  925.145730][T20499] usb 6-1: USB disconnect, device number 4
[  925.228137][T29402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9850'.
[  925.375662][T29414] loop4: detected capacity change from 0 to 1024
[  925.403090][   T21] usb 2-1: Using ep0 maxpacket: 8
[  925.488497][T29414] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,noquota,,errors=continue. Quota mode: none.
[  925.544605][T29414] ext4 filesystem being mounted at /1965/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  925.555876][   T21] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[  925.564059][   T21] usb 2-1: config 0 has no interface number 0
[  925.659911][T29414] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.9855: inode #458752: comm syz.4.9855: iget: illegal inode #
[  925.722697][T29414] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.9855: error while reading EA inode 458752 err=-117
[  925.763901][   T21] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  925.798914][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.821302][   T21] usb 2-1: Product: syz
[  925.830385][   T21] usb 2-1: Manufacturer: syz
[  925.838984][   T21] usb 2-1: SerialNumber: syz
[  925.867858][   T21] usb 2-1: config 0 descriptor??
[  926.316788][T29487] dlm: no local IP address has been set
[  926.344003][T29487] dlm: cannot start dlm midcomms -107
[  926.373374][   T21] usb 2-1: Found UVC 0.04 device syz (046d:08c3)
[  926.383019][   T21] uvcvideo 2-1:0.31: Entity type for entity Ї was not initialized!
[  926.409306][   T21] usb 2-1: Failed to create links for entity 5
[  926.426431][   T21] usb 2-1: Failed to register entities (-22).
[  926.456527][   T21] usb 2-1: USB disconnect, device number 19
[  926.547731][T29512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9884'.
[  926.552161][T29511] netlink: 'syz.4.9883': attribute type 1 has an invalid length.
[  926.656447][T29515] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9885'.
[  926.660148][T29440] loop3: detected capacity change from 0 to 40427
[  926.758520][T29440] F2FS-fs (loop3): invalid crc value
[  926.802421][T29440] F2FS-fs (loop3): Found nat_bits in checkpoint
[  926.839421][T29525] loop5: detected capacity change from 0 to 4096
[  926.919325][T29539] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  926.987803][T29525] NILFS error (device loop5): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  927.001295][T29440] F2FS-fs (loop3): Start checkpoint disabled!
[  927.050909][T29525] Remounting filesystem read-only
[  927.060539][T29440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  927.146312][T24868] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  927.171107][T29559] netlink: 'syz.1.9895': attribute type 8 has an invalid length.
[  927.184055][T29560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9897'.
[  927.189278][T29559] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9895'.
[  927.229947][T29440] attempt to access beyond end of device
[  927.229947][T29440] loop3: rw=2049, want=45104, limit=40427
[  927.266951][T29560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9897'.
[  927.383417][T29577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9902'.
[  927.455530][T29581] netlink: 'syz.6.9901': attribute type 10 has an invalid length.
[  927.531284][T29581] team0: Device hsr_slave_0 failed to register rx_handler
[  927.705371][ T1266] attempt to access beyond end of device
[  927.705371][ T1266] loop3: rw=2049, want=40976, limit=40427
[  928.544128][T29654] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9922'.
[  928.564124][   T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  928.812169][   T21] usb 6-1: Using ep0 maxpacket: 16
[  928.860344][T29667] loop4: detected capacity change from 0 to 4096
[  928.950839][   T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  928.970027][   T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64
[  928.998739][T29667] ntfs: volume version 3.1.
[  929.017634][   T21] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  929.145460][   T21] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  929.174877][   T21] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  929.201972][T29704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9940'.
[  929.211182][   T21] usb 6-1: Manufacturer: syz
[  929.230454][   T21] usb 6-1: config 0 descriptor??
[  929.301164][T29713] nfs4: Bad value for 'source'
[  929.365725][T29716] loop3: detected capacity change from 0 to 1024
[  929.520969][   T21] usb 6-1: USB disconnect, device number 5
[  929.862078][T29764] netlink: 'syz.4.9955': attribute type 1 has an invalid length.
