last executing test programs:

3m1.343697539s ago: executing program 3 (id=7819):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x3, 0x1}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}, {0xfffffffffffffffe}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)

3m0.98413214s ago: executing program 3 (id=7822):
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{}, {}, {0x0, 0x0, 0x0, 0x3f}]})
kexec_load(0x0, 0x10, &(0x7f00000001c0)=[{0x0}], 0x0)

3m0.818834778s ago: executing program 3 (id=7824):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x40080)

3m0.560461681s ago: executing program 3 (id=7829):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000dc0)={[{@umask}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@part={'part', 0x3d, 0x4}}, {@nobarrier}, {@force}, {@gid}, {@gid}, {}]}, 0x44, 0x70f, &(0x7f00000005c0)="$eJzs3U1sHGcZAOB31uuNN5XcbZu0BSHFakQEDSS2l5IgIRGqCvlQQSQuvS6J01heu8F2kRMh4gCFI5xQDj0UIXPoCfWAVMQBUc5ISFxR7pF6jziwaP7Wu/5Zr+u/JH0eaXa+mfl+3nk983k9m2gD+NyaeStG1yKJmfNvrqbbD9ab7QfrzYWyHBEnIqISUc1XkSxGJJ9EXIl8iS+kO4vukp3Gee3hx++fu/9hM9+qFktWvzKo3YbOgBHWiiUmImKkWMfYnjJR3am/a/F63l+Pu3vqOunGnSbsbJk4OG6dLdb20nyI+xZ43N2NGBndZn8j4mTxqzR9HxDF7FA54vAO3J5mOQAAAHg8jexW4dlH8ShWY/xowgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnQ5J/Z2BSLJWyPBFJ+f3/tWJfqlY75ngH+9oux9+7cUSBAAAAAAAAAMCh+Kj44P7Mo3gUqzFe7u8k2Wf+r2Qbp7LXZ+LdWI7ZWIoLsRqtWImVWIqpiNHxng5rq62VlaWprS1/F2nLTqdzt2g5HRGNLS2ndwi0csAnDgAAAAAAAABPp5/HTIwfdxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAriRjJV9lyqiw3olKNiLGIqKX11iL+WpafZH877gAAAADg8NWL9Xjyv7zQSbK/+V/M/u4fi3djMVZiLlaiHbNxPXsWkP/VX/nXWrP9YL25kC5bO/7up3uKI+sxIkbi3g4jT2Y1TndbzMT34odxPibiaizFXPwkWrESszER9fQkohVJNOr504tGGef28V7p27raLXXysz2zKdaXs0jqcSPmstguxLVa5I9NsnNIx3y5Z7Q/1yI2jXgvzU7yncKQObre8/P6bfFcpoz02SH7OByN7MxHuxmZTHNfZOO5wbkfeJ38eNeRpqLSfQZ1amOUdHPzSGXOf7SXnJ/MV2Ppy6/6c37QBjxKG91m3+ZMTEeluPoiXuzP+a0v33++v/FX//33qzcri/M3byyfP8RT2o+J3Sp0k7I5E82eTLw0+OorMtFOM7E2fCa2/DzGhm15uGpFNrKpaMjZ8o2s1IpXei7Bd+J6zMalmIypuByT8a2Yjmb3CkuX0315rTYX+nOS3WuVrfNbfUDwZ7/SU+nXu1Q+WmlenuvJa+9M18iOFXuu/CYme66+5wdfffc+feMHeWnIGSkd/4tFOR3jF93fOI+DvkwUc3MZ3QuDM/H7Tvq63F6cX7rZujXkeOeKdXrbvtc/N/9h+Kg3/3bfjzKC9HpJZ9xqtpXlpF5eL+mxF7p1+/NVKz5xydtVthw73T3WiPGYi+/veKfWivdwW3vKj73Ue+w/GzNnrXh/Ux7re5cT70Q7exeyya5TNQBH7OSrJ2v1h/V/1j+o/7J+s/7m2OsnLp/4Ui1G/1H9y8ifKn+sfDt5NT6In8X4cUcKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPg+Xbd+Zb7fbsUrcQY5v37LdQ23GswYWo7Fpn/ZnhOoxGxOCxkqJQO9hzfxIL9di0p/x+o/32/FFEDKhT23fwyZ6vsT0X0jwcSIedTp7UbE9nZA/Nq2Wr7etUY3ks5ltJdZs77sTGXRCN+Vb7v52+5vXouWWAp9zFlYVbF5dv3/n63ELr7dm3ZxenL1+6fKn5zalvXLwx156dzF+PO0rgMCzfvjOyze7tvnkYAAAAAAAAAAAAeEwU//p/5TP/Z4bqLnVqS8vbj3zmqE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeELNvBWja5HE1OSFyXT7wXqznS5luahW2VglP41IPom4EvkSjZ7ukp3Gee3hx++fu/9hM9+qFktWvzKo3XDWiiUmImKkWO/uxDbdbO3vWk9/a58pvKR7hmnCzpaJg+P2/wAAAP//hd/4FA==")
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)

3m0.180416625s ago: executing program 3 (id=7831):
r0 = syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000000000)='./file1\x00', 0x2218a5d, &(0x7f0000000040), 0x0, 0x965a, &(0x7f0000012c40)="$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")
ioctl$FS_IOC_GETFSMAP(r0, 0x40105870, 0x0)

2m59.686187419s ago: executing program 3 (id=7835):
r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340))

2m59.126282553s ago: executing program 32 (id=7835):
r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340))

2.811422806s ago: executing program 0 (id=10423):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x1e, 0x21, 0x70bd2b, 0x0, {0x7}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0xf, 0x0, 0x1, [@typed={0x4, 0x12d}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0)

2.595605393s ago: executing program 1 (id=10426):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x0, 0x1000}]})

2.515053886s ago: executing program 0 (id=10428):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000)

2.363413931s ago: executing program 1 (id=10431):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)

2.19410207s ago: executing program 0 (id=10435):
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x118, 0x8000)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000200)=""/138)

1.907473409s ago: executing program 0 (id=10439):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x8, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)

1.715351831s ago: executing program 0 (id=10444):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002400)=ANY=[@ANYBLOB="580000000102030000000000000000000a0000074400018006000340000000002c000180140003"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4008000)

1.3659875s ago: executing program 0 (id=10448):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1, 0x4422, &(0x7f0000004480)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {}, [], {}, {0x20, 0x4}}, 0x24, 0x2)

1.319600808s ago: executing program 2 (id=10449):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f002, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"})

1.30571702s ago: executing program 5 (id=10450):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000006118bf000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xc, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.156208115s ago: executing program 4 (id=10451):
io_setup(0x8, &(0x7f00000003c0))
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

1.083613857s ago: executing program 1 (id=10452):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f042})

1.037319175s ago: executing program 2 (id=10453):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x7f, 0x6}, 0x90)

1.023803667s ago: executing program 5 (id=10454):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x4ff5}, 0x38)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

783.528338ms ago: executing program 2 (id=10455):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7f, 0x242)
ioctl$BLKZEROOUT(r0, 0x127f, 0x0)

783.412298ms ago: executing program 5 (id=10456):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendto$llc(r0, &(0x7f0000000300)="8d", 0x1, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10)

774.814099ms ago: executing program 1 (id=10457):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8)

669.197357ms ago: executing program 4 (id=10458):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x9, 0x4)

580.441462ms ago: executing program 2 (id=10459):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2)

526.835962ms ago: executing program 5 (id=10460):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0xffffffffffffff9d}, 0xa77}, 0x1c)

423.602279ms ago: executing program 2 (id=10461):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x13, 0x18, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@CGW_DST_IF={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0xfffffffffffffff7, 0xfffffffffffffffd, 0xff}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "f57de0eb74757e1d"}, 0x4}}]}, 0x3c}}, 0x404c004)

423.507039ms ago: executing program 4 (id=10462):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x800000010d, 0x3, 0x0, 0x0)

423.358349ms ago: executing program 1 (id=10463):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xd0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x51, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)

337.358583ms ago: executing program 5 (id=10464):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x2, 0x2b0, 0xffffffff, 0x0, 0x1d0, 0x100, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3}}}, {{@ip={@local, @empty, 0x0, 0x0, 'wlan1\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xfffd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {0x0, [0x0, 0x0, 0x7, 0x0, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "ca0300cb54a6f53d9bcc7790fe75e5dfab93e913be79e494d8af7b27c459"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)

294.755571ms ago: executing program 2 (id=10465):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f00000002c0)={0x24, @short={0x2, 0xffff}}, 0x14)

263.257616ms ago: executing program 4 (id=10466):
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3e8}, [], {0x14, 0x3f8}}, 0x28}}, 0x0)

198.672137ms ago: executing program 1 (id=10467):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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")
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

107.419012ms ago: executing program 4 (id=10468):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd72, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe200}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}]}}}]}, 0x5c}}, 0x0)

77.649247ms ago: executing program 4 (id=10469):
r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x98f903, 0xd, '\x00', @ptr=0x7fffffffffffffff}})

0s ago: executing program 5 (id=10470):
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x8)

kernel console output (not intermixed with test programs):

