last executing test programs:

1m2.696812285s ago: executing program 0 (id=1724):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0xff600000, 0x0)
fcntl$notify(r0, 0x3, 0x0)

1m2.56571473s ago: executing program 0 (id=1727):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x10d, 0x8e, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e)

1m2.426925366s ago: executing program 0 (id=1730):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200001000000000000000000000008500000020000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m2.318637889s ago: executing program 0 (id=1733):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000006,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c696f636861727365743d6b6f69382d722c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303430362c666d61736b3d30303030303030303030303030303030303030303030352c666d61736b3d30303030303030362c666d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d6370383634236f626a5f726f6c6f72733d636f6e74696e75652c7365636c6162656c2c00bf17f1f57309ade7d0229b5f66a73a427c88c98c5aa9d700e383edf7351cc6c70bb8a196704c1978d95ed9132e6d8ba14558b574", @ANYRES32=0x0], 0x1, 0x1524, &(0x7f00000037c0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzc5LJMkOSTJIUmSJMkpIWmSLQmJIaekIQnJYUgOQ0gOE5PG+Xw+JCRJkyQhOSXrf0342+3a3977233bd31z/67ruaz7Xc+9nvW89/u8z8HMfNdlaM3Gtao1JCL4t+DFf5IAIBYABgLAdQAQAEC5uHJxWf05JSb9exthf65HUq/2DNjVxPXP3rj+2RvXP3vj+mdvXP/sjeufvXH9szeuP2PZ2ebpBa/nJfsu/Pw/O+Pz//8hmaXHfrW29I1dAWL+2RSuf/bG9f8/K/hnVuL6Z29c/+wq9mpPgP0vwMd/dpDj7/Zw/bM3rj9j2dnVfv58tReIZO/34Gp//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZQ9n/BUKAC63r/a8GGOMMcYYY4wx9ufxOa72DBhjjDHGGGOMMfY/D0GABAUBxEAOiIWckAsEAFwLeeA6iMD1EAc3QF64EfJBfigABSEeCkFh0GAgBghCKAJFIQo3QTG4GYpDCSgJpcBBaUiAW6AM3Apl4TYoB7dDebgDKkBFqASV4U6oAndBVbgbqsE9UB1qQE2oBfdCbbgP6sD9UBcegHrwINSHh6ABPAwN4RFoBI9CY3gMmsDj0BSaQXNoAS3/W/kvQQ94GXpCL0iC3tAHXoG+0A/6wwAYCK/CIHgNBsPrkAxDYCi8AcPgTRgOb8EIGAmj4G0YDe/AGBgL42A8pMAEmAjvwiR4DybDFJgK0yAVpsMMeB9mwiyYDR/AHPgQ5sI8mA8LIA0+goWwCNLhY1gMn0AGLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJn8Iu+Ax2wx7YC5/DPvjiX8w//Tf5XREQUKBAhQpjMAZjMRZzYS7MjbkxD+bBCEYwDuMwL+bFfJgPC2ABjMd4LIyF0aBBQsIiWASjGMViWAyLY3EsiSXRocMETMAyeCuWxbJYDstheSyPFbAiVsTKWBmrYBWsilWxGlbD6lgda2JNvBfvxd5YB+tgXayL9bDe5cdT2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2wlbYGltjW2yL7bAdtsf2mIiJ2AE7YEfsiJ2wE3bGztgFu2BX7IbdMl/KAfgyvoy9sLrojX2wD/bF5Bz9cQAOwFdxEL6Gr+HrmIxDcCi+gW/gmzgcT+EIHImjcBRWEe/gGByLJMZjCqbgRJyIk3ASTsYpOAWnYSpOxxk4A2fiLJyFH+Ac/BA/xHk4DxdgGqbhQlyE6ZiOi/E0ZuASXIrLcDmuwOW4ClfjKlyL63AtbsANuAk34RbcgttwG+7AHfgpKgD8DPfgHkzGfbgP9+N+PIAH8CAexEzMxEN4CA/jYTyCR/AoHsVjeBxP4HE8iSfxFJ7GM3gGz+E5PI8vxH/T6NMSa5JBZFFCiRgRI2JFrMglconcIrfII/KIiIiIOBEn8oq8Ip/IJwqIAiJexIvCorAwwggSYQwAiKiIimKimCguiouSoqRwwokEkSDKiDKirCgryonbRXlxh6ggKoo2rrKoLKqItq6quFtUE9VEdVFD1BS1RC1RW9QWdUQdUVfUFfVEPVFfPCQaiN7YHx8RWZVpLIZgEzEUm4pmQl76BmslhmNr0Ua0FU+JkTgC24tWLlE8KzqIMdhR/EWMxedFZzEeu4gXRVfRTXQXL4keorXrKXqJydhb9BHTsK/oJ/qLAWIm1hAf4JycNcXrIlkMEUPFG2IBvimGi7fECDFSjBJvi9HiHTFGjBXjxHiRIiaIieJdMUm8JyaLKWKqmCZSxXQxQ7wvZopZYrb4QMwRH4q5Yp6YLxaINPGRWCgWiXTxsVgsPhEZYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Cq2ie1ih9gpPhW7xGdit9gj9orPxT7xhdgvvhQHxFfioPhaZIpvxCHxrTgsvhNHxPfiqPhBHBPHxQnxozgpfhKnxGlxRpwV58TP4rz4RVwQXoBEKaSUSgYyRuaQsTKnzCWvkbllcOndvV7GyRtkXnmjzCfzywKyoIyXhWRhqaWRVpIMZRFZVEblTbKYvFkWlyVkSVlKOllaJshbZBl5qywrb5Pl5O2yvLxDVpAVZSVZWd4pq8i7JEQubqO6rCFrylryXpkE98k68n5ZVz4g68kHZX35kGwgH5YN5SOykXxUNpaPySbycdlUNpPNZQvZUj4hW8knZWvZRraVT8l28mnZXj4jE+WzsoP0lz4iz8vO8gXZRb4ou8pusrv8RV6QXvaUvST0BtlHviL7yn6yvxwgB8pX5SD5mhwsX5fJcogcKt+Qw+Sbcrh8S46QI+Uo+bYcLd+RY+RYOU6Olylygpwo35WT5Htyspwip8ppMlVOl/0vjTRbyn+Y/+4f5A/+deub5Ga5RW6V2+R2uUPulJ/KXXKX3C13y71yr9wn98n9cr88IA/Ig/KgzJSZ8pA8JA/Lw/KIPCKPyqPymDwuz8of5Un5kzwlT8vT8qw8J8/J85feA1CohJJKqUDFqBwqVuVUudQ1Kre6VuVR16mIul7FqRtUXnWjyqfyqwKqoIpXhVRhpZVRVpEKVRFVVEXVTXjpA6NKqlLKqdIqQd3yr+SrYupmVVyV+E3+5fkl/Z35tVQtVSvVSrVWrVVb1Va1U+1Ue9VeJapE1UF1UB1VR9VJdVKdVWfVRXVRXVVX1V11Vz1UD9VT9VRJKkn1Ua+ovqqf6q8GqIHqVTVIDVKD1WCVrJLVUDVUDVPD1HA1XI1QI9QoNUqNVqPVGDVGjVPjVIpKURPVRDVJTVKT1WQ1VU1VqSpVzVAz1Ew1U81Ws9UcNUfNVXPVfDVfpak0tVAtVOkqXS1Wi1WGWqKWqGVqmVqhVqhVapVao9aodWqd2qA2qAy1WW1WW9VWtV1tVzvVTrVL7VK71W61V+1V+9Q+tV/tVwfUAXVQHVSZKlMdUofUYXVYHVFH1FF1VB1Tx9QJdUKdVCfVKXVKnVFn1Dl1Tp1X59UFdSHrsi8QgQhUkHWmjQlig9ggV5AryB3kDvIEeYJIEAnigrggb3BjkC/IHxQICgbxQaGgcKADE9hAXCp6NLgpKBbcHBQPSgQlg1KBC0oHCcEtQZng1qBscFtQLrg9KB/cEVQIKgaVgsrBnUGV4K6ganB3UC24J6ge1AhqBrWCe4PawX1BneD+oG7wQFAveDCoHzwUNAgeDhoGjwSNgkeDxsFjQZPg8aBp0CxoHrQIWv6p43t/Kv+TrqfupZN0b91Hv6L76n66vx6gB+pX9SD9mh6sX9fJeogeqt/Qw/Sberh+S4/QI/Uo/bYerd/RY/RYPU6P1yl6gp6o39WT9Ht6sp6ip+ppOlVP1zP0+3qmnqVn6w/0HP2hnqvn6fl6gU7TH+mFepFO1x/rxfoTnaGX6KV6mV6uV+iVepVerdfotXqdXq836I16k96st+itepvernfonfpTvUt/pnfrPXqv/lzv01/o/fpLfUB/pQ/qr3Wm/kYf0t/qw/o7fUR/r4/qH/QxfVyf0D/qk/onfUqf1mf0WX1O/6zP61/0Be2zLu6zTu9GGWViTIyJNbEml8llcpvcJo/JYyImYuJMnMlr8pp8Jp8pYAqYeBNvCpvCJgsZMkVMERM1UVPMFDPFTXFT0pQ0zjiTYBJMGVPGlDVlTTlTzpQ35U0FU8FUMpXMneZOc5e5y9xt7jb3mHtMDVPD1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDfNTUvT0rQyrUxr09q0NW1NO9POtDftTaJJNB1MB9PRdDSdTCfT2XQ2XUwX09V0Nd1Nd9PD9DA9TU+TZJJMH9PH9DV9TX/T3ww0A80gM8gMNoNNskk2Q81QM8wMM8PNcDPCjDSjsg4f844ZY8aacWa8STEpZqKZaCaZSWaymWymmqkm1aSaGWaGmWlmmtlmtplj5pi5Zq6Zb+abNJNmFpqFJt2km8VmsckwGWapWWqWm+VmpVlpVpvVZq1Za9bDerPRbDSbzWaz1Ww12812s9PsNLvMLrPb7DZ7zV6zz+wz+81+c8AcMAfNQZNpMs0hc8gcNofNEXPEHDVHzTFzzJwwJ8xJc9KcMqfMGXPGnDP5L50vvYm1OW0ue43Nba+1eex19m/jAragjbeFbGGrbT6b/zexsdYWtyVsSVvKOlvaJthbfhdXsBVtJVvZ3mmr2Lts1d/Fte19to6939a1D9ha9t7fxPXsg7a+fcw2QASwzWwj28I2to/ZJvZx29Q2s81tC9vOPm3b22dson3WdrDP/S5eaBfZ1XaNXWvX2d12jz1jz9rD9jt7zv5se9pedqB91Q6yr9nB9nWbbIf8Lh5l37aj7Tt2jB1rx9nxv4un2mk21U63M+z7dqad9bs4zX5k59h0O9fOs/Ptgl/jrDml24/tYvuJzbABLLXL7HK7wq60q/7/XJfZDXaj3WR32c/sVrvNbrc77M7LF8J2j91rP7f77Bf2kP3WHrBf2YP2iM203/waZ+3fEfu9PWp/sMfscXvC/mhP2p/U5eysff/R/mIvWG+BkIAkKQoohnJQLOWkXHQN5aZrKQ9dRxG6nuLoBspLN1I+yk8FqCDFUyEqTJoMWSIKqQgVpSjdRJenV5JKkaPSlEC3UBm6lcrSbVSObqfydAdVoIpUiSrTnVSF7qKqdDdVo3uoOtWgmlSL7qXadB/VofupLjxA9ehBqk8PUQN6mBrSI9SIHqXG9Bg1ocepKTWj5tSCWtIT1IqepNbUhtrSU9SOnqb29Awl0rPUgZ6jjvQX6kTPU2d6gbrQi9SVulF3eol60MvUk3pREvWmPvQK9aV+1J8G0EB6lQbRazSYXqdkGkJD6Q0aRm/ScHqLRtBIGkVv02h6h8bQWBpH4ymFJtBEepcm0Xs0mabQVJpGqTSdZtD7NJNm0Wz6gObQhzSX5tF8WkBp9BEtpEWUTh/TYvqEMmgJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQTvqUdtFntJv20F76nPbRF7SfvqQD9BUdpK8pk76hQ/QtHabv6Ah973vRD3SMjtMJ+pFO0k90ik7TGTpL5+hnOk+/0AXyBCGGIpShCoMwJswRxoY5w1zhNWHu8NowT3hdGAmvD+PCG8K84Y1hvjB/WCAsGMaHhcLCoQ5NaEMKw7BIWDSMhjeFxcKbw+JhibBkWCp0YekwIbwlLBPeGpYNbwvLhbeH5cM7wgphxfCxByqHd4ZVwrvCquHdYbXwnrB6WCOsGdYK7w1rh/eFdcL7w7rhA2HZ8MGwfvhQ2CB8OGwYPhI2Ch8NG4ePhU3Cx8OmYbOwedgibBk+EbYKnwxbh23CtuFTYbvw6bB9+EyYGD4bdgif+7X/wUV/vz8p7B32CV8JXwm9v1/Ojy6IpkU/ii6MLoqmRz+OLo5+Es2ILokujS6LLo+uiK6Mroqujq6Jro2ui66PbohujG6Kel8rBzh0wkmnXOBiXA4X63K6XO4al9td6/K461zEXe/i3A0ur7vR5XP5XQFX0MW7Qq6w084468iFrogr6qLuJlfM3eyKuxKupCvlnCvtElwL19K1dK3ck661a+PauqfcU+5p97R7xj3jnnUd3HOuo/uL6+Sed53dC+4F96Lr6rq57u4l18NNyHPxmExyfVwf19f1df1dfzfQDXSD3CA32A12yS7ZDXVD3TA3zA13w90IN8KNcqPcaDfajXFj3Dg3zqW4FDfRTXST3CQ32U12U91Ul+pS3Qw3w810M12VWRe3MtfNdfPdfJfm0txCl3XNmO4Wu8Uuw2W4pW6pW+6Wu5VupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrudbqfb5Xa53f66i4O6fW6/2+8OuAPuoPvaZbpv3CH3rTvsvnNH3PfuqPvBHXPH3Qn3ozvpfnKn3Gl3xp1159zP7rz7xV1w3qVEJkQmRt6NTIq8F5kcmRKZGpkWSY1Mj8yIvB+ZGZkVmR35IDIn8mFkbmReZH5kQSQt8lFkYWRRJD3ycWRx5JNIRmRJZGlkWWR5ZEXE+0JbQ1/EF/VRf5Mv5m/2xX0JX9KX8s6X9gn+Fl/G3+rL+tt8OX+7L+/v8BV8RV/JP+6b+ma+uW/hW/onfCv/pG/t2/i2/infzj/t2/tnfKJ/1nfwz/mO/i++k3/ed/Yv+C7+Rd/Vd/Pd/Uu+h3/Z9/S9fJLv7fv4V3xf38/39wP8QP+qH+Rf84P96z7ZD/FD/Rt+mH/TD/dv+RF+pB8V87YfffkWGcb7FD/BT/Tv+kn+PbjbT/FT/TSf6qf7Gf59P9PP8rP9B36O/9DP9fP8fL/Ap/mP/EK/yKf7j/1i/4nP8EsuP1T2K/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v93v8Dv9p36X/8zv9nv8Xv+53+e/8Pv9l/6A/8of9F/7TP+NP+S/9Yf9d/6I/94f9T/4Y/64P+F/9Cf9T/6UP+3P+LP+nP/Zn/e/+Av8O2uMMcYYY/+UCVea4rc9Fx/n9/6DHPFXK/cBgGu3Fcz86/6sK8r1+S62+4n4dhEAeLZXl0cuL9WrJyUlXVo3Q0JQdB7A5f8JyhIDV+Il0BaehkRoA2X+cP79RLdz9A/Gj94OkOuvcmLhSnxl/C8BMOkPxn/iqVELy4dn4v6L8ecBFC96JScnXImXQNtfn6+0gbJ/Z/75W/2D+ef8KgWg9V/l5IYr8ZX5J8CT8Bwk/mZNxhhjjDHGGGPson6iUqfL95+Xf+Lzj+7P49WVnBxwJf5H9+eMMcYYY4wxxhi7+p7v1v2ZJxIT23T61xtV/1tZ/3SjCfxPjcyNP2x4D3D5FQUA/+aAAFkN+Z/ciy3/kW0lXzp0/rZr+VkfwP+OUv4Zjav8xcQYY4wxxhj701256P/t6+pqTYgxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuG/hN/Tuxq7yNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2tf2/AAAA//8BsgGO")
mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0)

