last executing test programs:

5m8.002781579s ago: executing program 2 (id=180):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x49, 0x0, 0x2}})

5m7.953105822s ago: executing program 2 (id=182):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d)

5m7.863418094s ago: executing program 2 (id=184):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
close(r1)
listen(0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000000680)='dummy_udc.0', 0xb)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x500, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

5m6.940963273s ago: executing program 2 (id=194):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0xf, &(0x7f0000001200)={0x0, 0x0, 0x40000, 0x3, 0xffffffff, 0x0, 0x0}, &(0x7f0000001280)=<r2=>0x0, &(0x7f00000012c0)=<r3=>0x0, &(0x7f0000001300)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x2, 0x20, 0x0, 0x0, 0x0)

5m6.812842451s ago: executing program 2 (id=195):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

5m6.55257114s ago: executing program 2 (id=200):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff})
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x1, 0x8000009, r1, 0x0)

5m6.506677813s ago: executing program 32 (id=200):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff})
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x1, 0x8000009, r1, 0x0)

4m12.893272126s ago: executing program 0 (id=1273):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0, r0}, 0x68)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x214f, 0xc000, 0x3, 0xea})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))

4m12.893016466s ago: executing program 0 (id=1274):
r0 = socket(0x2, 0x80805, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7a, 0x0, &(0x7f0000000000))

4m12.833595964s ago: executing program 0 (id=1275):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08001a00", @ANYRES32=r0, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0)

4m12.773341036s ago: executing program 0 (id=1277):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0)

4m12.713647691s ago: executing program 0 (id=1278):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000a40)=ANY=[@ANYBLOB="12011001000000084f045db600000000000109022d00010000000009040000fe0300010009210100000122280009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB='@.)'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0})

4m12.232225365s ago: executing program 0 (id=1283):
unshare(0x400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)

4m12.105911347s ago: executing program 33 (id=1283):
unshare(0x400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)

1.751150764s ago: executing program 3 (id=5360):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a010400000000000000000a0000010900010073797a310000000048000480440001800b000100657874686472000034000280080005400000000008000340000000650500020089000000080006400000000108f490400000008e080007400000000d0900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

1.690114543s ago: executing program 3 (id=5363):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000300), 0x0, 0x50ed, &(0x7f00000051c0)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/214, 0xd6)

1.401419029s ago: executing program 3 (id=5367):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
socket$inet(0x2, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000100)='0', 0xfffffffffffffdcd, 0x0, 0x0, 0x0)
close(0x3)

1.401197137s ago: executing program 4 (id=5368):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xfffffffc)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x7d4165c9)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1)

1.342102655s ago: executing program 4 (id=5369):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb0615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xed5}, 0x20048040)

1.341957027s ago: executing program 4 (id=5370):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a010400000000000000000a0000010900010073797a310000000048000480440001800b000100657874686472000034000280080005400000000008000340000000650500020089000000080006400000000108f490400000008e080007400000000d0900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)

1.291417697s ago: executing program 4 (id=5371):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
shutdown(r0, 0x1)
poll(&(0x7f0000000000)=[{r0, 0x10}], 0x1, 0x3ff)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0xc380, 0xc2)

811.561237ms ago: executing program 1 (id=5378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x1}, {0x5, 0x7}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040887}, 0x0)

811.343271ms ago: executing program 1 (id=5379):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
fchdir(r0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x2a442, 0x1)

751.620686ms ago: executing program 1 (id=5380):
syz_mount_image$iso9660(&(0x7f0000000bc0), &(0x7f0000000000)='./file1\x00', 0x800855, &(0x7f0000000d80)=ANY=[@ANYBLOB='session=0x0000000000000026,mode=0x0000000000000005,utf8,map=acorn,hide,nojoliet,showassoc,hide,session=0x000000000000001b,map=off,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB="2c756e686964652c00e636eb433b52cb11a7ecac47fe42976bd6"], 0x2, 0xa21, &(0x7f0000000180)="$eJzs3c1vVOd+B/DvGdtgnAhIQtMUJWEghTiJa2zTQFEWLdgDOPVLZRsJ1EVIA1QIt2mTVkpQpRKp6qJq1Eqtuuku6qqrSNk0myq7e3f3ru7iSlf5F6K74q58dc6Mzdgee7BjbEI+H2tmzsvvPM/vvMx5mMPMecIPy9KhVWNLS9Vjm+NX/3cXMuYJdnHi2y++/Lx8fHY/+9KTt4v/S/qT1JPeJC8lfeMTc7PTXQq6m9xI8k1SJNmf5usjuZHi3/Lsw/FvUvx3We+G9j1qyXSzxI/aXh9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJCrGJ0ZGRot9mZy5eq3elNTXGZ+Ymy2ytLR+zvIyTV9XvX4XX//LM13qTYrykf7+5a6+XzrycPaLSeon8nJz7OWqQ/L0594zLx5+54Xe2vLyG2XzvezfoNierNswH3967+77i4u3PtpiFf3bze0Jc7kxMzk/Ozl94XKjPjk/Wz9/9uzI6SuX5uuXJqca89fnFxrT9fG5xoWF2bn64Pgb9dHz58/UG8PXZ6/OXJ4YnmosTzz3B2MjI2fr7w7/WePC3PzszOl3h+fHr0xOTU3OXK5iytllzLnyQPzTyYX6QuPCdL1++87irTNrclq3m8qg0W5rUgaNdQsaGxkbGx0dGxv9rNV79sqEs2+ff/vcyEjvyBpZF/GYDlqeLAc23s2P4zQO21Jrtv/JVCYzk6u5lnrHv/FMZC6zmd5gfsty+3/ydGPTetvb/1Yr39s2+2j5dCKvtkb7N2j/N8hl9/4+zqe5l7t5P4tZzK18tOcZrf8r98gG8w5837Ivp5GZTGY+s5nMdC5UU+qtKfWcz9mczUjey5Ucy3zquZTJTKWR+VzPfBbSqI6o8cylkQtZyGzmUs9gxvNG6hnN+ZzPmdTTyHCuZzZXM5PLmciFqpTbuVNt9zOb5LgSNPooQWObBK1rzLfc/jfW/xuSH5mdP4nDNi212v993UMHx3cjIQAAAGDH/d5Pc/DI8z/5VVLkleq6/KXJqcbIXqcFAAAA7KAiRfJy+dRXjr6Swud/AAAAeNoU1W/siiQDOdYcWv4llIsAAAAA8JSobtfzaopjDyf4/A8AAABPmZV77DevBKzcY/daz/LUrnfhL4aWb/9bv9l8vdmKaBUxcGlyqjE8Pjv1zmhOVXcZqH5psK60nqToq35+8GaON6OOD+R++TrwsMSyzv4yanT4ndG8mROtFRl8rXx5bbBD5Fgz8vVm5OvtkT1ZFXmmjASAp92JTdrj5j32u7f/b2aoGTF0tGrye4+2t8G1Vk1aVgB4Uqz0sfObVpdmHdr/VsSrG7X/f7jJ5/8y4vncPtb8SsFwPsiHWczNDKX1jYNjnUpd7o2g+TWEobarAZU1VwMGWl9Z+Pm5WobWXQ/oX1nX9thbGctQ64rAgdb81rWDYiW2WM7hTDOgZ83GO7BDOwEAdtmJTdvhR2v/hzb9/N/e5vpKIQA8CVZ6sH+MA3u9jgDAalppAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HmPdAP/n51KFhdvJbvQWcDKQP9WMtx8oJZdyvnTe727tn06DvQk2ava/zhbXqrcx3uzoQx0G9jjExMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7okh6Ok2v7a9eRpKc3u2cHqf7e53ATqlvb7HiQR7kkxzc6XQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7sWvf/r6X5+kxzUnpryckkN5L8+V7nuJMe7HUCe+avque2+//Xkr4sFelt7vYUfeMTc7PT5e4v9pfzv/3iy8/LR/ey1/eqUHUfUVvTuUSrhrYpfauXeq5aamDi1sd3/+7Dv6lPXKwOzIsLl6Ympi/P/cnDwBeLr5pdILR3g7Cc7z+c/P9/b5u8r1X5V+Wadra23ktVvRPr6/3dTktvUO8jKaqaFhrXFv7+r+980jbj+RxPXhtMBlfX9JflY4Oajq/dnmvq+q745+Jg/is3qv1fbo1iqSh30aFq/Q/cvrN4a/iDDxdvruT0j6tyOpxjSW4m/Y+e07HqfNJRddTV+spaR4q0zjxHupS3qbYSRzfYrs9Vh8zAltahvvE6VLps91ZGZzpm9B9/+0JObXlPn+pSY0fFd8Uviyv5Rf6prf+PWrn/T6bju7NDEVVk25HSPm/V26vWjKzWfKx9xntry9zwXclj8K/5i/zRyv6vtZ3/W/tqd85HbTV2fl8kW39f/M+hdS3KQ1WLdGRNi9Q6+3RcoH8lzyPNqA3y/J28lfQe3dIZ5a0uZ5Sdf/+36rs/mF/nvv5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ1+R9HSaXktOJjmc5FA5Xk+W1sbc30Z9tYFiO2numO3k/MNTtK3o6jUuHuRBPsnBvcgKAAAAAAAAgJ13ceLbL778vHxU/x/fk9+vtebUk94kh4v/7BufmJud7lJQX3Jj+b/0+7eWw43y6dmH49+UYy91WWhvvz4AAD9ovw0AAP//3DBrKQ==")
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0xfff9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000004a00030000000000000000000a"], 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0)

751.258991ms ago: executing program 1 (id=5381):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000400)={0x48})

691.985084ms ago: executing program 1 (id=5382):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
truncate(&(0x7f0000000180)='./file1\x00', 0xa75)

563.895851ms ago: executing program 3 (id=5383):
r0 = socket(0x1e, 0x805, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)

492.341953ms ago: executing program 3 (id=5384):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xfffffffc)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x7d4165c9)
listen(0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1)

442.022726ms ago: executing program 3 (id=5385):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000003c000/0x2000)=nil, 0x2000}, 0x1})
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r0, 0x6)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)

354.96986ms ago: executing program 4 (id=5386):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)

354.396784ms ago: executing program 4 (id=5387):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000080)='./file1\x00', 0x100000c, &(0x7f00000000c0)=ANY=[], 0xfd, 0x105e2, &(0x7f0000010880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_io_uring_setup(0x574b, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