[  929.889873][T29764] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.9955'.
[  929.940690][T29764] netlink: 'syz.4.9955': attribute type 1 has an invalid length.
[  929.954817][ T5727] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  930.143391][T29778] loop4: detected capacity change from 0 to 4096
[  930.224373][T29778] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  930.250214][ T5727] usb 4-1: Using ep0 maxpacket: 32
[  930.308401][T29778] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  930.345754][T29778] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  930.370846][T29778] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  930.422376][T29778] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  930.438236][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short
[  930.473939][T29778] ntfs: volume version 3.1.
[  930.512179][T29778] ntfs: (device loop4): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters.
[  930.528982][ T5727] usb 4-1: config 6 has an invalid interface number: 3 but max is 2
[  930.543796][ T5727] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  930.564272][ T5727] usb 4-1: config 6 has no interface number 1
[  930.590169][ T5727] usb 4-1: too many endpoints for config 6 interface 0 altsetting 255: 255, using maximum allowed: 30
[  930.612602][ T4945] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  930.617264][ T5727] usb 4-1: config 6 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  930.639499][ T5727] usb 4-1: config 6 interface 2 has no altsetting 0
[  930.646253][ T5727] usb 4-1: config 6 interface 0 has no altsetting 0
[  930.772320][T29776] loop1: detected capacity change from 0 to 32768
[  930.843355][ T5727] usb 4-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b
[  930.865832][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.881133][ T5727] usb 4-1: Product: syz
[  930.904885][ T5727] usb 4-1: Manufacturer: syz
[  930.921117][ T5727] usb 4-1: SerialNumber: syz
[  931.151366][ T4945] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  931.173735][ T4945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.202710][ T4945] usb 7-1: Product: syz
[  931.216664][T29851] loop4: detected capacity change from 0 to 64
[  931.232936][ T4945] usb 7-1: Manufacturer: syz
[  931.237575][ T4945] usb 7-1: SerialNumber: syz
[  931.271684][ T4945] usb 7-1: config 0 descriptor??
[  931.280463][ T5727] usb 4-1: selecting invalid altsetting 0
[  931.286490][ T5727] usb 4-1: Could not set interface, error -22
[  931.317209][ T5727] usb 4-1: selecting invalid altsetting 1
[  931.338566][ T4945] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  931.349097][ T5727] usb 4-1: Could not set interface, error -22
[  931.388848][ T5727] usb 4-1: USB disconnect, device number 9
[  931.415896][T29851] 
[  931.418269][T29851] ======================================================
[  931.425387][T29851] WARNING: possible circular locking dependency detected
[  931.432426][T29851] 5.15.183-syzkaller #0 Not tainted
[  931.437732][T29851] ------------------------------------------------------
[  931.444757][T29851] syz.4.9982/29851 is trying to acquire lock:
[  931.450840][T29851] ffff888059522e78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280
[  931.461654][T29851] 
[  931.461654][T29851] but task is already holding lock:
[  931.469029][T29851] ffff88807ceba0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  931.478569][T29851] 
[  931.478569][T29851] which lock already depends on the new lock.