1m2.032986482s ago: executing program 0 (id=1738):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f91224fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1m1.561488396s ago: executing program 0 (id=1747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3100000000080005400000001f08000c400000000008000340000000351400"], 0x74}}, 0x0)

1m1.196703248s ago: executing program 32 (id=1747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000200000008000a40000000000900020073797a31000000000900010073797a3100000000080005400000001f08000c400000000008000340000000351400"], 0x74}}, 0x0)

5.007039881s ago: executing program 4 (id=2712):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0)

4.864454507s ago: executing program 4 (id=2716):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00')
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

4.655576971s ago: executing program 4 (id=2721):
syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x2000082, &(0x7f0000000380)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x34f, &(0x7f0000001f80)="$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")
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

4.364227415s ago: executing program 4 (id=2728):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000f80)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@errors_remount}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@fmask={'fmask', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@namecase}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==")
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0)

4.046765592s ago: executing program 4 (id=2734):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100f})

3.898603909s ago: executing program 1 (id=2738):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000000001d01060008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESHEX], 0x24}}, 0x0)

3.674985535s ago: executing program 1 (id=2740):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "e2"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0)

3.650995848s ago: executing program 4 (id=2742):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='romfs\x00', 0x0, 0x0)

3.357217562s ago: executing program 33 (id=2742):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='romfs\x00', 0x0, 0x0)

3.352525113s ago: executing program 1 (id=2745):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000003, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x1016}})

3.187221371s ago: executing program 1 (id=2749):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0xa08006, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0xfd, 0x687, &(0x7f0000000fc0)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)

2.879292767s ago: executing program 1 (id=2753):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f666c7573685f6d657267652c6e6f757365725f78617474722c6e6f71756f746100642c6e6f696e6c696e655f64656e7472792c6a71446d743d76667376312c6a71666d743d7666737630000072706a71756f74613d272c6e6f62ba6172726965722c6e6f696e6c696e655f78617474722c00532ce9c75edc805cb718fd0828a937e3586554bcc0e96e22e17586621707000000c4b33e9be8c461e5cf93a3f069d963568a0a4986db0bc367599af6df74649107e6b6f3c1de6e4ecb13afd6d0b7a37e1ca7f2a73cfa86fec83ff91813514fc5dad59ef8a68267e2bc5eb0eb41dd7610e0a3459a462407e6200beefe0400000055e5d338a9406348685c79f66a1dfe0ea2fa53ae668bc248f9910750fe29462516b37659f60000000000000004000000000000000084ad6651ff9500eccd2035d9842bc99b40df3e2769c57987909645723d163527aa94f9c91081c44c0080741edec90000000001413b2654209ca702112bd2ab928f16b4c1e527b5282e1fcc22c46fb80cbf77b5bfb72e782fbbccdf863ed14fe5ac4a5d15b1ad36fce280b17d265e2b146ca185269432a05de9ef2512cefb255c05a97bb629db18a3063ac11c72b0ac12e1ec2a8ae7577b52974f3f869a7d65deebb3c2c47f077eabbb1aed3c900e7da770bbde011060bded7248c4ca27e9668b09775c56f474d6b052f2336db9ce8319c27cf8de1f6f08b008e8d56fb2be14a735dbe8dddddcf23231e2c84b220cb02b0cf3dbc363805026acb74ac6b6881e47f1a5b5d250ad73de1ac3b73021f909bdbe13648f4c58ac85733eab92e9bb26e66cfcdd54ac4e9b154b8dc3828d48563ec707b3e172768f96361273d84576b49309ec5ba0e94c6fc0e8b0e8896cb7f42df11f", @ANYRESDEC=0x0, @ANYRES64, @ANYRES8=0x0, @ANYRES32=0x0], 0xfe, 0x551f, &(0x7f0000005a80)="$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")
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0\x00')

2.67880254s ago: executing program 5 (id=2755):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x0)

2.493169002s ago: executing program 5 (id=2758):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

2.345691839s ago: executing program 5 (id=2760):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000100)=""/193, 0xc1, 0xa3)

2.146952252s ago: executing program 5 (id=2761):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000037000100000000000000000002"], 0x1c}}, 0x0)

1.90353116s ago: executing program 5 (id=2764):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4, @tid=r0}, 0x0)

1.610644574s ago: executing program 5 (id=2768):
set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4)
unshare(0x46060480)

1.362161492s ago: executing program 3 (id=2770):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000880)={[{@gid_ignore}, {@shortad}, {@gid_forget}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@anchor={'anchor', 0x3d, 0x2}}]}, 0x10, 0xc34, &(0x7f0000001080)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

1.21459953s ago: executing program 2 (id=2771):
creat(&(0x7f0000000000)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@none}, {@name={'name', 0x3d, 'trusted.overlay.redirect\x00'}}]})

1.005278734s ago: executing program 2 (id=2772):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000cc0)={{0x3, 0x3, 0x1, 0x1, 0x9}})

911.004835ms ago: executing program 3 (id=2773):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
accept4(r0, 0x0, 0x0, 0x80000)

841.956053ms ago: executing program 2 (id=2774):
r0 = syz_open_dev$video4linux(&(0x7f00000006c0), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1})

684.265131ms ago: executing program 3 (id=2775):
r0 = socket$inet(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'syzkaller0\x00', {0x2, 0x0, @initdev}})

666.637683ms ago: executing program 2 (id=2776):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="240000001e000100fcffffff00000000020000000100000000000000080001000100"], 0x24}}, 0x0)

534.937929ms ago: executing program 1 (id=2777):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)

419.525711ms ago: executing program 2 (id=2778):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000))

242.653862ms ago: executing program 3 (id=2779):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25GETINFOOLD(r0, 0x89e7, &(0x7f0000000080))

209.688166ms ago: executing program 2 (id=2780):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000b80)={[{@shortname_mixed}, {@fat=@sys_immutable}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlateno}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@fat=@discard}, {@shortname_lower}, {@uni_xlateno}]}, 0x3, 0x350, &(0x7f0000000580)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

117.518887ms ago: executing program 3 (id=2781):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000180)=0x548, 0x4)

0s ago: executing program 3 (id=2782):
prlimit64(0x0, 0x7, &(0x7f0000000340), 0x0)
eventfd(0x0)

kernel console output (not intermixed with test programs):