0s ago: executing program 1 (id=5388):
syz_io_uring_setup(0x1fc7, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x3b1}, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
pwritev2(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x7, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x100004d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x8, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x6, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0xff], [0x7, 0x8001, 0x4, 0x8, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x8, 0x1, 0x86, 0x8, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1f, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x8001, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x8, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x8, 0x1]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ffe674c0128
[  187.694632][T11218]  </TASK>
[  187.708622][T11218] F2FS-fs (loop4): Stopped filesystem due to reason: 1
[  188.113612][T11206] ceph: No mds server is up or the cluster is laggy
[  188.117261][ T8880] libceph: connect (1)[c::]:6789 error -101
[  188.119941][ T8880] libceph: mon0 (1)[c::]:6789 connect error
[  188.270770][   T33] audit: type=1800 audit(1790263322.867:152): pid=11235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2295" name="nullb0" dev="tmpfs" ino=3910 res=0 errno=0
[  188.490414][T11231] loop4: detected capacity change from 0 to 32768
[  188.532753][T11231] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  188.566253][T11231] XFS (loop4): Ending clean mount
[  188.599391][ T8773] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  190.257682][T11282] loop4: detected capacity change from 0 to 40427
[  190.275149][T11282] F2FS-fs (loop4): build fault injection rate: 14
[  190.275197][T11282] F2FS-fs (loop4): build fault injection type: 0x30e4
[  190.281989][T11282] F2FS-fs (loop4): invalid crc value
[  190.305421][T11282] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  190.357921][T11282] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  190.366672][T11282] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  190.376345][T11282] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[  190.907514][T11319] loop4: detected capacity change from 0 to 512
[  190.950157][T11319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.950265][T11319] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.999047][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.378327][   T50] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  191.539064][   T50] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  191.544209][   T50] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  191.549349][   T50] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.555186][   T50] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  191.558685][   T50] usb 5-1: Product: syz
[  191.560305][   T50] usb 5-1: Manufacturer: syz
[  191.577401][   T50] hub 5-1:4.0: USB hub found
[  191.776888][   T50] hub 5-1:4.0: 11 ports detected
[  191.780538][   T50] hub 5-1:4.0: insufficient power available to use all downstream ports
[  192.183023][   T50] hub 5-1:4.0: set hub depth failed
[  192.193665][   T50] usb 5-1: USB disconnect, device number 12
[  193.661142][T11383] ceph: No mds server is up or the cluster is laggy
[  193.808321][T11422] ceph: No mds server is up or the cluster is laggy
[  194.337283][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  194.340245][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  194.855814][T11443] ceph: No mds server is up or the cluster is laggy
[  194.943249][T11469] loop4: detected capacity change from 0 to 1024
[  196.049676][T11498] loop4: detected capacity change from 0 to 4096
[  196.054157][T11498] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  196.081931][T11498] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  196.091896][T11498] ntfs3(loop4): ino=1a, mi_enum_attr
[  196.092062][T11498] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  196.106238][T11498] ntfs3(loop4): ino=5, "/" ntfs_readdir
[  196.410687][ T5597] Bluetooth: hci1: command 0x0406 tx timeout
[  196.428379][T11500] loop4: detected capacity change from 0 to 40427
[  196.434263][T11500] F2FS-fs (loop4): build fault injection rate: 14
[  196.437038][T11500] F2FS-fs (loop4): build fault injection type: 0x30e4
[  196.440860][T11500] F2FS-fs (loop4): invalid crc value
[  196.459683][T11500] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  196.540282][T11500] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  196.553058][T11500] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  196.562161][T11500] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[  196.566197][T11500] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_init_inode_metadata+0x39e/0x1190
[  196.600185][ T8773] syz-executor: attempt to access beyond end of device
[  196.600185][ T8773] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  196.604135][ T8773] CPU: 0 UID: 0 PID: 8773 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  196.604157][ T8773] Tainted: [L]=SOFTLOCKUP
[  196.604160][ T8773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.604165][ T8773] Call Trace:
[  196.604170][ T8773]  <TASK>
[  196.604176][ T8773]  dump_stack_lvl+0xe8/0x150
[  196.604196][ T8773]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  196.604213][ T8773]  f2fs_write_end_bio+0x1211/0x16e0
[  196.604232][ T8773]  ? blkg_put+0x22/0x240
[  196.604256][ T8773]  __submit_merged_bio+0x258/0x6a0
[  196.604270][ T8773]  ? rcu_is_watching+0x16/0xb0
[  196.604286][ T8773]  __submit_merged_write_cond+0x3c9/0x4e0
[  196.604306][ T8773]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  196.604333][ T8773]  f2fs_write_data_pages+0x2a27/0x36f0
[  196.604348][ T8773]  ? __lock_acquire+0x6df/0x2e50
[  196.604377][ T8773]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  196.604420][ T8773]  ? __pfx_hlock_conflict+0x10/0x10
[  196.604433][ T8773]  ? __bfs+0x153/0x290
[  196.604441][ T8773]  ? __pfx_hlock_conflict+0x10/0x10
[  196.604456][ T8773]  ? lockdep_unlock+0x5c/0xd0
[  196.604466][ T8773]  ? __lock_acquire+0x14b9/0x2e50
[  196.604485][ T8773]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  196.604495][ T8773]  do_writepages+0x338/0x560
[  196.604511][ T8773]  ? do_raw_spin_unlock+0x4d/0x200
[  196.604522][ T8773]  filemap_fdatawrite+0x1e9/0x2f0
[  196.604531][ T8773]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  196.604554][ T8773]  ? do_raw_spin_unlock+0x4d/0x200
[  196.604565][ T8773]  f2fs_sync_dirty_inodes+0x30e/0x830
[  196.604581][ T8773]  f2fs_write_checkpoint+0xa3d/0x2710
[  196.604591][ T8773]  ? __lock_acquire+0x6df/0x2e50
[  196.604609][ T8773]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  196.604637][ T8773]  kill_f2fs_super+0x2dd/0x700
[  196.604650][ T8773]  ? __pfx_kill_f2fs_super+0x10/0x10
[  196.604664][ T8773]  ? call_rcu+0x64d/0x8b0
[  196.604672][ T8773]  ? lockdep_hardirqs_on+0x7b/0x110
[  196.604688][ T8773]  deactivate_locked_super+0xbc/0x110
[  196.604698][ T8773]  cleanup_mnt+0x3d3/0x460
[  196.604711][ T8773]  task_work_run+0x1d9/0x270
[  196.604721][ T8773]  ? __pfx_task_work_run+0x10/0x10
[  196.604763][ T8773]  exit_to_user_mode_loop+0x204/0x770
[  196.604778][ T8773]  ? rcu_is_watching+0x16/0xb0
[  196.604794][ T8773]  do_syscall_64+0x328/0x520
[  196.604809][ T8773]  ? trace_irq_disable+0x3b/0x140
[  196.604816][ T8773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.604826][ T8773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.604833][ T8773] RIP: 0033:0x7f521ab9f397
[  196.604842][ T8773] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  196.604849][ T8773] RSP: 002b:00007ffe674bf398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  196.604859][ T8773] RAX: 0000000000000000 RBX: 00007f521ac344bb RCX: 00007f521ab9f397
[  196.604864][ T8773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe674bf450
[  196.604869][ T8773] RBP: 00007ffe674bf450 R08: 00007ffe674c0450 R09: 00000000ffffffff
[  196.604875][ T8773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe674c04e0
[  196.604880][ T8773] R13: 00007f521ac344bb R14: 000000000002ff70 R15: 00007ffe674c0520
[  196.604891][ T8773]  </TASK>
[  196.604895][ T8773] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  197.033274][T11545] sctp: [Deprecated]: syz.4.2422 (pid 11545) Use of int in max_burst socket option.
[  197.033274][T11545] Use struct sctp_assoc_value instead
[  197.389041][T11563] netlink: 'syz.1.2430': attribute type 1 has an invalid length.
[  197.416903][T11563] bond1: entered promiscuous mode
[  197.419511][T11563] 8021q: adding VLAN 0 to HW filter on device bond1
[  197.448922][T11563] bond1: (slave bridge3): making interface the new active one
[  197.452070][T11563] bridge3: entered promiscuous mode
[  197.455831][T11563] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  198.161449][T11590] loop4: detected capacity change from 0 to 8192
[  198.181114][T11590]  loop4: AHDI p1 p2
[  198.182424][T11590] loop4: p1 size 67174399 extends beyond EOD, truncated
[  198.199178][ T5042]  loop4: AHDI p1 p2
[  198.200605][ T5042] loop4: p1 size 67174399 extends beyond EOD, truncated
[  198.268164][T11367] udevd[11367]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  198.432293][ T4992] Bluetooth: hci2: connection err: -111
[  199.238174][T11623] overlayfs: failed to clone upperpath
[  199.242972][T11623] overlayfs: failed to clone lowerpath
[  200.478222][  T807] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  200.628949][  T807] usb 5-1: Using ep0 maxpacket: 32
[  200.631870][  T807] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  200.636911][  T807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.641849][  T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.647944][  T807] usb 5-1: config 0 descriptor??
[  201.025700][T11691] xt_hashlimit: size too large, truncated to 1048576
[  201.078909][  T807] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.0003/input/input6
[  201.190017][  T807] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:5543:0042.0003/input/input7
[  201.229860][  T807] uclogic 0003:5543:0042.0003: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.4-1/input0
[  201.284896][ T8880] usb 5-1: USB disconnect, device number 13
[  201.709353][T11720] overlayfs: failed to clone upperpath
[  201.712553][T11720] overlayfs: failed to clone lowerpath
[  201.941845][T11735] loop4: detected capacity change from 0 to 256
[  202.572865][   T33] audit: type=1326 audit(1790263337.167:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.2524" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f521ab9e159 code=0x0
[  203.069748][   T33] audit: type=1326 audit(1790263337.667:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.1.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x7fc00000
[  203.466463][T11806] loop4: detected capacity change from 0 to 8
[  203.611594][T11814] sg_read: process 711 (syz.4.2547) changed security contexts after opening file descriptor, this is not allowed.
[  203.947383][   T33] audit: type=1326 audit(1790263338.477:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11796 comm="syz.1.2539" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc025b9e159 code=0x7fc00000
[  204.618291][T11841] No control pipe specified
[  204.734672][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'.
[  204.734775][T11847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2561'.
[  204.911185][T11857] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  205.337221][T11865] loop4: detected capacity change from 0 to 32768
[  205.374092][T11865] ialloc: diAlloc returned -5!
[  205.601122][T11891] xt_hashlimit: size too large, truncated to 1048576
[  205.658180][T11897] netlink: 'syz.3.2585': attribute type 1 has an invalid length.
[  205.690444][T11897] bond2: entered promiscuous mode
[  205.690897][T11897] 8021q: adding VLAN 0 to HW filter on device bond2
[  205.969224][   T33] audit: type=1326 audit(1790263340.567:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.1.2594" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc025b9e159 code=0x0
[  207.027996][T11969] loop4: detected capacity change from 0 to 1756
[  207.042096][T11969] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  207.045826][T11969] UDF-fs: Scanning with blocksize 512 failed
[  207.056010][T11969] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  207.061465][T11969] UDF-fs: Scanning with blocksize 1024 failed
[  207.069367][T11969] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[  208.114211][T12007] overlayfs: failed to clone upperpath
[  209.035609][T12041] netlink: 'syz.3.2652': attribute type 1 has an invalid length.
[  209.052316][T12041] bond3: entered promiscuous mode
[  209.052562][T12041] 8021q: adding VLAN 0 to HW filter on device bond3
[  209.077519][T12041] bond3: (slave bridge5): making interface the new active one
[  209.077566][T12041] bridge5: entered promiscuous mode
[  209.086135][T12041] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  209.128259][ T4992] Bluetooth: hci1: connection err: -111
[  209.804328][T12055] loop4: detected capacity change from 0 to 2048
[  209.810527][T12055] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  209.885038][T12063] CIFS: Attempting to mount //127.0.0.1/share
[  209.956824][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2664'.
[  210.034431][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'.
[  210.198751][   T50] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  210.315469][T12087] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  210.349012][   T50] usb 5-1: Using ep0 maxpacket: 16
[  210.349641][   T50] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  210.353746][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.353764][   T50] usb 5-1: Product: syz
[  210.353774][   T50] usb 5-1: Manufacturer: syz
[  210.353784][   T50] usb 5-1: SerialNumber: syz
[  210.357958][   T50] r8152-cfgselector 5-1: Unknown version 0x0000
[  210.357975][   T50] r8152-cfgselector 5-1: config 0 descriptor??
[  210.566598][   T50] r8152-cfgselector 5-1: Needed 1 retries to read version
[  212.565989][T12142] overlayfs: failed to clone upperpath
[  212.891739][T12063] CIFS: VFS: Error connecting to socket. Aborting operation.
[  212.895296][T12063] CIFS: VFS: cifs_mount failed w/return code = -4
[  212.912343][ T5650] r8152-cfgselector 5-1: USB disconnect, device number 14
[  213.076568][T12173] loop4: detected capacity change from 0 to 1024
[  213.618217][   T50] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  213.770736][   T50] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  213.771791][   T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.771827][   T50] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.776575][   T50] usb 5-1: config 0 descriptor??
[  213.779885][   T50] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22
[  213.986290][ T5650] usb 5-1: USB disconnect, device number 15