[  931.478569][T29851] 
[  931.489064][T29851] 
[  931.489064][T29851] the existing dependency chain (in reverse order) is:
[  931.498086][T29851] 
[  931.498086][T29851] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[  931.506214][T29851]        __mutex_lock_common+0x1eb/0x2390
[  931.511958][T29851]        mutex_lock_nested+0x17/0x20
[  931.517264][T29851]        hfs_find_init+0x15b/0x1d0
[  931.522392][T29851]        hfs_get_block+0x518/0xbd0
[  931.527525][T29851]        block_read_full_page+0x2e8/0xd10
[  931.533278][T29851]        do_read_cache_page+0x8a1/0x1030
[  931.538930][T29851]        __hfs_bnode_create+0x4f0/0xba0
[  931.544497][T29851]        hfs_bnode_find+0x220/0xce0
[  931.549712][T29851]        hfs_brec_find+0x156/0x500
[  931.554844][T29851]        hfs_brec_read+0x20/0x100
[  931.559889][T29851]        hfs_cat_find_brec+0x159/0x3f0
[  931.565366][T29851]        hfs_fill_super+0xeb4/0x13f0
[  931.570675][T29851]        mount_bdev+0x287/0x3c0
[  931.575547][T29851]        legacy_get_tree+0xe6/0x180
[  931.580768][T29851]        vfs_get_tree+0x88/0x270
[  931.585728][T29851]        do_new_mount+0x24a/0xa40
[  931.590770][T29851]        __se_sys_mount+0x2d6/0x3c0
[  931.595996][T29851]        do_syscall_64+0x4c/0xa0
[  931.600952][T29851]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  931.607401][T29851] 
[  931.607401][T29851] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  931.616629][T29851]        __lock_acquire+0x2c33/0x7c60
[  931.619259][T29879] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9985'.
[  931.622026][T29851]        lock_acquire+0x197/0x3f0
[  931.622054][T29851]        __mutex_lock_common+0x1eb/0x2390
[  931.622076][T29851]        mutex_lock_nested+0x17/0x20
[  931.640040][T29879] netlink: 'syz.5.9985': attribute type 1 has an invalid length.
[  931.641728][T29851]        hfs_extend_file+0xd7/0x1280
[  931.641754][T29851]        hfs_bmap_reserve+0x103/0x420
[  931.641771][T29851]        __hfs_ext_write_extent+0x1fa/0x470
[  931.641791][T29851]        __hfs_ext_cache_extent+0x6b/0x9b0
[  931.677086][T29851]        hfs_extend_file+0x313/0x1280
[  931.682485][T29851]        hfs_get_block+0x3d4/0xbd0
[  931.687616][T29851]        __block_write_begin_int+0x54e/0x15a0
[  931.693697][T29851]        cont_write_begin+0x58a/0x7b0
[  931.699096][T29851]        hfs_write_begin+0x92/0xe0
[  931.704226][T29851]        cont_write_begin+0x26c/0x7b0
[  931.709628][T29851]        hfs_write_begin+0x92/0xe0
[  931.714760][T29851]        hfs_file_truncate+0x18f/0x9c0
[  931.720238][T29851]        hfs_inode_setattr+0x4ab/0x6f0
[  931.725713][T29851]        notify_change+0xbcd/0xee0
[  931.730842][T29851]        do_truncate+0x197/0x220
[  931.735796][T29851]        vfs_truncate+0x262/0x2f0
[  931.740840][T29851]        do_sys_truncate+0xdc/0x190
[  931.746059][T29851]        do_syscall_64+0x4c/0xa0
[  931.751018][T29851]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  931.757444][T29851] 
[  931.757444][T29851] other info that might help us debug this:
[  931.757444][T29851] 
[  931.767664][T29851]  Possible unsafe locking scenario:
[  931.767664][T29851] 
[  931.775116][T29851]        CPU0                    CPU1