eter file ./file0/file0
[  133.745150][ T6945] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1156'.
[  133.764323][ T6950] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  133.776475][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1159'.
[  133.799798][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1159'.
[  133.878993][ T6952] netlink: 3316 bytes leftover after parsing attributes in process `syz.0.1160'.
[  133.901159][ T6952] netlink: 1659 bytes leftover after parsing attributes in process `syz.0.1160'.
[  134.160008][ T6966] netlink: 'syz.4.1167': attribute type 3 has an invalid length.
[  134.885267][ T7007] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  135.250300][ T7024] loop4: detected capacity change from 0 to 256
[  135.289894][ T7024] exfat: Deprecated parameter 'namecase'
[  135.336261][ T7024] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  135.853667][ T7054] netlink: 'syz.3.1211': attribute type 1 has an invalid length.
[  135.909579][ T7054] __nla_validate_parse: 4 callbacks suppressed
[  135.909596][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1211'.
[  136.708840][ T7058] loop0: detected capacity change from 0 to 32768
[  136.724349][ T7096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1230'.
[  136.768585][ T7058] (syz.0.1210,7058,0):ocfs2_load_local_alloc:319 ERROR: Local alloc size is invalid (la_size = 47975)
[  136.782512][ T7058] (syz.0.1210,7058,1):ocfs2_load_local_alloc:355 ERROR: status = -22
[  136.815043][ T7058] (syz.0.1210,7058,0):ocfs2_check_volume:2453 ERROR: status = -22
[  136.823406][ T7058] (syz.0.1210,7058,0):ocfs2_check_volume:2481 ERROR: status = -22
[  136.831268][ T7058] (syz.0.1210,7058,0):ocfs2_mount_volume:1821 ERROR: status = -22
[  136.851090][ T7058] (syz.0.1210,7058,1):ocfs2_fill_super:1176 ERROR: status = -22
[  137.314473][ T4595] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  137.401754][ T7122] loop2: detected capacity change from 0 to 256
[  137.465879][ T7122] FAT-fs (loop2): Directory bread(block 64) failed
[  137.495993][ T7122] FAT-fs (loop2): Directory bread(block 65) failed
[  137.514358][ T7122] FAT-fs (loop2): Directory bread(block 66) failed
[  137.520944][ T7122] FAT-fs (loop2): Directory bread(block 67) failed
[  137.555106][ T7122] FAT-fs (loop2): Directory bread(block 68) failed
[  137.561776][ T7122] FAT-fs (loop2): Directory bread(block 69) failed
[  137.578967][ T7122] FAT-fs (loop2): Directory bread(block 70) failed
[  137.588428][ T7122] FAT-fs (loop2): Directory bread(block 71) failed
[  137.599493][ T7122] FAT-fs (loop2): Directory bread(block 72) failed
[  137.626224][ T7122] FAT-fs (loop2): Directory bread(block 73) failed
[  137.637838][ T7130] loop0: detected capacity change from 0 to 164
[  137.682235][ T4302] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  137.842220][ T4595] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  137.865937][ T4595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.897262][ T4595] usb 5-1: Product: syz
[  137.901509][ T4595] usb 5-1: Manufacturer: syz
[  137.922003][ T4595] usb 5-1: SerialNumber: syz
[  137.993768][ T4595] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  138.207904][ T4302] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  138.228740][ T4302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.237832][ T4302] usb 2-1: Product: syz
[  138.248947][ T4302] usb 2-1: Manufacturer: syz
[  138.253863][ T4302] usb 2-1: SerialNumber: syz
[  138.312872][ T4302] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  138.426954][ T7150] netlink: 'syz.3.1256': attribute type 1 has an invalid length.
[  138.471393][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1257'.
[  138.622351][ T4595] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  138.738828][ T7162] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1262'.
[  138.792134][ T4302] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  138.892217][ T4241] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  138.973808][ T7170] siw: device registration error -23
[  139.029478][  T125] usb 5-1: USB disconnect, device number 6
[  139.208707][ T7172] loop3: detected capacity change from 0 to 32768
[  139.218835][ T7172] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 69 has empty extent list at depth 1280
[  139.237988][ T7172] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  139.249334][ T7172] OCFS2: File system is now read-only.
[  139.255161][ T7172] (syz.3.1267,7172,1):ocfs2_find_leaf:1933 ERROR: status = -30
[  139.264313][ T7172] (syz.3.1267,7172,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  139.273601][ T7172] (syz.3.1267,7172,1):ocfs2_get_clusters:624 ERROR: status = -30
[  139.281381][ T7172] (syz.3.1267,7172,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  139.289987][ T7172] (syz.3.1267,7172,1):ocfs2_map_slot_buffers:378 ERROR: status = -30
[  139.298106][ T7172] (syz.3.1267,7172,1):ocfs2_init_slot_info:426 ERROR: status = -30
[  139.306088][ T7172] (syz.3.1267,7172,1):ocfs2_initialize_super:2276 ERROR: status = -30
[  139.312108][ T4302] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  139.314768][ T7172] (syz.3.1267,7172,1):ocfs2_fill_super:1176 ERROR: status = -30
[  139.329146][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.341527][ T4302] usb 3-1: Product: syz
[  139.345947][ T4302] usb 3-1: Manufacturer: syz
[  139.350542][ T4302] usb 3-1: SerialNumber: syz
[  139.358521][ T4590] usb 2-1: USB disconnect, device number 8
[  139.423279][ T4302] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  139.509390][ T7174] loop3: detected capacity change from 0 to 1024
[  139.539201][ T7174] hfsplus: request for non-existent node 3 in B*Tree
[  139.546452][ T7174] hfsplus: request for non-existent node 3 in B*Tree
[  139.662335][ T4595] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  139.696643][ T4595] ath9k_htc: Failed to initialize the device
[  139.713276][  T125] usb 5-1: ath9k_htc: USB layer deinitialized
[  139.956887][ T7190] loop4: detected capacity change from 0 to 512
[  139.976674][ T7190] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  139.982056][ T4241] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  140.002168][ T4302] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  140.021624][ T4241] ath9k_htc: Failed to initialize the device
[  140.023932][ T7190] EXT4-fs (loop4): 1 truncate cleaned up
[  140.039214][ T7190] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  140.052332][ T4590] usb 2-1: ath9k_htc: USB layer deinitialized
[  140.085546][ T4258] EXT4-fs (loop4): unmounting filesystem.
[  140.091091][ T7188] loop3: detected capacity change from 0 to 4096
[  140.102426][ T7188] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  140.141371][ T7188] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  140.169076][ T7196] loop1: detected capacity change from 0 to 2048
[  140.193449][ T7196]  loop1: p2 < >
[  140.418010][ T4590] usb 3-1: USB disconnect, device number 6
[  140.470831][ T7206] loop3: detected capacity change from 0 to 512
[  140.515542][ T7211] netlink: 'syz.4.1285': attribute type 6 has an invalid length.
[  140.621774][ T7216] loop4: detected capacity change from 0 to 512
[  140.679425][ T7206] EXT4-fs (loop3): Test dummy encryption mode enabled
[  140.683328][ T7218] ipt_CLUSTERIP: unknown mode 209974702
[  140.708342][ T7216] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  140.739338][ T7206] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1284: inline data xattr refers to an external xattr inode
[  140.762829][ T7216] EXT4-fs (loop4): 1 truncate cleaned up
[  140.768531][ T7216] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  140.778210][ T7206] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1284: couldn't read orphan inode 12 (err -117)
[  140.807426][ T7206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  140.887405][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  140.887608][ T4258] EXT4-fs (loop4): unmounting filesystem.
[  141.102229][ T4302] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  141.119486][ T4302] ath9k_htc: Failed to initialize the device
[  141.140215][ T4590] usb 3-1: ath9k_htc: USB layer deinitialized
[  141.391678][ T7251] netlink: 'syz.4.1302': attribute type 2 has an invalid length.
[  141.409868][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1302'.
[  141.557974][ T7249] loop2: detected capacity change from 0 to 8192
[  141.590961][ T7249] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  141.613415][ T7249] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  141.632287][ T7249] REISERFS (device loop2): using ordered data mode
[  141.645628][ T7249] reiserfs: using flush barriers
[  141.701994][ T7249] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  141.756754][ T7268] tmpfs: Bad value for 'mpol'
[  141.793065][ T7249] REISERFS (device loop2): checking transaction log (loop2)
[  141.843045][ T7249] REISERFS (device loop2): Using rupasov hash to sort names
[  141.851102][ T7249] REISERFS (device loop2): using 3.5.x disk format
[  141.927952][ T7249] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  141.942835][ T7277] loop3: detected capacity change from 0 to 1024
[  141.996611][ T7249] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  142.047784][ T7249] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  142.100473][ T7249] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  142.299113][ T7282] loop0: detected capacity change from 0 to 4096
[  142.810449][ T7311] loop0: detected capacity change from 0 to 1024
[  142.825002][ T7312] loop1: detected capacity change from 0 to 764
[  142.867064][ T7311] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  142.878600][ T7312] Symlink component flag not implemented
[  142.913224][ T7312] Symlink component flag not implemented
[  142.942509][ T7312] Symlink component flag not implemented (112)
[  142.988287][ T7312] Symlink component flag not implemented (22)
[  143.021730][ T7321] loop4: detected capacity change from 0 to 256
[  143.048471][ T4256] EXT4-fs (loop0): unmounting filesystem.
[  143.113382][ T7321] FAT-fs (loop4): Directory bread(block 64) failed
[  143.153486][ T7321] FAT-fs (loop4): Directory bread(block 65) failed
[  143.160203][ T7321] FAT-fs (loop4): Directory bread(block 66) failed
[  143.182126][ T7321] FAT-fs (loop4): Directory bread(block 67) failed
[  143.188874][ T7321] FAT-fs (loop4): Directory bread(block 68) failed
[  143.225676][ T7321] FAT-fs (loop4): Directory bread(block 69) failed
[  143.248343][ T7321] FAT-fs (loop4): Directory bread(block 70) failed
[  143.266008][ T7321] FAT-fs (loop4): Directory bread(block 71) failed
[  143.291441][ T7321] FAT-fs (loop4): Directory bread(block 72) failed
[  143.308494][ T7321] FAT-fs (loop4): Directory bread(block 73) failed
[  143.719219][ T7353] netlink: 'syz.2.1349': attribute type 6 has an invalid length.
[  143.747578][ T7353] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1349'.
[  143.912277][ T7361] netlink: 520 bytes leftover after parsing attributes in process `syz.1.1353'.
[  144.109677][ T7373] netlink: 'syz.2.1359': attribute type 4 has an invalid length.
[  144.233269][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'.
[  144.266633][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'.
[  144.310761][ T7383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1364'.
[  144.344900][ T7385] netlink: 'syz.1.1365': attribute type 24 has an invalid length.
[  144.435449][ T7389] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  144.473255][ T7389] gfs2: error 10 reading superblock
[  144.492110][ T5939] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  144.531446][ T7395] IPv6: sit1: Disabled Multicast RS
[  144.737480][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1374'.
[  144.884367][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.904139][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  144.937299][ T5939] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  144.961384][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.001198][ T5939] usb 5-1: config 0 descriptor??
[  145.259729][ T7429] overlayfs: missing 'lowerdir'
[  145.273893][ T4595] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  145.292123][ T5940] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  145.394229][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'.
[  145.468940][ T7422] loop0: detected capacity change from 0 to 32768
[  145.493354][ T5939] Bluetooth: Can't get state to change to load configuration err
[  145.511250][ T5939] Bluetooth: Loading sysconfig file failed
[  145.522064][ T4595] usb 4-1: Using ep0 maxpacket: 8
[  145.526689][ T5939] ath3k: probe of 5-1:0.0 failed with error -16
[  145.542011][ T5940] usb 3-1: Using ep0 maxpacket: 32
[  145.553170][ T5939] usb 5-1: USB disconnect, device number 7
[  145.567805][ T7437] program syz.1.1391 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  145.642217][ T4595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  145.662204][ T5940] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  145.663254][ T4595] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  145.680996][ T5940] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  145.706600][ T5940] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.732919][ T5940] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  145.766899][ T5940] usb 3-1: config 1 has no interface number 0
[  145.776803][ T5940] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  145.800605][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.827928][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1392'.
[  145.857364][ T4595] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  145.879478][ T5940] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  145.893538][ T4595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.918245][ T4595] usb 4-1: Product: syz
[  145.933404][ T4595] usb 4-1: Manufacturer: syz
[  145.938178][ T4595] usb 4-1: SerialNumber: syz
[  145.956820][ T4595] usb 4-1: config 0 descriptor??
[  146.046615][ T7452] loop0: detected capacity change from 0 to 1024
[  146.082218][ T5940] snd_usb_pod 3-1:1.1: set_interface failed
[  146.096295][ T5940] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  146.109680][ T7455] loop4: detected capacity change from 0 to 512
[  146.115200][ T7452] fuse: Bad value for 'fd'
[  146.116455][ T5940] snd_usb_pod: probe of 3-1:1.1 failed with error -71
[  146.150000][ T7455] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  146.164528][ T5940] usb 3-1: USB disconnect, device number 7
[  146.246388][ T7461] loop0: detected capacity change from 0 to 128
[  146.254039][ T7455] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  146.301532][ T7455] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1400: attempt to clear invalid blocks 2 len 1
[  146.387801][ T7455] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  146.419595][ T7455] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1400: invalid indirect mapped block 1819239214 (level 0)
[  146.452468][ T7455] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1400: invalid indirect mapped block 1819239214 (level 1)
[  146.499245][ T7455] EXT4-fs (loop4): 1 truncate cleaned up
[  146.520673][ T7455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  146.523411][ T5939] usb 4-1: USB disconnect, device number 8
[  146.613519][ T7455] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  146.682087][ T7455] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  146.765262][ T4258] EXT4-fs (loop4): unmounting filesystem.
[  146.813520][ T7479] Unknown options in mask 5
[  147.229059][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'.
[  147.281277][ T7500] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511)
[  147.336339][ T7500] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  147.469619][ T7505] loop4: detected capacity change from 0 to 2048
[  147.481997][ T4595] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  147.531246][ T7505] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.552517][ T7477] loop2: detected capacity change from 0 to 32768
[  147.873738][ T4595] usb 4-1: config 4 has an invalid interface number: 231 but max is 0
[  147.890369][ T4595] usb 4-1: config 4 has no interface number 0
[  147.929902][ T7522] loop0: detected capacity change from 0 to 1024
[  147.934593][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.001807][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  148.009724][ T7523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  148.062180][ T4595] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  148.082148][ T4595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.116211][ T7531] loop4: detected capacity change from 0 to 256
[  148.131914][ T4595] usb 4-1: Product: syz
[  148.136125][ T4595] usb 4-1: Manufacturer: syz
[  148.140830][ T4595] usb 4-1: SerialNumber: syz
[  148.155512][ T7531] exfat: Deprecated parameter 'utf8'
[  148.160851][ T7531] exfat: Deprecated parameter 'utf8'
[  148.219919][ T7531] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  148.223225][ T7533] netlink: 'syz.1.1436': attribute type 5 has an invalid length.
[  148.234366][ T4595] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  148.247862][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1436'.
[  148.654027][ T4595] vp7045: USB control message 'in' went wrong.
[  148.660784][ T4595] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  148.672366][ T5939] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  148.701924][ T4595] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  148.731518][ T4595] usb 4-1: USB disconnect, device number 9
[  148.869922][ T7539] loop1: detected capacity change from 0 to 32768
[  148.914695][ T7539] JBD2: Ignoring recovery information on journal
[  148.952095][ T5939] usb 5-1: Using ep0 maxpacket: 16
[  148.981689][ T7529] loop2: detected capacity change from 0 to 32768
[  148.983389][ T7539] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  149.000039][ T7529] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  149.012106][ T7529] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  149.060706][ T7539] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3909117121
[  149.061011][ T7529] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  149.085781][ T7539] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  149.114156][ T7539] OCFS2: File system is now read-only.
[  149.129998][ T7539] (syz.1.1439,7539,1):ocfs2_search_chain:1761 ERROR: status = -30
[  149.144182][ T7539] (syz.1.1439,7539,0):ocfs2_search_chain:1871 ERROR: status = -30
[  149.167150][ T4595] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  149.176533][ T4595] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  149.184150][ T7539] (syz.1.1439,7539,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[  149.222982][ T7539] (syz.1.1439,7539,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  149.257999][ T7539] (syz.1.1439,7539,0):ocfs2_claim_new_inode:2216 ERROR: status = -30
[  149.272174][ T5939] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[  149.282487][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.283899][ T4595] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 107ms
[  149.290483][ T5939] usb 5-1: Product: syz
[  149.290498][ T5939] usb 5-1: Manufacturer: syz
[  149.290511][ T5939] usb 5-1: SerialNumber: syz
[  149.306961][ T5939] usb 5-1: config 0 descriptor??