[  214.191163][T12232] overlayfs: failed to resolve 'lower': -2
[  214.324505][T12240] xt_hashlimit: size too large, truncated to 1048576
[  214.443688][T12248] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode
[  214.455103][T12248] overlayfs: failed to resolve './cgroup': -2
[  214.625805][T12262] batadv_slave_1: entered promiscuous mode
[  214.626518][T12261] batadv_slave_1: left promiscuous mode
[  214.682089][ T4992] Bluetooth: hci2: connection err: -111
[  217.837007][T12413] overlayfs: failed to clone lowerpath
[  217.860462][T12415] lo: entered promiscuous mode
[  217.864525][T12415] tunl0: entered promiscuous mode
[  217.878849][T12415] gre0: entered promiscuous mode
[  217.885877][T12415] 0XD: entered promiscuous mode
[  217.893416][T12415] erspan0: entered promiscuous mode
[  217.896909][T12415] ip_vti0: entered promiscuous mode
[  217.904927][T12415] ip6_vti0: entered promiscuous mode
[  217.908261][T12415] sit0: entered promiscuous mode
[  217.911753][T12415] ip6tnl0: entered promiscuous mode
[  217.914926][T12415] ip6gre0: entered promiscuous mode
[  217.924264][T12415] ip6gretap0: entered promiscuous mode
[  217.927688][T12415] bridge0: entered promiscuous mode
[  217.937075][T12415] bond0: entered promiscuous mode
[  217.939917][T12415] bond_slave_0: entered promiscuous mode
[  217.942023][T12415] bond_slave_1: entered promiscuous mode
[  217.947937][T12415] team0: entered promiscuous mode
[  217.949754][T12415] team_slave_0: entered promiscuous mode
[  217.951818][T12415] team_slave_1: entered promiscuous mode
[  217.957913][T12415] dummy0: entered promiscuous mode
[  217.968381][T12415] nlmon0: entered promiscuous mode
[  217.971874][T12415] batadv0: entered promiscuous mode
[  217.976414][T12415] vxcan0: entered promiscuous mode
[  217.979975][T12415] vxcan1: entered promiscuous mode
[  217.982810][T12415] veth0: entered promiscuous mode
[  217.988946][T12415] veth1: entered promiscuous mode
[  217.996360][T12415] wg0: entered promiscuous mode
[  218.004986][T12415] wg1: entered promiscuous mode
[  218.012286][T12415] wg2: entered promiscuous mode
[  218.015706][T12415] veth0_to_bridge: entered promiscuous mode
[  218.021745][T12415] veth1_to_bridge: entered promiscuous mode
[  218.027271][T12415] veth1_to_bond: entered promiscuous mode
[  218.035084][T12415] veth0_to_team: entered promiscuous mode
[  218.042685][T12415] veth1_to_team: entered promiscuous mode
[  218.046403][T12415] veth0_to_batadv: entered promiscuous mode
[  218.050088][T12415] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.052979][T12415] batadv_slave_0: entered promiscuous mode
[  218.056733][T12415] veth1_to_batadv: entered promiscuous mode
[  218.062588][T12415] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.065376][T12415] batadv_slave_1: entered promiscuous mode
[  218.069269][T12415] xfrm0: entered promiscuous mode
[  218.072509][T12415] veth0_to_hsr: entered promiscuous mode
[  218.079946][T12415] veth1_to_hsr: entered promiscuous mode
[  218.086344][T12415] hsr0: entered promiscuous mode
[  218.090241][T12415] veth1_virt_wifi: entered promiscuous mode
[  218.094513][T12415] veth0_virt_wifi: entered promiscuous mode
[  218.099583][T12415] virt_wifi0: entered promiscuous mode
[  218.104817][T12415] vlan0: entered promiscuous mode
[  218.114006][T12415] vlan1: entered promiscuous mode
[  218.117642][T12415] macvlan0: entered promiscuous mode
[  218.122791][T12415] macvlan1: entered promiscuous mode
[  218.126798][T12415] ipvlan0: entered promiscuous mode
[  218.128423][T12415] ipvlan1: entered promiscuous mode
[  218.137090][T12415] macvtap0: entered promiscuous mode
[  218.141399][T12415] macsec0: entered promiscuous mode
[  218.144191][T12415] geneve0: entered promiscuous mode
[  218.147244][T12415] geneve1: entered promiscuous mode
[  218.170872][T12415] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  218.183867][T12415] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  218.187177][T12415] bond1: entered promiscuous mode
[  218.187248][T12415] gretap1: entered promiscuous mode
[  218.192296][T12415] bridge1: entered promiscuous mode
[  218.193888][T12415] veth2: entered promiscuous mode
[  218.195048][T12415] bridge2: entered promiscuous mode
[  218.196440][T12415] netdevsim netdevsim3 eth0: entered promiscuous mode
[  218.196572][T12415] netdevsim netdevsim3 eth1: entered promiscuous mode
[  218.196709][T12415] netdevsim netdevsim3 eth2: entered promiscuous mode
[  218.196818][T12415] netdevsim netdevsim3 eth3: entered promiscuous mode
[  218.199555][T12415] bridge3: entered promiscuous mode
[  218.204583][T12415] vsockmon0: entered promiscuous mode
[  218.204923][T12415] ip6tnl1: entered promiscuous mode
[  218.205214][T12415] : entered promiscuous mode
[  218.206346][T12415] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode
[  218.206452][T12415] ip6tnl2: entered promiscuous mode
[  218.211368][T12415] bridge4: entered promiscuous mode
[  218.228973][ T5452] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.232194][ T5452] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.235518][ T5452] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.235537][ T5452] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.235555][ T5452] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.235568][ T5452] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.235587][ T5452] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  218.235600][ T5452] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.433507][T12444] trusted_key: encrypted_key: insufficient parameters specified
[  218.726156][T12468] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.2841'.
[  218.726400][T12468] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  218.880812][T12478] ptrace attach of "/syz-executor exec"[5592] was attempted by ""[12478]
[  218.977301][T12484] loop4: detected capacity change from 0 to 128
[  218.982953][T12484] EXT4-fs (loop4): Test dummy encryption mode enabled
[  218.997157][T12484] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  218.997400][T12484] ext4 filesystem being mounted at /383/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  219.014904][ T8773] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  219.140291][T12500] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  219.296058][T12512] No such timeout policy "syz1"
[  219.528287][ T5658] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  219.699219][ T5658] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  219.704102][ T5658] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.704185][ T5658] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  219.704228][ T5658] usb 5-1: config 0 interface 0 has no altsetting 0
[  219.704253][ T5658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.710319][ T5658] usb 5-1: config 0 descriptor??
[  220.002813][   T33] audit: type=1326 audit(1790263354.597:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.1.2878" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x0
[  220.115673][T12551] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  220.135402][ T5658] usbhid 5-1:0.0: can't add hid device: -71
[  220.135531][ T5658] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  220.137836][ T5658] usb 5-1: USB disconnect, device number 16
[  220.662988][T12584] loop4: detected capacity change from 0 to 1024
[  220.998287][ T5658] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  221.057735][T12599] CIFS: Attempting to mount //127.0.0.1/share
[  221.159306][ T5658] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  221.160305][ T5658] usb 5-1: config 0 has an invalid interface number: 3 but max is 0
[  221.160316][ T5658] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.160324][ T5658] usb 5-1: config 0 has no interface number 0
[  221.162280][ T5658] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  221.162296][ T5658] usb 5-1: Product: syz
[  221.162305][ T5658] usb 5-1: Manufacturer: syz
[  221.162314][ T5658] usb 5-1: SerialNumber: syz
[  221.171271][ T5658] usb 5-1: config 0 descriptor??
[  221.382228][ T5658] usb 5-1: USB disconnect, device number 17
[  221.890340][T12599] CIFS: VFS: Error connecting to socket. Aborting operation.
[  221.893056][T12599] CIFS: VFS: cifs_mount failed w/return code = -4
[  222.130266][T12623] loop4: detected capacity change from 0 to 512
[  222.131377][T12623] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  222.134593][T12623] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #15: block 1803188595: comm syz.4.2911: lblock 0 mapped to illegal pblock 1803188595 (length 1)
[  222.134662][T12623] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  222.134962][T12623] EXT4-fs (loop4): Remounting filesystem read-only
[  222.135385][T12623] EXT4-fs (loop4): mount failed
[  222.493820][T12642] overlayfs: failed to resolve './cgroup': -2
[  222.698259][ T5658] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  222.859333][ T5658] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  222.860645][ T5658] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.860669][ T5658] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  222.860686][ T5658] usb 5-1: config 0 interface 0 has no altsetting 0
[  222.860711][ T5658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.863489][ T5658] usb 5-1: config 0 descriptor??
[  223.270783][ T5658] usbhid 5-1:0.0: can't add hid device: -71
[  223.270920][ T5658] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  223.283573][ T5658] usb 5-1: USB disconnect, device number 18
[  223.813754][T12683] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2939'.
[  223.816929][T12683] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  224.195698][T12699] loop4: detected capacity change from 0 to 40427
[  224.198366][T12699] F2FS-fs (loop4): build fault injection rate: 14
[  224.198378][T12699] F2FS-fs (loop4): build fault injection type: 0x30e4
[  224.199212][T12699] F2FS-fs (loop4): invalid crc value
[  224.211939][T12699] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  224.239495][T12699] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  224.247175][T12699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  224.251320][T12699] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[  224.254120][T12699] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_find_data_folio+0x3a3/0x6d0
[  224.255723][T12699] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x110/0xab0
[  224.271748][ T8773] syz-executor: attempt to access beyond end of device
[  224.271748][ T8773] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  224.286750][ T8773] CPU: 0 UID: 0 PID: 8773 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  224.286795][ T8773] Tainted: [L]=SOFTLOCKUP
[  224.286801][ T8773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.286810][ T8773] Call Trace:
[  224.286818][ T8773]  <TASK>
[  224.286824][ T8773]  dump_stack_lvl+0xe8/0x150
[  224.286851][ T8773]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  224.286871][ T8773]  f2fs_write_end_bio+0x1211/0x16e0
[  224.286892][ T8773]  ? blkg_put+0x22/0x240
[  224.286918][ T8773]  __submit_merged_bio+0x258/0x6a0
[  224.286933][ T8773]  ? rcu_is_watching+0x16/0xb0
[  224.286952][ T8773]  __submit_merged_write_cond+0x3c9/0x4e0
[  224.286972][ T8773]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  224.287003][ T8773]  f2fs_write_data_pages+0x2a27/0x36f0
[  224.287053][ T8773]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.287071][ T8773]  ? is_bpf_text_address+0x26/0x2b0
[  224.287095][ T8773]  ? arch_stack_walk+0xfb/0x150
[  224.287128][ T8773]  ? add_lock_to_list+0xc7/0x100
[  224.287147][ T8773]  ? lockdep_unlock+0x5c/0xd0
[  224.287163][ T8773]  ? __lock_acquire+0x14b9/0x2e50
[  224.287191][ T8773]  ? do_raw_spin_lock+0x12b/0x2f0
[  224.287214][ T8773]  ? do_raw_spin_unlock+0x4d/0x200
[  224.287232][ T8773]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.287251][ T8773]  do_writepages+0x338/0x560
[  224.287278][ T8773]  ? do_raw_spin_unlock+0x4d/0x200
[  224.287299][ T8773]  filemap_fdatawrite+0x1e9/0x2f0
[  224.287316][ T8773]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  224.287355][ T8773]  ? do_raw_spin_unlock+0x4d/0x200
[  224.287373][ T8773]  f2fs_sync_dirty_inodes+0x30e/0x830
[  224.287399][ T8773]  f2fs_write_checkpoint+0xa3d/0x2710
[  224.287417][ T8773]  ? __lock_acquire+0x6df/0x2e50
[  224.287452][ T8773]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  224.287501][ T8773]  kill_f2fs_super+0x2dd/0x700
[  224.287523][ T8773]  ? __pfx_kill_f2fs_super+0x10/0x10
[  224.287546][ T8773]  ? call_rcu+0x64d/0x8b0
[  224.287561][ T8773]  ? lockdep_hardirqs_on+0x7b/0x110
[  224.287613][ T8773]  deactivate_locked_super+0xbc/0x110
[  224.287635][ T8773]  cleanup_mnt+0x3d3/0x460
[  224.287658][ T8773]  task_work_run+0x1d9/0x270
[  224.287675][ T8773]  ? __pfx_task_work_run+0x10/0x10
[  224.287696][ T8773]  exit_to_user_mode_loop+0x204/0x770
[  224.287709][ T8773]  ? rcu_is_watching+0x16/0xb0
[  224.287726][ T8773]  do_syscall_64+0x328/0x520
[  224.287743][ T8773]  ? trace_irq_disable+0x3b/0x140
[  224.287754][ T8773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.287771][ T8773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.287805][ T8773] RIP: 0033:0x7f521ab9f397
[  224.287819][ T8773] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  224.287831][ T8773] RSP: 002b:00007ffe674bf398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  224.287846][ T8773] RAX: 0000000000000000 RBX: 00007f521ac344bb RCX: 00007f521ab9f397
[  224.287855][ T8773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe674bf450
[  224.287863][ T8773] RBP: 00007ffe674bf450 R08: 00007ffe674c0450 R09: 00000000ffffffff
[  224.287873][ T8773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe674c04e0
[  224.287881][ T8773] R13: 00007f521ac344bb R14: 0000000000036b7f R15: 00007ffe674c0520
[  224.287901][ T8773]  </TASK>
[  224.291241][ T8773] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  224.291321][ T8773] CPU: 0 UID: 0 PID: 8773 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  224.291339][ T8773] Tainted: [L]=SOFTLOCKUP
[  224.291366][ T8773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.291374][ T8773] Call Trace:
[  224.291379][ T8773]  <TASK>
[  224.291385][ T8773]  dump_stack_lvl+0xe8/0x150
[  224.291406][ T8773]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  224.291426][ T8773]  f2fs_write_end_bio+0x1211/0x16e0
[  224.291461][ T8773]  __submit_merged_bio+0x258/0x6a0
[  224.291476][ T8773]  ? rcu_is_watching+0x16/0xb0
[  224.291496][ T8773]  __submit_merged_write_cond+0x3c9/0x4e0
[  224.291516][ T8773]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  224.291546][ T8773]  f2fs_write_data_pages+0x2a27/0x36f0
[  224.291618][ T8773]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.291636][ T8773]  ? is_bpf_text_address+0x26/0x2b0
[  224.291659][ T8773]  ? arch_stack_walk+0xfb/0x150
[  224.291693][ T8773]  ? add_lock_to_list+0xc7/0x100