[  931.780476][T29851]        ----                    ----
[  931.785832][T29851]   lock(&tree->tree_lock#2/1);
[  931.790689][T29851]                                lock(&HFS_I(tree->inode)->extents_lock);
[  931.799180][T29851]                                lock(&tree->tree_lock#2/1);
[  931.806553][T29851]   lock(&HFS_I(tree->inode)->extents_lock);
[  931.812521][T29851] 
[  931.812521][T29851]  *** DEADLOCK ***
[  931.812521][T29851] 
[  931.820652][T29851] 4 locks held by syz.4.9982/29851:
[  931.825839][T29851]  #0: ffff888024a9a460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  931.835067][T29851]  #1: ffff888059520fa8 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: do_truncate+0x183/0x220
[  931.845418][T29851]  #2: ffff888059520df8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xd7/0x1280
[  931.856111][T29851]  #3: ffff88807ceba0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0
[  931.866029][T29851] 
[  931.866029][T29851] stack backtrace:
[  931.871914][T29851] CPU: 0 PID: 29851 Comm: syz.4.9982 Not tainted 5.15.183-syzkaller #0
[  931.880143][T29851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  931.890219][T29851] Call Trace:
[  931.893495][T29851]  <TASK>
[  931.896421][T29851]  dump_stack_lvl+0x168/0x230
[  931.901099][T29851]  ? load_image+0x3b0/0x3b0
[  931.905633][T29851]  ? show_regs_print_info+0x20/0x20
[  931.910830][T29851]  ? print_circular_bug+0x12b/0x1a0
[  931.916026][T29851]  check_noncircular+0x274/0x310
[  931.920963][T29851]  ? add_chain_block+0x940/0x940
[  931.925905][T29851]  ? lockdep_lock+0xdc/0x1e0
[  931.930492][T29851]  ? mark_lock+0x94/0x320
[  931.934825][T29851]  __lock_acquire+0x2c33/0x7c60
[  931.939679][T29851]  ? lockdep_lock+0xdc/0x1e0
[  931.944304][T29851]  ? lockdep_unlock+0x134/0x2d0
[  931.949150][T29851]  ? lockdep_lock+0x1e0/0x1e0
[  931.953820][T29851]  ? verify_lock_unused+0x140/0x140
[  931.959015][T29851]  ? hlock_conflict+0x59/0x1f0
[  931.963776][T29851]  ? __bfs+0x2a3/0x5c0
[  931.967842][T29851]  ? check_path+0x40/0x40
[  931.972165][T29851]  ? check_path+0x21/0x40
[  931.976492][T29851]  lock_acquire+0x197/0x3f0
[  931.980995][T29851]  ? hfs_extend_file+0xd7/0x1280
[  931.985928][T29851]  ? mark_lock+0x94/0x320
[  931.990255][T29851]  ? __might_sleep+0xf0/0xf0
[  931.994837][T29851]  ? read_lock_is_recursive+0x10/0x10
[  932.000203][T29851]  ? __lock_acquire+0x289d/0x7c60
[  932.005227][T29851]  ? hfs_extend_file+0xd7/0x1280
[  932.010160][T29851]  __mutex_lock_common+0x1eb/0x2390
[  932.015353][T29851]  ? hfs_extend_file+0xd7/0x1280
[  932.020284][T29851]  ? mark_lock+0x94/0x320
[  932.024616][T29851]  ? verify_lock_unused+0x140/0x140
[  932.029819][T29851]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  932.035823][T29851]  ? mutex_lock_io_nested+0x60/0x60
[  932.041026][T29851]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  932.046923][T29851]  ? lockdep_hardirqs_on+0x94/0x140
[  932.052145][T29851]  mutex_lock_nested+0x17/0x20
[  932.056918][T29851]  hfs_extend_file+0xd7/0x1280
[  932.061683][T29851]  ? hfs_get_block+0xbd0/0xbd0
[  932.066442][T29851]  ? __mutex_trylock_common+0x14f/0x250
[  932.072002][T29851]  ? rcu_lock_release+0x20/0x20
[  932.076850][T29851]  ? hfs_find_init+0x84/0x1d0