[  149.312675][ T7539] (syz.1.1439,7539,0):ocfs2_claim_new_inode:2231 ERROR: status = -30
[  149.327041][ T7539] (syz.1.1439,7539,0):ocfs2_mknod_locked:637 ERROR: status = -30
[  149.339074][ T4595] gfs2: fsid=syz:syz.0: jid=0: Done
[  149.340786][ T7539] (syz.1.1439,7539,1):ocfs2_mknod:383 ERROR: status = -30
[  149.349702][ T7529] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  149.364054][ T7539] (syz.1.1439,7539,0):ocfs2_mknod:500 ERROR: status = -30
[  149.378785][ T7539] (syz.1.1439,7539,0):ocfs2_create:674 ERROR: status = -30
[  149.423084][ T4251] ocfs2: Unmounting device (7,1) on (node local)
[  149.438581][ T7529] UBIFS error (pid: 7529): cannot open "./file0", error -22
[  149.489880][ T5939] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  149.520468][ T7561] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1449'.
[  149.606184][ T5939] usb 5-1: USB disconnect, device number 8
[  149.652293][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.060425][ T7583] loop2: detected capacity change from 0 to 256
[  150.294887][ T7592] misc userio: Invalid payload size
[  151.035402][ T7636] IPv6: Can't replace route, no match found
[  151.062302][ T4302] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  151.161540][ T7641] loop1: detected capacity change from 0 to 512
[  151.244796][ T7641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  151.285269][ T7641] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  151.379782][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  151.422191][ T4302] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.442750][ T4302] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 9
[  151.469701][ T4302] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  151.563105][ T7664] overlayfs: bad mount option "redirect_dir=off:/"
[  151.592033][ T4302] usb 3-1: New USB device found, idVendor=0525, idProduct=a4b0, bcdDevice= f.40
[  151.611522][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  151.626859][ T4302] usb 3-1: SerialNumber: syz
[  151.677240][ T4302] usb 3-1: bad CDC descriptors
[  151.889993][ T4302] usb 3-1: USB disconnect, device number 8
[  152.040046][ T7688] loop3: detected capacity change from 0 to 512
[  152.045615][ T7686] loop1: detected capacity change from 0 to 512
[  152.090943][ T7688] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1510: attempt to clear invalid blocks 1 len 1
[  152.093550][ T7693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1511'.
[  152.113872][ T7686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  152.131605][ T7686] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.161117][ T7695] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  152.187417][ T7688] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1510: bg 0: block 343: padding at end of block bitmap is not set
[  152.228278][ T7688] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  152.261287][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  152.263228][ T7688] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1510: invalid indirect mapped block 1819239214 (level 0)
[  152.296939][ T7688] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1510: invalid indirect mapped block 1819239214 (level 1)
[  152.319346][ T7688] EXT4-fs (loop3): 1 truncate cleaned up
[  152.326574][ T7688] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  152.388067][ T7699] sctp: [Deprecated]: syz.4.1515 (pid 7699) Use of int in maxseg socket option.
[  152.388067][ T7699] Use struct sctp_assoc_value instead
[  152.433924][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  152.555854][ T7705] netlink: 'syz.1.1516': attribute type 10 has an invalid length.
[  152.571461][ T7704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1517'.
[  152.587172][ T7705] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1516'.
[  152.600635][ T7704] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1517'.
[  152.920878][ T7723] loop1: detected capacity change from 0 to 1024
[  153.129208][ T7731] loop3: detected capacity change from 0 to 256
[  153.371983][ T4538] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  153.620200][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1539'.
[  153.656955][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1539'.
[  153.706139][ T7719] loop2: detected capacity change from 0 to 32768
[  153.729102][ T7719] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  153.748661][ T7719] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  153.756082][ T4538] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.782937][ T4538] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 9
[  153.798738][ T4538] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  153.818674][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'.
[  153.845411][ T7719] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  153.861973][ T5939] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  153.868940][ T5939] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  153.895101][ T4538] usb 5-1: New USB device found, idVendor=0525, idProduct=a4b0, bcdDevice= f.40
[  153.920112][ T4538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  153.977088][ T4538] usb 5-1: SerialNumber: syz
[  154.004060][ T5939] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 135ms
[  154.022281][ T5939] gfs2: fsid=syz:syz.0: jid=0: Done
[  154.027562][ T7719] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  154.035870][ T4538] usb 5-1: bad CDC descriptors
[  154.158987][ T7760] loop1: detected capacity change from 0 to 4096
[  154.255782][ T5939] usb 5-1: USB disconnect, device number 9
[  154.771922][ T4595] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  155.022243][ T4595] usb 3-1: Using ep0 maxpacket: 32
[  155.037178][ T7804] loop1: detected capacity change from 0 to 512
[  155.108313][ T7804] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  155.142757][ T7804] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.148263][ T4595] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[  155.167315][ T4595] usb 3-1: config 0 has no interface number 0
[  155.196592][ T4595] usb 3-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023
[  155.271352][ T7804] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  155.303210][ T7804] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  155.328809][ T7804] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.1566: Failed to acquire dquot type 0
[  155.415977][ T4595] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f
[  155.450745][ T4595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.476838][ T4595] usb 3-1: Product: syz
[  155.497873][ T4595] usb 3-1: Manufacturer: syz
[  155.516964][ T4595] usb 3-1: SerialNumber: syz
[  155.526555][ T4595] usb 3-1: config 0 descriptor??
[  155.540801][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  155.572220][ T7778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  155.604944][ T7830] loop3: detected capacity change from 0 to 4096
[  155.641183][ T7830] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  155.701439][ T7830] ntfs3: loop3: Failed to load $Extend.
[  155.837439][ T7778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  155.934840][ T4595] net1080 3-1:0.113 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, 52:f5:ee:10:b3:c7
[  156.100539][ T4302] usb 3-1: USB disconnect, device number 9
[  156.110821][ T4302] net1080 3-1:0.113 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT
[  156.305398][ T7860] cgroup: Name too long
[  156.348991][ T7865] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1595'.
[  156.886462][ T7888] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1603'.
[  157.112118][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1607'.
[  157.121164][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1607'.
[  157.506450][ T7864] loop1: detected capacity change from 0 to 32768
[  157.605213][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1618'.
[  157.622130][ T7864] XFS (loop1): Mounting V5 Filesystem
[  157.642025][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1618'.
[  157.682007][ T7928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1618'.
[  157.732159][ T5940] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  157.772503][ T7864] XFS (loop1): Ending clean mount
[  157.821026][ T7864] XFS (loop1): Quotacheck needed: Please wait.
[  157.953876][ T7864] XFS (loop1): Quotacheck: Done.
[  157.991986][ T5940] usb 5-1: Using ep0 maxpacket: 8
[  158.122207][ T5940] usb 5-1: config 1 has an invalid interface number: 128 but max is 1
[  158.140695][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.193087][ T5940] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  158.221369][ T5940] usb 5-1: config 1 has no interface number 0
[  158.260648][ T5940] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  158.297952][ T4251] XFS (loop1): Unmounting Filesystem
[  158.472264][ T5940] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  158.491636][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.510209][ T5940] usb 5-1: Product: syz
[  158.514896][ T5940] usb 5-1: Manufacturer: syz
[  158.519920][ T5940] usb 5-1: SerialNumber: syz
[  158.593207][ T5940] cdc_wdm 5-1:1.128: skipping garbage
[  158.598766][ T5940] cdc_wdm 5-1:1.128: invalid descriptor buffer length
[  158.632610][ T5940] cdc_wdm: probe of 5-1:1.128 failed with error -22
[  158.827705][ T5940] usb 5-1: USB disconnect, device number 10
[  159.098964][ T7998] netlink: 'syz.2.1643': attribute type 1 has an invalid length.
[  159.299518][ T8000] loop0: detected capacity change from 0 to 4096
[  159.337062][ T8000] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  159.367150][ T8000] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  159.432360][ T8000] ntfs3: loop0: mft corrupted
[  159.437470][ T8000] ntfs3: loop0: Failed to load $Extend.
[  160.230718][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1672'.
[  160.395912][ T8066] netlink: 'syz.1.1676': attribute type 1 has an invalid length.
[  160.666602][ T8077] loop3: detected capacity change from 0 to 256
[  160.705145][ T8071] loop1: detected capacity change from 0 to 4096
[  160.733272][ T8071] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  160.889115][ T8083] netlink: 'syz.3.1684': attribute type 13 has an invalid length.
[  160.920037][ T8083] netlink: 'syz.3.1684': attribute type 14 has an invalid length.
[  160.955464][ T8083] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1684'.
[  161.019229][   T26] audit: type=1326 audit(2000000072.379:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c1f7e719 code=0x7ffc0000
[  161.091990][   T26] audit: type=1326 audit(2000000072.379:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c1f7e719 code=0x7ffc0000
[  161.114252][    C1] vkms_vblank_simulate: vblank timer overrun
[  161.163554][ T8061] loop2: detected capacity change from 0 to 32768
[  161.180930][   T26] audit: type=1326 audit(2000000072.379:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f15c1f7e719 code=0x7ffc0000
[  161.241973][   T26] audit: type=1326 audit(2000000072.379:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c1f7e719 code=0x7ffc0000
[  161.264333][    C1] vkms_vblank_simulate: vblank timer overrun
[  161.281324][ T8061] JBD2: Ignoring recovery information on journal
[  161.313644][   T26] audit: type=1326 audit(2000000072.379:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.4.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c1f7e719 code=0x7ffc0000
[  161.374515][ T8061] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  161.501115][ T8061] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3909117121
[  161.564719][ T8061] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  161.595289][ T8061] OCFS2: File system is now read-only.
[  161.611036][ T8061] (syz.2.1674,8061,0):ocfs2_search_chain:1761 ERROR: status = -30
[  161.659953][ T8061] (syz.2.1674,8061,0):ocfs2_search_chain:1871 ERROR: status = -30
[  161.692049][ T8061] (syz.2.1674,8061,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[  161.721534][ T8061] (syz.2.1674,8061,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  161.743962][ T8061] (syz.2.1674,8061,0):ocfs2_claim_new_inode:2216 ERROR: status = -30
[  161.761901][ T8061] (syz.2.1674,8061,0):ocfs2_claim_new_inode:2231 ERROR: status = -30
[  161.791974][ T8061] (syz.2.1674,8061,0):ocfs2_mknod_locked:637 ERROR: status = -30
[  161.800595][ T8061] (syz.2.1674,8061,0):ocfs2_mknod:383 ERROR: status = -30
[  161.829835][ T8061] (syz.2.1674,8061,0):ocfs2_mknod:500 ERROR: status = -30
[  161.841947][ T8061] (syz.2.1674,8061,0):ocfs2_create:674 ERROR: status = -30
[  161.913939][ T4264] ocfs2: Unmounting device (7,2) on (node local)
[  161.989702][ T8093] loop4: detected capacity change from 0 to 32768
[  162.014207][ T8093] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun"
[  162.033604][ T8093] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)...
[  162.083248][ T8093] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms
[  162.102867][ T4590] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use
[  162.110827][ T4590] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal...
[  162.161745][ T8103] loop3: detected capacity change from 0 to 32768
[  162.161958][ T4595] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  162.215379][ T4590] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 104ms
[  162.235054][ T4590] gfs2: fsid=_dev_net_tun.0: jid=0: Done
[  162.240776][ T8093] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount
[  162.258085][ T8103] XFS (loop3): Mounting V5 Filesystem
[  162.271764][ T8118] loop2: detected capacity change from 0 to 1024
[  162.399640][ T8103] XFS (loop3): Ending clean mount
[  162.480683][ T8103] XFS (loop3): Quotacheck needed: Please wait.
[  162.499757][ T8124] delete_channel: no stack
[  162.508286][ T8103] XFS (loop3): Quotacheck: Done.
[  162.552153][ T4595] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  162.567633][ T4595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.591769][ T4595] usb 2-1: config 0 descriptor??
[  162.628167][ T4250] XFS (loop3): Unmounting Filesystem
[  162.643392][ T4595] cp210x 2-1:0.0: cp210x converter detected
[  162.740971][ T4241] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  162.886706][ T4595] usb 2-1: cp210x converter now attached to ttyUSB0
[  163.028781][ T8129] loop2: detected capacity change from 0 to 32768
[  163.097757][ T4302] usb 2-1: USB disconnect, device number 9
[  163.113597][ T4241] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.141013][ T4241] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  163.156672][ T4302] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  163.187666][ T4302] cp210x 2-1:0.0: device disconnected
[  163.197885][ T4241] usb 5-1: config 1 has no interface number 0
[  163.232652][ T4241] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  163.263657][   T48] Bluetooth: hci0: unexpected event 0x2f length: 293 > 260
[  163.287613][ T8129] XFS (loop2): Mounting V5 Filesystem
[  163.420896][ T8157] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1711'.
[  163.438732][ T4241] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  163.459676][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.472167][ T8157] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1711'.
[  163.481182][ T4241] usb 5-1: Product: syz
[  163.481202][ T4241] usb 5-1: Manufacturer: syz
[  163.481216][ T4241] usb 5-1: SerialNumber: syz
[  163.526504][ T8129] XFS (loop2): Ending clean mount
[  163.574768][ T8129] XFS (loop2): Quotacheck needed: Please wait.
[  163.586966][ T4241] usb 5-1: selecting invalid altsetting 1
[  163.650430][ T8129] XFS (loop2): Quotacheck: Done.
[  163.757339][ T4264] XFS (loop2): Unmounting Filesystem
[  163.798759][ T4241] cdc_ncm 5-1:1.1: bind() failure
[  163.822426][ T4241] usb 5-1: USB disconnect, device number 11
[  163.967835][ T8178] netlink: 'syz.3.1726': attribute type 8 has an invalid length.
[  164.317332][ T8194] loop0: detected capacity change from 0 to 256
[  164.344245][ T8194] exfat: Deprecated parameter 'namecase'
[  164.352157][ T8197] loop2: detected capacity change from 0 to 16
[  164.385228][ T8194] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  164.406266][ T8197] erofs: (device loop2): mounted with root inode @ nid 36.
[  164.475071][ T8202] loop4: detected capacity change from 0 to 64
[  164.586413][ T8202] Trying to free block not in datazone
[  164.597523][ T8205] netlink: 'syz.1.1737': attribute type 10 has an invalid length.
[  164.629886][ T8202] Trying to free block not in datazone
[  164.645021][ T8202] Trying to free block not in datazone
[  164.650536][ T8202] Trying to free block not in datazone
[  164.687751][ T8202] minix_free_block (loop4:6): bit already cleared
[  164.718315][ T8205] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.775642][ T8202] Trying to free block not in datazone
[  164.786773][ T8205] team0: Port device batadv0 added
[  164.787373][ T8202] Trying to free block not in datazone
[  165.473041][ T4418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.498163][ T8228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1759'.
[  165.625901][ T4418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.784439][ T4418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.879344][ T8219] loop4: detected capacity change from 0 to 32768
[  165.958279][ T4266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.974127][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.976390][ T8219] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt
[  165.976390][ T8219] 
[  165.995054][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  166.007232][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  166.017119][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  166.024520][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  166.029032][ T4418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.089719][ T8219] ERROR: (device loop4): remounting filesystem as read-only
[  166.109142][ T8219] xtLookup: xtSearch returned -5
[  166.175288][ T8235] wlan0 speed is unknown, defaulting to 1000
[  166.273368][   T52] block nbd2: Attempted send on invalid socket
[  166.279910][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  166.299718][ T8240] efs: cannot read volume header
[  166.397715][ T8242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1757'.
[  166.489319][ T8227] loop3: detected capacity change from 0 to 32768
[  166.520145][ T8246] loop2: detected capacity change from 0 to 256
[  166.609123][ T8227] JBD2: Ignoring recovery information on journal
[  166.692939][ T8227] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  166.834465][ T8235] chnl_net:caif_netlink_parms(): no params data found
[  166.854325][ T8227] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #3909117121
[  166.912294][ T8227] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  166.948635][ T8227] OCFS2: File system is now read-only.
[  166.972193][ T8227] (syz.3.1750,8227,1):ocfs2_search_chain:1761 ERROR: status = -30
[  167.069623][ T8227] (syz.3.1750,8227,1):ocfs2_search_chain:1871 ERROR: status = -30
[  167.097556][ T8227] (syz.3.1750,8227,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[  167.106752][ T8227] (syz.3.1750,8227,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  167.162033][ T8227] (syz.3.1750,8227,1):ocfs2_claim_new_inode:2216 ERROR: status = -30
[  167.245959][ T8227] (syz.3.1750,8227,1):ocfs2_claim_new_inode:2231 ERROR: status = -30