[  224.291711][ T8773]  ? lockdep_unlock+0x5c/0xd0
[  224.291727][ T8773]  ? __lock_acquire+0x14b9/0x2e50
[  224.291757][ T8773]  ? do_raw_spin_lock+0x12b/0x2f0
[  224.291781][ T8773]  ? do_raw_spin_unlock+0x4d/0x200
[  224.291798][ T8773]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.291817][ T8773]  do_writepages+0x338/0x560
[  224.291844][ T8773]  ? do_raw_spin_unlock+0x4d/0x200
[  224.291865][ T8773]  filemap_fdatawrite+0x1e9/0x2f0
[  224.291880][ T8773]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  224.291922][ T8773]  ? do_raw_spin_unlock+0x4d/0x200
[  224.291941][ T8773]  f2fs_sync_dirty_inodes+0x30e/0x830
[  224.291969][ T8773]  f2fs_write_checkpoint+0xa3d/0x2710
[  224.291986][ T8773]  ? __lock_acquire+0x6df/0x2e50
[  224.292025][ T8773]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  224.292080][ T8773]  kill_f2fs_super+0x2dd/0x700
[  224.292105][ T8773]  ? __pfx_kill_f2fs_super+0x10/0x10
[  224.292129][ T8773]  ? call_rcu+0x64d/0x8b0
[  224.292143][ T8773]  ? lockdep_hardirqs_on+0x7b/0x110
[  224.292167][ T8773]  deactivate_locked_super+0xbc/0x110
[  224.292185][ T8773]  cleanup_mnt+0x3d3/0x460
[  224.292208][ T8773]  task_work_run+0x1d9/0x270
[  224.292226][ T8773]  ? __pfx_task_work_run+0x10/0x10
[  224.292244][ T8773]  exit_to_user_mode_loop+0x204/0x770
[  224.292256][ T8773]  ? rcu_is_watching+0x16/0xb0
[  224.292270][ T8773]  do_syscall_64+0x328/0x520
[  224.292287][ T8773]  ? trace_irq_disable+0x3b/0x140
[  224.292299][ T8773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.292316][ T8773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.292328][ T8773] RIP: 0033:0x7f521ab9f397
[  224.292342][ T8773] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  224.292354][ T8773] RSP: 002b:00007ffe674bf398 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  224.292370][ T8773] RAX: 0000000000000000 RBX: 00007f521ac344bb RCX: 00007f521ab9f397
[  224.292378][ T8773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe674bf450
[  224.292386][ T8773] RBP: 00007ffe674bf450 R08: 00007ffe674c0450 R09: 00000000ffffffff
[  224.292396][ T8773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe674c04e0
[  224.292403][ T8773] R13: 00007f521ac344bb R14: 0000000000036b7f R15: 00007ffe674c0520
[  224.292425][ T8773]  </TASK>
[  224.297321][ T8773] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  224.846925][T12730] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2958'.
[  225.592302][T12736] CIFS: Attempting to mount //127.0.0.1/share
[  225.643437][T12739] overlayfs: failed to resolve './cgroup': -2
[  225.826364][T12752] fuse: Bad value for 'fd'
[  225.888301][ T5650] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  226.038175][ T5650] usb 5-1: Using ep0 maxpacket: 16
[  226.038968][ T5650] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  226.042386][ T5650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.042403][ T5650] usb 5-1: Product: syz
[  226.042414][ T5650] usb 5-1: Manufacturer: syz
[  226.042423][ T5650] usb 5-1: SerialNumber: syz
[  226.046494][ T5650] r8152-cfgselector 5-1: Unknown version 0x0000
[  226.046510][ T5650] r8152-cfgselector 5-1: config 0 descriptor??
[  226.303106][T12758] netlink: 'syz.1.2971': attribute type 1 has an invalid length.
[  226.303171][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'.
[  226.353321][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2972'.
[  226.353419][T12760] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  226.353547][T12760] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  226.353882][T12760] bridge0: port 3(netdevsim0) entered disabled state
[  226.361514][T12760] bridge_slave_1: left allmulticast mode
[  226.361534][T12760] bridge_slave_1: left promiscuous mode
[  226.361736][T12760] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.374713][T12760] bridge_slave_0: left allmulticast mode
[  226.374733][T12760] bridge_slave_0: left promiscuous mode
[  226.374879][T12760] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.393626][T12760] bond0: (slave bridge0): Releasing backup interface
[  227.574158][T12792] fuse: Bad value for 'fd'
[  228.592115][T12736] CIFS: VFS: Error connecting to socket. Aborting operation.
[  228.592205][T12736] CIFS: VFS: cifs_mount failed w/return code = -4
[  228.598045][T12800] CIFS: Attempting to mount //127.0.0.1/share
[  228.625875][  T807] r8152-cfgselector 5-1: USB disconnect, device number 19
[  228.678030][T12820] geneve2: entered promiscuous mode
[  228.681623][ T5452] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.681688][ T5452] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.681756][ T5452] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.681801][ T5452] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.724028][T12822] loop4: detected capacity change from 0 to 128
[  228.743216][T12822] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  228.751285][T12822] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.790909][ T8773] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.984835][T12834] loop4: detected capacity change from 0 to 8192
[  229.030694][T12834]  loop4: p1 p2 p3
[  229.030760][T12834] loop4: partition table partially beyond EOD, truncated
[  229.030952][T12834] loop4: p1 start 68157184 is beyond EOD, truncated
[  229.117334][ T9977] udevd[9977]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  229.120641][T11367] udevd[11367]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  229.431309][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3009'.
[  230.653434][T12800] CIFS: VFS: Error connecting to socket. Aborting operation.
[  230.653521][T12800] CIFS: VFS: cifs_mount failed w/return code = -4
[  230.986048][T12887] loop4: detected capacity change from 0 to 256
[  231.027107][T12891] overlayfs: failed to resolve './cgroup': -2
[  231.056611][   T33] audit: type=1800 audit(1790263365.647:158): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3031" name="file1" dev="loop4" ino=1048626 res=0 errno=0
[  231.122526][T12896] binder: 12895:12896 ioctl c0306201 200000000040 returned -22
[  231.194100][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3037'.
[  231.197119][T12900] bridge_slave_1: left allmulticast mode
[  231.200238][T12900] bridge_slave_1: left promiscuous mode
[  231.202759][T12900] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.207074][T12900] bridge_slave_0: left allmulticast mode
[  231.208656][T12900] bridge_slave_0: left promiscuous mode
[  231.208858][T12900] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.335864][T12906] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.631834][T12920] overlayfs: failed to resolve './cgroup': -2
[  231.844792][T12922] loop4: detected capacity change from 0 to 40427
[  231.849965][T12922] F2FS-fs (loop4): Small segment_count (20 < 1 * 24)
[  231.850018][T12922] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  231.857034][T12922] F2FS-fs (loop4): build fault injection rate: 28
[  231.857120][T12922] F2FS-fs (loop4): build fault injection type: 0x1
[  231.864357][T12922] F2FS-fs (loop4): invalid crc value
[  231.869173][T12922] F2FS-fs (loop4): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4e68/0x7a60
[  231.873095][T12922] F2FS-fs (loop4): Failed to initialize F2FS node manager (-12)
[  231.967445][T12926] loop4: detected capacity change from 0 to 512
[  231.974397][T12926] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  231.983055][T12926] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.3048: bad orphan inode 131083
[  231.987442][T12926] loop4: lost filesystem error report for type 5 error -117
[  231.988975][T12926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.996656][T12927] fuse: Bad value for 'fd'
[  232.522831][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.675800][T12947] CIFS: Attempting to mount //127.0.0.1/share
[  233.559523][T12963] binder: 12962:12963 ioctl c0306201 200000000040 returned -22
[  233.563061][T12963] binder: 12962:12963 ioctl c0306201 200000000640 returned -22
[  233.918233][ T5658] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  234.068825][ T5658] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  234.074521][ T5658] usb 5-1: config 0 has an invalid interface number: 3 but max is 0
[  234.074605][ T5658] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  234.074639][ T5658] usb 5-1: config 0 has no interface number 0
[  234.087961][ T5658] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  234.088014][ T5658] usb 5-1: Product: syz
[  234.088071][ T5658] usb 5-1: Manufacturer: syz
[  234.088326][ T5658] usb 5-1: SerialNumber: syz
[  234.098586][ T5658] usb 5-1: config 0 descriptor??
[  234.306854][ T5650] usb 5-1: USB disconnect, device number 20
[  235.169417][T13006] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  235.564648][T13030] overlayfs: failed to resolve './cgroup': -2
[  235.667437][T12947] CIFS: VFS: Error connecting to socket. Aborting operation.
[  235.667519][T12947] CIFS: VFS: cifs_mount failed w/return code = -4
[  235.669755][ T5650] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  235.675807][T13020] CIFS: Attempting to mount //127.0.0.1/share
[  235.818238][ T5650] usb 5-1: Using ep0 maxpacket: 16
[  235.818907][ T5650] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  235.821931][ T5650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.821947][ T5650] usb 5-1: Product: syz
[  235.821955][ T5650] usb 5-1: Manufacturer: syz
[  235.821964][ T5650] usb 5-1: SerialNumber: syz
[  235.840098][ T5650] r8152-cfgselector 5-1: Unknown version 0x0000
[  235.840170][ T5650] r8152-cfgselector 5-1: config 0 descriptor??
[  236.507003][T13044] geneve1: entered promiscuous mode
[  236.713706][T13053] overlayfs: failed to resolve './cgroup': -2
[  238.008392][T13098] netlink: 'syz.1.3130': attribute type 2 has an invalid length.
[  238.417642][T13020] CIFS: VFS: Error connecting to socket. Aborting operation.
[  238.421076][T13020] CIFS: VFS: cifs_mount failed w/return code = -4
[  239.200855][ T5650] r8152-cfgselector 5-1: Unknown version 0x0000
[  239.201299][ T5650] r8152-cfgselector 5-1: No union descriptors
[  239.210187][ T5650] r8152-cfgselector 5-1: USB disconnect, device number 21
[  239.353471][T13145] input: syz0 as /devices/virtual/input/input8
[  239.358664][T13147] CIFS: Attempting to mount //127.0.0.1/share
[  239.543759][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3155'.
[  239.582715][T13155] fuse: fd is not a fuse device
[  239.996067][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'.
[  240.246468][T13182] loop4: detected capacity change from 0 to 512
[  240.271552][T13182] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.3166: bg 0: block 5: invalid block bitmap
[  240.271616][T13182] loop4: lost filesystem error report for type 5 error -117
[  240.278607][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  240.278657][    C0] EXT4-fs (loop4): initial error at time 1790263374: ext4_validate_block_bitmap:436
[  240.278726][    C0] EXT4-fs (loop4): last error at time 1790263374: ext4_validate_block_bitmap:436
[  240.287811][T13182] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  240.287826][T13182] loop4: lost filesystem error report for type 5 error -117
[  240.288011][T13182] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3166: invalid indirect mapped block 3 (level 2)
[  240.288025][T13182] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  240.288722][T13182] EXT4-fs (loop4): 1 orphan inode deleted
[  240.288732][T13182] EXT4-fs (loop4): 1 truncate cleaned up
[  240.289447][T13182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.332274][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.378718][T13192] comedi comedi0: comedi_config --init_data is deprecated
[  240.591764][T13203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  240.637837][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3175'.
[  240.678649][T13147] CIFS: VFS: Error connecting to socket. Aborting operation.
[  240.681536][T13147] CIFS: VFS: cifs_mount failed w/return code = -4
[  240.893603][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'.
[  240.930918][T13217] SET target dimension over the limit!
[  241.646705][T13243] fuse: fd is not a fuse device
[  242.940729][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3219'.
[  243.692934][T13334] 9pnet: p9_errstr2errno: server reported unknown error 
[  244.993472][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3254'.
[  245.004707][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'.
[  245.396570][T13422] overlayfs: failed to resolve './cgroup': -2
[  246.571407][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3285'.
[  246.982347][T13462] overlayfs: failed to clone upperpath
[  247.493234][T13484] CIFS: Attempting to mount //127.0.0.1/share
[  247.561947][T13487] loop4: detected capacity change from 0 to 2048
[  247.585636][T13487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.585763][T13487] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.658677][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.713695][T13515] loop4: detected capacity change from 0 to 32768
[  248.721178][T13515] (syz.4.3317,13515,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  248.721445][T13515] (syz.4.3317,13515,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  248.722317][T13515] (syz.4.3317,13515,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xe266c3fc. Applying ECC.
[  248.722367][T13515] (syz.4.3317,13515,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0x6f3d4414
[  248.722383][T13515] (syz.4.3317,13515,1):ocfs2_validate_dir_block:466 ERROR: Checksum failed for dinode 288
[  248.722399][T13515] (syz.4.3317,13515,1):ocfs2_read_virt_blocks:1037 ERROR: status = -5
[  248.722413][T13515] (syz.4.3317,13515,1):ocfs2_read_dir_block:525 ERROR: status = -5
[  248.722428][T13515] (syz.4.3317,13515,1):ocfs2_find_entry_el:803 ERROR: reading directory 18, offset 0
[  248.723606][T13515] (syz.4.3317,13515,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  248.723624][T13515] (syz.4.3317,13515,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  248.723641][T13515] (syz.4.3317,13515,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  248.723657][T13515] (syz.4.3317,13515,1):ocfs2_initialize_super:2194 ERROR: status = -22
[  248.723735][T13515] (syz.4.3317,13515,1):ocfs2_fill_super:1177 ERROR: status = -22
[  248.937789][T13532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3326'.
[  248.986722][T13532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'.
[  249.148040][T13542] xt_MASQUERADE: bad MAP_IPS.
[  249.291876][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3334'.
[  249.291995][T13550] syz_tun: left allmulticast mode
[  249.292202][T13550] bridge0: port 3(syz_tun) entered disabled state
[  249.297548][T13550] bridge_slave_1: left allmulticast mode
[  249.297714][T13550] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.304674][T13550] bridge_slave_0: left allmulticast mode