usb 6-1: USB disconnect, device number 3
[  677.403908][ T8247] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  677.408686][ T4736] usb 1-1: config 192 has too many interfaces: 127, using maximum allowed: 32
[  677.470874][ T4736] usb 1-1: config 192 has an invalid interface association descriptor of length 5, skipping
[  677.488246][ T4736] usb 1-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config
[  677.519259][ T4736] usb 1-1: config 192 has 0 interfaces, different from the descriptor's value: 127
[  677.529806][T27797] ipt_REJECT: ECHOREPLY no longer supported.
[  677.563406][ T4736] usb 1-1: config 192 has too many interfaces: 127, using maximum allowed: 32
[  677.572319][ T4736] usb 1-1: config 192 has an invalid interface association descriptor of length 5, skipping
[  677.614983][ T4736] usb 1-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config
[  677.645911][ T4736] usb 1-1: config 192 has 0 interfaces, different from the descriptor's value: 127
[  677.679579][ T4736] usb 1-1: New USB device found, idVendor=03eb, idProduct=7617, bcdDevice= 2.69
[  677.697319][ T4736] usb 1-1: New USB device strings: Mfr=3, Product=1, SerialNumber=9
[  677.714976][ T4736] usb 1-1: Product: syz
[  677.726551][ T4736] usb 1-1: Manufacturer: syz
[  677.732545][T27806] loop4: detected capacity change from 0 to 512
[  677.741440][ T4736] usb 1-1: SerialNumber: syz
[  677.796219][T27806] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  677.818026][T27816] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003
[  677.861434][T27806] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.4.8686: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  677.918732][T27806] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.8686: directory missing '.'
[  677.981241][ T4736] usb 1-1: USB disconnect, device number 37
[  677.996248][T27822] overlayfs: conflicting options: nfs_export=on,index=off
[  678.036805][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  678.089018][T27832] No such timeout policy "syz1"
[  678.261089][T27842] loop2: detected capacity change from 0 to 512
[  678.305501][T27842] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  678.378582][T27842] EXT4-fs (loop2): 1 truncate cleaned up
[  678.433911][T27842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  678.595215][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  678.670872][T27866] loop5: detected capacity change from 0 to 4096
[  678.703161][ T4311] usb 5-1: new full-speed USB device number 40 using dummy_hcd
[  678.710546][T27866] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  678.849950][T27866] ntfs3: loop5: failed to convert "c46c" to cp850
[  678.905826][ T4311] usb 5-1: config 8 has an invalid interface number: 80 but max is 0
[  678.930685][ T4311] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  678.970916][T27887] loop2: detected capacity change from 0 to 256
[  678.983224][ T4311] usb 5-1: config 8 has no interface number 0
[  678.997473][ T4311] usb 5-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping
[  679.053733][ T4311] usb 5-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  679.073178][T27887] FAT-fs (loop2): Directory bread(block 64) failed
[  679.110258][T27887] FAT-fs (loop2): Directory bread(block 65) failed
[  679.121842][ T4311] usb 5-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  679.140569][T27887] FAT-fs (loop2): Directory bread(block 66) failed
[  679.166367][ T4311] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[  679.189768][T27887] FAT-fs (loop2): Directory bread(block 67) failed
[  679.214153][T27887] FAT-fs (loop2): Directory bread(block 68) failed
[  679.227617][ T4311] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  679.253862][T27887] FAT-fs (loop2): Directory bread(block 69) failed
[  679.272938][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.289414][T27887] FAT-fs (loop2): Directory bread(block 70) failed
[  679.314924][ T4311] usb 5-1: NFC: intf ffff88802ff56000 id ffffffff8d406400
[  679.323148][T27887] FAT-fs (loop2): Directory bread(block 71) failed
[  679.329806][T27887] FAT-fs (loop2): Directory bread(block 72) failed
[  679.350908][T27887] FAT-fs (loop2): Directory bread(block 73) failed
[  679.566771][T27915] trusted_key: encrypted_key: keylen parameter is missing
[  679.819091][T27921] loop2: detected capacity change from 0 to 2048
[  679.840091][T27925] loop0: detected capacity change from 0 to 1024
[  679.871946][T27921] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  679.908326][T27893] loop1: detected capacity change from 0 to 32768
[  679.918404][T27925] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  680.129764][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  680.450701][ T8247] usb 5-1: USB disconnect, device number 40
[  680.536989][T27956] loop0: detected capacity change from 0 to 1024
[  680.588461][T27956] hfsplus: Filesystem is marked locked, mounting read-only.
[  680.651087][T27956] hfsplus: filesystem is marked locked, leaving read-only.
[  680.908377][T27965] loop0: detected capacity change from 0 to 2048
[  680.956854][T27965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  681.378486][T27935] loop2: detected capacity change from 0 to 32768
[  681.401706][T27987] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (32)
[  681.437443][T27935] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  681.482503][T27935] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  681.551090][T27935] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  681.613154][ T4736] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  681.619983][ T4736] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  681.786520][ T4736] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 166ms
[  681.811695][ T4736] gfs2: fsid=syz:syz.0: jid=0: Done
[  681.826480][T27935] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  681.858538][T28015] loop4: detected capacity change from 0 to 16
[  681.906098][T28015] erofs: (device loop4): mounted with root inode @ nid 36.
[  681.978160][T28015] syz.4.8735: attempt to access beyond end of device
[  681.978160][T28015] loop4: rw=0, sector=48, nr_sectors = 16 limit=16
[  682.406288][T28028] nvme_fabrics: missing parameter 'transport=%s'
[  682.415773][T27935] gfs2: fsid=syz:syz.0: found 1 quota changes
[  682.432947][T28028] nvme_fabrics: missing parameter 'nqn=%s'
[  682.496804][T27935] gfs2: fsid=syz:syz.0: inum=0 error=-28, nblocks=1, full=1 fail_pt=0
[  682.545909][T27935] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  682.590342][T27935] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  682.618528][T27935] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  682.878685][ T4282] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  682.932731][ T4282] CPU: 1 PID: 4282 Comm: syz-executor Not tainted syzkaller #0
[  682.940347][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  682.950509][ T4282] Call Trace:
[  682.953809][ T4282]  <TASK>
[  682.956757][ T4282]  dump_stack_lvl+0x188/0x24e
[  682.961566][ T4282]  ? show_regs_print_info+0x12/0x12
[  682.966804][ T4282]  ? load_image+0x400/0x400
[  682.971331][ T4282]  ? do_raw_spin_unlock+0x11d/0x230
[  682.976548][ T4282]  gfs2_assert_warn_i+0x18f/0x2c0
[  682.981604][ T4282]  gfs2_quota_cleanup+0x4b4/0x6a0
[  682.986661][ T4282]  gfs2_make_fs_ro+0x3e0/0x4c0
[  682.991458][ T4282]  ? gfs2_put_super+0x1d7/0x8c0
[  682.996340][ T4282]  ? gfs2_dinode_out+0xb00/0xb00
[  683.001303][ T4282]  ? __lock_acquire+0x7d10/0x7d10
[  683.006364][ T4282]  ? __rwlock_init+0x140/0x140
[  683.011158][ T4282]  ? do_raw_spin_unlock+0x11d/0x230
[  683.016384][ T4282]  gfs2_put_super+0x220/0x8c0
[  683.021104][ T4282]  ? gfs2_evict_inode+0x11d0/0x11d0
[  683.026341][ T4282]  generic_shutdown_super+0x130/0x340
[  683.031742][ T4282]  kill_block_super+0x7c/0xe0
[  683.036443][ T4282]  deactivate_locked_super+0x93/0xf0
[  683.041736][ T4282]  cleanup_mnt+0x42c/0x4b0
[  683.046154][ T4282]  ? lockdep_hardirqs_on+0x94/0x140
[  683.051348][ T4282]  task_work_run+0x1d0/0x260
[  683.055965][ T4282]  ? task_work_cancel+0x220/0x220
[  683.061016][ T4282]  ? exit_to_user_mode_loop+0x3b/0x110
[  683.066476][ T4282]  exit_to_user_mode_loop+0xe6/0x110
[  683.071761][ T4282]  exit_to_user_mode_prepare+0xee/0x180
[  683.077305][ T4282]  syscall_exit_to_user_mode+0x16/0x40
[  683.082759][ T4282]  do_syscall_64+0x58/0xa0
[  683.087174][ T4282]  ? clear_bhb_loop+0x60/0xb0
[  683.091844][ T4282]  ? clear_bhb_loop+0x60/0xb0
[  683.096517][ T4282]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  683.102407][ T4282] RIP: 0033:0x7fa27939da57
[  683.106818][ T4282] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  683.126437][ T4282] RSP: 002b:00007ffe1db5fae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  683.134848][ T4282] RAX: 0000000000000000 RBX: 00007fa279432048 RCX: 00007fa27939da57
[  683.142829][ T4282] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1db5fba0
[  683.150824][ T4282] RBP: 00007ffe1db5fba0 R08: 00007ffe1db60ba0 R09: 00000000ffffffff
[  683.158803][ T4282] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1db60c30
[  683.166785][ T4282] R13: 00007fa279432048 R14: 00000000000a6a59 R15: 00007ffe1db60c70
[  683.174894][ T4282]  </TASK>
[  683.608964][T28088] loop4: detected capacity change from 0 to 256
[  684.275388][T28125] loop1: detected capacity change from 0 to 2048
[  684.336175][T28125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  684.628476][T28147] Cannot find del_set index 43 as target
[  684.675212][T28140] loop0: detected capacity change from 0 to 4096
[  684.704852][T28140] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  684.879260][T28096] XFS (loop2): Mounting V5 Filesystem
[  684.891345][T28140] ntfs3: loop0: Failed to load $Extend.
[  685.029753][T28096] XFS (loop2): Ending clean mount
[  685.185422][ T4282] XFS (loop2): Unmounting Filesystem
[  685.755647][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  685.762043][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  686.287773][   T26] audit: type=1400 audit(686.255:467): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=28210 comm="syz.2.8788"
[  686.478388][T28201] set_capacity_and_notify: 1 callbacks suppressed
[  686.478404][T28201] loop0: detected capacity change from 0 to 32768
[  686.544870][T28201] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  686.609188][T28219] xt_CT: No such helper "snmp_trap"
[  686.857420][ T4388] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  686.872624][T28232] loop4: detected capacity change from 0 to 2048
[  686.891980][T28232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  686.943702][T28154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  687.071667][T28154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  687.483241][ T4729] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  687.665575][T28241] loop2: detected capacity change from 0 to 32768
[  687.678421][ T4729] usb 1-1: Using ep0 maxpacket: 16
[  687.694309][ T4729] usb 1-1: config 0 has no interfaces?
[  687.703227][T28247] loop4: detected capacity change from 0 to 32768
[  687.723728][ T4729] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  687.750193][ T4729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.761516][T28241] JBD2: Ignoring recovery information on journal
[  687.769345][ T4729] usb 1-1: Product: syz
[  687.787758][T28247] 
[  687.787758][T28247]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  687.787758][T28247] 
[  687.790752][ T4729] usb 1-1: Manufacturer: syz
[  687.800979][T28241] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  687.813686][T28241] JBD2: bad block at offset 32
[  687.829459][T28241] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  687.850216][ T4729] usb 1-1: SerialNumber: syz
[  687.882494][T28247] ERROR: (device loop4): diWrite: ixpxd invalid
[  687.882494][T28247] 
[  687.901785][T28247] ERROR: (device loop4): txCommit: 
[  687.901785][T28247] 
[  687.909093][ T4729] r8152-cfgselector 1-1: config 0 descriptor??
[  687.909477][T28154] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  687.933032][T28154] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  687.961653][T28154] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  687.982928][T28154] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  688.011670][ T4275] 
[  688.011670][ T4275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  688.011670][ T4275] 
[  688.053768][ T4282] ocfs2: Unmounting device (7,2) on (node local)
[  688.054260][ T4275] 
[  688.054260][ T4275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  688.054260][ T4275] 
[  688.157720][T28261] loop2: detected capacity change from 0 to 512
[  688.161988][ T4729] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  688.280209][T28261] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  688.317280][T28164] device geneve2 entered promiscuous mode
[  688.397486][T28261] EXT4-fs error (device loop2): ext4_xattr_block_list:713: inode #12: comm syz.2.8801: corrupted xattr block 6
[  688.432288][ T4730] usb 1-1: USB disconnect, device number 38
[  688.574369][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  688.944525][T28301] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  689.118865][T28308] loop0: detected capacity change from 0 to 128
[  689.158361][T28308] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  689.249507][T28263] loop4: detected capacity change from 0 to 32768
[  689.293570][T28308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  689.387738][T28263] 
[  689.387738][T28263]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  689.387738][T28263] 
[  689.458600][T28263] ERROR: (device loop4): dbReAlloc: the block is outside the filesystem
[  689.458600][T28263] 
[  689.515278][T28263] ERROR: (device loop4): remounting filesystem as read-only
[  690.779580][T28446] loop1: detected capacity change from 0 to 1024
[  690.951440][T28446] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #3: block 5: comm syz.1.8843: lblock 5 mapped to illegal pblock 5 (length 1)
[  691.065863][T28446] Quota error (device loop1): write_blk: dquota write failed
[  691.083328][T28446] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  691.133033][T28446] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.8843: Failed to acquire dquot type 0
[  691.190470][T28446] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.8843: Freeing blocks not in datazone - block = 0, count = 4096
[  691.276446][T28446] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.8843: Invalid inode bitmap blk 0 in block_group 0
[  691.343748][    T9] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 5: comm kworker/u4:0: lblock 5 mapped to illegal pblock 5 (length 1)
[  691.350592][T28446] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  691.373193][    T9] Quota error (device loop1): remove_tree: Can't read quota data block 5
[  691.411352][    T9] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:0: Failed to release dquot type 0
[  691.436533][T28446] EXT4-fs (loop1): 1 orphan inode deleted
[  691.479252][T28446] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  691.570852][T28446] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  691.725237][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  692.143455][T28523] netlink: 196 bytes leftover after parsing attributes in process `syz.2.8865'.
[  692.194757][T28523] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  692.433181][T28536] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8871'.
[  692.922343][T28572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8880'.
[  693.138345][T28585] loop4: detected capacity change from 0 to 512
[  693.255878][T28593] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  693.255895][T28593] overlayfs: missing 'lowerdir'
[  693.401707][T28602] netlink: 160 bytes leftover after parsing attributes in process `syz.4.8889'.
[  693.496525][T28609] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8890'.
[  693.705469][T28612] loop2: detected capacity change from 0 to 4096
[  693.818366][T28628] loop4: detected capacity change from 0 to 256
[  693.844996][T28621] loop1: detected capacity change from 0 to 4096
[  693.879704][T28621] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  693.917521][T28628] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  694.046054][T28621] ntfs3: loop1: failed to convert "c46c" to euc-jp
[  694.053188][T28636] loop5: detected capacity change from 0 to 764
[  694.162632][T28636] rock: directory entry would overflow storage
[  694.200684][T28636] rock: sig=0x4f50, size=4, remaining=3
[  694.228226][T28636] iso9660: Corrupted directory entry in block 6 of inode 1792
[  694.246415][T28644] loop0: detected capacity change from 0 to 256
[  694.410578][T28644] FAT-fs (loop0): Directory bread(block 64) failed
[  694.433157][T28644] FAT-fs (loop0): Directory bread(block 65) failed
[  694.439923][T28644] FAT-fs (loop0): Directory bread(block 66) failed
[  694.522132][T28644] FAT-fs (loop0): Directory bread(block 67) failed
[  694.526751][T28669] loop5: detected capacity change from 0 to 256
[  694.567394][T28644] FAT-fs (loop0): Directory bread(block 68) failed
[  694.622252][T28644] FAT-fs (loop0): Directory bread(block 69) failed
[  694.653108][T28644] FAT-fs (loop0): Directory bread(block 70) failed