[  167.275042][ T8227] (syz.3.1750,8227,0):ocfs2_mknod_locked:637 ERROR: status = -30
[  167.304619][ T8227] (syz.3.1750,8227,0):ocfs2_mknod:383 ERROR: status = -30
[  167.395764][ T8227] (syz.3.1750,8227,0):ocfs2_mknod:500 ERROR: status = -30
[  167.422099][ T8227] (syz.3.1750,8227,0):ocfs2_create:674 ERROR: status = -30
[  167.438588][ T8235] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.465782][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.497191][ T8235] device bridge_slave_0 entered promiscuous mode
[  167.528573][ T8235] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.544635][ T4250] ocfs2: Unmounting device (7,3) on (node local)
[  167.570674][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.583016][ T8235] device bridge_slave_1 entered promiscuous mode
[  167.758787][ T8235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.980745][ T8235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.072046][ T4266] Bluetooth: hci2: command tx timeout
[  168.210501][ T8265] loop4: detected capacity change from 0 to 32768
[  168.261138][ T8235] team0: Port device team_slave_0 added
[  168.305952][ T8313] loop3: detected capacity change from 0 to 256
[  168.321956][ T8265] __jfs_setxattr: xattr_size = 74, new_size = 12820
[  168.380181][ T8313] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  168.400716][ T8235] team0: Port device team_slave_1 added
[  168.459085][ T8313] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  168.671459][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.713152][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.755232][ T8235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.811957][ T4538] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  168.834158][ T8325] loop2: detected capacity change from 0 to 2048
[  168.862739][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.870478][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.932334][ T4418] IPVS: stopping backup sync thread 6696 ...
[  168.944868][ T8235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.948866][ T8330] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.046525][ T8325] NILFS (loop2): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[  169.062114][ T4538] usb 2-1: Using ep0 maxpacket: 8
[  169.067412][ T5939] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  169.069954][ T8325] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16)
[  169.118287][ T8325] Remounting filesystem read-only
[  169.133040][ T8325] NILFS (loop2): error -5 truncating bmap (ino=16)
[  169.201518][ T4264] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  169.218846][ T4264] NILFS (loop2): discard dirty block: blocknr=39, size=1024
[  169.236021][ T4264] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.272422][ T4538] usb 2-1: unable to get BOS descriptor or descriptor too short
[  169.289290][ T4264] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.302360][ T8235] device hsr_slave_0 entered promiscuous mode
[  169.313457][ T4264] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.313731][ T8235] device hsr_slave_1 entered promiscuous mode
[  169.323059][ T5939] usb 5-1: Using ep0 maxpacket: 32
[  169.343146][ T8235] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.354657][ T4264] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  169.364049][ T4538] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  169.372384][ T8235] Cannot create hsr debugfs directory
[  169.382196][ T4538] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.405597][ T4264] NILFS (loop2): discard dirty page: offset=0, ino=3
[  169.413956][ T4538] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  169.431922][ T4264] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.440976][ T4538] usb 2-1: config 1 has no interface number 1
[  169.451121][ T4264] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.467878][ T4538] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  169.481606][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.502035][ T4264] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  169.509534][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.519939][ T4538] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  169.532362][ T4264] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  169.551587][ T5939] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  169.578073][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.608368][ T5939] usb 5-1: config 0 descriptor??
[  169.626322][ T8348] loop3: detected capacity change from 0 to 2048
[  169.683351][ T5939] hub 5-1:0.0: USB hub found
[  169.752605][ T4538] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  169.755892][ T8348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  169.765594][ T4538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.778922][ T4538] usb 2-1: Product: syz
[  169.785690][ T4538] usb 2-1: Manufacturer: syz
[  169.790770][ T4538] usb 2-1: SerialNumber: syz
[  169.841642][ T4418] device hsr_slave_0 left promiscuous mode
[  169.870672][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  169.883744][ T4418] device hsr_slave_1 left promiscuous mode
[  169.902259][ T5939] hub 5-1:0.0: 1 port detected
[  169.920799][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.957119][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.010985][ T4418] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.038826][ T4418] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.058082][ T4418] device bridge_slave_1 left promiscuous mode
[  170.079740][ T4418] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.108103][ T4418] device bridge_slave_0 left promiscuous mode
[  170.117824][ T4418] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.123797][ T5939] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  170.142123][ T4266] Bluetooth: hci2: command tx timeout
[  170.158006][ T5939] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  170.167566][ T4538] usb 2-1: USB disconnect, device number 10
[  170.210790][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.263549][ T4418] device veth0_macvtap left promiscuous mode
[  170.271649][ T4418] device veth1_vlan left promiscuous mode
[  170.283865][ T4418] device veth0_vlan left promiscuous mode
[  170.292230][ T5939] usbhid 5-1:0.0: can't add hid device: -71
[  170.302738][ T5939] usbhid: probe of 5-1:0.0 failed with error -71
[  170.353507][ T5939] usb 5-1: USB disconnect, device number 12
[  170.591461][ T4418] bond3 (unregistering): Released all slaves
[  170.608277][ T4418] bond2 (unregistering): Released all slaves
[  170.661282][ T4418] bond1 (unregistering): Released all slaves
[  170.758790][ T8385] loop4: detected capacity change from 0 to 256
[  170.946998][ T8391] loop4: detected capacity change from 0 to 256
[  170.999335][ T8391] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  171.030829][ T8393] usb usb7: usbfs: process 8393 (syz.1.1812) did not claim interface 0 before use
[  171.417378][ T4418] team0 (unregistering): Port device team_slave_1 removed
[  171.462058][ T4418] team0 (unregistering): Port device team_slave_0 removed
[  171.504057][ T4418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.549371][ T4418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.014784][ T4418] bond0 (unregistering): Released all slaves
[  172.231973][   T48] Bluetooth: hci2: command tx timeout
[  172.429895][ T8406] loop1: detected capacity change from 0 to 764
[  172.495552][ T8406] rock: directory entry would overflow storage
[  172.522979][ T8406] rock: sig=0x4654, size=5, remaining=4
[  172.602622][ T8235] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  172.630898][ T8235] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  172.686281][ T8235] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  172.780166][ T8235] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  173.091299][ T8435] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  173.167671][ T8235] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.257789][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.268340][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.296593][ T8235] 8021q: adding VLAN 0 to HW filter on device team0
[  173.328274][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  173.367884][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  173.407430][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.414629][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.492755][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  173.548620][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  173.578830][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  173.642415][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.649653][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.689064][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  173.723830][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  173.781785][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  173.813602][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  173.842637][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  173.890159][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  173.930352][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  173.937232][ T8470] loop2: detected capacity change from 0 to 256
[  173.954015][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.969423][ T8470] FAT-fs (loop2): Directory bread(block 1285) failed
[  173.997123][ T8235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.023874][ T8235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  174.048818][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  174.057587][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  174.094837][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  174.284934][ T8475] loop3: detected capacity change from 0 to 4096
[  174.302033][   T48] Bluetooth: hci2: command tx timeout
[  174.400682][ T8487] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.846251][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  174.896105][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  174.943067][ T8235] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.008931][ T8519] loop1: detected capacity change from 0 to 1024
[  175.015818][ T8523] loop4: detected capacity change from 0 to 64
[  175.346122][ T8538] process 'syz.4.1865' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  175.782185][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1874'.
[  175.869053][    C1] vkms_vblank_simulate: vblank timer overrun
[  175.967423][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  176.033062][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  176.103396][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  176.127509][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  176.144849][ T8572] tmpfs: Bad value for 'mpol'
[  176.165519][ T8235] device veth0_vlan entered promiscuous mode
[  176.187725][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  176.212745][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  176.246188][ T8235] device veth1_vlan entered promiscuous mode
[  176.328373][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  176.376361][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  176.387191][ T8581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1883'.
[  176.412804][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'.
[  176.413108][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  176.441495][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  176.445385][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1883'.
[  176.462593][ T8235] device veth0_macvtap entered promiscuous mode
[  176.483445][ T8235] device veth1_macvtap entered promiscuous mode
[  176.560836][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.591924][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.601821][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.661402][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.683892][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.703011][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.715004][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.725874][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.737892][ T8235] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.746393][ T8594] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1889'.
[  176.792145][ T8594] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  176.799682][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  176.831170][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  176.853501][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  176.877586][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  176.904726][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.943815][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.982024][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.033150][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.063611][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.077563][ T8600] loop4: detected capacity change from 0 to 8192
[  177.084400][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.102925][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.125381][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.137701][ T8600] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  177.144725][ T8235] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.174677][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  177.213810][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  177.228065][ T8600] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[  177.237436][ T8600] FAT-fs (loop4): Filesystem has been set read-only
[  177.246656][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1893'.
[  177.282996][ T8235] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.319968][ T8235] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.361944][ T8235] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.371227][ T8235] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.423078][ T4258] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001)
[  177.673008][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.709596][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.801572][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  177.836563][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.872094][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.928064][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  178.069309][ T8645] netlink: 73368 bytes leftover after parsing attributes in process `syz.4.1907'.
[  178.117210][ T8645] netlink: zone id is out of range
[  178.426559][ T8665] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1915'.
[  178.908127][ T8689] loop4: detected capacity change from 0 to 256
[  178.994176][ T8689] FAT-fs (loop4): Directory bread(block 64) failed
[  179.011493][ T8689] FAT-fs (loop4): Directory bread(block 65) failed
[  179.064269][ T8689] FAT-fs (loop4): Directory bread(block 66) failed
[  179.070851][ T8689] FAT-fs (loop4): Directory bread(block 67) failed
[  179.127924][ T8689] FAT-fs (loop4): Directory bread(block 68) failed
[  179.159058][ T8689] FAT-fs (loop4): Directory bread(block 69) failed
[  179.182135][ T8689] FAT-fs (loop4): Directory bread(block 70) failed
[  179.189081][ T8689] FAT-fs (loop4): Directory bread(block 71) failed
[  179.206868][ T8689] FAT-fs (loop4): Directory bread(block 72) failed
[  179.253028][ T8689] FAT-fs (loop4): Directory bread(block 73) failed
[  179.462038][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'.
[  179.971954][ T5527] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  180.180822][ T8753] netlink: 'syz.3.1951': attribute type 2 has an invalid length.
[  180.191768][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'.
[  180.221324][ T8755] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  180.271044][ T8755] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  180.281770][ T5527] usb 5-1: Using ep0 maxpacket: 8
[  180.412250][ T5527] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  180.523698][ T5527] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  180.632267][ T5527] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  180.717891][ T8781] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16)
[  180.762063][ T8781] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  180.807677][ T8784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.852686][ T5527] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  180.889753][ T5527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.905626][ T5527] usb 5-1: Product: syz
[  180.924175][ T5527] usb 5-1: Manufacturer: syz
[  180.932536][ T5527] usb 5-1: SerialNumber: syz
[  180.938950][ T8792] usb usb9: usbfs: interface 0 claimed by hub while 'syz.1.1967' sets config #0
[  180.944316][ T8789] ax25_connect(): syz.5.1966 uses autobind, please contact jreuter@yaina.de
[  180.949032][ T4257] Bluetooth: hci3: command 0x0406 tx timeout
[  180.958994][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  180.963973][ T4252] Bluetooth: hci1: command 0x0406 tx timeout
[  180.969978][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  181.066894][ T8795] loop3: detected capacity change from 0 to 1024
[  181.253379][ T5527] adutux 5-1:168.0: interrupt endpoints not found
[  181.285277][ T5527] usb 5-1: USB disconnect, device number 13
[  181.311619][ T8806] loop3: detected capacity change from 0 to 256
[  181.393679][ T8806] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8a996bfe, utbl_chksum : 0xe619d30d)
[  181.638469][ T8823] xt_TCPMSS: Only works on TCP SYN packets
[  181.782080][ T8828] tmpfs: Bad value for 'mpol'
[  182.276713][   T26] audit: type=1326 audit(2000000093.639:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.2.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cdd7e719 code=0x7ffc0000
[  182.368038][ T8861] loop1: detected capacity change from 0 to 16
[  182.382493][   T26] audit: type=1326 audit(2000000093.689:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.2.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f74cdd7e719 code=0x7ffc0000
[  182.438274][ T8861] erofs: (device loop1): mounted with root inode @ nid 36.
[  182.507179][   T26] audit: type=1326 audit(2000000093.689:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.2.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cdd7e719 code=0x7ffc0000
[  182.529380][    C1] vkms_vblank_simulate: vblank timer overrun
[  182.672646][ T8873] loop4: detected capacity change from 0 to 1024
[  182.685993][   T26] audit: type=1326 audit(2000000093.689:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.2.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cdd7e719 code=0x7ffc0000
[  182.745890][ T8880] wlan0 speed is unknown, defaulting to 1000
[  182.746396][ T8873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  182.947713][ T4258] EXT4-fs (loop4): unmounting filesystem.
[  183.077709][ T8897] loop4: detected capacity change from 0 to 64
[  183.275051][ T8901] loop3: detected capacity change from 0 to 2048
[  183.371257][ T8901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.416206][ T8910] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  183.485085][ T8913] __nla_validate_parse: 2 callbacks suppressed
[  183.485102][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2016'.
[  183.542004][ T4241] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  183.752502][ T8922] loop5: detected capacity change from 0 to 1024