[  249.304821][T13550] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.312824][T13550] bond0: (slave bridge0): Releasing backup interface
[  249.441759][T13554] bridge6: entered promiscuous mode
[  249.441921][T13554] bridge6: entered allmulticast mode
[  250.372382][T13573] loop4: detected capacity change from 0 to 2048
[  250.380161][T13573] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  250.481903][T13484] CIFS: VFS: Error connecting to socket. Aborting operation.
[  250.481972][T13484] CIFS: VFS: cifs_mount failed w/return code = -4
[  250.612224][T13583] binder: 13582:13583 ioctl c018620c 200000000000 returned -22
[  250.683145][T13587] bridge0: entered promiscuous mode
[  250.683772][T13587] bridge0: entered allmulticast mode
[  250.757615][T13591] CIFS: Attempting to mount //127.0.0.1/share
[  250.915223][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'.
[  251.048557][ T5650] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  251.105559][T13625] sctp: [Deprecated]: syz.1.3369 (pid 13625) Use of int in max_burst socket option.
[  251.105559][T13625] Use struct sctp_assoc_value instead
[  251.198294][ T5650] usb 5-1: Using ep0 maxpacket: 16
[  251.202884][ T5650] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  251.216953][ T5650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.217005][ T5650] usb 5-1: Product: syz
[  251.217064][ T5650] usb 5-1: Manufacturer: syz
[  251.217095][ T5650] usb 5-1: SerialNumber: syz
[  251.244417][ T5650] r8152-cfgselector 5-1: Unknown version 0x0000
[  251.259856][ T5650] r8152-cfgselector 5-1: config 0 descriptor??
[  251.337697][T13641] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3375'.
[  251.471327][ T5650] r8152-cfgselector 5-1: Needed 1 retries to read version
[  251.509208][T13652] bridge0: entered promiscuous mode
[  251.511140][T13652] bridge0: entered allmulticast mode
[  252.310846][T13676] overlayfs: failed to resolve './cgroup': -2
[  253.751271][T13591] CIFS: VFS: Error connecting to socket. Aborting operation.
[  253.754856][T13591] CIFS: VFS: cifs_mount failed w/return code = -4
[  253.792184][ T5650] r8152-cfgselector 5-1: USB disconnect, device number 22
[  254.922636][T13731] bridge7: entered promiscuous mode
[  254.922713][T13731] bridge7: entered allmulticast mode
[  255.778626][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  255.778702][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  255.893548][T13754] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[  257.305833][T13803] loop4: detected capacity change from 0 to 512
[  257.312515][T13803] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  257.324668][T13803] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #17: comm syz.4.3447: corrupted in-inode xattr: e_name out of bounds
[  257.324744][T13803] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[  257.325131][T13803] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.3447: couldn't read orphan inode 17 (err -117)
[  257.325153][T13803] loop4: lost filesystem error report for type 5 error -117
[  257.326710][T13803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.331317][T13803] EXT4-fs error (device loop4): ext4_search_dir:1476: inode #12: block 7: comm syz.4.3447: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  257.363803][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.455654][T13811] loop4: detected capacity change from 0 to 128
[  257.459754][T13811] EXT4-fs: Ignoring removed nobh option
[  257.466650][T13811] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  257.466869][T13811] ext4 filesystem being mounted at /529/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  257.481809][T13811] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks
[  257.481829][T13811] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  257.493244][ T8773] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  257.773763][T13826] C: renamed from lo
[  257.787079][T13826] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  258.009753][ T5650] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  258.068240][ T4992] Bluetooth: hci1: unexpected cc 0x1407 length: 11 > 9
[  258.068434][ T4992] Bluetooth: hci1: unexpected event for opcode 0x1407
[  258.158191][ T5650] usb 5-1: Using ep0 maxpacket: 8
[  258.158859][ T5650] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  258.159747][ T5650] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  258.159770][ T5650] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  258.159780][ T5650] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  258.159790][ T5650] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  258.159800][ T5650] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  258.159810][ T5650] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  258.159827][ T5650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.373155][ T5650] usb 5-1: usb_control_msg returned -32
[  258.373246][ T5650] usbtmc 5-1:16.0: can't read capabilities
[  258.743598][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  258.744818][T13855] usbtmc 5-1:16.0: Unable to send data, error -71
[  258.827770][T13860] overlayfs: failed to clone upperpath
[  258.903173][T13864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3475'.
[  258.917629][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3475'.
[  259.205548][T13877] fuse: fd is not a fuse device
[  259.305109][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'.
[  259.308284][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'.
[  259.481555][T13893] overlayfs: failed to resolve './file1/file0': -2
[  259.551957][   T33] audit: type=1326 audit(1790263394.147:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13896 comm="syz.1.3491" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x0
[  260.771526][ T5658] usb 5-1: USB disconnect, device number 23
[  260.866338][T13931] loop4: detected capacity change from 0 to 512
[  263.420063][T13983] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3530'.
[  263.423334][T13983] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3530'.
[  263.561599][T13991] loop4: detected capacity change from 0 to 4096
[  263.562208][T13991] NILFS: invalid option "cp=0": invalid checkpoint number 0
[  264.088673][   T50] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  264.239266][   T50] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  264.244189][   T50] usb 5-1: config 0 has an invalid interface number: 133 but max is 0
[  264.244250][   T50] usb 5-1: config 0 has no interface number 0
[  264.253288][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.256797][   T50] usb 5-1: Product: syz
[  264.262939][   T50] usb 5-1: Manufacturer: syz
[  264.265036][   T50] usb 5-1: SerialNumber: syz
[  264.270846][   T50] usb 5-1: config 0 descriptor??
[  264.331884][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3554'.
[  264.484044][   T50] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected
[  264.488671][   T50] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81
[  264.491625][   T50] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1
[  264.494697][   T50] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2
[  264.501892][   T50] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  264.514847][   T50] usb 5-1: USB disconnect, device number 24
[  264.532045][   T50] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  264.536565][   T50] keyspan 5-1:0.133: device disconnected
[  264.596935][   T33] audit: type=1326 audit(1790263399.187:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14046 comm="syz.3.3560" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x0
[  265.086577][T14059] FAULT_INJECTION: forcing a failure.
[  265.086577][T14059] name fail_futex, interval 1, probability 0, space 0, times 1
[  265.092992][T14059] CPU: 1 UID: 0 PID: 14059 Comm: syz.4.3565 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  265.093034][T14059] Tainted: [L]=SOFTLOCKUP
[  265.093040][T14059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  265.093048][T14059] Call Trace:
[  265.093054][T14059]  <TASK>
[  265.093061][T14059]  dump_stack_lvl+0xe8/0x150
[  265.093085][T14059]  should_fail_ex+0x410/0x560
[  265.093107][T14059]  get_futex_key+0x1b4/0x1580
[  265.093122][T14059]  ? rcu_is_watching+0x16/0xb0
[  265.093143][T14059]  ? __pfx_get_futex_key+0x10/0x10
[  265.093165][T14059]  futex_wait_setup+0x4a/0x590
[  265.093180][T14059]  ? __futex_wait+0xdf/0x400
[  265.093199][T14059]  __futex_wait+0x15f/0x400
[  265.093211][T14059]  ? __pfx___futex_wait+0x10/0x10
[  265.093223][T14059]  ? __pfx_futex_wake_mark+0x10/0x10
[  265.093236][T14059]  ? try_to_wake_up+0x901/0x14d0
[  265.093249][T14059]  futex_wait+0x121/0x390
[  265.093260][T14059]  ? __pfx_futex_wait+0x10/0x10
[  265.093275][T14059]  ? __pfx___sys_bpf+0x10/0x10
[  265.093286][T14059]  do_futex+0x3e7/0x4e0
[  265.093298][T14059]  ? __pfx_do_futex+0x10/0x10
[  265.093311][T14059]  __se_sys_futex+0x3a8/0x450
[  265.093322][T14059]  ? ksys_write+0x242/0x270
[  265.093333][T14059]  ? __pfx___se_sys_futex+0x10/0x10
[  265.093342][T14059]  ? rcu_is_watching+0x16/0xb0
[  265.093353][T14059]  ? __x64_sys_futex+0x21/0xf0
[  265.093363][T14059]  do_syscall_64+0x166/0x520
[  265.093408][T14059]  ? trace_irq_disable+0x3b/0x140
[  265.093421][T14059]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.093458][T14059]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.093473][T14059] RIP: 0033:0x7f521ab9e159
[  265.093487][T14059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  265.093498][T14059] RSP: 002b:00007f521bb470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  265.093510][T14059] RAX: ffffffffffffffda RBX: 00007f521ae25fa8 RCX: 00007f521ab9e159
[  265.093516][T14059] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f521ae25fa8
[  265.093521][T14059] RBP: 00007f521ae25fa0 R08: 0000000000000000 R09: 0000000000000000
[  265.093525][T14059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.093531][T14059] R13: 00007f521ae26038 R14: 00007ffe674c0040 R15: 00007ffe674c0128
[  265.093544][T14059]  </TASK>
[  265.408455][ T5650] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  265.493446][T14067] CIFS: Attempting to mount //127.0.0.1/share
[  265.558171][ T5650] usb 5-1: Using ep0 maxpacket: 16
[  265.560771][ T5650] usb 5-1: unable to get BOS descriptor or descriptor too short
[  265.560866][ T5650] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40
[  265.562138][ T5650] usb 5-1: config 1 interface 0 has no altsetting 0
[  265.564669][ T5650] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.564688][ T5650] usb 5-1: Product: syz
[  265.564697][ T5650] usb 5-1: Manufacturer: syz
[  265.564707][ T5650] usb 5-1: SerialNumber: syz
[  265.785619][ T5650] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input11
[  265.800394][ T5027] bcm5974 5-1:1.0: could not read from device
[  265.811184][ T5027] bcm5974 5-1:1.0: could not read from device
[  265.813131][ T5650] usb 5-1: USB disconnect, device number 25
[  266.154266][T14085] overlayfs: failed to resolve './cgroup': -2
[  266.451198][   T33] audit: type=1400 audit(1790263401.047:161): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=14091 comm="syz.4.3581" name="//o" offset=60
[  267.604927][T14102] loop4: detected capacity change from 0 to 32768
[  267.606025][T14102] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3586 (14102)
[  267.632551][T14102] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.632631][T14102] BTRFS info (device loop4): using crc32c checksum algorithm
[  267.678278][T14102] BTRFS info (device loop4): enabling ssd optimizations
[  267.678349][T14102] BTRFS info (device loop4): turning on flush-on-commit
[  267.678428][T14102] BTRFS info (device loop4): enabling free space tree
[  267.678467][T14102] BTRFS info (device loop4): enabling auto defrag
[  267.678502][T14102] BTRFS info (device loop4): use lzo compression, level 1
[  267.678537][T14102] BTRFS info (device loop4): max_inline set to 4096
[  267.776731][ T8773] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.491400][T14067] CIFS: VFS: Error connecting to socket. Aborting operation.
[  268.491494][T14067] CIFS: VFS: cifs_mount failed w/return code = -4
[  268.542379][T14135] fuse: fd is not a fuse device
[  268.853703][   T33] audit: type=1326 audit(1790263403.447:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14139 comm="syz.1.3596" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x0
[  270.698200][T14207] fuse: fd is not a fuse device
[  270.809781][ T5658] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  270.841073][T14217] kAFS: unable to lookup cell 'testcell'
[  270.955333][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3636'.
[  270.978505][ T5658] usb 5-1: Using ep0 maxpacket: 8
[  270.982727][ T5658] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  270.988404][ T5658] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  271.002541][ T5658] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  271.002606][ T5658] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  271.002636][ T5658] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  271.002665][ T5658] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  271.002761][ T5658] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  271.002800][ T5658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.230934][ T5658] usb 5-1: usb_control_msg returned -32
[  271.233556][ T5658] usbtmc 5-1:16.0: can't read capabilities
[  271.733671][T14255] kAFS: unable to lookup cell 'testcell'
[  272.406631][   T33] audit: type=1326 audit(1790263406.997:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14277 comm="syz.3.3660" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x0
[  273.270765][T14294] exfat: Deprecated parameter 'debug'
[  273.270832][T14294] /dev/nullb0: Can't lookup blockdev
[  273.394927][   T33] audit: type=1326 audit(1790263407.987:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14307 comm="syz.1.3674" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x0
[  273.576883][   T50] usb 5-1: USB disconnect, device number 26
[  273.938216][   T50] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  274.089810][   T50] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  274.094077][   T50] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.098349][   T50] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  274.102703][   T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  274.107001][   T50] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 196, setting to 64
[  274.111145][   T50] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  274.118870][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.122015][   T50] usb 5-1: Product: syz
[  274.123610][   T50] usb 5-1: Manufacturer: syz
[  274.123622][   T50] usb 5-1: SerialNumber: syz
[  274.128398][   T50] usb 5-1: config 0 descriptor??