[  694.695670][T28644] FAT-fs (loop0): Directory bread(block 71) failed
[  694.702385][T28644] FAT-fs (loop0): Directory bread(block 72) failed
[  694.763544][T28644] FAT-fs (loop0): Directory bread(block 73) failed
[  695.043403][T28696] loop5: detected capacity change from 0 to 64
[  695.473660][T28728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8923'.
[  695.484398][T28720] loop0: detected capacity change from 0 to 4096
[  695.518879][T28720] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  695.588564][T28720] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  695.618312][T28734] loop4: detected capacity change from 0 to 8
[  695.649065][T28734] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  695.664796][T28736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  695.676822][ T4380] udevd[4380]: incorrect cramfs checksum on /dev/loop4
[  695.683486][T28720] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  695.688657][T28736] batman_adv: batadv0: Removing interface: batadv_slave_0
[  695.710978][T28734] cramfs: Error -3 while decompressing!
[  695.721235][T28734] cramfs: ffffffff96d91248(26)->ffff888044854000(4096)
[  695.721889][T28720] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  695.737929][T28734] cramfs: Error 2 while decompressing!
[  695.746249][T28739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8926'.
[  695.756919][T28736] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  695.773269][T28736] batman_adv: batadv0: Removing interface: batadv_slave_1
[  695.781075][T28734] cramfs: ffffffff96d91262(26)->ffff8880b4d1e000(4096)
[  695.786787][T28720] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  695.795123][T28734] cramfs: Error -3 while decompressing!
[  695.805712][T28736] batman_adv: batadv0: Removing interface: netdevsim0
[  695.829815][T28734] cramfs: ffffffff96d9127c(16)->ffff888044f37000(4096)
[  695.850177][T28720] ntfs: volume version 3.1.
[  695.867781][T28720] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  695.878024][T28734] cramfs: Error -3 while decompressing!
[  695.891153][T28734] cramfs: ffffffff96d91248(26)->ffff888044854000(4096)
[  695.923334][T28720] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  695.976402][T28720] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  696.013820][T28720] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  696.460181][T28764] hfsplus: invalid length 32517 has been corrected to 255
[  696.740225][ T1068] hfsplus: b-tree write err: -5, ino 20
[  696.780707][T28742] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  696.890829][T28777] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  696.939386][T28793] netlink: 272 bytes leftover after parsing attributes in process `syz.0.8939'.
[  697.187423][ T4388] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  697.330398][T28820] netlink: 'syz.5.8947': attribute type 26 has an invalid length.
[  697.492952][ T4732] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  697.687606][ T4732] usb 3-1: Using ep0 maxpacket: 32
[  697.695198][ T4732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  697.737414][ T4732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.754511][ T4732] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  697.768934][ T4732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.822972][ T4730] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  697.837245][ T4732] usb 3-1: config 0 descriptor??
[  697.863168][ T4732] hub 3-1:0.0: USB hub found
[  697.891386][T28857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8955'.
[  697.901301][T28857] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8955'.
[  697.930953][T28857] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8955'.
[  697.959159][T28857] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8955'.
[  697.968469][T28857] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8955'.
[  697.977993][T28862] netlink: 'syz.4.8956': attribute type 21 has an invalid length.
[  697.990887][T28862] IPv6: NLM_F_CREATE should be specified when creating new route
[  698.008479][T28862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  698.015866][T28862] IPv6: NLM_F_CREATE should be set when creating new route
[  698.023208][T28862] IPv6: NLM_F_CREATE should be set when creating new route
[  698.030441][T28862] IPv6: NLM_F_CREATE should be set when creating new route
[  698.058137][ T4730] usb 2-1: Using ep0 maxpacket: 32
[  698.073327][ T4732] hub 3-1:0.0: config failed, hub has too many ports! (err -19)
[  698.090019][ T4730] usb 2-1: config 4 has an invalid interface number: 228 but max is 0
[  698.111137][T28867] netlink: 'syz.5.8959': attribute type 32 has an invalid length.
[  698.119231][ T4730] usb 2-1: config 4 has no interface number 0
[  698.119360][ T4730] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11
[  698.167053][ T4730] usb 2-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024
[  698.183901][ T4730] usb 2-1: config 4 interface 228 has no altsetting 0
[  698.194690][ T4730] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  698.204236][ T4730] usb 2-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  698.212432][ T4730] usb 2-1: Product: syz
[  698.217282][ T4730] usb 2-1: Manufacturer: syz
[  698.221938][ T4730] usb 2-1: SerialNumber: syz
[  698.284807][ T4732] usbhid 3-1:0.0: can't add hid device: -71
[  698.303190][ T4732] usbhid: probe of 3-1:0.0 failed with error -71
[  698.353763][ T4732] usb 3-1: USB disconnect, device number 37
[  698.377259][T28886] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  698.452376][ T4730] usb 2-1: invalid MIDI in EP 0
[  698.537067][T28902] tipc: Trying to set illegal importance in message
[  698.576019][ T4730] snd-usb-audio: probe of 2-1:4.228 failed with error -22
[  698.638161][ T4349] udevd[4349]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  698.656049][ T4730] usb 2-1: USB disconnect, device number 31
[  699.226709][T28951] set_capacity_and_notify: 5 callbacks suppressed
[  699.226726][T28951] loop2: detected capacity change from 0 to 4096
[  699.248678][T28951] __ntfs_warning: 7 callbacks suppressed
[  699.248693][T28951] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  699.451723][T28951] ntfs: volume version 3.1.
[  699.463493][T28970] loop0: detected capacity change from 0 to 164
[  699.704065][    T9] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  699.734954][T28932] loop5: detected capacity change from 0 to 32768
[  699.788567][T28932] (syz.5.8969,28932,0):ocfs2_verify_heartbeat:814 ERROR: Cannot heartbeat on a locally mounted device.
[  699.888528][T28932] (syz.5.8969,28932,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70
[  699.974320][T28932] (syz.5.8969,28932,1):ocfs2_fill_super:1176 ERROR: status = -22
[  700.010511][T29001] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8989'.
[  700.171806][T29005] loop2: detected capacity change from 0 to 1024
[  700.392960][ T4272] Bluetooth: hci0: command 0x0c1a tx timeout
[  700.754228][T29045] xt_CONNSECMARK: invalid mode: 0
[  700.849184][T29053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9004'.
[  700.852634][T29054] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.9006'.
[  700.870632][T29053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  700.904203][T29054] openvswitch: netlink: Message has 48126 unknown bytes.
[  701.434683][ T4311] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  701.663049][ T4311] usb 6-1: Using ep0 maxpacket: 16
[  701.672171][ T4311] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  701.708946][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.747502][ T4311] usb 6-1: Product: syz
[  701.751741][ T4311] usb 6-1: Manufacturer: syz
[  701.761365][T29073] loop4: detected capacity change from 0 to 32768
[  701.769164][ T4311] usb 6-1: SerialNumber: syz
[  701.783547][ T4311] r8152-cfgselector 6-1: config 0 descriptor??
[  702.215655][ T4311] r8152-cfgselector 6-1: Unknown version 0x0000
[  702.222069][ T4311] r8152-cfgselector 6-1: bad CDC descriptors
[  702.252058][ T4311] r8152-cfgselector 6-1: Unknown version 0x0000
[  702.280614][ T4311] r8152-cfgselector 6-1: USB disconnect, device number 4
[  702.321757][T29093] loop2: detected capacity change from 0 to 32768
[  702.389304][T29093] ERROR: (device loop2): diAllocAG: numfree > numinos
[  702.389304][T29093] 
[  702.425525][T29093] ialloc: diAlloc returned -5!
[  702.722276][T29145] delete_channel: no stack
[  702.727655][T29148] loop4: detected capacity change from 0 to 256
[  702.956406][T29157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9035'.
[  702.956433][T29157] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9035'.
[  703.236817][T29169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9038'.
[  703.338082][T29178] loop5: detected capacity change from 0 to 256
[  703.348921][T29180] netlink: 'syz.4.9041': attribute type 1 has an invalid length.
[  703.369249][T29178] exfat: Deprecated parameter 'namecase'
[  703.387144][T29178] exfat: Deprecated parameter 'utf8'
[  703.429579][T29178] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d)
[  703.464284][T29174] loop0: detected capacity change from 0 to 4096
[  703.525352][T29174] EXT4-fs (loop0): Test dummy encryption mode enabled
[  703.569156][T29174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  703.610916][T29174] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  703.618390][T29196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9045'.
[  703.815213][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  703.820636][T29209] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  703.859760][T29209] overlayfs: missing 'lowerdir'
[  703.885651][T29208] loop5: detected capacity change from 0 to 2048
[  703.966001][T29208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  704.175779][T29223] hfsplus: invalid length 32517 has been corrected to 255
[  704.448416][   T11] hfsplus: b-tree write err: -5, ino 20
[  704.521200][T29250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  704.539523][T29251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9059'.
[  704.572103][T29250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  704.726060][T29250] device batadv0 left promiscuous mode
[  704.747863][T29250] bridge0: port 3(batadv0) entered disabled state
[  704.988446][T29280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9068'.
[  705.346896][   T26] audit: type=1326 audit(705.315:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29305 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  705.371378][T29309] netlink: 760 bytes leftover after parsing attributes in process `syz.2.9078'.
[  705.430330][   T26] audit: type=1326 audit(705.315:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29305 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  705.503135][   T26] audit: type=1326 audit(705.335:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29305 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  705.602946][   T26] audit: type=1326 audit(705.335:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29305 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  705.648921][T29330] set_capacity_and_notify: 1 callbacks suppressed
[  705.648936][T29330] loop0: detected capacity change from 0 to 128
[  705.683056][   T26] audit: type=1326 audit(705.335:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29305 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  705.718057][ T4730] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  705.764217][   T26] audit: type=1326 audit(705.335:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29305 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  705.831676][   T26] audit: type=1326 audit(705.335:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29305 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  705.927487][   T26] audit: type=1326 audit(705.335:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29305 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  706.001247][ T4730] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  706.022048][ T4730] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  706.023349][   T26] audit: type=1326 audit(705.335:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29305 comm="syz.0.9077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  706.062434][ T4730] usb 2-1: Product: syz
[  706.072653][ T4730] usb 2-1: SerialNumber: syz
[  706.080308][T29355] loop5: detected capacity change from 0 to 256
[  706.108661][ T4730] usb 2-1: config 0 descriptor??
[  706.132439][T29353] libceph: resolve '.
[  706.132439][T29353] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  706.132439][T29353] ' (ret=-3): failed
[  706.149161][T29355] exfat: Deprecated parameter 'utf8'
[  706.225648][T29355] exfat: Deprecated parameter 'utf8'
[  706.318166][ T4730] hso 2-1:0.0: Failed to find BULK IN ep
[  706.328196][T29355] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  706.517364][ T4311] usb 2-1: USB disconnect, device number 32
[  706.797937][T29405] netlink: 'syz.4.9102': attribute type 1 has an invalid length.
[  706.821329][T29405] netlink: 'syz.4.9102': attribute type 3 has an invalid length.
[  706.851424][T29405] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9102'.
[  706.857384][T29412] netlink: 'syz.0.9104': attribute type 7 has an invalid length.
[  706.871697][T29412] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9104'.
[  707.081603][T29426] netlink: 'syz.2.9109': attribute type 8 has an invalid length.
[  707.113077][T29426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9109'.
[  707.153018][T29429] batman_adv: batadv0: Removing interface: batadv_slave_0
[  707.196626][T29429] batman_adv: batadv0: Removing interface: batadv_slave_1
[  707.366343][T29445] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  707.576181][T29462] loop2: detected capacity change from 0 to 512
[  707.672106][T29462] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  707.726886][T29462] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.9119: corrupted xattr block 33
[  707.801856][T29462] EXT4-fs error (device loop2): ext4_get_inode_usage:835: inode #15: comm syz.2.9119: corrupted xattr block 33
[  707.920389][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  708.032448][T29493] loop2: detected capacity change from 0 to 256
[  708.092919][ T8247] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  708.271977][T29460] loop1: detected capacity change from 0 to 32768
[  708.299887][ T8247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  708.319867][T29460] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  708.321263][T29506] __nla_validate_parse: 1 callbacks suppressed
[  708.321279][T29506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9131'.
[  708.353439][ T8247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  708.364546][ T8247] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  708.378253][ T8247] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  708.380390][T29512] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  708.401198][ T8247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.425259][ T8247] usb 6-1: config 0 descriptor??
[  708.439132][ T8247] hub 6-1:0.0: USB hub found
[  708.454195][T29512] batman_adv: batadv0: Removing interface: batadv_slave_0
[  708.518496][T29512] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  708.572241][T29512] batman_adv: batadv0: Removing interface: batadv_slave_1
[  708.592152][ T5087] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  708.657735][ T8247] hub 6-1:0.0: 14 ports detected
[  708.658071][ T8247] hub 6-1:0.0: insufficient power available to use all downstream ports
[  708.840651][T29536] loop0: detected capacity change from 0 to 8
[  708.858998][ T8247] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  708.859117][ T8247] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  708.895528][ T8247] usb 6-1: USB disconnect, device number 5
[  708.909972][T29536] cramfs: bad data blocksize 3959421443
[  708.910095][T29536] cramfs: bad data blocksize 4294965915
[  708.910107][T29536] cramfs: bad data blocksize 802397048
[  708.910330][T29536] cramfs: bad data blocksize 4294742353
[  708.910440][T29536] cramfs: bad data blocksize 3367320904
[  708.910458][T29536] cramfs: bad data blocksize 859179931
[  708.910471][T29536] cramfs: bad data blocksize 3436389781
[  708.910483][T29536] cramfs: bad data blocksize 4294365136
[  708.910496][T29536] cramfs: bad data blocksize 4294967040
[  708.910515][T29536] cramfs: bad data blocksize 3959421443
[  708.911859][   T26] audit: type=1800 audit(708.875:477): pid=29536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9139" name="file2" dev="loop0" ino=268 res=0 errno=0
[  708.935770][T29548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9140'.
[  709.091976][T29556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9142'.
[  709.258790][T29568] netlink: 'syz.0.9145': attribute type 1 has an invalid length.
[  709.258860][T29568] netlink: 'syz.0.9145': attribute type 2 has an invalid length.
[  709.258890][T29568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9145'.
[  709.370511][T29573] loop2: detected capacity change from 0 to 8
[  709.391101][T29573] SQUASHFS error: Failed to read block 0xdfa: -5