[  183.776637][ T8927] autofs4:pid:8927:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374)
[  183.820744][ T8927] autofs4:pid:8927:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  183.868895][ T8929] MTD: Couldn't look up '': -22
[  184.092259][ T4241] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  184.118183][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.159796][ T4241] usb 3-1: Product: syz
[  184.167634][ T4241] usb 3-1: Manufacturer: syz
[  184.187955][ T4241] usb 3-1: SerialNumber: syz
[  184.272848][ T4241] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  184.354538][ T8951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2032'.
[  184.399579][ T8951] bond0: (slave bond_slave_0): Slave does not support ipsec offload
[  184.459508][ T8957] loop5: detected capacity change from 0 to 64
[  184.563062][ T8957] Trying to free block not in datazone
[  184.851997][ T4538] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  184.862310][  T125] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  184.958729][ T8980] loop4: detected capacity change from 0 to 256
[  184.972194][ T8978] netlink: 'syz.1.2045': attribute type 3 has an invalid length.
[  184.980810][ T8980] exfat: Deprecated parameter 'namecase'
[  185.002590][ T8980] exfat: Deprecated parameter 'utf8'
[  185.035560][ T8980] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  185.135415][ T4538] usb 4-1: Using ep0 maxpacket: 16
[  185.264072][ T8990] loop5: detected capacity change from 0 to 512
[  185.271760][ T4592] usb 3-1: USB disconnect, device number 10
[  185.276412][ T8992] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2050'.
[  185.287048][ T4538] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  185.294922][ T8990] EXT4-fs: Ignoring removed mblk_io_submit option
[  185.297053][ T4538] usb 4-1: config 0 has no interface number 0
[  185.328308][ T4538] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 55, changing to 9
[  185.334401][ T8990] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  185.350833][ T4538] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8496, setting to 1024
[  185.418894][ T8990] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.2052: corrupted in-inode xattr
[  185.471232][ T8990] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2052: couldn't read orphan inode 15 (err -117)
[  185.532524][ T4538] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  185.569532][ T8990] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  185.589165][ T4538] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  185.628806][ T4538] usb 4-1: Product: syz
[  185.647149][ T4538] usb 4-1: SerialNumber: syz
[  185.683637][ T4538] usb 4-1: config 0 descriptor??
[  185.723915][ T4538] cm109 4-1:0.8: invalid payload size 1024, expected 4
[  185.734821][ T8235] EXT4-fs (loop5): unmounting filesystem.
[  185.743441][ T4538] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input9
[  185.907835][  T125] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  185.924362][  T125] ath9k_htc: Failed to initialize the device
[  185.945257][ T4592] usb 3-1: ath9k_htc: USB layer deinitialized
[  185.952107][ T4595] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  186.080400][ T9032] loop2: detected capacity change from 0 to 8
[  186.108359][ T9032] SQUASHFS error: lzo decompression failed, data probably corrupt
[  186.124509][ T9032] SQUASHFS error: Failed to read block 0x1c0: -5
[  186.130889][ T9032] SQUASHFS error: Unable to read metadata cache entry [1be]
[  186.162146][    C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[  186.182146][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  186.201904][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  186.221897][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  186.233797][ T5527] usb 4-1: USB disconnect, device number 10
[  186.241959][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  186.248943][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  186.259541][ T4538] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  186.289238][ T9038] netlink: 'syz.5.2073': attribute type 8 has an invalid length.
[  186.292254][ T5527] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  186.332252][ T4595] usb 5-1: config 0 has an invalid interface number: 169 but max is 0
[  186.356769][ T4595] usb 5-1: config 0 has no interface number 0
[  186.391127][ T9040] loop2: detected capacity change from 0 to 2048
[  186.418200][ T9040] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  186.522362][ T4595] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34
[  186.550796][ T4595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.565469][ T4595] usb 5-1: Product: syz
[  186.570378][ T4595] usb 5-1: Manufacturer: syz
[  186.576025][ T4595] usb 5-1: SerialNumber: syz
[  186.592385][ T4595] usb 5-1: config 0 descriptor??
[  186.682103][ T4538] usb 2-1: config 0 has an invalid interface number: 216 but max is 0
[  186.690358][ T4538] usb 2-1: config 0 has no interface number 0
[  186.731647][ T4538] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  186.770622][ T4538] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  186.839554][ T4595] usb 5-1: USB disconnect, device number 14
[  186.906057][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2083'.
[  186.963339][ T4538] usb 2-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7
[  186.991553][ T4538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.023209][ T4538] usb 2-1: Product: syz
[  187.027471][ T4538] usb 2-1: Manufacturer: syz
[  187.052031][ T4538] usb 2-1: SerialNumber: syz
[  187.069870][ T4538] usb 2-1: config 0 descriptor??
[  187.084171][ T9070] cgroup: name respecified
[  187.140220][ T4538] snd-usb-audio: probe of 2-1:0.216 failed with error -2
[  187.211224][ T9072] loop3: detected capacity change from 0 to 1024
[  187.231383][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  187.300358][ T9072] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  187.312295][ T9072] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.357661][ T4592] usb 2-1: USB disconnect, device number 11
[  187.444649][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'.
[  187.508943][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  187.679825][ T9095] QAT: failed to copy from user cfg_data.
[  187.730388][ T9089] loop5: detected capacity change from 0 to 4096
[  187.745233][ T9089] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  187.825087][ T9089] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  187.852024][   T26] audit: type=1107 audit(2000000099.209:33): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�L<5'
[  187.857706][ T9089] ntfs3: loop5: Failed to load $Extend.
[  187.905999][ T9104] loop2: detected capacity change from 0 to 24
[  187.962803][ T9104] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  188.033857][ T9104] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  188.118406][ T9104] VFS: Lookup of 'file0' in romfs loop2 would have caused loop
[  188.318599][ T9121] loop1: detected capacity change from 0 to 16
[  188.409339][ T9121] erofs: (device loop1): mounted with root inode @ nid 36.
[  188.446935][   T26] audit: type=1800 audit(2000000099.809:34): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2109" name="file1" dev="loop1" ino=86 res=0 errno=0
[  188.780907][   T26] audit: type=1400 audit(2000000100.139:35): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=9143 comm="syz.4.2119"
[  188.849108][ T9147] loop3: detected capacity change from 0 to 2048
[  188.901306][ T9147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.913294][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'.
[  189.983560][ T9150] loop5: detected capacity change from 0 to 32768
[  190.018535][ T9150] (syz.5.2118,9150,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  190.048542][ T9150] (syz.5.2118,9150,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  190.098399][ T9150] JBD2: Ignoring recovery information on journal
[  190.161744][ T9150] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  190.182110][ T4538] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  190.258655][ T9193] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2137'.
[  190.380381][ T9162] loop1: detected capacity change from 0 to 32768
[  190.437954][ T8235] ocfs2: Unmounting device (7,5) on (node local)
[  190.479587][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'.
[  190.528568][ T9162] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  190.617494][ T4538] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  190.644642][ T4538] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  190.661946][ T4538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.683295][ T5527] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x1 
[  190.696288][ T5527] XFS (loop1): Unmount and run xfs_repair
[  190.702773][ T5527] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  190.713940][ T4538] gspca_main: stv0680-2.14.0 probing 041e:4007
[  190.722129][ T5527] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 10 00  XAGF............
[  190.731206][ T5527] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01  ................
[  190.740677][ T5527] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  190.749945][ T5527] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00  ................
[  190.759321][ T5527] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  190.770440][ T5527] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01  ................
[  190.780659][ T5527] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  190.795501][ T5527] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  190.816501][ T9162] XFS (loop1): metadata I/O error in "xfs_read_agf+0x2e2/0x680" at daddr 0x1 len 1 error 74
[  191.390552][ T9239] loop5: detected capacity change from 0 to 4096
[  191.420915][ T9239] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  191.461948][ T9239] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  191.518861][ T9239] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  191.568226][ T9239] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  191.622219][ T9239] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  191.676206][ T9239] ntfs: volume version 3.1.
[  191.707584][ T9239] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  191.733026][ T9239] ntfs: (device loop5): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  191.782117][ T4538] stv0680 3-1:4.0: STV(e): camera ping failed!!
[  191.893380][ T9265] loop3: detected capacity change from 0 to 256
[  191.979176][ T9267] netlink: 'syz.5.2179': attribute type 1 has an invalid length.
[  191.993309][ T5940] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  192.001988][ T4538] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  192.010248][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2179'.
[  192.027348][ T4538] stv0680 3-1:4.0: last error: 81,  command = 0xab
[  192.035785][ T4538] usb 3-1: USB disconnect, device number 11
[  192.271931][ T5940] usb 5-1: Using ep0 maxpacket: 16
[  192.384311][ T9287] loop3: detected capacity change from 0 to 2048
[  192.450365][ T9290] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.592293][ T5940] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  192.622565][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.642648][ T5940] usb 5-1: Product: syz
[  192.662014][ T5940] usb 5-1: Manufacturer: syz
[  192.672037][ T5940] usb 5-1: SerialNumber: syz
[  192.691139][ T5940] usb 5-1: config 0 descriptor??
[  192.763171][ T5940] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  192.797286][ T5940] usb 5-1: Detected FT-X
[  192.804141][ T9301] AppArmor: change_hat: Invalid input ''
[  192.972273][ T5940] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  193.026763][ T5940] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  193.062079][ T5940] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71
[  193.088915][ T5940] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  193.123690][ T5940] usb 5-1: USB disconnect, device number 15
[  193.152231][ T5940] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  193.178965][ T5940] ftdi_sio 5-1:0.0: device disconnected
[  193.320830][ T9286] loop1: detected capacity change from 0 to 32768
[  193.381186][ T9324] netlink: 'syz.3.2197': attribute type 13 has an invalid length.
[  193.471589][ T9326] loop2: detected capacity change from 0 to 128
[  193.495727][ T9328] tmpfs: Bad value for 'nr_blocks'
[  193.506921][ T9326] VFS: Found a Xenix FS (block size = 1024) on device loop2
[  193.640498][ T4264] sysv_free_block: flc_count > flc_size
[  193.657201][ T4264] sysv_free_block: flc_count > flc_size
[  193.663937][ T4264] sysv_free_block: flc_count > flc_size
[  193.688272][ T4264] sysv_free_block: flc_count > flc_size
[  193.701948][ T4264] sysv_free_block: flc_count > flc_size
[  193.707671][ T4264] sysv_free_block: flc_count > flc_size
[  193.720934][ T4264] sysv_free_block: flc_count > flc_size
[  193.747568][ T4264] sysv_free_block: flc_count > flc_size
[  193.773793][ T4264] sysv_free_block: flc_count > flc_size
[  193.784694][ T4264] sysv_free_block: flc_count > flc_size
[  193.795948][ T4264] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  194.072100][ T9356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'.
[  194.228117][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  194.234499][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  194.526801][ T9378] No such timeout policy "syz0"
[  194.769979][ T9377] loop1: detected capacity change from 0 to 8192
[  194.833321][ T9377] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  194.872161][ T9377] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  194.881528][ T9377] REISERFS (device loop1): using ordered data mode
[  194.954580][ T9377] reiserfs: using flush barriers
[  194.967964][ T9377] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  195.026289][ T9377] REISERFS (device loop1): checking transaction log (loop1)
[  195.075150][ T9402] loop5: detected capacity change from 0 to 2048
[  195.100387][ T9377] REISERFS (device loop1): Using r5 hash to sort names
[  195.128272][ T9409] tmpfs: Bad value for 'mpol'
[  195.136549][ T9377] REISERFS (device loop1): using 3.5.x disk format
[  195.154139][ T9377] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  195.186889][ T9412] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.306156][ T9416] loop2: detected capacity change from 0 to 256
[  195.321547][ T9412] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  195.353648][ T9412] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  195.404917][ T9416] FAT-fs (loop2): Directory bread(block 64) failed
[  195.422514][ T9416] FAT-fs (loop2): Directory bread(block 65) failed
[  195.429438][ T9412] Remounting filesystem read-only
[  195.441669][   T33] NILFS (loop5): discard dirty page: offset=0, ino=2
[  195.458707][ T9416] FAT-fs (loop2): Directory bread(block 66) failed
[  195.488266][   T33] NILFS (loop5): discard dirty block: blocknr=18, size=1024
[  195.496651][ T9416] FAT-fs (loop2): Directory bread(block 67) failed
[  195.512214][   T33] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  195.532072][ T9416] FAT-fs (loop2): Directory bread(block 68) failed
[  195.538716][ T9416] FAT-fs (loop2): Directory bread(block 69) failed
[  195.545693][   T33] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  195.556785][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  195.556800][   T26] audit: type=1326 audit(2000000106.919:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ab7e719 code=0x7ffc0000
[  195.585662][ T9416] FAT-fs (loop2): Directory bread(block 70) failed
[  195.602439][   T33] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  195.611424][   T33] NILFS (loop5): discard dirty page: offset=0, ino=5
[  195.631993][ T9416] FAT-fs (loop2): Directory bread(block 71) failed
[  195.638654][ T9416] FAT-fs (loop2): Directory bread(block 72) failed
[  195.671088][   T33] NILFS (loop5): discard dirty block: blocknr=41, size=1024
[  195.679305][ T9416] FAT-fs (loop2): Directory bread(block 73) failed
[  195.684010][   T26] audit: type=1326 audit(2000000106.959:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ab7e719 code=0x7ffc0000
[  195.696105][   T33] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  195.798443][   T26] audit: type=1326 audit(2000000106.979:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb74ab7e719 code=0x7ffc0000
[  195.810668][   T33] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  195.851559][   T33] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  195.861127][   T33] NILFS (loop5): discard dirty page: offset=0, ino=3
[  195.912190][   T33] NILFS (loop5): discard dirty block: blocknr=42, size=1024
[  195.925212][   T33] NILFS (loop5): discard dirty block: blocknr=43, size=1024
[  195.942247][   T26] audit: type=1326 audit(2000000106.979:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ab7e719 code=0x7ffc0000
[  195.970176][   T33] NILFS (loop5): discard dirty block: blocknr=44, size=1024
[  195.991051][ T9440] loop2: detected capacity change from 0 to 256
[  195.997194][   T33] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.024778][   T26] audit: type=1326 audit(2000000106.979:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.3.2238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74ab7e719 code=0x7ffc0000
[  196.031934][   T33] NILFS (loop5): discard dirty page: offset=0, ino=4
[  196.126095][ T9432] loop4: detected capacity change from 0 to 8192
[  196.149510][   T33] NILFS (loop5): discard dirty block: blocknr=40, size=1024
[  196.172155][   T33] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.181630][ T9432] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  196.213749][   T33] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.237022][   T33] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.246193][ T9432] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  196.246529][ T8235] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  196.256110][ T9432] REISERFS (device loop4): using ordered data mode
[  196.271180][ T9432] reiserfs: using flush barriers
[  196.277946][ T9432] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  196.302974][ T8235] NILFS (loop5): discard dirty page: offset=0, ino=6
[  196.310275][ T8235] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.319346][ T8235] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.341903][ T8235] NILFS (loop5): discard dirty block: blocknr=37, size=1024
[  196.349432][ T8235] NILFS (loop5): discard dirty block: blocknr=38, size=1024
[  196.392380][ T9432] REISERFS (device loop4): checking transaction log (loop4)
[  196.476326][ T9432] REISERFS (device loop4): Using tea hash to sort names
[  196.494684][ T9432] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  196.786680][   T52] block nbd2: Attempted send on invalid socket
[  196.793568][   T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  196.807007][ T9461] hfsplus: unable to find HFS+ superblock
[  196.961668][ T9468] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2252'.
[  197.056210][ T9472] netlink: 'syz.2.2253': attribute type 10 has an invalid length.
[  197.095527][ T9472] device hsr0 entered promiscuous mode
[  197.119287][ T9475] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2254'.