[  274.131696][T14314] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  274.134995][   T50] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  274.138813][   T50] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  274.142791][   T50] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  274.326380][T14336] kAFS: unable to lookup cell 'testcell'
[  274.344174][ T8880] usb 5-1: USB disconnect, device number 27
[  274.356667][ T8880] garmin_gps 5-1:0.0: device disconnected
[  275.045654][T14370] fuse: fd is not a fuse device
[  275.112450][T14380] loop4: detected capacity change from 0 to 512
[  275.141361][T14380] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  275.168536][T14380] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.3706: iget: bad i_size value: 360287970189639680
[  275.168578][T14380] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  275.174215][T14380] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.3706: couldn't read orphan inode 15 (err -117)
[  275.177112][T14380] loop4: lost filesystem error report for type 5 error -117
[  275.180917][    C1] EXT4-fs (loop4): error count since last fsck: 2
[  275.180927][    C1] EXT4-fs (loop4): initial error at time 1790263409: ext4_orphan_get:1403: inode 15
[  275.180939][    C1] EXT4-fs (loop4): last error at time 1790263409: ext4_orphan_get:1408
[  275.185148][T14380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.262868][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.746304][T14427] overlayfs: failed to resolve './cgroup': -2
[  276.754342][T14469] overlayfs: failed to resolve './cgroup': -2
[  277.263381][T14493] kAFS: unable to lookup cell 'testcell'
[  277.315956][T14495] loop4: detected capacity change from 0 to 512
[  277.321110][T14495] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  277.322729][T14495] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.3760: iget: bad i_size value: 360287970189639680
[  277.322745][T14495] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  277.324449][T14495] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.3760: couldn't read orphan inode 15 (err -117)
[  277.324464][T14495] loop4: lost filesystem error report for type 5 error -117
[  277.340482][T14495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.384843][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.585338][T14506] ip_tables: iptables: counters copy to user failed while replacing table
[  277.643664][T14510] loop4: detected capacity change from 0 to 512
[  277.648989][T14510] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  277.662829][T14510] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.3767: iget: bad i_size value: 360287970189639680
[  277.669234][T14510] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  277.670068][T14510] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.3767: couldn't read orphan inode 15 (err -117)
[  277.670119][T14510] loop4: lost filesystem error report for type 5 error -117
[  277.675906][T14510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.702182][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.443293][T14534] binder: BINDER_SET_CONTEXT_MGR already set
[  278.454039][T14534] binder: 14533:14534 ioctl 4018620d 200000000040 returned -16
[  278.484528][T14536] loop4: detected capacity change from 0 to 512
[  278.487122][T14536] EXT4-fs: Ignoring removed bh option
[  278.489191][T14536] EXT4-fs: Ignoring removed mblk_io_submit option
[  278.492466][T14536] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  278.497973][T14536] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  278.501181][T14536] EXT4-fs (loop4): orphan cleanup on readonly fs
[  278.503874][T14536] Quota error (device loop4): v2_read_file_info: Free block number 117440512 out of range (1, 6).
[  278.515388][T14536] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  278.522412][T14536] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  278.527380][T14536] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.3778: Invalid block bitmap block 0 in block_group 0
[  278.531026][T14536] loop4: lost filesystem error report for type 5 error -117
[  278.531423][T14536] EXT4-fs (loop4): Remounting filesystem read-only
[  278.531543][T14536] EXT4-fs (loop4): 1 orphan inode deleted
[  278.532228][T14536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  278.563485][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.873217][T14569] kAFS: unable to lookup cell 'testcell'
[  278.941684][T14577] CIFS: Attempting to mount //127.0.0.1/share
[  279.178260][ T8880] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  279.330829][ T8880] usb 5-1: Using ep0 maxpacket: 16
[  279.335102][ T8880] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  279.339321][ T8880] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.343343][ T8880] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  279.348198][ T8880] usb 5-1: config 0 interface 0 has no altsetting 0
[  279.350647][ T8880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.371490][ T8880] usb 5-1: config 0 descriptor??
[  279.801461][ T8880] logitech-djreceiver 0003:046D:C53A.0004: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0
[  280.630652][T14602] netlink: 'syz.1.3809': attribute type 1 has an invalid length.
[  280.665469][T14602] bond2: (slave bridge4): making interface the new active one
[  280.671784][T14602] bond2: (slave bridge4): Enslaving as an active interface with an up link
[  280.676456][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3809'.
[  280.692821][T14602] bond2: entered promiscuous mode
[  280.692888][T14602] bridge4: entered promiscuous mode
[  280.699572][T14602] bond2: entered allmulticast mode
[  280.699636][T14602] bridge4: entered allmulticast mode
[  280.700098][T14602] 8021q: adding VLAN 0 to HW filter on device bond2
[  280.714247][ T5452] bond2: (slave bridge4): link status definitely down, disabling slave
[  280.718440][ T5452] bridge4: left promiscuous mode
[  280.726707][ T5452] bridge4: left allmulticast mode
[  280.734910][ T5452] bond2: now running without any active interface!
[  281.444857][T14631] overlayfs: failed to resolve './cgroup': -2
[  281.939114][T14577] CIFS: VFS: Error connecting to socket. Aborting operation.
[  281.939195][T14577] CIFS: VFS: cifs_mount failed w/return code = -4
[  281.973905][T14633] fuse: Bad value for 'fd'
[  282.365912][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3833'.
[  282.481415][T14658] overlayfs: failed to resolve './cgroup': -2
[  283.466942][T14681] netlink: 'syz.1.3847': attribute type 1 has an invalid length.
[  283.513549][T14681] bond3: (slave bridge5): making interface the new active one
[  283.517327][T14681] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  283.519993][T14681] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3847'.
[  283.520826][T14681] bond3: entered promiscuous mode
[  283.520839][T14681] bridge5: entered promiscuous mode
[  283.521015][T14681] bond3: entered allmulticast mode
[  283.521025][T14681] bridge5: entered allmulticast mode
[  283.521383][T14681] 8021q: adding VLAN 0 to HW filter on device bond3
[  284.211954][T14698] netlink: 'syz.1.3855': attribute type 1 has an invalid length.
[  284.246809][T14698] bond4: (slave bridge6): making interface the new active one
[  284.252939][T14698] bond4: (slave bridge6): Enslaving as an active interface with an up link
[  284.254469][T14698] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3855'.
[  284.254968][T14698] bond4: entered promiscuous mode
[  284.254976][T14698] bridge6: entered promiscuous mode
[  284.255110][T14698] bond4: entered allmulticast mode
[  284.255116][T14698] bridge6: entered allmulticast mode
[  284.255665][T14698] 8021q: adding VLAN 0 to HW filter on device bond4
[  284.422540][T14712] CIFS: Attempting to mount //127.0.0.1/share
[  287.422978][T14712] CIFS: VFS: Error connecting to socket. Aborting operation.
[  287.423059][T14712] CIFS: VFS: cifs_mount failed w/return code = -4
[  288.246800][T14768] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3886'.
[  288.864815][T14804] openvswitch: netlink: Geneve option length err (len 856, max 255).
[  288.979791][T14810] netlink: 'syz.3.3905': attribute type 1 has an invalid length.
[  289.057649][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3905'.
[  289.063659][T14812] bond4: entered promiscuous mode
[  289.063723][T14812] bond4: entered allmulticast mode
[  289.066954][T14812] 8021q: adding VLAN 0 to HW filter on device bond4
[  289.710655][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3913'.
[  290.344708][T14575] logitech-djreceiver 0003:046D:C53A.0004: timeout initializing reports
[  290.367669][ T8880] usb 5-1: USB disconnect, device number 28
[  290.413654][T14865] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[  290.476417][T14869] netlink: 'syz.3.3931': attribute type 5 has an invalid length.
[  290.833761][T14891] CIFS: Attempting to mount //127.0.0.1/share
[  291.085037][T14904] netlink: 'syz.1.3944': attribute type 5 has an invalid length.
[  291.234696][T14913] fuse: fd is not a fuse device
[  291.789304][   T33] audit: type=1326 audit(1790263426.387:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.4.3956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521ab9e159 code=0x7ffc0000
[  291.789759][   T33] audit: type=1326 audit(1790263426.387:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.4.3956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521ab9e159 code=0x7ffc0000
[  291.789838][   T33] audit: type=1326 audit(1790263426.387:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.4.3956" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f521ab5e98e code=0x7ffc0000
[  291.790053][   T33] audit: type=1326 audit(1790263426.387:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.4.3956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521ab9e159 code=0x7ffc0000
[  291.790095][   T33] audit: type=1326 audit(1790263426.387:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.4.3956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521ab9e159 code=0x7ffc0000
[  291.790537][   T33] audit: type=1326 audit(1790263426.387:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.4.3956" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f521ab9e159 code=0x7ffc0000
[  291.790645][   T33] audit: type=1326 audit(1790263426.387:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.4.3956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521ab9e159 code=0x7ffc0000
[  291.790761][   T33] audit: type=1326 audit(1790263426.387:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.4.3956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521ab9e159 code=0x7ffc0000
[  291.790887][   T33] audit: type=1326 audit(1790263426.387:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.4.3956" exe="/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f521ab9e159 code=0x7ffc0000
[  291.791036][   T33] audit: type=1326 audit(1790263426.387:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14928 comm="syz.4.3956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f521ab9e159 code=0x7ffc0000
[  291.904832][T14931] ip_tables: iptables: counters copy to user failed while replacing table
[  292.125572][T14933] netlink: 'syz.1.3957': attribute type 1 has an invalid length.
[  292.144861][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3957'.
[  292.150390][T14933] bond5: entered promiscuous mode
[  292.154883][T14933] bond5: entered allmulticast mode
[  292.157434][T14933] 8021q: adding VLAN 0 to HW filter on device bond5
[  292.195206][ T6157] IPVS: starting estimator thread 0...
[  292.298257][T14937] IPVS: using max 80 ests per chain, 192000 per kthread
[  292.714806][T14951] overlayfs: failed to resolve './file0': -2
[  293.783709][T14891] CIFS: VFS: Error connecting to socket. Aborting operation.
[  293.786960][T14891] CIFS: VFS: cifs_mount failed w/return code = -4
[  294.028254][ T5665] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  294.103357][T14985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3982'.
[  294.106735][T14985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3982'.
[  294.114579][T14985] netlink: 'syz.3.3982': attribute type 32 has an invalid length.
[  294.117176][T14985] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3982'.
[  294.208841][ T5665] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  294.212611][ T5665] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  294.215937][ T5665] usb 5-1: config 0 has no interface number 0
[  294.220083][ T5665] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  294.220138][ T5665] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  294.229832][ T5665] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  294.232517][ T5665] usb 5-1: Product: syz
[  294.233911][ T5665] usb 5-1: SerialNumber: syz
[  294.239147][ T5665] usb 5-1: config 0 descriptor??
[  294.249896][ T5665] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  294.454449][ T8880] usb 5-1: USB disconnect, device number 29
[  295.674503][T15038] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4004'.
[  296.087021][T15056] dlm: no locking on control device
[  296.407186][T15069] netlink: 'syz.1.4019': attribute type 1 has an invalid length.
[  296.417696][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4019'.
[  296.498309][ T5665] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  296.670845][ T5665] usb 5-1: Using ep0 maxpacket: 16
[  296.674745][ T5665] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  296.678992][ T5665] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.679029][ T5665] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  296.679063][ T5665] usb 5-1: config 0 interface 0 has no altsetting 0
[  296.679098][ T5665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.696091][ T5665] usb 5-1: config 0 descriptor??
[  296.976112][T15099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4033'.
[  297.080702][T15109] fuse: fd is not a fuse device
[  297.112599][ T5665] usbhid 5-1:0.0: can't add hid device: -71
[  297.112689][ T5665] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  297.124741][ T5665] usb 5-1: USB disconnect, device number 30
[  297.814111][T15138] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  298.582857][T15159] overlayfs: failed to clone lowerpath
[  298.781038][T15173] netlink: 'syz.4.4065': attribute type 1 has an invalid length.
[  298.781102][T15173] nbd: error processing sock list
[  298.872001][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4069'.
[  298.981982][T15192] tmpfs: Bad value for 'mpol'
[  299.212669][T15204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4078'.
[  299.399503][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  299.399581][   T33] audit: type=1326 audit(1790263690.062:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x7ffc0000
[  299.399642][   T33] audit: type=1326 audit(1790263690.062:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x7ffc0000
[  299.402658][   T33] audit: type=1326 audit(1790263690.062:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4083" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc025b5e98e code=0x7ffc0000