[  709.391164][T29573] SQUASHFS error: Unable to read metadata cache entry [dfa]
[  709.402351][T29573] SQUASHFS error: Failed to read block 0x4e8: -5
[  709.411164][T29573] SQUASHFS error: Failed to read block 0xed04f1: -5
[  709.411254][T29573] SQUASHFS error: Failed to read block 0x4de: -5
[  709.411329][T29573] SQUASHFS error: Failed to read block 0x4de: -5
[  709.411403][T29573] SQUASHFS error: Failed to read block 0x4de: -5
[  709.411480][T29573] SQUASHFS error: Failed to read block 0x4de: -5
[  709.411561][T29573] SQUASHFS error: Failed to read block 0x4de: -5
[  709.411633][T29573] SQUASHFS error: Failed to read block 0x4de: -5
[  709.411731][T29573] SQUASHFS error: Failed to read block 0x4e8: -5
[  709.940812][T29598] loop2: detected capacity change from 0 to 4096
[  710.041958][T29598] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  710.083333][T29598] ntfs3: loop2: Failed to load $Extend.
[  710.399211][ T4311] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  710.440462][ T4311] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  710.481256][ T8247] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  710.603105][ T4732] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  710.814685][ T4732] usb 3-1: too many configurations: 125, using maximum allowed: 8
[  710.833370][ T4732] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  710.836059][ T8239] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  710.842703][ T4732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.842726][ T4732] usb 3-1: Product: syz
[  710.842740][ T4732] usb 3-1: Manufacturer: syz
[  710.842755][ T4732] usb 3-1: SerialNumber: syz
[  710.955590][ T4732] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  710.956544][ T8239] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  711.041262][ T4732] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  711.061885][T29691] usb usb8: usbfs: process 29691 (syz.5.9182) did not claim interface 0 before use
[  711.344831][T29706] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  711.390138][T29720] libceph: resolve '.
[  711.390138][T29720] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  711.390138][T29720] ' (ret=-3): failed
[  711.534397][ T8239] usb 3-1: USB disconnect, device number 38
[  711.785371][T29745] loop0: detected capacity change from 0 to 128
[  711.843305][T29745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  711.853698][T29741] loop4: detected capacity change from 0 to 8192
[  711.883273][T29741] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  711.914049][T29741] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  711.928826][T29741] REISERFS (device loop4): using ordered data mode
[  711.938692][T29741] reiserfs: using flush barriers
[  711.957097][T29741] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  711.982098][T29741] REISERFS (device loop4): checking transaction log (loop4)
[  711.999442][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  712.162892][ T4732] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  712.169922][ T4732] ath9k_htc: Failed to initialize the device
[  712.190459][ T8239] usb 3-1: ath9k_htc: USB layer deinitialized
[  712.238513][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  712.238527][   T26] audit: type=1326 audit(712.205:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29775 comm="syz.2.9204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27939c819 code=0x7ffc0000
[  712.273511][T29741] REISERFS (device loop4): Using tea hash to sort names
[  712.293749][T29741] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  712.352930][   T26] audit: type=1326 audit(712.245:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29775 comm="syz.2.9204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fa27939c819 code=0x7ffc0000
[  712.444643][   T26] audit: type=1326 audit(712.245:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29775 comm="syz.2.9204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27939c819 code=0x7ffc0000
[  712.461626][T29786] ptrace attach of "./syz-executor exec"[4277] was attempted by ""[29786]
[  712.482322][T29785] libceph: resolve '.
[  712.482322][T29785] #)|.زf͹Ç�²a×ïÅ2sˆoÖw¿úÕ?£'Ê%Ð�KAq‰f»�CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM�¤¨ìó¤h‡E$
[  712.482322][T29785] ' (ret=-3): failed
[  712.537499][   T26] audit: type=1326 audit(712.245:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29775 comm="syz.2.9204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27939c819 code=0x7ffc0000
[  712.705197][T29797] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  713.294273][T29840] IPv6: NLM_F_CREATE should be specified when creating new route
[  713.526467][T29862] overlayfs: conflicting options: userxattr,redirect_dir=on
[  713.673113][ T4730] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  713.864382][ T4730] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  713.888987][ T4730] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[  713.924662][ T4730] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  713.956649][ T4730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.982879][ T4730] usb 3-1: Product: syz
[  713.992985][ T4730] usb 3-1: Manufacturer: syz
[  714.008103][ T4730] usb 3-1: SerialNumber: syz
[  714.037696][ T4730] usb 3-1: config 0 descriptor??
[  714.059240][ T4730] gspca_main: sunplus-2.14.0 probing 055f:c630
[  714.441323][T29930] netlink: 276 bytes leftover after parsing attributes in process `syz.0.9252'.
[  714.503986][ T4730] usb 3-1: USB disconnect, device number 39
[  714.553012][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  714.749372][T29938] xt_CT: No such helper "pptp"
[  714.888872][T29967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9260'.
[  714.952283][T29973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9262'.
[  714.961521][T29973] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9262'.
[  715.087361][T29982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9266'.
[  715.119537][T29982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9266'.
[  715.135318][T29982] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9266'.
[  715.234216][T29991] loop4: detected capacity change from 0 to 64
[  715.756246][ T4730] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  715.953009][ T4730] usb 2-1: Using ep0 maxpacket: 16
[  715.971235][ T4730] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  715.999794][ T4730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.017732][ T4730] usb 2-1: Product: syz
[  716.022134][ T4730] usb 2-1: Manufacturer: syz
[  716.035708][ T4730] usb 2-1: SerialNumber: syz
[  716.036485][T29986] loop2: detected capacity change from 0 to 40427
[  716.078639][ T4730] r8152-cfgselector 2-1: config 0 descriptor??
[  716.109254][T29986] F2FS-fs (loop2): Invalid segment count (0)
[  716.123579][T29986] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  716.170695][T29986] F2FS-fs (loop2): invalid crc value
[  716.224002][T29986] F2FS-fs (loop2): Found nat_bits in checkpoint
[  716.356618][T30059] qrtr: Invalid version 0
[  716.407468][T29986] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  716.425708][T29986] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  716.503455][ T4730] r8152-cfgselector 2-1: Unknown version 0x0000
[  716.517352][ T4730] r8152-cfgselector 2-1: USB disconnect, device number 33
[  716.555164][T29986] F2FS-fs (loop2): Can't flush 65535 in 0 for segs_per_sec 1 != 1
[  716.568206][T30076] afs: Unknown parameter 'dont_hash'
[  716.928663][T30099] tmpfs: Bad value for 'mpol'
[  717.417783][T30129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9306'.
[  717.616715][T30142] netlink: 'syz.5.9312': attribute type 1 has an invalid length.
[  717.628432][T30140] loop4: detected capacity change from 0 to 1024
[  717.716453][T30139] wg1 speed is unknown, defaulting to 1000
[  717.763402][T30139] team0 speed is unknown, defaulting to 1000
[  718.009913][T30118] loop2: detected capacity change from 0 to 32768
[  718.048279][T30118] (syz.2.9302,30118,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  718.086558][T30118] (syz.2.9302,30118,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  718.112697][T30169] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õë�ï1:ºÃÃÓ­'Ä4,�Zz-#FÇ<æõ]%gCžÊ
[  718.112697][T30169] SÃȘØÈžZ§6ŸÂ'
[  718.148345][T30118] JBD2: Ignoring recovery information on journal
[  718.218803][T30118] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  718.286717][T30183] loop0: detected capacity change from 0 to 256
[  718.301601][ T4282] ocfs2: Unmounting device (7,2) on (node local)
[  718.389798][T30183] FAT-fs (loop0): Directory bread(block 64) failed
[  718.425975][T30183] FAT-fs (loop0): Directory bread(block 65) failed
[  718.451859][T30183] FAT-fs (loop0): Directory bread(block 66) failed
[  718.468647][T30200] loop4: detected capacity change from 0 to 1024
[  718.490044][T30183] FAT-fs (loop0): Directory bread(block 67) failed
[  718.501853][T30200] EXT4-fs: Ignoring removed nomblk_io_submit option
[  718.523819][T30183] FAT-fs (loop0): Directory bread(block 68) failed
[  718.532378][T30200] EXT4-fs: Ignoring removed nomblk_io_submit option
[  718.540511][T30200] EXT4-fs: Ignoring removed i_version option
[  718.564427][T30200] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  718.604524][T30183] FAT-fs (loop0): Directory bread(block 69) failed
[  718.611308][T30183] FAT-fs (loop0): Directory bread(block 70) failed
[  718.654914][T30183] FAT-fs (loop0): Directory bread(block 71) failed
[  718.661756][T30183] FAT-fs (loop0): Directory bread(block 72) failed
[  718.668593][T30183] FAT-fs (loop0): Directory bread(block 73) failed
[  718.722744][T30200] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  718.798397][   T26] audit: type=1326 audit(718.765:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.1.9329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  718.912958][   T26] audit: type=1326 audit(718.815:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.1.9329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  719.037817][   T26] audit: type=1326 audit(718.815:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30221 comm="syz.1.9329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  719.065450][ T4275] EXT4-fs (loop4): unmounting filesystem.
[  719.087346][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9332'.
[  719.230843][T30244] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9334'.
[  719.344887][T30251] loop2: detected capacity change from 0 to 512
[  719.358756][T30255] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  719.358756][T30255]    program syz.5.9338 not setting count and/or reply_len properly
[  719.387351][T30251] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  719.428832][T30251] EXT4-fs (loop2): orphan cleanup on readonly fs
[  719.447518][T30251] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  719.553289][T30251] Quota error (device loop2): write_blk: dquota write failed
[  719.569823][T30251] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  719.606352][T30251] Quota error (device loop2): write_blk: dquota write failed
[  719.614839][T30251] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  719.626314][T30251] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.9336: Failed to acquire dquot type 1
[  719.662024][T30251] EXT4-fs (loop2): 1 truncate cleaned up
[  719.693020][T30251] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  719.719070][T30251] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  719.749252][T30251] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  719.772956][ T8239] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  719.827671][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  719.963112][ T8239] usb 5-1: Using ep0 maxpacket: 32
[  719.987403][ T8239] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  720.013398][ T8239] usb 5-1: config 0 has no interface number 0
[  720.046037][ T8239] usb 5-1: config 0 interface 132 has no altsetting 0
[  720.084602][ T8239] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75
[  720.111858][ T8239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.127590][ T8239] usb 5-1: Product: syz
[  720.131950][ T8239] usb 5-1: Manufacturer: syz
[  720.137043][ T8239] usb 5-1: SerialNumber: syz
[  720.176582][ T8239] usb 5-1: config 0 descriptor??
[  720.185032][T30302] loop2: detected capacity change from 0 to 2048
[  720.278422][T30302] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  720.335890][T30302] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #12: block 2: comm syz.2.9351: lblock 0 mapped to illegal pblock 2 (length 1)
[  720.356147][T30287] loop5: detected capacity change from 0 to 32768
[  720.410101][ T8239] cdc_subset 5-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.4-1, Belkin, eTEK, or compatible, 42:81:42:03:4d:34
[  720.550096][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  720.670434][ T8239] usb 5-1: USB disconnect, device number 41
[  720.685930][ T8239] cdc_subset 5-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.4-1, Belkin, eTEK, or compatible
[  720.718517][   T26] audit: type=1400 audit(720.685:486): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=30336 comm="syz.1.9356"
[  720.901570][T30359] loop1: detected capacity change from 0 to 512
[  720.929863][T30359] EXT4-fs: Ignoring removed orlov option
[  720.964490][T30359] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  720.994613][T30359] EXT4-fs (loop1): orphan cleanup on readonly fs
[  721.035260][T30359] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9358: bg 0: block 248: padding at end of block bitmap is not set
[  721.070094][T30359] Quota error (device loop1): write_blk: dquota write failed
[  721.079678][T30359] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  721.092996][   T14] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  721.115650][T30359] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.9358: Failed to acquire dquot type 1
[  721.128913][T30359] EXT4-fs (loop1): 1 truncate cleaned up
[  721.146180][T30359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  721.211916][T30359] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  721.292567][T30359] EXT4-fs error (device loop1): __ext4_remount:6650: comm syz.1.9358: Abort forced by user
[  721.303366][   T14] usb 6-1: Using ep0 maxpacket: 8
[  721.310479][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  721.321676][T30359] EXT4-fs (loop1): Remounting filesystem read-only
[  721.338675][T30359] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  721.348781][   T14] usb 6-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5
[  721.373527][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.414051][   T14] usb 6-1: config 0 descriptor??
[  721.437968][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  721.619345][T30405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9366'.
[  721.633348][   T14] usb 6-1: USB disconnect, device number 6
[  722.377911][T30468] loop2: detected capacity change from 0 to 1024
[  722.429249][T30476] loop4: detected capacity change from 0 to 256
[  722.451413][T30468] hfsplus: failed to extend attributes file
[  722.489512][T30479] netlink: 'syz.5.9382': attribute type 7 has an invalid length.
[  722.516616][T30476] FAT-fs (loop4): Directory bread(block 64) failed
[  722.526629][T30476] FAT-fs (loop4): Directory bread(block 65) failed
[  722.556761][T30476] FAT-fs (loop4): Directory bread(block 66) failed
[  722.577017][T30476] FAT-fs (loop4): Directory bread(block 67) failed
[  722.602489][T30476] FAT-fs (loop4): Directory bread(block 68) failed
[  722.650677][T30476] FAT-fs (loop4): Directory bread(block 69) failed
[  722.678366][T30476] FAT-fs (loop4): Directory bread(block 70) failed
[  722.697326][T30476] FAT-fs (loop4): Directory bread(block 71) failed
[  722.715525][T30476] FAT-fs (loop4): Directory bread(block 72) failed
[  722.730248][T30476] FAT-fs (loop4): Directory bread(block 73) failed
[  722.916607][T30501] loop2: detected capacity change from 0 to 24
[  722.964476][T30501] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  723.013297][T30501] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  723.088286][T30501] VFS: Lookup of 'file0' in romfs loop2 would have caused loop
[  723.387769][T30533] PKCS8: Unsupported PKCS#8 version
[  723.443269][T30521] loop1: detected capacity change from 0 to 4096
[  723.513037][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  723.513079][T30521] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  723.759038][T30549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9398'.
[  724.217265][T30524] loop0: detected capacity change from 0 to 32768
[  724.246790][T30577] loop4: detected capacity change from 0 to 64
[  724.283720][T30524] __jfs_setxattr: xattr_size = 72, new_size = 12818
[  724.485719][T30594] netlink: 'syz.1.9411': attribute type 21 has an invalid length.
[  724.750471][T30612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9416'.
[  724.988074][T30626] loop0: detected capacity change from 0 to 256
[  725.061984][T30626] FAT-fs (loop0): Directory bread(block 64) failed
[  725.103920][T30626] FAT-fs (loop0): Directory bread(block 65) failed
[  725.110629][T30626] FAT-fs (loop0): Directory bread(block 66) failed