[  197.133920][ T9472] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  197.192778][ T9472] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  197.232139][ T9472] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  197.294157][ T9472] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  197.373566][ T9486] futex_wake_op: syz.1.2258 tries to shift op by 32; fix this program
[  197.476971][ T9435] loop3: detected capacity change from 0 to 32768
[  197.508417][ T9435] XFS: noikeep mount option is deprecated.
[  197.539114][ T9435] XFS: attr2 mount option is deprecated.
[  197.693534][ T9435] XFS (loop3): Mounting V5 Filesystem
[  197.851547][ T9435] XFS (loop3): Ending clean mount
[  197.912591][ T9435] XFS (loop3): Quotacheck needed: Please wait.
[  197.979685][ T9435] XFS (loop3): Quotacheck: Done.
[  198.119166][ T9529] loop1: detected capacity change from 0 to 256
[  198.164269][ T9532] netlink: 'syz.2.2273': attribute type 21 has an invalid length.
[  198.194295][ T9532] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2273'.
[  198.301531][ T4250] XFS (loop3): Unmounting Filesystem
[  198.582174][ T4302] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  198.904911][ T9562] Unsupported ieee802154 address type: 0
[  198.957120][ T4302] usb 6-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2
[  198.986906][ T4302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.035561][ T4302] usb 6-1: config 0 descriptor??
[  199.109646][ T4302] usb 6-1: unknown interface protocol 0x9a, assuming v1
[  199.126833][ T4302] usb 6-1: cannot find UAC_HEADER
[  199.199169][ T4302] snd-usb-audio: probe of 6-1:0.0 failed with error -22
[  199.295208][   T26] audit: type=1326 audit(2000000110.659:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cdd7e719 code=0x7ffc0000
[  199.330428][ T4595] usb 6-1: USB disconnect, device number 2
[  199.412631][   T26] audit: type=1326 audit(2000000110.659:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cdd7e719 code=0x7ffc0000
[  199.486003][   T26] audit: type=1326 audit(2000000110.659:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f74cdd7e719 code=0x7ffc0000
[  199.608334][   T26] audit: type=1326 audit(2000000110.659:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cdd7e719 code=0x7ffc0000
[  199.692292][   T26] audit: type=1326 audit(2000000110.659:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.2.2290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74cdd7e719 code=0x7ffc0000
[  199.902009][ T4261] Bluetooth: hci3: command 0x0406 tx timeout
[  200.321431][ T9615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2305'.
[  200.454216][ T9564] loop1: detected capacity change from 0 to 32768
[  200.471533][ T9564] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2286 (9564)
[  200.578410][ T9564] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.647403][ T9564] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  200.721534][ T9564] BTRFS info (device loop1): using free space tree
[  200.932921][ T9655] netlink: 'syz.2.2317': attribute type 21 has an invalid length.
[  200.941429][ T9655] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2317'.
[  201.012027][ T9564] BTRFS info (device loop1): enabling ssd optimizations
[  201.090559][ T4251] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.167872][ T9669] ipt_CLUSTERIP: Please specify destination IP
[  201.642047][ T4597] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  201.725513][ T9689] netlink: 'syz.2.2327': attribute type 21 has an invalid length.
[  201.751425][ T9689] IPv6: NLM_F_CREATE should be specified when creating new route
[  201.773775][ T9692] vivid-000: disconnect
[  201.794868][ T9691] vivid-000: reconnect
[  201.888335][ T9667] orangefs_mount: mount request failed with -4
[  201.894859][ T4597] usb 6-1: Using ep0 maxpacket: 8
[  201.992119][ T9700] loop3: detected capacity change from 0 to 256
[  202.100933][ T9700] FAT-fs (loop3): Directory bread(block 64) failed
[  202.131769][ T9700] FAT-fs (loop3): Directory bread(block 65) failed
[  202.151547][ T9700] FAT-fs (loop3): Directory bread(block 66) failed
[  202.172143][ T4597] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  202.191689][ T4597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.195151][ T9700] FAT-fs (loop3): Directory bread(block 67) failed
[  202.231930][ T4597] usb 6-1: Product: syz
[  202.236183][ T4597] usb 6-1: Manufacturer: syz
[  202.253044][ T9700] FAT-fs (loop3): Directory bread(block 68) failed
[  202.259634][ T9700] FAT-fs (loop3): Directory bread(block 69) failed
[  202.261161][ T4597] usb 6-1: SerialNumber: syz
[  202.294586][ T9700] FAT-fs (loop3): Directory bread(block 70) failed
[  202.310472][ T9718] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2336'.
[  202.317379][ T4597] usb 6-1: config 0 descriptor??
[  202.335728][ T9700] FAT-fs (loop3): Directory bread(block 71) failed
[  202.377783][ T9700] FAT-fs (loop3): Directory bread(block 72) failed
[  202.383775][ T4597] gspca_main: sq930x-2.14.0 probing 2770:930c
[  202.402032][ T9700] FAT-fs (loop3): Directory bread(block 73) failed
[  202.814094][ T4597] gspca_sq930x: ucbus_write failed -71
[  202.820422][ T4597] sq930x: probe of 6-1:0.0 failed with error -71
[  202.890868][ T4597] usb 6-1: USB disconnect, device number 3
[  202.960971][ T9745] (syz.4.2348,9745,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options
[  203.041999][ T9745] (syz.4.2348,9745,1):ocfs2_fill_super:1176 ERROR: status = -22
[  203.198496][ T9759] tmpfs: Bad value for 'mpol'
[  203.283702][ T9765] loop2: detected capacity change from 0 to 8
[  203.340783][ T9765] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[  203.382008][ T6484] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  203.621958][ T6484] usb 4-1: Using ep0 maxpacket: 32
[  203.822345][ T6484] usb 4-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a
[  203.831587][ T6484] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0
[  203.871953][ T6484] usb 4-1: Product: syz
[  203.920693][ T6484] usb 4-1: config 0 descriptor??
[  203.968437][ T9802] netlink: 'syz.1.2370': attribute type 3 has an invalid length.
[  203.999119][ T6484] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[  204.017076][ T6484] gspca_stv06xx: st6422 sensor detected
[  204.336312][ T9820] tmpfs: Bad value for 'mpol'
[  204.572050][ T6484] STV06xx: probe of 4-1:0.0 failed with error -71
[  204.590442][ T6484] usb 4-1: USB disconnect, device number 11
[  204.821999][ T4297] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  204.987890][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2395'.
[  204.996992][   T52] block nbd4: Attempted send on invalid socket
[  204.997045][   T52] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  204.997886][   T52] block nbd4: Attempted send on invalid socket
[  205.021613][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.022573][   T52] block nbd4: Attempted send on invalid socket
[  205.022593][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.023437][   T93] block nbd4: Attempted send on invalid socket
[  205.023457][   T93] I/O error, dev nbd4, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.024457][   T93] block nbd4: Attempted send on invalid socket
[  205.024476][   T93] I/O error, dev nbd4, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.024687][   T93] block nbd4: Attempted send on invalid socket
[  205.024702][   T93] I/O error, dev nbd4, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  205.062149][ T4297] usb 3-1: Using ep0 maxpacket: 16
[  205.186185][ T9860] netlink: 'syz.3.2399': attribute type 1 has an invalid length.
[  205.232160][ T9860] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2399'.
[  205.393249][ T4297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  205.572311][ T4297] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  205.594450][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.602911][ T9874] infiniband syz2: set active
[  205.610703][ T9874] infiniband syz2: added veth0_vlan
[  205.636390][ T4297] usb 3-1: Product: syz
[  205.640606][ T4297] usb 3-1: Manufacturer: syz
[  205.656672][ T4297] usb 3-1: SerialNumber: syz
[  205.673981][ T9874] RDS/IB: syz2: added
[  205.694197][ T4297] usb 3-1: config 0 descriptor??
[  205.696689][ T9874] smc: adding ib device syz2 with port count 1
[  205.720269][ T9874] smc:    ib device syz2 port 1 has pnetid 
[  205.758650][ T4297] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  205.801975][ T4538] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  205.943457][ T9898] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  205.988802][ T4539] usb 3-1: USB disconnect, device number 12
[  206.005732][   T33] usb 3-1: Failed to submit usb control message: -71
[  206.016249][   T33] usb 3-1: unable to send the bmi data to the device: -71
[  206.041953][ T4538] usb 5-1: Using ep0 maxpacket: 8
[  206.047253][   T33] usb 3-1: unable to get target info from device
[  206.063518][   T33] usb 3-1: could not get target info (-71)
[  206.080278][   T33] usb 3-1: could not probe fw (-71)
[  206.145600][ T9902] loop1: detected capacity change from 0 to 2048
[  206.167511][ T4538] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  206.218962][ T9905] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  206.244349][ T9907] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  206.251703][ T9902] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  206.318059][ T9902] Remounting filesystem read-only
[  206.352046][ T4538] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  206.364327][ T4538] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  206.382876][ T4538] usb 5-1: Product: syz
[  206.391332][ T4538] usb 5-1: Manufacturer: syz
[  206.402014][ T4538] usb 5-1: SerialNumber: syz
[  206.549307][ T9915] loop1: detected capacity change from 0 to 512
[  206.631005][ T9915] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  206.650334][ T9915] ext4 filesystem being mounted at /537/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  206.667077][ T4538] usb 5-1: Invalid connection information received from device
[  206.693663][ T9915] EXT4-fs error (device loop1): ext4_xattr_block_list:719: inode #15: comm syz.1.2422: corrupted xattr block 33
[  206.778439][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  206.881487][ T5527] usb 5-1: USB disconnect, device number 16
[  207.080436][ T9936] loop2: detected capacity change from 0 to 1764
[  207.102009][ T4538] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  207.321041][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2435'.
[  207.338767][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'.
[  207.474471][ T4538] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  207.514089][ T4538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.531816][ T4538] usb 6-1: config 0 descriptor??
[  207.714374][ T9963] loop1: detected capacity change from 0 to 1764
[  207.778461][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2448'.
[  207.840026][ T9969] rdma_rxe: rxe_register_device failed with error -23
[  207.862114][ T9969] rdma_rxe: failed to add veth0_vlan
[  207.886439][ T9973] loop2: detected capacity change from 0 to 1024
[  208.002225][ T5527] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  208.023883][ T4538] ath6kl: Failed to submit usb control message: -71
[  208.032403][ T4538] ath6kl: unable to send the bmi data to the device: -71
[  208.039478][ T4538] ath6kl: Unable to send get target info: -71
[  208.049360][ T9982] tmpfs: Bad value for 'mpol'
[  208.066079][ T4538] ath6kl: Failed to init ath6kl core: -71
[  208.176458][ T4538] ath6kl_usb: probe of 6-1:0.0 failed with error -71
[  208.216766][ T4538] usb 6-1: USB disconnect, device number 4
[  208.272086][ T5527] usb 5-1: Using ep0 maxpacket: 8
[  208.412086][ T5527] usb 5-1: config 0 has an invalid interface number: 6 but max is 2
[  208.430373][ T5527] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[  208.452262][ T5527] usb 5-1: config 0 has no interface number 1
[  208.481007][ T5527] usb 5-1: config 0 has no interface number 2
[  208.495343][ T5527] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  208.525189][ T5527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.542314][ T9995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2460'.
[  208.568913][ T9997] loop2: detected capacity change from 0 to 1764
[  208.572603][ T5527] usb 5-1: config 0 descriptor??
[  208.832093][ T5527] qcserial 5-1:0.6: Qualcomm USB modem converter detected
[  208.961052][T10008] netlink: 'syz.2.2465': attribute type 5 has an invalid length.
[  209.051791][ T5527] usb 5-1: USB disconnect, device number 17
[  209.073092][ T5527] qcserial 5-1:0.6: device disconnected
[  209.254439][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2470'.
[  209.505742][T10000] loop5: detected capacity change from 0 to 32768
[  209.584402][T10000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2461 (10000)
[  209.657871][T10000] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.711966][T10000] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  209.721204][T10000] BTRFS info (device loop5): using free space tree
[  210.116844][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2487'.
[  210.170001][T10000] BTRFS info (device loop5): enabling ssd optimizations
[  210.259925][T10072] libceph: resolve 'c' (ret=-3): failed
[  210.314889][ T8235] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  210.546079][T10082] loop3: detected capacity change from 0 to 256
[  210.749182][T10050] loop2: detected capacity change from 0 to 32768
[  210.772833][T10050] XFS: ikeep mount option is deprecated.
[  210.872601][T10050] XFS (loop2): Mounting V5 Filesystem
[  211.034349][T10050] XFS (loop2): Ending clean mount
[  211.061791][T10050] XFS (loop2): Quotacheck needed: Please wait.
[  211.164641][T10107] loop4: detected capacity change from 0 to 1764
[  211.168124][T10050] XFS (loop2): Quotacheck: Done.
[  211.301609][ T4264] XFS (loop2): Unmounting Filesystem
[  211.448433][T10113] loop4: detected capacity change from 0 to 1024
[  211.487651][T10113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.600146][T10113] tmpfs: Bad value for 'mpol'
[  211.612855][T10117] loop5: detected capacity change from 0 to 64
[  212.008369][T10106] loop3: detected capacity change from 0 to 32768
[  212.046327][T10124] QAT: Invalid ioctl 1075883590
[  212.051437][T10124] QAT: Invalid ioctl 1075883590
[  212.097969][T10124] QAT: Invalid ioctl 1075883590
[  212.105492][T10096] loop1: detected capacity change from 0 to 32768
[  212.114935][T10124] QAT: Invalid ioctl 1075883590
[  212.130425][T10124] QAT: Invalid ioctl 1075883590
[  212.149863][T10124] QAT: Invalid ioctl 1075883590
[  212.172599][T10124] QAT: Invalid ioctl 1075883590
[  212.182987][T10124] QAT: Invalid ioctl 1075883590
[  212.199238][T10124] QAT: Invalid ioctl 1075883590
[  212.213142][T10124] QAT: Invalid ioctl 1075883590
[  212.238666][T10096] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  212.546276][ T4251] ocfs2: Unmounting device (7,1) on (node local)
[  213.015522][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2521'.
[  213.040136][T10168] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2530'.
[  213.065035][T10170] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  213.339396][T10183] program syz.1.2538 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  213.480012][T10191] netlink: 'syz.5.2542': attribute type 13 has an invalid length.
[  213.505868][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2542'.
[  213.538284][T10191] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  213.621962][ T4592] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  213.628344][T10199] netlink: 'syz.1.2546': attribute type 5 has an invalid length.
[  213.681385][T10201] SET target dimension over the limit!
[  213.787716][T10203] loop4: detected capacity change from 0 to 1764
[  213.881958][ T4592] usb 4-1: Using ep0 maxpacket: 16
[  213.939051][T10212] loop2: detected capacity change from 0 to 4096
[  214.002365][ T4592] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  214.183259][ T4592] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  214.207779][ T4592] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.241364][ T4592] usb 4-1: Product: syz
[  214.256616][ T4592] usb 4-1: Manufacturer: syz
[  214.261268][ T4592] usb 4-1: SerialNumber: syz
[  214.292793][ T4592] usb 4-1: config 0 descriptor??
[  214.346042][T10232] loop5: detected capacity change from 0 to 64
[  214.387935][ T4592] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  214.432637][T10238] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  214.581215][ T4592] usb 4-1: USB disconnect, device number 12
[  214.592428][    T9] usb 4-1: Failed to submit usb control message: -71
[  214.599942][    T9] usb 4-1: unable to send the bmi data to the device: -71
[  214.632057][    T9] usb 4-1: unable to get target info from device
[  214.652279][    T9] usb 4-1: could not get target info (-71)
[  214.658161][    T9] usb 4-1: could not probe fw (-71)
[  215.385651][T10275] device erspan1 entered promiscuous mode
[  215.471579][T10242] loop1: detected capacity change from 0 to 32768
[  215.525767][T10242] XFS: noikeep mount option is deprecated.
[  215.531636][T10242] XFS: attr2 mount option is deprecated.
[  215.631558][T10242] XFS (loop1): Mounting V5 Filesystem
[  215.692081][ T4241] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  215.870540][T10242] XFS (loop1): Ending clean mount
[  215.894097][T10242] XFS (loop1): Quotacheck needed: Please wait.
[  215.959198][T10242] XFS (loop1): Quotacheck: Done.
[  216.047278][T10315] loop4: detected capacity change from 0 to 2048
[  216.062299][ T4241] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.080617][T10318] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  216.082361][ T4241] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  216.129202][T10315] NILFS (loop4): error -2 truncating bmap (ino=16)
[  216.160205][ T4251] XFS (loop1): Unmounting Filesystem
[  216.252140][ T4241] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  216.263683][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  216.282404][ T4241] usb 3-1: SerialNumber: syz
[  216.304354][T10321] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2602'.
[  216.594487][ T4241] usb 3-1: 0:2 : does not exist
[  216.599452][ T4241] usb 3-1: unit 5: unexpected type 0x03
[  216.658110][ T4241] usb 3-1: USB disconnect, device number 13
[  216.748928][ T4388] udevd[4388]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  216.792323][T10339] xt_bpf: check failed: parse error
[  217.038744][T10349] wlan0 speed is unknown, defaulting to 1000
[  217.170245][T10359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2617'.
[  217.187479][T10359] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2617'.
[  218.014807][T10399] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2639'.
[  218.141226][T10401] netlink: 'syz.3.2640': attribute type 1 has an invalid length.
[  218.173435][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2640'.
[  218.264426][ T4261] Bluetooth: hci4: unexpected event for opcode 0x2006
[  218.500932][T10416] loop3: detected capacity change from 0 to 2048
[  218.501993][T10409] loop4: detected capacity change from 0 to 4096
[  218.589308][T10420] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.642581][T10416] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  218.711916][T10416] Remounting filesystem read-only
[  218.729714][T10416] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  218.749776][T10409] ntfs: (device loop4): parse_options(): NLS character set maccenteuroAdma not found. Using previous one koi8-u.