[  299.402723][   T33] audit: type=1326 audit(1790263690.062:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x7ffc0000
[  299.402982][   T33] audit: type=1326 audit(1790263690.062:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x7ffc0000
[  299.411971][   T33] audit: type=1326 audit(1790263690.072:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4083" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fc025b9e159 code=0x7ffc0000
[  299.412010][   T33] audit: type=1326 audit(1790263690.072:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x7ffc0000
[  299.412037][   T33] audit: type=1326 audit(1790263690.072:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x7ffc0000
[  299.412439][   T33] audit: type=1326 audit(1790263690.072:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4083" exe="/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc025b9e159 code=0x7ffc0000
[  299.412584][   T33] audit: type=1326 audit(1790263690.072:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15217 comm="syz.1.4083" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc025b9e159 code=0x7ffc0000
[  300.125979][T15232] netlink: 'syz.4.4088': attribute type 1 has an invalid length.
[  300.129879][T15232] gretap0: entered promiscuous mode
[  300.136654][T15232] netlink: 'syz.4.4088': attribute type 1 has an invalid length.
[  300.178298][ T5597] Bluetooth: hci0: command 0x0406 tx timeout
[  300.205839][T15239] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4091'.
[  300.206270][T15239] netlink: 548 bytes leftover after parsing attributes in process `syz.3.4091'.
[  300.818450][   T50] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  301.048558][   T50] usb 5-1: Using ep0 maxpacket: 8
[  301.052240][   T50] usb 5-1: unable to get BOS descriptor or descriptor too short
[  301.054872][   T50] usb 5-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a
[  301.059339][   T50] usb 5-1: config 0 has an invalid interface number: 122 but max is 0
[  301.062117][   T50] usb 5-1: config 0 has no interface number 0
[  301.062166][   T50] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024
[  301.062205][   T50] usb 5-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85
[  301.062235][   T50] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024
[  301.062265][   T50] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024
[  301.062293][   T50] usb 5-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0
[  301.062319][   T50] usb 5-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0
[  301.062347][   T50] usb 5-1: config 0 interface 122 has no altsetting 0
[  301.094799][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.098625][   T50] usb 5-1: Product: syz
[  301.098639][   T50] usb 5-1: Manufacturer: syz
[  301.098649][   T50] usb 5-1: SerialNumber: syz
[  301.107848][   T50] usb 5-1: config 0 descriptor??
[  301.112383][T15269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  301.118557][T15269] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  301.226963][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4105'.
[  301.330007][   T50] pl2303 5-1:0.122: pl2303 converter detected
[  301.334064][   T50] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  301.336940][   T50] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0404]: -71
[  301.340094][   T50] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  301.343033][   T50] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8383]: -71
[  301.345913][   T50] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  301.349204][   T50] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0404]: -71
[  301.352260][   T50] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8484]: -71
[  301.355142][   T50] pl2303 5-1:0.122: pl2303_vendor_read - failed to read [8383]: -71
[  301.358235][   T50] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0000]: -71
[  301.361322][   T50] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0001]: -71
[  301.364308][   T50] pl2303 5-1:0.122: pl2303_vendor_write - failed to write [0002]: -71
[  301.369711][   T50] usb 5-1: pl2303 converter now attached to ttyUSB0
[  301.377130][   T50] usb 5-1: USB disconnect, device number 31
[  301.384383][   T50] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  301.387319][   T50] pl2303 5-1:0.122: device disconnected
[  301.613110][T15294] netlink: 'syz.1.4112': attribute type 1 has an invalid length.
[  301.937930][T15309] netlink: 'syz.3.4119': attribute type 1 has an invalid length.
[  302.277670][ T5597] Bluetooth: hci0: command 0x0406 tx timeout
[  303.171050][T15358] loop4: detected capacity change from 0 to 16
[  303.209471][T15358] erofs (device loop4): mounted with root inode @ nid 36.
[  303.253726][T15363] ip6t_rpfilter: unknown options
[  303.289097][ T5597] Bluetooth: hci1: command 0x0406 tx timeout
[  303.596466][T15395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4159'.
[  303.874060][T15404] overlayfs: failed to clone lowerpath
[  304.606522][T15428] netlink: 548 bytes leftover after parsing attributes in process `syz.4.4173'.
[  304.984960][T15446] netlink: 'syz.3.4179': attribute type 1 has an invalid length.
[  304.988383][T15446] netlink: 'syz.3.4179': attribute type 1 has an invalid length.
[  305.027303][T15449] overlayfs: failed to resolve './cgroup': -2
[  305.104540][T15457] fuse: fd is not a fuse device
[  305.368257][ T5597] Bluetooth: hci1: command 0x0406 tx timeout
[  305.627231][T15464] netlink: 'syz.4.4188': attribute type 1 has an invalid length.
[  305.632814][T15464] netlink: 'syz.4.4188': attribute type 1 has an invalid length.
[  305.746835][T15468] loop4: detected capacity change from 0 to 8192
[  306.119074][T15473] fuse: fd is not a fuse device
[  306.320493][T15479] netlink: 'syz.3.4195': attribute type 1 has an invalid length.
[  306.321552][T15479] netlink: 'syz.3.4195': attribute type 1 has an invalid length.
[  306.421381][T15482] fuse: fd is not a fuse device
[  307.042348][T15505] CIFS: Attempting to mount //127.0.0.1/share
[  307.194865][T15508] bridge8: the hash_elasticity option has been deprecated and is always 16
[  307.202186][ T8773] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  307.206035][ T8773] FAT-fs (loop4): Filesystem has been set read-only
[  308.316912][T15530] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4219'.
[  308.320665][T15530] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4219'.
[  308.324049][T15530] netlink: 'syz.4.4219': attribute type 32 has an invalid length.
[  308.324118][T15530] netlink: 500 bytes leftover after parsing attributes in process `syz.4.4219'.
[  308.601340][T15539] ptrace attach of "/syz-executor exec"[8773] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       
[  308.708328][T15543] loop4: detected capacity change from 0 to 4096
[  308.726857][T15543] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  308.770423][T15543] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  308.771067][T15543] ntfs3(loop4): Inode r=b is not in use!
[  308.771220][T15543] ntfs3(loop4): Failed to load $Extend (-116).
[  308.771233][T15543] ntfs3(loop4): Failed to initialize $Extend.
[  309.027417][T15553] loop4: detected capacity change from 0 to 512
[  309.064959][T15553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.069129][T15553] ext4 filesystem being mounted at /704/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.082039][T15553] EXT4-fs (loop4): resizing filesystem from 128 to 2 blocks
[  309.085113][T15553] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  309.328221][   T50] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  309.478297][   T50] usb 5-1: Using ep0 maxpacket: 32
[  309.481335][   T50] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  309.486348][   T50] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  309.490963][   T50] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7
[  309.497899][   T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.501440][   T50] usb 5-1: Product: syz
[  309.503348][   T50] usb 5-1: Manufacturer: syz
[  309.505478][   T50] usb 5-1: SerialNumber: syz
[  309.731599][   T50] usb 5-1: cannot setup if 1: error -71
[  309.734586][   T50] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -71
[  309.744745][   T50] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  309.778951][   T50] usb 5-1: USB disconnect, device number 32
[  309.824900][T15572] overlayfs: failed to resolve './cgroup': -2
[  310.025982][T15505] CIFS: VFS: Error connecting to socket. Aborting operation.
[  310.026071][T15505] CIFS: VFS: cifs_mount failed w/return code = -4
[  310.075535][T15574] overlayfs: failed to resolve './cgroup': -2
[  310.254956][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.369498][T15580] loop4: detected capacity change from 0 to 2048
[  310.392466][T15581] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  310.602833][T15591] loop4: detected capacity change from 0 to 16
[  310.612651][T15591] erofs (device loop4): mounted with root inode @ nid 36.
[  311.008631][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4256'.
[  311.387250][T15627] fuse: fd is not a fuse device
[  311.443009][T15635] CIFS: Attempting to mount //127.0.0.1/share
[  311.551211][T15643] fuse: fd is not a fuse device
[  311.789229][T15661] fuse: fd is not a fuse device
[  312.885857][T15683] loop4: detected capacity change from 0 to 2048
[  312.896911][T15683] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  313.360888][T15717] fuse: fd is not a fuse device
[  313.687738][T15721] SET target dimension over the limit!
[  314.441563][T15635] CIFS: VFS: Error connecting to socket. Aborting operation.
[  314.441663][T15635] CIFS: VFS: cifs_mount failed w/return code = -4
[  314.696367][T15757] CIFS: Attempting to mount //127.0.0.1/share
[  316.262468][T15789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.451868][T15801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4343'.
[  316.968640][ T5665] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  317.118286][ T5665] usb 5-1: Using ep0 maxpacket: 16
[  317.120781][ T5665] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  317.127924][ T5665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.131525][ T5665] usb 5-1: Product: syz
[  317.133209][ T5665] usb 5-1: Manufacturer: syz
[  317.134852][ T5665] usb 5-1: SerialNumber: syz
[  317.139030][ T5665] r8152-cfgselector 5-1: Unknown version 0x0000
[  317.141501][ T5665] r8152-cfgselector 5-1: config 0 descriptor??
[  317.210962][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  317.211060][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  317.349548][ T5665] r8152-cfgselector 5-1: Needed 1 retries to read version
[  317.691903][T15757] CIFS: VFS: Error connecting to socket. Aborting operation.
[  317.691970][T15757] CIFS: VFS: cifs_mount failed w/return code = -4
[  317.883576][T15860] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4372'.
[  318.209596][T15874] fuse: fd is not a fuse device
[  318.915978][T15888] tipc: Started in network mode
[  318.916040][T15888] tipc: Node identity , cluster identity 4711
[  319.686612][ T5665] r8152-cfgselector 5-1: USB disconnect, device number 33
[  320.393333][T15936] loop4: detected capacity change from 0 to 256
[  320.402935][T15936] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  320.495489][T15946] fuse: fd is not a fuse device
[  320.666355][T15962] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  320.936171][T15990] fuse: fd is not a fuse device
[  321.640054][T16056] input: syz1 as /devices/virtual/input/input12
[  321.696493][   T33] kauditd_printk_skb: 741 callbacks suppressed
[  321.699234][   T33] audit: type=1800 audit(1790263712.352:936): pid=16060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4462" name=08 dev="sda1" ino=1942 res=0 errno=0
[  322.246219][T16083] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  322.343762][T16091] netlink: 'syz.1.4475': attribute type 4 has an invalid length.
[  323.173572][T16134] loop4: detected capacity change from 0 to 4096
[  323.247666][T16137] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  323.525954][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4501'.
[  323.526033][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4501'.
[  323.632163][T16172] fuse: fd is not a fuse device
[  323.882970][T16189] device-mapper: ioctl: name not supplied when creating device
[  324.812339][T16237] netlink: 'syz.4.4537': attribute type 3 has an invalid length.
[  324.816093][T16237] tc_dump_action: action bad kind
[  324.870708][T16240] loop4: detected capacity change from 0 to 4096
[  324.901540][T16245] kAFS: unable to lookup cell ''
[  324.924213][T16247] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  325.109723][T16262] netlink: 'syz.3.4546': attribute type 39 has an invalid length.
[  325.198458][T16267] kAFS: unable to lookup cell ''
[  325.613425][T16296] netlink: 1039 bytes leftover after parsing attributes in process `syz.3.4562'.
[  326.039216][T16326] loop4: detected capacity change from 0 to 4096
[  326.262245][T16342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4581'.
[  326.967125][T16379] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  327.374101][T16395] netlink: 'syz.3.4607': attribute type 39 has an invalid length.
[  327.873978][   T33] audit: type=1326 audit(1790263718.532:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.3.4618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  327.875440][   T33] audit: type=1326 audit(1790263718.532:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.3.4618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  327.875470][   T33] audit: type=1326 audit(1790263718.532:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.3.4618" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7201d5e98e code=0x7ffc0000
[  327.875497][   T33] audit: type=1326 audit(1790263718.532:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.3.4618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  327.875524][   T33] audit: type=1326 audit(1790263718.532:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.3.4618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  327.875550][   T33] audit: type=1326 audit(1790263718.532:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.3.4618" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  327.875576][   T33] audit: type=1326 audit(1790263718.532:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.3.4618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  327.875602][   T33] audit: type=1326 audit(1790263718.532:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.3.4618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  327.875628][   T33] audit: type=1326 audit(1790263718.532:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.3.4618" exe="/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  327.875654][   T33] audit: type=1326 audit(1790263718.532:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16416 comm="syz.3.4618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  328.758797][ T5658] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  329.160056][ T5658] usb 5-1: unable to get BOS descriptor or descriptor too short