[  725.172729][T30626] FAT-fs (loop0): Directory bread(block 67) failed
[  725.212974][T30626] FAT-fs (loop0): Directory bread(block 68) failed
[  725.219558][T30626] FAT-fs (loop0): Directory bread(block 69) failed
[  725.253037][T30626] FAT-fs (loop0): Directory bread(block 70) failed
[  725.280089][T30626] FAT-fs (loop0): Directory bread(block 71) failed
[  725.310572][T30626] FAT-fs (loop0): Directory bread(block 72) failed
[  725.340930][T30626] FAT-fs (loop0): Directory bread(block 73) failed
[  725.415188][T30657] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9429'.
[  725.423294][T30656] loop4: detected capacity change from 0 to 128
[  725.436113][T30655] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9431'.
[  725.463048][T30657] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9429'.
[  725.488214][T30655] netlink: 'syz.1.9431': attribute type 1 has an invalid length.
[  725.666319][T30667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9434'.
[  725.689957][T30670] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.9433'.
[  725.720705][T30670] netlink: zone id is out of range
[  725.737127][T30670] netlink: del zone limit has 4 unknown bytes
[  725.872047][T30684] netlink: 798 bytes leftover after parsing attributes in process `syz.2.9439'.
[  725.920552][T30690] loop4: detected capacity change from 0 to 256
[  725.944619][T30679] loop0: detected capacity change from 0 to 4096
[  725.955349][T30690] exfat: Deprecated parameter 'namecase'
[  725.961134][T30690] exfat: Deprecated parameter 'utf8'
[  726.042955][T30690] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  726.098275][T30690] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[  726.154549][T30702] ERROR: device name not specified.
[  726.540391][T30725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9450'.
[  727.287694][T30809] __nla_validate_parse: 1 callbacks suppressed
[  727.287713][T30809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9463'.
[  727.297809][T30754] loop2: detected capacity change from 0 to 32768
[  727.317932][T30812] loop5: detected capacity change from 0 to 2048
[  727.328835][T30754] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  727.354372][T30812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  727.604217][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  727.604231][   T26] audit: type=1326 audit(727.575:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30824 comm="syz.0.9469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  727.709718][ T4388] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  727.744567][   T26] audit: type=1326 audit(727.615:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30824 comm="syz.0.9469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  727.844868][   T26] audit: type=1326 audit(727.615:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30824 comm="syz.0.9469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  727.943824][   T26] audit: type=1326 audit(727.615:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30824 comm="syz.0.9469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  728.032886][   T26] audit: type=1326 audit(727.615:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30824 comm="syz.0.9469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  728.142899][   T26] audit: type=1326 audit(727.615:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30824 comm="syz.0.9469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  728.281096][   T26] audit: type=1326 audit(727.625:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30824 comm="syz.0.9469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  728.382958][   T26] audit: type=1326 audit(727.625:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30824 comm="syz.0.9469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5d9ed9c819 code=0x7ffc0000
[  728.658748][T30898] loop1: detected capacity change from 0 to 64
[  729.209302][T30942] netlink: 'syz.5.9506': attribute type 2 has an invalid length.
[  729.217381][T30942] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9506'.
[  729.298650][T30948] loop0: detected capacity change from 0 to 1024
[  729.338105][T30952] [U] 
[  729.341798][T30952] [U] 
[  729.344520][T30952] [U] 
[  729.347236][T30952] [U] 
[  729.351831][T30952] [U] 
[  729.354579][T30952] [U] 
[  729.357302][T30952] [U] 
[  729.359442][T30953] netlink: 25 bytes leftover after parsing attributes in process `syz.2.9509'.
[  729.360009][T30952] [U] 
[  729.418614][T30952] [U] 
[  729.421380][T30952] [U] 
[  729.424094][T30952] [U] 
[  729.439700][T30948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  729.502769][T30950] [U] 
[  729.652633][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  729.779998][   T26] audit: type=1326 audit(729.745:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30978 comm="syz.5.9516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c5ed9c819 code=0x0
[  729.801653][T30980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9515'.
[  729.813556][T30982] loop1: detected capacity change from 0 to 1024
[  729.817724][T30987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9514'.
[  729.865722][T30982] hfsplus: failed to extend attributes file
[  729.867809][T30987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9514'.
[  730.136715][T31008] loop0: detected capacity change from 0 to 16
[  730.167706][T31008] erofs: (device loop0): mounted with root inode @ nid 36.
[  730.958400][T31016] loop4: detected capacity change from 0 to 32768
[  731.310549][T31040] loop1: detected capacity change from 0 to 32768
[  731.401231][T31040] JBD2: Ignoring recovery information on journal
[  731.468154][T31040] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  731.772184][ T4277] ocfs2: Unmounting device (7,1) on (node local)
[  731.862447][T31091] loop4: detected capacity change from 0 to 256
[  731.888184][T31091] exfat: Deprecated parameter 'namecase'
[  731.897309][T31091] exfat: Deprecated parameter 'utf8'
[  731.925382][T31091] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  732.797612][T31161] xt_connbytes: Forcing CT accounting to be enabled
[  732.831578][T31161] set match dimension is over the limit!
[  732.940979][T31170] loop4: detected capacity change from 0 to 64
[  733.007319][T31172] loop1: detected capacity change from 0 to 1024
[  733.063791][T31166] loop2: detected capacity change from 0 to 4096
[  733.377462][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.448548][T31196] FAT-fs (loop1): Filesystem has been set read-only
[  733.493414][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.512170][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.571902][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.577677][T31198] ntfs: volume version 3.1.
[  733.660248][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.700655][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.722889][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.773133][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.781735][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.799712][T31216] set_capacity_and_notify: 2 callbacks suppressed
[  733.799728][T31216] loop5: detected capacity change from 0 to 2048
[  733.831424][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.858248][T31216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  733.882088][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.913103][ T4272] Bluetooth: hci1: command 0x0406 tx timeout
[  733.922585][T31226] netlink: 'syz.4.9587': attribute type 1 has an invalid length.
[  733.932673][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.941728][T31226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9587'.
[  733.961095][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  733.980810][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.024592][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.085277][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.103167][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.120341][T31235] xt_hashlimit: max too large, truncated to 1048576
[  734.153624][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.199604][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.265135][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.283118][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.317819][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.345966][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.362944][T31196] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[  734.383728][   T26] audit: type=1800 audit(734.355:501): pid=31196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.9577" name="file1" dev="loop1" ino=1048724 res=0 errno=0
[  734.864409][T31279] loop1: detected capacity change from 0 to 1024
[  734.925414][T31279] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  735.149766][T31247] loop4: detected capacity change from 0 to 32768
[  735.282069][T31247] XFS (loop4): Mounting V5 Filesystem
[  735.307347][T31318] xt_nat: multiple ranges no longer supported
[  735.416113][T31247] XFS (loop4): Ending clean mount
[  735.433704][T31247] XFS (loop4): Quotacheck needed: Please wait.
[  735.569413][T31247] XFS (loop4): Quotacheck: Done.
[  735.720069][ T4275] XFS (loop4): Unmounting Filesystem
[  735.855888][T31343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9620'.
[  735.903635][T31343] netlink: 'syz.0.9620': attribute type 1 has an invalid length.
[  735.922380][T31343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9620'.
[  736.390749][T31335] loop2: detected capacity change from 0 to 32768
[  736.472192][T31373] loop4: detected capacity change from 0 to 64
[  736.495414][T31335] XFS (loop2): Mounting V5 Filesystem
[  736.646393][T31335] XFS (loop2): Ending clean mount
[  736.682069][T31335] XFS (loop2): Quotacheck needed: Please wait.
[  736.870731][T31335] XFS (loop2): Quotacheck: Done.
[  737.011143][T31405] netlink: 'syz.1.9633': attribute type 1 has an invalid length.
[  737.035540][ T4282] XFS (loop2): Unmounting Filesystem
[  737.324497][T31423] AppArmor: change_hat: Invalid input '0'
[  737.459372][T31432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9643'.
[  737.511301][T31432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9643'.
[  737.550769][T31432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9643'.
[  737.738494][T31451] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9648'.
[  737.878249][T31460] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  738.105449][T31482] loop5: detected capacity change from 0 to 256
[  738.169081][T31482] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x76dfe516, utbl_chksum : 0xe619d30d)
[  738.366002][ T4730] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  738.563046][ T4730] usb 2-1: Using ep0 maxpacket: 8
[  738.572064][ T4730] usb 2-1: config 162 has an invalid interface number: 84 but max is 2
[  738.595977][ T4730] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config
[  738.626511][ T4730] usb 2-1: config 162 has 1 interface, different from the descriptor's value: 3
[  738.646335][ T4730] usb 2-1: config 162 has no interface number 0
[  738.660498][ T4730] usb 2-1: config 162 interface 84 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  738.701730][ T4730] usb 2-1: config 162 interface 84 has no altsetting 0
[  738.718827][ T4730] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  738.752912][ T4730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.768813][ T4730] usb 2-1: Product: syz
[  738.783084][ T4730] usb 2-1: Manufacturer: syz
[  738.787814][ T4730] usb 2-1: SerialNumber: syz
[  738.873519][T31504] loop0: detected capacity change from 0 to 32768
[  738.970872][T31504] JBD2: Unknown checksum type
[  738.987293][T31504] (syz.0.9664,31504,0):ocfs2_journal_wipe:1183 ERROR: status = -22
[  739.020540][ T8239] usb 2-1: USB disconnect, device number 34
[  739.031839][T31504] (syz.0.9664,31504,1):ocfs2_check_volume:2420 ERROR: status = -22
[  739.040931][T31504] (syz.0.9664,31504,1):ocfs2_check_volume:2489 ERROR: status = -22
[  739.049022][T31504] (syz.0.9664,31504,1):ocfs2_mount_volume:1821 ERROR: status = -22
[  739.096842][T31504] (syz.0.9664,31504,1):ocfs2_fill_super:1176 ERROR: status = -22
[  739.128196][T31504] exFAT-fs (loop0): invalid boot record signature
[  739.135891][T31504] exFAT-fs (loop0): failed to read boot sector
[  739.142184][T31504] exFAT-fs (loop0): failed to recognize exfat type
[  739.580321][T31575] loop2: detected capacity change from 0 to 1024
[  739.591399][T31577] tipc: Can't bind to reserved service type 2
[  739.695053][ T8239] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  739.806350][T31591] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9686'.
[  739.843328][T31591] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9686'.
[  739.894089][ T8239] usb 5-1: Using ep0 maxpacket: 8
[  739.917883][ T8239] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  739.952998][ T8239] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  739.978829][ T8239] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  740.002902][ T8239] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  740.047213][   T26] audit: type=1326 audit(740.015:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31607 comm="syz.1.9692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  740.073444][ T8239] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  740.086897][ T8239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.096662][   T26] audit: type=1326 audit(740.015:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31607 comm="syz.1.9692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  740.127644][ T8239] usb 5-1: Product: syz
[  740.131863][ T8239] usb 5-1: Manufacturer: syz
[  740.152989][    C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  740.166889][ T8239] usb 5-1: SerialNumber: syz
[  740.182184][T31567] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  740.196067][   T26] audit: type=1326 audit(740.015:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31607 comm="syz.1.9692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  740.197240][ T8239] cdc_ether: probe of 5-1:1.0 failed with error -22
[  740.209699][T31611] loop5: detected capacity change from 0 to 2048
[  740.232635][   T26] audit: type=1326 audit(740.015:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31607 comm="syz.1.9692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  740.270562][ T8239] usbtest 5-1:1.0: Linux user mode ISO test driver
[  740.277489][ T8239] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  740.324566][T31611] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  740.380019][T31611] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  740.404207][ T8239] usb 5-1: USB disconnect, device number 42
[  740.432476][T31630] ubi16: attaching mtd0
[  740.456227][T31611] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field
[  740.479872][T31630] ubi16: scanning is finished
[  740.485255][T31630] ubi16: empty MTD device detected
[  740.702623][T31630] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB)
[  740.728299][T31630] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  740.751059][T31630] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1
[  740.768723][T31630] ubi16: VID header offset: 64 (aligned 64), data offset: 128
[  740.789080][T31630] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  740.809359][T31630] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23
[  740.829972][T31630] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3425581425
[  740.837423][T31620] loop1: detected capacity change from 0 to 32768
[  740.858270][T31620] (syz.1.9696,31620,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  740.868558][T31648] loop5: detected capacity change from 0 to 4096
[  740.886145][T31630] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  740.901722][T31647] ubi16: background thread "ubi_bgt16d" started, PID 31647
[  740.920654][T31620] (syz.1.9696,31620,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  741.019685][T31648] ntfs: volume version 3.1.
[  741.031622][T31620] JBD2: Ignoring recovery information on journal
[  741.218642][T31620] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  741.398272][T31669] loop0: detected capacity change from 0 to 24
[  741.406854][ T4277] ocfs2: Unmounting device (7,1) on (node local)
[  741.457574][T31669] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  741.534135][T31669] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  741.612037][T31684] netlink: 9 bytes leftover after parsing attributes in process `syz.2.9710'.
[  741.623365][T31669] VFS: Lookup of 'file0' in romfs loop0 would have caused loop
[  742.262234][T31730] loop2: detected capacity change from 0 to 256
[  742.305933][T31733] netlink: 'syz.4.9725': attribute type 2 has an invalid length.
[  742.337930][T31730] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  742.512165][T31744] infiniband syz2: set down
[  742.599467][T31744] device netdevsim0 left promiscuous mode
[  742.651788][T31744] device veth5 left promiscuous mode
[  742.680139][ T8239] team0 speed is unknown, defaulting to 1000
[  742.706971][ T8239] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  743.139204][T31713] loop5: detected capacity change from 0 to 40427