[  218.808441][T10409] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  218.840897][T10409] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  218.878983][T10409] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  218.942295][T10409] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  218.961943][T10409] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  218.983812][T10430] loop3: detected capacity change from 0 to 256
[  218.994905][T10409] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  219.014992][    C1] vkms_vblank_simulate: vblank timer overrun
[  219.068834][T10409] ntfs: (device loop4): check_mft_mirror(): Failed to read $MFTMirr.
[  219.069927][T10430] FAT-fs (loop3): Directory bread(block 64) failed
[  219.082207][T10409] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  219.102712][T10430] FAT-fs (loop3): Directory bread(block 65) failed
[  219.109365][T10430] FAT-fs (loop3): Directory bread(block 66) failed
[  219.124601][T10430] FAT-fs (loop3): Directory bread(block 67) failed
[  219.140236][T10430] FAT-fs (loop3): Directory bread(block 68) failed
[  219.150822][ T5527] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  219.166079][T10409] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  219.175852][T10430] FAT-fs (loop3): Directory bread(block 69) failed
[  219.183998][T10430] FAT-fs (loop3): Directory bread(block 70) failed
[  219.192660][T10430] FAT-fs (loop3): Directory bread(block 71) failed
[  219.199610][T10430] FAT-fs (loop3): Directory bread(block 72) failed
[  219.207007][T10409] ntfs: volume version 3.1.
[  219.212931][T10430] FAT-fs (loop3): Directory bread(block 73) failed
[  219.401959][ T5527] usb 6-1: Using ep0 maxpacket: 16
[  219.542151][ T5527] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.562746][ T5527] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  219.580060][ T5527] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  219.597338][ T5527] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  219.772259][ T5527] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  219.781396][ T5527] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  219.821455][ T5527] usb 6-1: Manufacturer: syz
[  219.859744][ T5527] usb 6-1: config 0 descriptor??
[  220.116498][T10478] loop4: detected capacity change from 0 to 16
[  220.135015][T10478] erofs: (device loop4): mounted with root inode @ nid 36.
[  220.174425][ T5527] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  220.208549][T10480] No such timeout policy "syz1"
[  220.218312][ T5527] usb 6-1: USB disconnect, device number 5
[  220.568716][T10494] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614)
[  220.621808][T10494] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  220.714730][T10504] loop2: detected capacity change from 0 to 1024
[  220.757937][T10504] EXT4-fs: Ignoring removed nomblk_io_submit option
[  220.766497][T10504] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  220.801769][T10504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e801c09c, mo2=0003]
[  220.826277][T10504] System zones: 0-1, 3-36
[  220.868977][T10504] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  220.951198][ T4264] EXT4-fs (loop2): unmounting filesystem.
[  220.972451][T10518] binfmt_misc: register: failed to install interpreter file ./bus/file0
[  221.048555][T10522] loop4: detected capacity change from 0 to 256
[  221.083595][T10522] exfat: Deprecated parameter 'utf8'
[  221.129134][T10522] exfat: Deprecated parameter 'utf8'
[  221.144378][T10526] netlink: 'syz.5.2700': attribute type 8 has an invalid length.
[  221.158751][T10522] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x811ad48d, utbl_chksum : 0xe619d30d)
[  221.184961][T10526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.952948][T10569] loop4: detected capacity change from 0 to 256
[  222.019683][T10569] FAT-fs (loop4): Directory bread(block 64) failed
[  222.048149][T10569] FAT-fs (loop4): Directory bread(block 65) failed
[  222.048294][T10569] FAT-fs (loop4): Directory bread(block 66) failed
[  222.048322][T10569] FAT-fs (loop4): Directory bread(block 67) failed
[  222.048389][T10569] FAT-fs (loop4): Directory bread(block 68) failed
[  222.048415][T10569] FAT-fs (loop4): Directory bread(block 69) failed
[  222.048485][T10569] FAT-fs (loop4): Directory bread(block 70) failed
[  222.048511][T10569] FAT-fs (loop4): Directory bread(block 71) failed
[  222.048576][T10569] FAT-fs (loop4): Directory bread(block 72) failed
[  222.048600][T10569] FAT-fs (loop4): Directory bread(block 73) failed
[  222.304596][ T4261] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  222.304741][ T4261] Bluetooth: hci4: Injecting HCI hardware error event
[  222.306519][ T4261] Bluetooth: hci4: hardware error 0x00
[  222.310302][T10583] loop4: detected capacity change from 0 to 256
[  222.310911][T10583] exfat: Deprecated parameter 'namecase'
[  222.310968][T10583] exfat: Deprecated parameter 'utf8'
[  222.311012][T10583] exfat: Deprecated parameter 'namecase'
[  222.360052][T10583] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  222.397985][T10591] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  222.594623][T10595] cgroup: subsys name conflicts with all
[  222.797393][T10596] loop3: detected capacity change from 0 to 4096
[  222.813970][T10596] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  222.887007][  T125] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  222.932773][T10605] [U] 
[  222.935800][T10605] [U] 
[  222.938598][T10605] [U] 
[  222.941360][T10605] [U] 
[  222.968848][T10596] ntfs3: loop3: failed to convert "c46c" to cp874
[  223.001301][T10605] [U] 
[  223.004060][T10605] [U] 
[  223.006829][T10605] [U] 
[  223.009553][T10605] [U] 
[  223.047361][T10605] [U] 
[  223.050106][T10605] [U] 
[  223.052824][T10605] [U] 
[  223.068444][T10604] [U] 
[  223.105241][   T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.166923][  T125] usb 3-1: Using ep0 maxpacket: 8
[  223.245923][   T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.304017][  T125] usb 3-1: config 0 has an invalid interface number: 37 but max is 2
[  223.325462][  T125] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  223.362076][  T125] usb 3-1: config 0 has no interface number 1
[  223.406416][   T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.468989][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2750'.
[  223.509845][T10623] loop1: detected capacity change from 0 to 1024
[  223.536748][  T125] usb 3-1: New USB device found, idVendor=087d, idProduct=5704, bcdDevice=be.0e
[  223.581333][  T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.617725][  T125] usb 3-1: Product: syz
[  223.624286][  T125] usb 3-1: Manufacturer: syz
[  223.633048][  T125] usb 3-1: SerialNumber: syz
[  223.664618][  T125] usb 3-1: config 0 descriptor??
[  223.683565][   T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.742453][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2751'.
[  223.758331][ T4257] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  223.778275][ T4257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  223.800392][ T4257] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  223.814228][ T4257] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  223.823719][ T4257] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  223.832364][ T4257] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  223.952003][  T125] kaweth 3-1:0.37: Firmware present in device.
[  224.046488][T10628] wlan0 speed is unknown, defaulting to 1000
[  224.142045][  T125] kaweth 3-1:0.37: Error reading configuration (-71), no net device created
[  224.154003][  T125] kaweth: probe of 3-1:0.37 failed with error -5
[  224.251961][  T125] kaweth 3-1:0.0: Firmware present in device.
[  224.289513][  T125] kaweth 3-1:0.0: Error reading configuration (-71), no net device created
[  224.332038][  T125] kaweth: probe of 3-1:0.0 failed with error -5
[  224.371249][  T125] usb 3-1: USB disconnect, device number 14
[  224.382244][ T4261] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  224.486868][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2761'.
[  224.860357][T10669] loop2: detected capacity change from 0 to 8
[  224.911368][T10669] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  224.974606][T10669] cramfs: Error -3 while decompressing!
[  224.981171][T10669] cramfs: ffffffff974c8568(26)->ffff888056c16000(4096)
[  225.002019][T10669] cramfs: Error -3 while decompressing!
[  225.007252][T10672] ipt_CLUSTERIP: no config found for 172.20.20.170, need 'new'
[  225.007617][T10669] cramfs: ffffffff974c8582(26)->ffff888056c17000(4096)
[  225.032638][T10669] cramfs: Error -3 while decompressing!
[  225.038304][T10669] cramfs: ffffffff974c859c(16)->ffff888056de8000(4096)
[  225.045480][T10669] cramfs: Error -3 while decompressing!
[  225.051370][T10669] cramfs: ffffffff974c8568(26)->ffff888056c16000(4096)
[  225.058549][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  225.058561][   T26] audit: type=1800 audit(2000000136.429:46): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2766" name="file2" dev="loop2" ino=348 res=0 errno=0
[  225.279571][T10674] wlan0 speed is unknown, defaulting to 1000
[  225.378887][T10681] loop3: detected capacity change from 0 to 2048
[  225.436530][T10681] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  225.490256][T10681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.503692][T10636] loop1: detected capacity change from 0 to 40427
[  225.540364][T10636] F2FS-fs (loop1): invalid crc value
[  225.565235][T10628] chnl_net:caif_netlink_parms(): no params data found
[  225.591173][T10636] F2FS-fs (loop1): Found nat_bits in checkpoint
[  225.761457][T10636] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  225.902048][ T4261] Bluetooth: hci3: command tx timeout
[  225.984183][ T4251] syz-executor: attempt to access beyond end of device
[  225.984183][ T4251] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  226.020146][   T33] IPVS: stopping backup sync thread 6724 ...
[  226.095509][T10628] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.103301][T10628] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.112914][T10628] device bridge_slave_0 entered promiscuous mode
[  226.234831][T10628] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.247921][T10628] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.268815][T10628] device bridge_slave_1 entered promiscuous mode
[  226.448146][T10713] loop2: detected capacity change from 0 to 256
[  226.500265][T10713] FAT-fs (loop2): Directory bread(block 64) failed
[  226.507370][T10713] FAT-fs (loop2): Directory bread(block 65) failed
[  226.552096][T10713] FAT-fs (loop2): Directory bread(block 66) failed
[  226.558791][T10713] FAT-fs (loop2): Directory bread(block 67) failed
[  226.583533][T10628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.585799][T10713] FAT-fs (loop2): Directory bread(block 68) failed
[  226.611980][T10713] FAT-fs (loop2): Directory bread(block 69) failed
[  226.639917][T10713] FAT-fs (loop2): Directory bread(block 70) failed
[  226.658026][T10713] FAT-fs (loop2): Directory bread(block 71) failed
[  226.659556][ T5527] wlan0 speed is unknown, defaulting to 1000
[  226.668991][T10713] FAT-fs (loop2): Directory bread(block 72) failed
[  226.679729][T10628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.691608][ T5527] ==================================================================
[  226.699158][T10713] FAT-fs (loop2): Directory bread(block 73) failed
[  226.699679][ T5527] BUG: KASAN: use-after-free in siw_query_port+0x342/0x430
[  226.699706][ T5527] Read of size 4 at addr ffff8880595c40e0 by task kworker/1:15/5527
[  226.721608][ T5527] 
[  226.723948][ T5527] CPU: 1 PID: 5527 Comm: kworker/1:15 Not tainted 6.1.114-syzkaller #0
[  226.732197][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  226.742267][ T5527] Workqueue: infiniband ib_cache_event_task
[  226.748227][ T5527] Call Trace:
[  226.751542][ T5527]  <TASK>
[  226.754478][ T5527]  dump_stack_lvl+0x1e3/0x2cb
[  226.759177][ T5527]  ? nf_tcp_handle_invalid+0x642/0x642
[  226.764654][ T5527]  ? panic+0x764/0x764
[  226.768741][ T5527]  ? _printk+0xd1/0x111
[  226.772916][ T5527]  ? __virt_addr_valid+0x17f/0x530
[  226.778046][ T5527]  ? __virt_addr_valid+0x17f/0x530
[  226.783188][ T5527]  print_report+0x15f/0x4f0
[  226.787807][ T5527]  ? __virt_addr_valid+0x17f/0x530
[  226.792937][ T5527]  ? __virt_addr_valid+0x17f/0x530
[  226.798085][ T5527]  ? __virt_addr_valid+0x45b/0x530
[  226.803191][ T5527]  ? __phys_addr+0xb6/0x170
[  226.807691][ T5527]  ? siw_query_port+0x342/0x430
[  226.812530][ T5527]  kasan_report+0x136/0x160
[  226.817031][ T5527]  ? siw_query_port+0x342/0x430
[  226.821876][ T5527]  siw_query_port+0x342/0x430
[  226.826549][ T5527]  ib_cache_update+0x1a8/0xaf0
[  226.831395][ T5527]  ? ib_cache_setup_one+0x5b0/0x5b0
[  226.836587][ T5527]  ? read_lock_is_recursive+0x10/0x10
[  226.841951][ T5527]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  226.847940][ T5527]  ? print_irqtrace_events+0x210/0x210
[  226.853395][ T5527]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  226.859280][ T5527]  ib_cache_event_task+0xef/0x1e0
[  226.864293][ T5527]  ? process_one_work+0x7a9/0x11d0
[  226.869412][ T5527]  process_one_work+0x8a9/0x11d0
[  226.874343][ T5527]  ? worker_detach_from_pool+0x260/0x260
[  226.880159][ T5527]  ? _raw_spin_lock_irqsave+0x120/0x120
[  226.885780][ T5527]  ? kthread_data+0x4e/0xc0
[  226.890290][ T5527]  ? wq_worker_running+0x97/0x190
[  226.895299][ T5527]  worker_thread+0xa47/0x1200
[  226.899961][ T5527]  ? _raw_spin_unlock+0x40/0x40
[  226.904802][ T5527]  kthread+0x28d/0x320
[  226.908852][ T5527]  ? worker_clr_flags+0x190/0x190
[  226.913865][ T5527]  ? kthread_blkcg+0xd0/0xd0
[  226.918439][ T5527]  ret_from_fork+0x1f/0x30
[  226.922847][ T5527]  </TASK>
[  226.925852][ T5527] 
[  226.928159][ T5527] The buggy address belongs to the physical page:
[  226.934662][ T5527] page:ffffea0001657100 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x595c4
[  226.944823][ T5527] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  226.951942][ T5527] raw: 00fff00000000000 ffffea0001641b08 ffff8880b8f41230 0000000000000000
[  226.960598][ T5527] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  226.969163][ T5527] page dumped because: kasan: bad access detected
[  226.975650][ T5527] page_owner tracks the page as freed
[  226.981013][ T5527] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO), pid 4258, tgid 4258 (syz-executor), ts 62056598146, free_ts 226682304483
[  227.002629][ T5527]  post_alloc_hook+0x18d/0x1b0
[  227.007398][ T5527]  get_page_from_freelist+0x322e/0x33b0
[  227.012930][ T5527]  __alloc_pages+0x28d/0x770
[  227.017503][ T5527]  __kmalloc_large_node+0x91/0x1d0
[  227.022598][ T5527]  __kmalloc_node+0x111/0x230
[  227.027256][ T5527]  kvmalloc_node+0x6e/0x180
[  227.031742][ T5527]  alloc_netdev_mqs+0x85/0xeb0
[  227.036495][ T5527]  ieee80211_if_add+0xe67/0x1890
[  227.041418][ T5527]  ieee80211_register_hw+0x32ff/0x3f10
[  227.046862][ T5527]  mac80211_hwsim_new_radio+0x22d9/0x4060
[  227.052571][ T5527]  hwsim_new_radio_nl+0xc54/0x1190
[  227.057671][ T5527]  genl_rcv_msg+0xc1a/0xf70
[  227.062157][ T5527]  netlink_rcv_skb+0x1cd/0x410
[  227.066908][ T5527]  genl_rcv+0x24/0x40
[  227.070875][ T5527]  netlink_unicast+0x7d8/0x970
[  227.075625][ T5527]  netlink_sendmsg+0xa26/0xd60
[  227.080369][ T5527] page last free stack trace:
[  227.085021][ T5527]  free_unref_page_prepare+0xf63/0x1120
[  227.090549][ T5527]  free_unref_page+0x33/0x3e0
[  227.095207][ T5527]  free_large_kmalloc+0xfb/0x190
[  227.100128][ T5527]  device_release+0x91/0x1c0
[  227.104700][ T5527]  kobject_put+0x224/0x460
[  227.109120][ T5527]  netdev_run_todo+0xe56/0xf40
[  227.113885][ T5527]  ieee80211_unregister_hw+0xfc/0x290
[  227.119254][ T5527]  mac80211_hwsim_del_radio+0x2be/0x4a0
[  227.124882][ T5527]  hwsim_exit_net+0x5b8/0x660
[  227.129543][ T5527]  cleanup_net+0x6ce/0xb60
[  227.133945][ T5527]  process_one_work+0x8a9/0x11d0
[  227.138867][ T5527]  worker_thread+0xa47/0x1200
[  227.143528][ T5527]  kthread+0x28d/0x320
[  227.147578][ T5527]  ret_from_fork+0x1f/0x30
[  227.152069][ T5527] 
[  227.154375][ T5527] Memory state around the buggy address:
[  227.160006][ T5527]  ffff8880595c3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  227.168159][ T5527]  ffff8880595c4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  227.176204][ T5527] >ffff8880595c4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  227.184261][ T5527]                                                        ^
[  227.191436][ T5527]  ffff8880595c4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  227.199480][ T5527]  ffff8880595c4180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  227.207603][ T5527] ==================================================================
[  227.215687][    C1] vkms_vblank_simulate: vblank timer overrun
[  227.404577][T10628] team0: Port device team_slave_0 added
[  227.499200][ T5527] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  227.506443][ T5527] CPU: 1 PID: 5527 Comm: kworker/1:15 Not tainted 6.1.114-syzkaller #0
[  227.514688][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  227.524776][ T5527] Workqueue: infiniband ib_cache_event_task
[  227.530692][ T5527] Call Trace:
[  227.533972][ T5527]  <TASK>
[  227.536903][ T5527]  dump_stack_lvl+0x1e3/0x2cb
[  227.541593][ T5527]  ? nf_tcp_handle_invalid+0x642/0x642
[  227.547090][ T5527]  ? panic+0x764/0x764
[  227.551165][ T5527]  ? preempt_schedule_common+0xa6/0xd0
[  227.556639][ T5527]  ? vscnprintf+0x59/0x80
[  227.560984][ T5527]  panic+0x318/0x764
[  227.564884][ T5527]  ? check_panic_on_warn+0x1d/0xa0
[  227.569999][ T5527]  ? memcpy_page_flushcache+0xfc/0xfc
[  227.575451][ T5527]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  227.581415][ T5527]  ? _raw_spin_unlock+0x40/0x40
[  227.586254][ T5527]  ? print_report+0x4a3/0x4f0
[  227.590916][ T5527]  check_panic_on_warn+0x7e/0xa0
[  227.595837][ T5527]  ? siw_query_port+0x342/0x430
[  227.600758][ T5527]  end_report+0x66/0x110
[  227.604983][ T5527]  kasan_report+0x143/0x160
[  227.609469][ T5527]  ? siw_query_port+0x342/0x430
[  227.614302][ T5527]  siw_query_port+0x342/0x430
[  227.618995][ T5527]  ib_cache_update+0x1a8/0xaf0
[  227.623748][ T5527]  ? ib_cache_setup_one+0x5b0/0x5b0
[  227.628931][ T5527]  ? read_lock_is_recursive+0x10/0x10
[  227.634387][ T5527]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  227.640352][ T5527]  ? print_irqtrace_events+0x210/0x210
[  227.645799][ T5527]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  227.651684][ T5527]  ib_cache_event_task+0xef/0x1e0
[  227.656783][ T5527]  ? process_one_work+0x7a9/0x11d0
[  227.661899][ T5527]  process_one_work+0x8a9/0x11d0
[  227.666824][ T5527]  ? worker_detach_from_pool+0x260/0x260
[  227.672444][ T5527]  ? _raw_spin_lock_irqsave+0x120/0x120
[  227.677974][ T5527]  ? kthread_data+0x4e/0xc0
[  227.682480][ T5527]  ? wq_worker_running+0x97/0x190
[  227.687487][ T5527]  worker_thread+0xa47/0x1200
[  227.692149][ T5527]  ? _raw_spin_unlock+0x40/0x40
[  227.696985][ T5527]  kthread+0x28d/0x320
[  227.701033][ T5527]  ? worker_clr_flags+0x190/0x190
[  227.706038][ T5527]  ? kthread_blkcg+0xd0/0xd0
[  227.710611][ T5527]  ret_from_fork+0x1f/0x30
[  227.715027][ T5527]  </TASK>
[  227.718297][ T5527] Kernel Offset: disabled
[  227.722604][ T5527] Rebooting in 86400 seconds..