[  932.081515][T29851]  ? hfs_get_block+0x3d4/0xbd0
[  932.086272][T29851]  ? __block_write_begin_int+0x54e/0x15a0
[  932.092008][T29851]  ? cont_write_begin+0x58a/0x7b0
[  932.097033][T29851]  ? cont_write_begin+0x26c/0x7b0
[  932.102052][T29851]  ? hfs_write_begin+0x92/0xe0
[  932.106809][T29851]  ? hfs_file_truncate+0x18f/0x9c0
[  932.111932][T29851]  ? hfs_find_init+0x15b/0x1d0
[  932.116689][T29851]  ? hfs_find_init+0x15b/0x1d0
[  932.121445][T29851]  ? hfs_find_init+0x15b/0x1d0
[  932.126203][T29851]  ? __mutex_lock_common+0x431/0x2390
[  932.131572][T29851]  ? hfs_brec_find+0x18b/0x500
[  932.136331][T29851]  hfs_bmap_reserve+0x103/0x420
[  932.141184][T29851]  __hfs_ext_write_extent+0x1fa/0x470
[  932.146549][T29851]  __hfs_ext_cache_extent+0x6b/0x9b0
[  932.151829][T29851]  ? mutex_lock_nested+0x17/0x20
[  932.156762][T29851]  ? hfs_find_init+0x15b/0x1d0
[  932.161518][T29851]  hfs_extend_file+0x313/0x1280
[  932.166373][T29851]  ? hfs_get_block+0xbd0/0xbd0
[  932.171129][T29851]  ? hfs_get_block+0x907/0xbd0
[  932.175893][T29851]  ? pagevec_lookup_range+0x30/0x70
[  932.181089][T29851]  ? clean_bdev_aliases+0x726/0x840
[  932.186292][T29851]  hfs_get_block+0x3d4/0xbd0
[  932.190879][T29851]  ? hfs_free_extents+0x430/0x430
[  932.195903][T29851]  ? do_raw_spin_unlock+0x11d/0x230
[  932.201094][T29851]  ? create_page_buffers+0x238/0x320
[  932.206372][T29851]  __block_write_begin_int+0x54e/0x15a0
[  932.211921][T29851]  ? hfs_free_extents+0x430/0x430
[  932.216951][T29851]  ? page_zero_new_buffers+0x490/0x490
[  932.222422][T29851]  ? wait_for_stable_page+0xd9/0x110
[  932.227713][T29851]  cont_write_begin+0x58a/0x7b0
[  932.232572][T29851]  ? generic_cont_expand_simple+0x190/0x190
[  932.238472][T29851]  ? unlock_page+0x17c/0x1f0
[  932.243065][T29851]  hfs_write_begin+0x92/0xe0
[  932.247652][T29851]  ? hfs_free_extents+0x430/0x430
[  932.252672][T29851]  cont_write_begin+0x26c/0x7b0
[  932.257520][T29851]  ? generic_cont_expand_simple+0x190/0x190
[  932.263414][T29851]  hfs_write_begin+0x92/0xe0
[  932.267998][T29851]  ? hfs_free_extents+0x430/0x430
[  932.273018][T29851]  hfs_file_truncate+0x18f/0x9c0
[  932.277954][T29851]  ? unmap_mapping_range+0xc8/0x100
[  932.283148][T29851]  ? __lock_acquire+0x7c60/0x7c60
[  932.288292][T29851]  ? __might_sleep+0xf0/0xf0
[  932.292890][T29851]  ? preempt_count_add+0x8d/0x190
[  932.297924][T29851]  ? hfs_extend_file+0x1280/0x1280
[  932.303044][T29851]  ? rwsem_write_trylock+0x12f/0x1b0
[  932.308342][T29851]  ? preempt_count_add+0x8d/0x190
[  932.313365][T29851]  ? up_write+0x1bb/0x420
[  932.317696][T29851]  ? unmap_mapping_range+0xc8/0x100
[  932.322895][T29851]  hfs_inode_setattr+0x4ab/0x6f0
[  932.327836][T29851]  ? bpf_lsm_inode_setattr+0x5/0x10
[  932.333071][T29851]  ? try_break_deleg+0x79/0x120
[  932.337916][T29851]  ? hfs_evict_inode+0x100/0x100
[  932.342847][T29851]  notify_change+0xbcd/0xee0
[  932.347437][T29851]  do_truncate+0x197/0x220
[  932.351853][T29851]  ? rcu_lock_release+0x20/0x20
[  932.356702][T29851]  ? bpf_lsm_path_truncate+0x5/0x10
[  932.361899][T29851]  vfs_truncate+0x262/0x2f0
[  932.366406][T29851]  do_sys_truncate+0xdc/0x190
[  932.371098][T29851]  ? break_lease+0xd0/0xd0