[  743.143075][ T8239] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  743.179668][T31713] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12
[  743.216655][T31713] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  743.249995][T31713] F2FS-fs (loop5): invalid crc value
[  743.297971][T31713] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  743.474953][T31713] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1
[  743.494840][T31713] F2FS-fs (loop5): Start checkpoint disabled!
[  743.554353][T31713] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  743.561457][T31713] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  743.830937][T31827] loop0: detected capacity change from 0 to 128
[  743.871769][T31827] VFS: Found a Xenix FS (block size = 1024) on device loop0
[  743.895708][T31824] loop2: detected capacity change from 0 to 2048
[  743.950471][T31824] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  744.039002][T31824] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  744.082887][T31824] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  744.108621][ T4267] sysv_free_block: flc_count > flc_size
[  744.122908][T31824] UDF-fs: Scanning with blocksize 512 failed
[  744.144440][ T4267] sysv_free_block: flc_count > flc_size
[  744.150097][ T4267] sysv_free_block: flc_count > flc_size
[  744.166245][T31824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  744.178523][ T4267] sysv_free_block: flc_count > flc_size
[  744.219070][ T4267] sysv_free_block: flc_count > flc_size
[  744.239339][ T4267] sysv_free_block: flc_count > flc_size
[  744.263095][ T4267] sysv_free_block: flc_count > flc_size
[  744.268699][ T4267] sysv_free_block: flc_count > flc_size
[  744.314166][ T4267] sysv_free_block: flc_count > flc_size
[  744.319774][ T4267] sysv_free_block: flc_count > flc_size
[  744.354661][ T4267] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  744.544948][T31808] loop1: detected capacity change from 0 to 32768
[  744.636772][ T4730] XFS (loop1): filesystem is marked as having an internal log; do not specify logdev on the mount command line.
[  744.746821][T31808] XFS (loop1): SB validate failed with error -22.
[  744.779513][T31882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9770'.
[  744.996419][   T26] audit: type=1326 audit(744.965:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31897 comm="syz.2.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27939c819 code=0x7ffc0000
[  745.093360][   T26] audit: type=1326 audit(745.025:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31897 comm="syz.2.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa27939c819 code=0x7ffc0000
[  745.115101][    C0] vkms_vblank_simulate: vblank timer overrun
[  745.186710][   T26] audit: type=1326 audit(745.025:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31897 comm="syz.2.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27939c819 code=0x7ffc0000
[  745.231089][T31902] loop0: detected capacity change from 0 to 164
[  745.253277][   T26] audit: type=1326 audit(745.025:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31897 comm="syz.2.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa27939c819 code=0x7ffc0000
[  745.808533][T31893] loop4: detected capacity change from 0 to 32768
[  745.881753][T31893] ERROR: (device loop4): dbAllocAG: unable to allocate blocks
[  745.881753][T31893] 
[  746.067895][T31945] loop5: detected capacity change from 0 to 16
[  746.099326][T31945] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  746.148989][ T4388] udevd[4388]: incorrect cramfs checksum on /dev/loop5
[  746.155349][T31945] cramfs: Error -3 while decompressing!
[  746.161454][T31945] cramfs: ffffffff96d91248(27)->ffff88804639c000(4096)
[  746.208367][T31945] cramfs: Error -3 while decompressing!
[  746.229615][T31945] cramfs: ffffffff96d91248(27)->ffff88804639c000(4096)
[  746.239272][T31954] loop0: detected capacity change from 0 to 2048
[  746.253739][   T26] audit: type=1800 audit(746.225:510): pid=31945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9787" name="file2" dev="loop5" ino=348 res=0 errno=0
[  746.258680][ T4388] udevd[4388]: incorrect cramfs checksum on /dev/loop5
[  746.376851][T31967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9792'.
[  746.386845][T31954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  746.403002][T31967] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9792'.
[  746.412492][T31967] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  746.424930][T31954] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.9790: corrupted xattr block 128
[  746.528504][T31967] 8021q: adding VLAN 0 to HW filter on device bond3
[  746.701194][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  746.722219][T32018] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9798'.
[  746.732492][T32018] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9798'.
[  747.194771][ T1275] ieee802154 phy0 wpan0: encryption failed: -22
[  747.201122][ T1275] ieee802154 phy1 wpan1: encryption failed: -22
[  747.837934][T32101] loop2: detected capacity change from 0 to 256
[  747.874879][T32101] exfat: Deprecated parameter 'utf8'
[  747.883271][T32101] exfat: Deprecated parameter 'namecase'
[  747.904414][T32101] exfat: Deprecated parameter 'namecase'
[  747.969226][T32101] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  748.377438][T32079] loop0: detected capacity change from 0 to 32768
[  748.417328][T32134] loop1: detected capacity change from 0 to 2048
[  748.463040][T32079] XFS (loop0): Mounting V5 Filesystem
[  748.514083][T32134] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  748.649831][T32134] EXT4-fs error (device loop1): ext4_find_extent:900: inode #2: comm syz.1.9835: inode has invalid extent depth: 7
[  748.678471][T32079] XFS (loop0): Ending clean mount
[  748.794302][ T4267] XFS (loop0): Unmounting Filesystem
[  748.808708][T32168] loop5: detected capacity change from 0 to 256
[  748.865036][T32168] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  748.951677][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  749.611128][T32217] loop2: detected capacity change from 0 to 8
[  749.883005][ T4311] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  750.078028][ T4311] usb 2-1: Using ep0 maxpacket: 16
[  750.085050][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  750.138072][ T4311] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  750.171856][T32253] device bond4 entered promiscuous mode
[  750.179282][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.191840][T32253] 8021q: adding VLAN 0 to HW filter on device bond4
[  750.199014][ T4311] usb 2-1: Product: syz
[  750.207490][ T4311] usb 2-1: Manufacturer: syz
[  750.220220][ T4311] usb 2-1: SerialNumber: syz
[  750.253723][ T4311] usb 2-1: config 0 descriptor??
[  750.306180][ T4311] hub 2-1:0.0: bad descriptor, ignoring hub
[  750.312181][ T4311] hub: probe of 2-1:0.0 failed with error -5
[  750.356607][T32302] loop0: detected capacity change from 0 to 512
[  750.384894][T32302] EXT4-fs: Ignoring removed i_version option
[  750.413948][T32297] loop5: detected capacity change from 0 to 4096
[  750.454850][T32302] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  750.537284][T32297] ntfs3: Invalid value for gid.
[  750.541794][ T8239] usb 2-1: USB disconnect, device number 35
[  750.543453][T32302] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  750.568751][T32302] EXT4-fs (loop0): 1 truncate cleaned up
[  750.575873][T32302] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  750.667417][T32302] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  750.827443][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  751.002284][T32364] loop0: detected capacity change from 0 to 2048
[  751.063243][T32364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  751.224438][T32379] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  751.250528][    C0] vkms_vblank_simulate: vblank timer overrun
[  751.322966][T32379] CIFS mount error: No usable UNC path provided in device string!
[  751.322966][T32379] 
[  751.338341][T32385] loop4: detected capacity change from 0 to 4096
[  751.357566][T32385] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  751.369055][T32379] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  751.835505][T32369] loop2: detected capacity change from 0 to 32768
[  751.931821][T32422] loop5: detected capacity change from 0 to 1024
[  751.933055][ T4311] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  751.939417][T32369] jfs_lookup: dtSearch returned -5
[  752.167782][ T4311] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00
[  752.201009][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.239860][ T4311] usb 5-1: Product: syz
[  752.249984][ T4311] usb 5-1: Manufacturer: syz
[  752.263334][ T4311] usb 5-1: SerialNumber: syz
[  752.270120][T32443] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  752.283876][ T4311] usb 5-1: config 0 descriptor??
[  752.312063][ T4311] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  752.353583][ T4311] usb 5-1: Detected FT232HP
[  752.707092][ T4311] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  752.748743][ T4311] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  752.787624][ T4311] usb 5-1: USB disconnect, device number 43
[  752.834366][ T4311] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  752.869238][ T4311] ftdi_sio 5-1:0.0: device disconnected
[  752.916178][T32479] loop1: detected capacity change from 0 to 4096
[  753.008768][T32479] ntfs3: loop1: ino=3, Correct links count -> 2.
[  753.036122][T32501] loop0: detected capacity change from 0 to 1024
[  753.073364][T32479] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  753.396495][T32517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9917'.
[  753.423042][T32517] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9917'.
[  753.493038][ T4311] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  753.546574][T32530] loop2: detected capacity change from 0 to 256
[  753.612112][T32530] FAT-fs (loop2): Directory bread(block 64) failed
[  753.636285][T32530] FAT-fs (loop2): Directory bread(block 65) failed
[  753.655186][T32530] FAT-fs (loop2): Directory bread(block 66) failed
[  753.676304][T32530] FAT-fs (loop2): Directory bread(block 67) failed
[  753.685521][ T4311] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  753.707719][ T4311] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  753.713095][T32530] FAT-fs (loop2): Directory bread(block 68) failed
[  753.730019][   T26] audit: type=1326 audit(753.695:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32537 comm="syz.1.9923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  753.784335][ T4311] usb 6-1: config 0 interface 0 has no altsetting 0
[  753.785735][T32530] FAT-fs (loop2): Directory bread(block 69) failed
[  753.800632][ T4311] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  753.820559][   T26] audit: type=1326 audit(753.695:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32537 comm="syz.1.9923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  753.832953][T32530] FAT-fs (loop2): Directory bread(block 70) failed
[  753.886537][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  753.906730][T32530] FAT-fs (loop2): Directory bread(block 71) failed
[  753.913593][ T4311] usb 6-1: Product: syz
[  753.922991][ T4311] usb 6-1: Manufacturer: syz
[  753.927639][ T4311] usb 6-1: SerialNumber: syz
[  753.932637][T32530] FAT-fs (loop2): Directory bread(block 72) failed
[  753.942634][   T26] audit: type=1326 audit(753.735:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32537 comm="syz.1.9923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  753.964419][    C0] vkms_vblank_simulate: vblank timer overrun
[  753.968501][T32530] FAT-fs (loop2): Directory bread(block 73) failed
[  753.983195][ T4311] usb 6-1: config 0 descriptor??
[  754.003903][ T4311] hub 6-1:0.0: bad descriptor, ignoring hub
[  754.009860][ T4311] hub: probe of 6-1:0.0 failed with error -5
[  754.031320][   T26] audit: type=1326 audit(753.735:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32537 comm="syz.1.9923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  754.076823][ T4311] usb 6-1: selecting invalid altsetting 0
[  754.136402][   T26] audit: type=1326 audit(753.735:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32537 comm="syz.1.9923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  754.197822][T32549] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  754.278064][ T4311] usb 6-1: USB disconnect, device number 7
[  754.467954][T32525] (syz.4.9920,32525,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  754.512556][T32525] (syz.4.9920,32525,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  754.609536][T32525] JBD2: Ignoring recovery information on journal
[  754.810083][T32525] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  754.942638][T32610] bridge0: port 2(hsr0) entered blocking state
[  754.973921][T32610] bridge0: port 2(hsr0) entered disabled state
[  754.991861][T32610] device hsr0 entered promiscuous mode
[  755.009043][T32610] bridge0: port 2(hsr0) entered blocking state
[  755.015428][T32610] bridge0: port 2(hsr0) entered forwarding state
[  755.019608][T32614] CIFS mount error: No usable UNC path provided in device string!
[  755.019608][T32614] 
[  755.051797][T32614] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  755.059078][ T4275] ocfs2: Unmounting device (7,4) on (node local)
[  755.292428][T32633] xt_TCPMSS: Only works on TCP SYN packets
[  755.460473][T32641] set_capacity_and_notify: 2 callbacks suppressed
[  755.460489][T32641] loop2: detected capacity change from 0 to 1024
[  755.817584][T32662] loop4: detected capacity change from 0 to 4096
[  756.037105][ T4275] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  756.055468][ T4275] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  756.065071][T32686] loop5: detected capacity change from 0 to 64
[  756.567956][T32725] loop5: detected capacity change from 0 to 128
[  756.613472][T32725] Bad inode number on dev loop5: 32769 is out of range
[  756.955848][T32757] loop0: detected capacity change from 0 to 512
[  756.975291][T32757] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  757.061400][T32757] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  757.161636][  T301] i2c i2c-0: Invalid block write size 34
[  757.181364][ T8239] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  757.377814][ T8239] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  757.389648][ T8239] usb 5-1: config 220 has an invalid interface descriptor of length 5, skipping
[  757.420209][ T8239] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  757.443890][ T8239] usb 5-1: config 220 has no interface number 2
[  757.450232][ T8239] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  757.506417][ T8239] usb 5-1: config 220 interface 0 has no altsetting 0
[  757.528616][ T8239] usb 5-1: config 220 interface 76 has no altsetting 0
[  757.546599][ T8239] usb 5-1: config 220 interface 1 has no altsetting 0
[  757.573503][ T8239] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  757.607560][ T8239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.616031][ T8239] usb 5-1: Product: syz
[  757.630514][ T8239] usb 5-1: Manufacturer: syz
[  757.650756][ T8239] usb 5-1: SerialNumber: syz
[  757.712488][  T331] loop2: detected capacity change from 0 to 64
[  757.880356][ T8239] usb 5-1: selecting invalid altsetting 0
[  757.909418][ T8239] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  757.926835][  T309] loop0: detected capacity change from 0 to 32768
[  757.928963][  T346] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9996'.
[  757.933485][ T8239] usb 5-1: No valid video chain found.
[  758.008027][ T8239] usb 5-1: selecting invalid altsetting 0
[  758.026719][ T8239] usbtest: probe of 5-1:220.1 failed with error -22
[  758.123130][ T8239] usb 5-1: USB disconnect, device number 44
[  758.171296][  T309] XFS (loop0): Mounting V5 Filesystem
[  758.232473][  T309] XFS (loop0): Ending clean mount
[  758.239507][  T309] XFS (loop0): Quotacheck needed: Please wait.
[  758.292625][  T309] XFS (loop0): Quotacheck: Done.
[  758.346664][  T382] netlink: 'syz.2.10001': attribute type 11 has an invalid length.
[  758.363059][  T382] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10001'.
[  758.418106][ T4267] XFS (loop0): Unmounting Filesystem
[  758.792952][ T4272] Bluetooth: hci1: command 0x0405 tx timeout
[  758.805213][  T401] loop2: detected capacity change from 0 to 64
[  758.840276][  T364] loop1: detected capacity change from 0 to 32768
[  758.875938][  T409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10009'.
[  758.931104][  T364] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  758.931104][  T364] 
[  759.008587][  T364] ERROR: (device loop1): remounting filesystem as read-only
[  759.066972][  T364] ERROR: (device loop1): jfs_unlink: 
[  759.066972][  T364] 
[  759.123178][  T415] loop5: detected capacity change from 0 to 1024
[  759.187477][ T4277] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt
[  759.187477][ T4277] 
[  759.246203][  T415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  759.312274][T23875] EXT4-fs (loop5): unmounting filesystem.
[  759.410451][  T438] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10016'.
[  759.658277][  T445] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  760.284550][  T503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10033'.
[  760.320000][  T504] netlink: 'syz.2.10034': attribute type 21 has an invalid length.
[  760.440898][  T512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10036'.
[  760.469141][  T513] SQUASHFS error: Failed to read block 0x71: -5
[  760.514068][   T26] audit: type=1800 audit(760.485:516): pid=513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10037" name="file0" dev="loop4" ino=1 res=0 errno=0
[  760.550722][   T26] audit: type=1326 audit(760.505:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.1.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  760.608412][   T26] audit: type=1326 audit(760.515:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.1.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  760.660839][   T26] audit: type=1326 audit(760.515:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.1.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  760.744225][   T26] audit: type=1326 audit(760.515:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.1.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  760.774924][  T521] set_capacity_and_notify: 2 callbacks suppressed
[  760.774940][  T521] loop2: detected capacity change from 0 to 4096
[  760.814946][  T521] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  760.833094][   T26] audit: type=1326 audit(760.515:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.1.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  760.893410][   T26] audit: type=1326 audit(760.515:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.1.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  761.010329][   T26] audit: type=1326 audit(760.515:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.1.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  761.082923][   T26] audit: type=1326 audit(760.515:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=522 comm="syz.1.10040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f992d59c819 code=0x7ffc0000
[  761.186154][  T557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10050'.
[  761.315629][  T569] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10053'.
[  761.649999][  T585] loop2: detected capacity change from 0 to 2048
[  761.654423][  T595] device veth1_macvtap left promiscuous mode
[  761.691094][  T585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  761.754485][   T26] audit: type=1800 audit(761.725:525): pid=585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10058" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  761.845162][  T551] loop4: detected capacity change from 0 to 32768
[  761.858515][  T603] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  762.160026][  T622] tmpfs: Bad value for 'mpol'
[  763.036802][  T669] loop2: detected capacity change from 0 to 4096
[  763.100202][  T669] ntfs: volume version 3.1.
[  763.599034][  T697] delete_channel: no stack
[  763.730361][  T666] loop0: detected capacity change from 0 to 32768
[  763.749532][  T657] infiniband syz2: set down
[  763.809693][  T666] (syz.0.10078,666,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  763.883552][  T666] (syz.0.10078,666,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  763.974189][  T666] JBD2: Ignoring recovery information on journal
[  764.162028][  T666] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  764.421695][ T4267] ocfs2: Unmounting device (7,0) on (node local)
[  764.735272][  T657] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  764.811840][  T749] netlink: 'syz.1.10100': attribute type 1 has an invalid length.
[  764.815696][  T657] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  765.421426][  T657] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  765.431917][  T657] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  765.441163][  T657] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  765.450531][  T657] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  765.634659][  T657] netdevsim netdevsim4 netdevsim0: unset [1, 2] type 2 family 0 port 40937 - 0
[  765.643869][  T657] netdevsim netdevsim4 netdevsim1: unset [1, 2] type 2 family 0 port 40937 - 0
[  765.653107][  T657] netdevsim netdevsim4 netdevsim2: unset [1, 2] type 2 family 0 port 40937 - 0
[  765.662159][  T657] netdevsim netdevsim4 netdevsim3: unset [1, 2] type 2 family 0 port 40937 - 0
[  765.671418][  T657] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 51218 - 0
[  765.680680][  T657] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 51218 - 0
[  765.689932][  T657] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 51218 - 0
[  765.699029][  T657] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 51218 - 0
[  765.759434][ T8239] team0 speed is unknown, defaulting to 1000
[  765.759543][ T3933] device veth1_macvtap entered promiscuous mode
[  765.833044][  T736] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10097'.
[  765.845240][ T4311] team0 speed is unknown, defaulting to 1000
[  766.085890][  T814] loop4: detected capacity change from 0 to 256
[  766.191616][  T814] FAT-fs (loop4): Directory bread(block 64) failed
[  766.206832][  T814] FAT-fs (loop4): Directory bread(block 65) failed
[  766.225847][  T814] FAT-fs (loop4): Directory bread(block 66) failed
[  766.232448][  T814] FAT-fs (loop4): Directory bread(block 67) failed
[  766.235968][  T824] loop0: detected capacity change from 0 to 164
[  766.306236][  T824] Unable to read rock-ridge attributes
[  766.308280][  T814] FAT-fs (loop4): Directory bread(block 68) failed
[  766.355853][  T814] FAT-fs (loop4): Directory bread(block 69) failed
[  766.362506][  T814] FAT-fs (loop4): Directory bread(block 70) failed
[  766.363018][  T824] Unable to read rock-ridge attributes
[  766.423985][  T814] FAT-fs (loop4): Directory bread(block 71) failed
[  766.430654][  T814] FAT-fs (loop4): Directory bread(block 72) failed
[  766.493393][  T814] FAT-fs (loop4): Directory bread(block 73) failed
[  766.527486][  T814] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  766.603339][  T831] loop1: detected capacity change from 0 to 4096
[  766.641812][  T831] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  766.712580][  T831] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  767.164254][  T866] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (6)
[  767.334933][  T825] loop5: detected capacity change from 0 to 32768
[  767.382380][  T825] JBD2: Ignoring recovery information on journal
[  767.489177][  T825] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  767.526420][  T825] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 16896
[  767.543832][  T825] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  767.554101][  T825] OCFS2: File system is now read-only.
[  767.575818][  T825] (syz.5.10120,825,1):ocfs2_search_chain:1761 ERROR: status = -30
[  767.584685][  T894] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value
[  767.596111][  T825] (syz.5.10120,825,1):ocfs2_search_chain:1871 ERROR: status = -30
[  767.596507][  T888] loop2: detected capacity change from 0 to 256
[  767.604557][  T825] (syz.5.10120,825,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  767.622716][  T825] (syz.5.10120,825,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  767.653984][  T825] (syz.5.10120,825,1):ocfs2_claim_new_inode:2226 ERROR: status = -30
[  767.698312][  T888] FAT-fs (loop2): Directory bread(block 64) failed
[  767.763942][  T888] FAT-fs (loop2): Directory bread(block 65) failed
[  767.781116][  T825] (syz.5.10120,825,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[  767.844865][  T888] FAT-fs (loop2): Directory bread(block 66) failed
[  767.853147][  T825] (syz.5.10120,825,1):ocfs2_mknod_locked:639 ERROR: status = -30
[  767.861011][  T825] (syz.5.10120,825,1):ocfs2_mknod:385 ERROR: status = -30
[  767.889138][  T888] FAT-fs (loop2): Directory bread(block 67) failed
[  767.923159][  T825] (syz.5.10120,825,1):ocfs2_mknod:502 ERROR: status = -30
[  767.952995][  T888] FAT-fs (loop2): Directory bread(block 68) failed
[  767.962584][  T825] (syz.5.10120,825,1):ocfs2_create:676 ERROR: status = -30
[  767.986370][  T888] FAT-fs (loop2): Directory bread(block 69) failed
[  768.013029][  T888] FAT-fs (loop2): Directory bread(block 70) failed
[  768.048501][  T888] FAT-fs (loop2): Directory bread(block 71) failed
[  768.076038][  T888] FAT-fs (loop2): Directory bread(block 72) failed
[  768.083160][  T888] FAT-fs (loop2): Directory bread(block 73) failed
[  768.117218][T23875] ocfs2: Unmounting device (7,5) on (node local)
[  768.349794][  T926] xt_CT: No such helper "netbios-ns"
[  768.940015][  T973] loop2: detected capacity change from 0 to 256
[  768.987247][  T973] exfat: Deprecated parameter 'namecase'
[  769.004091][  T973] exfat: Deprecated parameter 'namecase'
[  769.061486][  T973] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7808ae6a, utbl_chksum : 0xe619d30d)
[  769.129309][  T979] loop0: detected capacity change from 0 to 4096
[  769.150508][  T973] syz.2.10153: attempt to access beyond end of device
[  769.150508][  T973] loop2: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[  769.196459][  T979] __ntfs_warning: 30 callbacks suppressed
[  769.196477][  T979] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  769.304566][  T979] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  769.393281][  T979] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  769.429867][  T979] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  769.545360][  T979] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  769.558216][ T1009] overlayfs: missing 'lowerdir'
[  769.602572][  T979] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  769.694576][  T979] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  769.733009][  T979] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  769.773973][ T1021] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  769.825235][  T979] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  769.855580][ T1020] loop1: detected capacity change from 0 to 4096
[  769.880079][  T979] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  769.915363][ T1020] ntfs: volume version 3.1.
[  770.004671][  T979] ntfs: volume version 3.1.
[  770.565524][ T1069] device wlan0 entered promiscuous mode
[  770.571303][ T1069] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  770.716461][ T1076] loop5: detected capacity change from 0 to 1024
[  770.786349][ T1076] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  771.142916][ T4730] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  771.192432][ T1116] 9pnet_fd: Insufficient options for proto=fd
[  771.373036][ T4730] usb 2-1: Using ep0 maxpacket: 16
[  771.381835][ T4730] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  771.413368][ T4730] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024
[  771.459508][ T4730] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  771.500712][ T4730] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  771.530652][ T4730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  771.543057][   T14] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  771.548114][ T4730] usb 2-1: SerialNumber: syz
[  771.577564][ T1093] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  771.596191][ T1093] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  771.604396][ T1148] device bridge3 entered promiscuous mode
[  771.735614][   T14] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[  771.772908][   T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  771.811546][   T14] usb 6-1: config 0 has no interface number 0
[  771.829506][   T14] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  771.852266][ T4730] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  771.884187][   T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.884278][ T4730] usb 2-1: USB disconnect, device number 36
[  771.892223][   T14] usb 6-1: Product: syz
[  771.892244][   T14] usb 6-1: Manufacturer: syz
[  771.892257][   T14] usb 6-1: SerialNumber: syz
[  771.904181][   T14] usb 6-1: config 0 descriptor??
[  772.194568][   T14] usb 6-1: USB disconnect, device number 8
[  773.281004][ T1214] loop0: detected capacity change from 0 to 40427
[  773.337415][ T1214] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  773.362380][ T1214] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  773.397386][ T1214] F2FS-fs (loop0): build fault injection attr: rate: 2, type: 0x3ffff
[  773.426204][ T1214] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x1f8
[  773.448637][ T1214] F2FS-fs (loop0): invalid crc value
[  773.474367][ T1214] F2FS-fs (loop0): Found nat_bits in checkpoint
[  773.611967][ T1214] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  773.633607][ T1214] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  773.694197][ T1214] F2FS-fs (loop0) : inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xd6/0x1c0
[  774.131822][ T1336] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  774.360682][ T1345] loop5: detected capacity change from 0 to 1024
[  774.695608][ T1371] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10248'.
[  774.734139][ T1359] loop0: detected capacity change from 0 to 4096
[  774.746361][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  774.746374][   T26] audit: type=1326 audit(774.715:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1374 comm="syz.4.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd0d9c819 code=0x7ffc0000
[  774.757485][ T1359] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  774.875989][   T26] audit: type=1326 audit(774.765:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1374 comm="syz.4.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbd0d5d04e code=0x7ffc0000
[  774.967637][   T26] audit: type=1326 audit(774.765:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1374 comm="syz.4.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ffbd0d9db17 code=0x7ffc0000
[  775.033043][ T1388] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  775.052919][   T26] audit: type=1326 audit(774.765:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1374 comm="syz.4.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbd0d9c819 code=0x7ffc0000
[  775.056287][ T1359] ntfs3: loop0: failed to convert "c46c" to cp857
[  775.116612][   T26] audit: type=1326 audit(774.765:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1374 comm="syz.4.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ffbd0d9db17 code=0x7ffc0000
[  775.227386][   T26] audit: type=1326 audit(774.765:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1374 comm="syz.4.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffbd0d5d04e code=0x7ffc0000
[  775.302523][   T26] audit: type=1326 audit(774.765:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1374 comm="syz.4.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd0d9c819 code=0x7ffc0000
[  775.381250][   T26] audit: type=1326 audit(774.765:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1374 comm="syz.4.10249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd0d9c819 code=0x7ffc0000
[  775.495335][ T4732] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  775.660401][ T1379] loop1: detected capacity change from 0 to 32768
[  775.690690][ T1385] loop5: detected capacity change from 0 to 32768
[  775.702349][ T1385] 
[  775.702349][ T1385]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  775.702349][ T1385] 
[  775.716347][ T1379] afs: Unexpected value for 'dyn'
[  775.732908][ T4732] usb 3-1: Using ep0 maxpacket: 8
[  775.739852][ T4732] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  775.767840][ T1385] ialloc: diAlloc returned -5!
[  775.774897][ T4732] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  775.800203][ T4732] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  775.812441][ T4732] usb 3-1: Product: syz
[  775.817381][ T4732] usb 3-1: Manufacturer: syz
[  775.832227][ T4732] usb 3-1: SerialNumber: syz
[  775.928927][T23875] 
[  775.928927][T23875]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  775.928927][T23875] 
[  775.950364][T23875] 
[  775.950364][T23875]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  775.950364][T23875] 
[  776.096937][ T4732] usb 3-1: Invalid connection information received from device
[  776.154155][ T1444] xt_hashlimit: overflow, try lower: 18446744073709551615/9
[  776.321278][ T4732] usb 3-1: USB disconnect, device number 40
[  776.486543][ T1469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10274'.
[  776.613078][ T1475] comedi comedi4: bad chanlist[0]=0x00006c7f chan=27775 range length=2
[  776.639035][ T1478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10277'.
[  776.673282][ T1478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10277'.
[  776.987670][ T1501] netlink: 'syz.5.10284': attribute type 7 has an invalid length.
[  777.021333][ T1496] loop4: detected capacity change from 0 to 4096
[  777.037567][ T1501] netlink: 'syz.5.10284': attribute type 8 has an invalid length.
[  777.049629][ T1496] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  777.076564][ T1496] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  777.119782][ T1496] ntfs: volume version 3.1.