[  932.375640][T29851]  ? lockdep_hardirqs_on+0x94/0x140
[  932.380876][T29851]  do_syscall_64+0x4c/0xa0
[  932.385301][T29851]  ? clear_bhb_loop+0x15/0x70
[  932.389978][T29851]  ? clear_bhb_loop+0x15/0x70
[  932.394651][T29851]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  932.400543][T29851] RIP: 0033:0x7fbc51665969
[  932.404952][T29851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  932.424688][T29851] RSP: 002b:00007fbc4f4cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  932.433111][T29851] RAX: ffffffffffffffda RBX: 00007fbc5188cfa0 RCX: 00007fbc51665969
[  932.441084][T29851] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900
[  932.449054][T29851] RBP: 00007fbc516e7ab1 R08: 0000000000000000 R09: 0000000000000000
[  932.457023][T29851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  932.464995][T29851] R13: 0000000000000000 R14: 00007fbc5188cfa0 R15: 00007fff493c18e8
[  932.473079][T29851]  </TASK>
[  932.498480][ T4945] gspca_sunplus: reg_r err -110
[  932.624807][ T7196] attempt to access beyond end of device
[  932.624807][ T7196] loop4: rw=1, want=418, limit=64
[  932.638704][ T7196] Buffer I/O error on dev loop4, logical block 417, lost async page write
[  932.651383][ T7196] attempt to access beyond end of device
[  932.651383][ T7196] loop4: rw=1, want=421, limit=64
[  932.662157][ T7196] Buffer I/O error on dev loop4, logical block 420, lost async page write
[  932.671712][ T7196] attempt to access beyond end of device
[  932.671712][ T7196] loop4: rw=1, want=422, limit=64
[  932.682444][ T7196] Buffer I/O error on dev loop4, logical block 421, lost async page write
[  932.691465][ T7196] attempt to access beyond end of device
[  932.691465][ T7196] loop4: rw=1, want=423, limit=64
[  932.703882][ T7196] Buffer I/O error on dev loop4, logical block 422, lost async page write
[  932.712662][ T7196] attempt to access beyond end of device
[  932.712662][ T7196] loop4: rw=1, want=424, limit=64
[  932.723422][ T7196] Buffer I/O error on dev loop4, logical block 423, lost async page write
[  932.732094][ T7196] attempt to access beyond end of device
[  932.732094][ T7196] loop4: rw=1, want=425, limit=64
[  932.742766][ T7196] Buffer I/O error on dev loop4, logical block 424, lost async page write
[  932.753060][ T7196] attempt to access beyond end of device
[  932.753060][ T7196] loop4: rw=1, want=426, limit=64
[  932.763964][ T7196] Buffer I/O error on dev loop4, logical block 425, lost async page write
[  932.772680][ T7196] attempt to access beyond end of device
[  932.772680][ T7196] loop4: rw=1, want=427, limit=64
[  932.783368][ T7196] Buffer I/O error on dev loop4, logical block 426, lost async page write
[  932.792127][ T7196] attempt to access beyond end of device
[  932.792127][ T7196] loop4: rw=1, want=435, limit=64
[  932.804464][ T7196] attempt to access beyond end of device
[  932.804464][ T7196] loop4: rw=1, want=436, limit=64
[  932.815169][ T7196] Buffer I/O error on dev loop4, logical block 435, lost async page write
[  932.823849][ T7196] Buffer I/O error on dev loop4, logical block 436, lost async page write
[  933.457387][T20499] usb 7-1: USB disconnect, device number 3
[  933.880913][ T1423] ieee802154 phy0 wpan0: encryption failed: -22