[  777.344358][ T1522] loop1: detected capacity change from 0 to 1024
[  777.367301][ T1525] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  777.517657][ T4294] hfsplus: b-tree write err: -5, ino 25
[  777.524713][ T4294] hfsplus: b-tree write err: -5, ino 4
[  777.529263][ T1534] overlayfs: failed to resolve './file0': -2
[  777.530278][ T4294] hfsplus: b-tree write err: -5, ino 2
[  778.032758][ T1560] loop1: detected capacity change from 0 to 4096
[  778.096001][ T1560] ntfs: volume version 3.1.
[  778.148546][ T1581] loop4: detected capacity change from 0 to 512
[  778.220275][ T1581] FAT-fs (loop4): Unrecognized mount option "shortnutf8=1" or missing value
[  778.308025][ T1594] loop0: detected capacity change from 0 to 16
[  778.372065][ T1594] erofs: (device loop0): mounted with root inode @ nid 36.
[  778.401094][ T1600] netlink: 'syz.5.10312': attribute type 32 has an invalid length.
[  778.420090][ T1594] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89
[  778.466593][ T1594] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89
[  778.510239][ T1607] loop1: detected capacity change from 0 to 512
[  778.517961][ T1594] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89
[  778.532578][ T1594] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89
[  778.541960][ T4311] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  778.557284][ T1594] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-22]
[  778.595535][ T1607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  778.682332][ T1607] EXT4-fs error (device loop1): ext4_xattr_block_find:1826: inode #12: comm syz.1.10315: corrupted xattr block 6
[  778.743024][ T4311] usb 5-1: Using ep0 maxpacket: 8
[  778.750159][ T4311] usb 5-1: config 0 has an invalid interface number: 88 but max is 3
[  778.776764][ T4311] usb 5-1: config 0 has an invalid interface number: 250 but max is 3
[  778.795946][ T4311] usb 5-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config
[  778.796251][ T1624] loop2: detected capacity change from 0 to 512
[  778.808257][ T4311] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 4
[  778.842377][ T4311] usb 5-1: config 0 has no interface number 0
[  778.862280][ T4311] usb 5-1: config 0 has no interface number 1
[  778.882663][ T4311] usb 5-1: config 0 interface 88 has no altsetting 0
[  778.888481][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  778.893646][ T1624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  778.922082][ T4311] usb 5-1: config 0 interface 250 has no altsetting 0
[  778.932597][ T1634] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10322'.
[  778.959469][ T4311] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3
[  779.005628][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.035308][ T4311] usb 5-1: config 0 descriptor??
[  779.048796][ T1624] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.10320: Failed to acquire dquot type 0
[  779.124004][ T4282] EXT4-fs (loop2): unmounting filesystem.
[  779.253603][ T4311] usb 5-1: string descriptor 0 read error: -71
[  779.293239][ T4311] usb 5-1: USB disconnect, device number 45
[  779.396398][ T1679] netlink: 'syz.0.10329': attribute type 4 has an invalid length.
[  779.477574][ T1681] netlink: 'syz.2.10330': attribute type 10 has an invalid length.
[  779.520210][ T1681] netlink: 55 bytes leftover after parsing attributes in process `syz.2.10330'.
[  779.521516][ T1685] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.10331'.
[  779.570550][ T1690] netlink: 'syz.1.10333': attribute type 32 has an invalid length.
[  781.008566][ T1806] cgroup: No subsys list or none specified
[  781.022019][ T1808] device bridge4 entered promiscuous mode
[  781.130637][ T1818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10370'.
[  781.151661][ T1818] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10370'.
[  781.338610][ T1831] cgroup: Name too long
[  781.358998][ T1835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10375'.
[  781.650217][ T1846] loop2: detected capacity change from 0 to 4096
[  781.706603][ T1846] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  781.886734][ T1846] ntfs3: loop2: failed to convert "c46c" to iso8859-9
[  782.804752][ T1939] loop0: detected capacity change from 0 to 256
[  782.829681][ T1945] loop2: detected capacity change from 0 to 64
[  782.853835][ T1939] exfat: Unknown parameter 'zero_size_dir'
[  783.186344][ T1967] loop0: detected capacity change from 0 to 1024
[  783.210098][ T1967] EXT4-fs: Ignoring removed orlov option
[  783.219157][ T1967] EXT4-fs: Ignoring removed nomblk_io_submit option
[  783.239918][ T1962] loop5: detected capacity change from 0 to 4096
[  783.278907][ T1962] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  783.317353][ T1967] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  783.380591][ T1962] ntfs3: loop5: failed to convert "c46c" to cp775
[  783.496782][ T4267] EXT4-fs (loop0): unmounting filesystem.
[  783.748642][ T1999] netlink: 'syz.5.10424': attribute type 5 has an invalid length.
[  784.669152][   T26] kauditd_printk_skb: 44 callbacks suppressed
[  784.669167][   T26] audit: type=1326 audit(784.635:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2065 comm="syz.4.10442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd0d9c819 code=0x7ffc0000
[  784.753008][ T2069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10444'.
[  784.762096][ T2069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10444'.
[  784.765126][   T26] audit: type=1326 audit(784.665:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2065 comm="syz.4.10442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7ffbd0d9c819 code=0x7ffc0000
[  784.876793][ T2069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10444'.
[  784.876866][   T26] audit: type=1326 audit(784.665:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2065 comm="syz.4.10442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd0d9c819 code=0x7ffc0000
[  784.949449][ T2079] loop4: detected capacity change from 0 to 2048
[  784.994938][   T26] audit: type=1326 audit(784.665:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2065 comm="syz.4.10442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd0d9c819 code=0x7ffc0000
[  785.027566][ T2079]  loop4: p4 < >
[  785.126080][   T26] audit: type=1326 audit(784.835:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2078 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd0d9c819 code=0x7ffc0000
[  785.226938][ T4388] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  785.246128][   T26] audit: type=1326 audit(784.835:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2078 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffbd0d9c819 code=0x7ffc0000
[  785.371803][   T26] audit: type=1326 audit(784.835:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2078 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffbd0d9c582 code=0x7ffc0000
[  785.465953][   T26] audit: type=1326 audit(784.885:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2078 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffbd0d5d04e code=0x7ffc0000
[  785.487564][    C1] vkms_vblank_simulate: vblank timer overrun
[  785.538983][ T4388] udevd[4388]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  785.638226][   T26] audit: type=1326 audit(784.915:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2078 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffbd0d9c647 code=0x7ffc0000
[  785.723262][   T26] audit: type=1326 audit(784.915:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2078 comm="syz.4.10446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbd0d5d04e code=0x7ffc0000
[  785.733416][ T2122] x_tables: unsorted entry at hook 3
[  785.980490][ T2138] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  785.993177][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10463'.
[  786.031209][ T2093] loop0: detected capacity change from 0 to 32768
[  786.113279][ T2093] JBD2: Ignoring recovery information on journal
[  786.221852][ T2093] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  786.341398][ T2093] 
[  786.343777][ T2093] ======================================================
[  786.350813][ T2093] WARNING: possible circular locking dependency detected
[  786.357868][ T2093] syzkaller #0 Not tainted
[  786.361424][ T2164] loop1: detected capacity change from 0 to 2048
[  786.362274][ T2093] ------------------------------------------------------
[  786.362282][ T2093] syz.0.10448/2093 is trying to acquire lock:
[  786.381705][ T2093] ffff8880710fd108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xba0/0x13e0
[  786.393936][ T2093] 
[  786.393936][ T2093] but task is already holding lock:
[  786.401313][ T2093] ffff8880710d2378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0
[  786.410851][ T2093] 
[  786.410851][ T2093] which lock already depends on the new lock.
[  786.410851][ T2093] 
[  786.421274][ T2093] 
[  786.421274][ T2093] the existing dependency chain (in reverse order) is:
[  786.430393][ T2093] 
[  786.430393][ T2093] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}:
[  786.438258][ T2093]        down_read+0x42/0x2d0
[  786.442971][ T2093]        ocfs2_init_acl+0x307/0x770
[  786.448200][ T2093]        ocfs2_mknod+0x15e8/0x25b0
[  786.453342][ T2093]        vfs_mknod+0x424/0x4c0
[  786.458140][ T2093]        do_mknodat+0x356/0x4d0
[  786.463019][ T2093]        __x64_sys_mknodat+0xa5/0xc0
[  786.468319][ T2093]        do_syscall_64+0x4c/0xa0
[  786.473277][ T2093]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  786.479712][ T2093] 
[  786.479712][ T2093] -> #1 (jbd2_handle){++++}-{0:0}:
[  786.487010][ T2093]        jbd2_journal_lock_updates+0xa8/0x390
[  786.493077][ T2093]        __ocfs2_flush_truncate_log+0x2cf/0x1220
[  786.499426][ T2093]        ocfs2_flush_truncate_log+0x4b/0x60
[  786.505321][ T2093]        ocfs2_sync_fs+0x119/0x330
[  786.510425][ T2093]        sync_filesystem+0x1be/0x220
[  786.515740][ T2093]        ocfs2_remount+0x115/0xb70
[  786.520856][ T2093]        reconfigure_super+0x219/0x8a0
[  786.526316][ T2093]        path_mount+0xe13/0x1020
[  786.531252][ T2093]        __se_sys_mount+0x2e3/0x3d0
[  786.536441][ T2093]        do_syscall_64+0x4c/0xa0
[  786.541415][ T2093]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  786.547916][ T2093] 
[  786.547916][ T2093] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}:
[  786.558516][ T2093]        __lock_acquire+0x2d07/0x7d10
[  786.563892][ T2093]        lock_acquire+0x1bb/0x4a0
[  786.568919][ T2093]        down_write+0x36/0x60
[  786.573603][ T2093]        ocfs2_xattr_set+0xba0/0x13e0
[  786.578977][ T2093]        ocfs2_set_acl+0x4e1/0x590
[  786.584089][ T2093]        ocfs2_iop_set_acl+0x190/0x2b0
[  786.589551][ T2093]        posix_acl_xattr_set+0x387/0x3f0
[  786.595292][ T2093]        __vfs_setxattr+0x3e0/0x420
[  786.600487][ T2093]        __vfs_setxattr_noperm+0x129/0x5e0
[  786.606298][ T2093]        vfs_setxattr+0x167/0x2e0
[  786.611317][ T2093]        setxattr+0x346/0x360
[  786.615993][ T2093]        path_setxattr+0x147/0x290
[  786.621103][ T2093]        __x64_sys_setxattr+0xb7/0xd0
[  786.626475][ T2093]        do_syscall_64+0x4c/0xa0
[  786.631435][ T2093]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  786.637856][ T2093] 
[  786.637856][ T2093] other info that might help us debug this:
[  786.637856][ T2093] 
[  786.648083][ T2093] Chain exists of:
[  786.648083][ T2093]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle --> &oi->ip_xattr_sem
[  786.648083][ T2093] 
[  786.663903][ T2093]  Possible unsafe locking scenario:
[  786.663903][ T2093] 
[  786.671342][ T2093]        CPU0                    CPU1
[  786.676696][ T2093]        ----                    ----
[  786.682052][ T2093]   lock(&oi->ip_xattr_sem);
[  786.686639][ T2093]                                lock(jbd2_handle);
[  786.693224][ T2093]                                lock(&oi->ip_xattr_sem);
[  786.700323][ T2093]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2);
[  786.707605][ T2093] 
[  786.707605][ T2093]  *** DEADLOCK ***
[  786.707605][ T2093] 
[  786.715742][ T2093] 3 locks held by syz.0.10448/2093:
[  786.720943][ T2093]  #0: ffff88803027e460 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  786.730183][ T2093]  #1: ffff8880710d2648 (&type->i_mutex_dir_key#22){++++}-{3:3}, at: vfs_setxattr+0x140/0x2e0
[  786.740457][ T2093]  #2: ffff8880710d2378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0
[  786.750385][ T2093] 
[  786.750385][ T2093] stack backtrace:
[  786.756259][ T2093] CPU: 1 PID: 2093 Comm: syz.0.10448 Not tainted syzkaller #0
[  786.763709][ T2093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  786.773754][ T2093] Call Trace:
[  786.777026][ T2093]  <TASK>
[  786.779947][ T2093]  dump_stack_lvl+0x188/0x24e
[  786.784631][ T2093]  ? load_image+0x400/0x400
[  786.789132][ T2093]  ? show_regs_print_info+0x12/0x12
[  786.794335][ T2093]  ? print_circular_bug+0x12b/0x1a0
[  786.799540][ T2093]  check_noncircular+0x296/0x330
[  786.804498][ T2093]  ? look_up_lock_class+0x75/0x140
[  786.809717][ T2093]  ? add_chain_block+0x940/0x940
[  786.814679][ T2093]  ? lockdep_lock+0xf1/0x1f0
[  786.819279][ T2093]  ? lockdep_unlock+0x142/0x2e0
[  786.824136][ T2093]  ? _find_first_zero_bit+0xcf/0x100
[  786.829421][ T2093]  __lock_acquire+0x2d07/0x7d10
[  786.834290][ T2093]  ? do_raw_spin_unlock+0x11d/0x230
[  786.839489][ T2093]  ? ocfs2_downconvert_lock+0x530/0x530
[  786.845036][ T2093]  ? verify_lock_unused+0x140/0x140
[  786.850237][ T2093]  ? ocfs2_inode_lock_tracker+0x14f/0x700
[  786.855956][ T2093]  ? do_raw_spin_lock+0x128/0x2f0
[  786.860978][ T2093]  lock_acquire+0x1bb/0x4a0
[  786.865483][ T2093]  ? ocfs2_xattr_set+0xba0/0x13e0
[  786.870508][ T2093]  ? ocfs2_xattr_block_find+0x157/0x4d0
[  786.876053][ T2093]  ? __might_sleep+0xd0/0xd0
[  786.880637][ T2093]  ? read_lock_is_recursive+0x10/0x10
[  786.886012][ T2093]  ? rwsem_write_trylock+0x135/0x1c0
[  786.891294][ T2093]  ? ocfs2_xattr_ibody_find+0x7c0/0x7c0
[  786.896839][ T2093]  ? ocfs2_xattr_ibody_find+0xcb/0x7c0
[  786.902296][ T2093]  down_write+0x36/0x60
[  786.906461][ T2093]  ? ocfs2_xattr_set+0xba0/0x13e0
[  786.911567][ T2093]  ocfs2_xattr_set+0xba0/0x13e0
[  786.916415][ T2093]  ? _raw_spin_unlock+0x40/0x40
[  786.921271][ T2093]  ? __ocfs2_xattr_set_handle+0xf30/0xf30
[  786.926986][ T2093]  ? __kasan_kmalloc+0x8e/0xa0
[  786.931750][ T2093]  ? ocfs2_set_acl+0x11e/0x590
[  786.936515][ T2093]  ? ocfs2_iop_set_acl+0x190/0x2b0
[  786.941625][ T2093]  ? posix_acl_xattr_set+0x387/0x3f0
[  786.946914][ T2093]  ? __vfs_setxattr_noperm+0x129/0x5e0
[  786.952371][ T2093]  ? setxattr+0x346/0x360
[  786.956718][ T2093]  ? __kmem_cache_alloc_node+0x140/0x260
[  786.962349][ T2093]  ? ocfs2_set_acl+0x11e/0x590
[  786.967113][ T2093]  ? rcu_is_watching+0x11/0xa0
[  786.971880][ T2093]  ? ocfs2_set_acl+0x11e/0x590
[  786.976652][ T2093]  ? __kmalloc+0xe1/0x240
[  786.980986][ T2093]  ? ocfs2_inode_lock_atime+0x530/0x530
[  786.986534][ T2093]  ocfs2_set_acl+0x4e1/0x590
[  786.991135][ T2093]  ocfs2_iop_set_acl+0x190/0x2b0
[  786.996077][ T2093]  ? ocfs2_xattr_get+0x260/0x260
[  787.001031][ T2093]  ? __kmem_cache_alloc_node+0x140/0x260
[  787.006694][ T2093]  ? vfs_set_acl_prepare+0x105/0x6c0
[  787.011989][ T2093]  ? __kmalloc+0xe1/0x240
[  787.016326][ T2093]  ? posix_acl_valid+0x320/0x3a0
[  787.021268][ T2093]  posix_acl_xattr_set+0x387/0x3f0
[  787.026379][ T2093]  ? posix_acl_xattr_get+0x550/0x550
[  787.031668][ T2093]  __vfs_setxattr+0x3e0/0x420
[  787.036348][ T2093]  __vfs_setxattr_noperm+0x129/0x5e0
[  787.041633][ T2093]  vfs_setxattr+0x167/0x2e0
[  787.046139][ T2093]  ? xattr_permission+0x500/0x500
[  787.051164][ T2093]  ? _copy_from_user+0x10b/0x170
[  787.056101][ T2093]  ? setxattr+0x2ce/0x360
[  787.060434][ T2093]  setxattr+0x346/0x360
[  787.064596][ T2093]  ? path_setxattr+0x290/0x290
[  787.069396][ T2093]  ? __mnt_want_write+0x21f/0x2a0
[  787.074441][ T2093]  path_setxattr+0x147/0x290
[  787.079039][ T2093]  ? simple_xattr_list_add+0xf0/0xf0
[  787.084326][ T2093]  ? lock_chain_count+0x20/0x20
[  787.089180][ T2093]  __x64_sys_setxattr+0xb7/0xd0
[  787.094032][ T2093]  do_syscall_64+0x4c/0xa0
[  787.098449][ T2093]  ? clear_bhb_loop+0x60/0xb0
[  787.103132][ T2093]  ? clear_bhb_loop+0x60/0xb0
[  787.107808][ T2093]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  787.113702][ T2093] RIP: 0033:0x7f5d9ed9c819
[  787.118112][ T2093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  787.137736][ T2093] RSP: 002b:00007f5d9fd45028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  787.146251][ T2093] RAX: ffffffffffffffda RBX: 00007f5d9f015fa0 RCX: 00007f5d9ed9c819
[  787.154227][ T2093] RDX: 00002000000003c0 RSI: 0000200000002a40 RDI: 0000200000002a00
[  787.162201][ T2093] RBP: 00007f5d9ee32c91 R08: 0000000000000002 R09: 0000000000000000
[  787.170171][ T2093] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[  787.178137][ T2093] R13: 00007f5d9f016038 R14: 00007f5d9f015fa0 R15: 00007ffc92fc4448
[  787.186115][ T2093]  </TASK>
[  787.200050][ T2164] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  787.224117][ T2164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  787.299671][ T4267] ocfs2: Unmounting device (7,0) on (node local)