[  329.160546][ T5658] usb 5-1: not running at top speed; connect to a high speed hub
[  329.160560][ T5658] usb 5-1: New USB device found, idVendor=0421, idProduct=0327, bcdDevice=8b.96
[  329.161423][ T5658] usb 5-1: config 7 has an invalid interface number: 62 but max is 0
[  329.161434][ T5658] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  329.161441][ T5658] usb 5-1: config 7 has no interface number 0
[  329.161452][ T5658] usb 5-1: config 7 interface 62 has no altsetting 0
[  329.163199][ T5658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.163213][ T5658] usb 5-1: Product: syz
[  329.163221][ T5658] usb 5-1: Manufacturer: syz
[  329.163230][ T5658] usb 5-1: SerialNumber: syz
[  329.381824][ T5658] cdc_phonet 5-1:7.62: skipping garbage
[  329.381891][ T5658] cdc_phonet 5-1:7.62: probe with driver cdc_phonet failed with error -22
[  329.388263][ T5658] usb 5-1: USB disconnect, device number 34
[  329.732255][T16505] fuse: fd is not a fuse device
[  330.348278][ T5658] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  330.519654][ T5658] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  330.524434][ T5658] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.524505][ T5658] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.524544][ T5658] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  330.524576][ T5658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.539131][ T5658] usb 5-1: config 0 descriptor??
[  331.012835][T16564] xt_TCPMSS: Only works on TCP SYN packets
[  331.625438][T16572] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  332.546680][ T5658] usbhid 5-1:0.0: can't add hid device: -71
[  332.546785][ T5658] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  332.557300][ T5658] usb 5-1: USB disconnect, device number 35
[  333.177315][T16624] netlink: 'syz.4.4706': attribute type 39 has an invalid length.
[  333.401892][T16635] fuse: fd is not a fuse device
[  333.972844][T16662] bond6: entered allmulticast mode
[  333.975329][T16662] 8021q: adding VLAN 0 to HW filter on device bond6
[  333.992096][T16662] macvlan3: entered promiscuous mode
[  333.994265][T16662] macvlan3: entered allmulticast mode
[  333.997433][T16662] bond6: entered promiscuous mode
[  334.000171][T16662] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  334.010123][T16662] bond6: left promiscuous mode
[  334.478526][T16691] loop4: detected capacity change from 0 to 8
[  334.496518][T16691] unable to read id index table
[  334.537632][T16693] loop4: detected capacity change from 0 to 2048
[  334.557256][T16693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  334.621519][T16697] ip_tables: iptables: counters copy to user failed while replacing table
[  334.735986][T16707] fuse: fd is not a fuse device
[  335.013157][T16729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4751'.
[  335.032395][T16729] team1: entered promiscuous mode
[  335.034241][T16729] team1: entered allmulticast mode
[  336.081910][T16779] netlink: 'syz.3.4774': attribute type 39 has an invalid length.
[  336.632780][T16784] fuse: fd is not a fuse device
[  337.851072][ T5658] libceph: connect (1)[c::]:6789 error -101
[  337.851229][ T5658] libceph: mon0 (1)[c::]:6789 connect error
[  337.900021][T16810] ceph: No mds server is up or the cluster is laggy
[  338.059647][T16817] fuse: fd is not a fuse device
[  338.345445][T16843] fuse: fd is not a fuse device
[  338.975871][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  338.975960][   T33] audit: type=1326 audit(1790263729.632:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16889 comm="syz.3.4823" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  338.976074][   T33] audit: type=1326 audit(1790263729.632:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16889 comm="syz.3.4823" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  338.978677][   T33] audit: type=1326 audit(1790263729.642:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16889 comm="syz.3.4823" exe="/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  338.979292][   T33] audit: type=1326 audit(1790263729.642:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16889 comm="syz.3.4823" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  338.979327][   T33] audit: type=1326 audit(1790263729.642:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16889 comm="syz.3.4823" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7201d9e159 code=0x7ffc0000
[  339.738180][T16911] loop4: detected capacity change from 0 to 8
[  339.810231][T16914] fuse: fd is not a fuse device
[  339.904233][T16922] fuse: fd is not a fuse device
[  340.092456][T16934] netlink: 'syz.1.4842': attribute type 23 has an invalid length.
[  340.095421][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4842'.
[  340.194184][T16946] CIFS: Attempting to mount //127.0.0.1/share
[  342.848830][T16987] loop4: detected capacity change from 0 to 256
[  342.864100][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4864'.
[  343.188769][T16946] CIFS: VFS: Error connecting to socket. Aborting operation.
[  343.188844][T16946] CIFS: VFS: cifs_mount failed w/return code = -4
[  343.229055][ T5658] libceph: connect (1)[c::]:6789 error -101
[  343.229157][ T5658] libceph: mon0 (1)[c::]:6789 connect error
[  343.278062][T17000] ceph: No mds server is up or the cluster is laggy
[  343.475772][ T4992] Bluetooth: hci1: Unable to find connection for big 0x00
[  344.056766][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4883'.
[  344.079461][T17031] team2: entered promiscuous mode
[  344.079511][T17031] team2: entered allmulticast mode
[  344.242874][T17047] loop4: detected capacity change from 0 to 2048
[  344.260187][T17047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  344.886839][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4897'.
[  344.920049][T17064] fuse: Bad value for 'fd'
[  345.313561][T17082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4906'.
[  345.321646][T17082] team1: entered promiscuous mode
[  345.321694][T17082] team1: entered allmulticast mode
[  345.430704][T17090] fuse: Bad value for 'fd'
[  346.177118][T17134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4931'.
[  346.640511][T17150] loop4: detected capacity change from 0 to 128
[  346.934862][T17172] loop4: detected capacity change from 0 to 2048
[  346.945016][T17172] hpfs: hpfs_map_sector(): read error
[  346.995238][T17176] FAULT_INJECTION: forcing a failure.
[  346.995238][T17176] name failslab, interval 1, probability 0, space 0, times 0
[  346.995315][T17176] CPU: 1 UID: 0 PID: 17176 Comm: syz.4.4949 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  346.995352][T17176] Tainted: [L]=SOFTLOCKUP
[  346.995357][T17176] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  346.995365][T17176] Call Trace:
[  346.995371][T17176]  <TASK>
[  346.995378][T17176]  dump_stack_lvl+0xe8/0x150
[  346.995402][T17176]  should_fail_ex+0x410/0x560
[  346.995434][T17176]  should_failslab+0xa8/0x100
[  346.995453][T17176]  __kmalloc_cache_noprof+0xa3/0x600
[  346.995475][T17176]  ? fanout_add+0x24d/0x13b0
[  346.995494][T17176]  ? fanout_add+0x24d/0x13b0
[  346.995517][T17176]  fanout_add+0x24d/0x13b0
[  346.995538][T17176]  ? _copy_from_user+0x94/0xb0
[  346.995551][T17176]  packet_setsockopt+0xc34/0x1510
[  346.995568][T17176]  ? __pfx_packet_setsockopt+0x10/0x10
[  346.995583][T17176]  ? __pfx___sys_bpf+0x10/0x10
[  346.995603][T17176]  ? aa_sk_perm+0x713/0x900
[  346.995630][T17176]  ? __pfx_aa_sk_perm+0x10/0x10
[  346.995651][T17176]  ? aa_sock_opt_perm+0x142/0x1e0
[  346.995669][T17176]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  346.995684][T17176]  ? __pfx_packet_setsockopt+0x10/0x10
[  346.995702][T17176]  do_sock_setsockopt+0x17c/0x1b0
[  346.995719][T17176]  __x64_sys_setsockopt+0x13d/0x1b0
[  346.995737][T17176]  do_syscall_64+0x166/0x520
[  346.995755][T17176]  ? trace_irq_disable+0x3b/0x140
[  346.995767][T17176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.995785][T17176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.995824][T17176] RIP: 0033:0x7f521ab9e159
[  346.995838][T17176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.995850][T17176] RSP: 002b:00007f521bb47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  346.995866][T17176] RAX: ffffffffffffffda RBX: 00007f521ae25fa0 RCX: 00007f521ab9e159
[  346.995876][T17176] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003
[  346.995883][T17176] RBP: 00007f521ac3506b R08: 0000000000000004 R09: 0000000000000000
[  346.995893][T17176] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.995901][T17176] R13: 00007f521ae26038 R14: 00007f521ae25fa0 R15: 00007ffe674c0128
[  346.995921][T17176]  </TASK>
[  348.388211][   T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  348.547718][T17205] bond5: entered allmulticast mode
[  348.551411][T17205] 8021q: adding VLAN 0 to HW filter on device bond5
[  348.554521][   T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  348.562626][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.572159][   T10] usb 5-1: config 0 descriptor??
[  348.785707][   T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  349.067174][   T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  349.069418][   T10] [drm] Initialized udl on minor 2
[  349.225580][   T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  349.244872][   T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  349.255779][   T10] usb 5-1: USB disconnect, device number 36
[  349.279590][ T8880] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  350.312508][T17267] fuse: fd is not a fuse device
[  350.632786][T17275] loop4: detected capacity change from 0 to 32768
[  350.669437][T17275] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  350.693062][T17275] XFS (loop4): Ending clean mount
[  350.744886][ T8773] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  352.099570][T17321] fuse: Bad value for 'fd'
[  352.517640][T17353] vxcan0: tx address claim with dest, not broadcast
[  352.618171][ T5665] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  352.768693][ T5665] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[  352.769849][ T5665] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  352.769866][ T5665] usb 5-1: config 0 has no interface number 0
[  352.769890][ T5665] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  352.769906][ T5665] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  352.769950][ T5665] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[  352.769965][ T5665] usb 5-1: config 0 interface 2 has no altsetting 0
[  352.772338][ T5665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.772354][ T5665] usb 5-1: Product: syz
[  352.772363][ T5665] usb 5-1: Manufacturer: syz
[  352.772372][ T5665] usb 5-1: SerialNumber: syz
[  352.774610][ T5665] usb 5-1: config 0 descriptor??
[  352.777307][T17347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  352.777464][T17347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  352.782223][ T5665] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  353.081240][   T10] usb 5-1: USB disconnect, device number 37
[  353.430643][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5029'.
[  353.562601][T17394] dummy0: left promiscuous mode
[  353.767780][T17406] loop4: detected capacity change from 0 to 512
[  353.771693][T17406] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  353.947170][T17410] loop4: detected capacity change from 0 to 256
[  354.092698][T17414] trusted_key: syz.4.5044 sent an empty control message without MSG_MORE.
[  354.135320][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5045'.
[  354.135420][T17416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5045'.
[  354.287525][T17424] loop4: detected capacity change from 0 to 512
[  354.289042][T17424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  354.291647][T17424] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.5049: iget: bad i_size value: 38620345925642
[  354.291661][T17424] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  354.291829][T17424] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.5049: couldn't read orphan inode 15 (err -117)
[  354.291841][T17424] loop4: lost filesystem error report for type 5 error -117
[  354.292823][T17424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.338892][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.445024][T17443] loop4: detected capacity change from 0 to 512
[  355.487069][T17443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  355.551441][T17443] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.5056: iget: bad i_size value: 38620345925642
[  355.556046][T17443] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  355.556306][T17443] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.5056: couldn't read orphan inode 15 (err -117)
[  355.559459][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  355.559469][    C0] EXT4-fs (loop4): initial error at time 1790263746: ext4_orphan_get:1403: inode 15
[  355.559481][    C0] EXT4-fs (loop4): last error at time 1790263746: ext4_orphan_get:1403: inode 15
[  355.572038][T17443] loop4: lost filesystem error report for type 5 error -117
[  355.577703][T17443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  355.619586][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.144999][T17450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5059'.
[  356.525465][T17461] fuse: fd is not a fuse device
[  356.883738][T17484] bond0: (slave macvtap0): Error: Device is in use and cannot be enslaved
[  357.002828][T17490] 9p: Bad value for 'wfdno'
[  357.105999][T17496] xt_hashlimit: size too large, truncated to 1048576
[  357.152964][T17504] xt_hashlimit: size too large, truncated to 1048576
[  357.381549][T17518] fuse: fd is not a fuse device
[  357.518363][ T5665] usb 5-1: new low-speed USB device number 38 using dummy_hcd
[  357.719831][ T5665] usb 5-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice=a7.e8
[  357.725066][ T5665] usb 5-1: config 0 has an invalid interface number: 90 but max is 0
[  357.727721][ T5665] usb 5-1: config 0 has no interface number 0
[  357.729788][ T5665] usb 5-1: config 0 interface 90 has no altsetting 0
[  357.735628][ T5665] usb 5-1: string descriptor 0 read error: -22
[  357.735725][ T5665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.743545][ T5665] usb 5-1: config 0 descriptor??
[  357.757382][ T5665] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617
[  357.956144][ T5665] gspca_sn9c20x: Write register 1000 failed -71
[  357.956182][ T5665] gspca_sn9c20x: Device initialization failed
[  357.956251][ T5665] gspca_sn9c20x 5-1:0.90: probe with driver gspca_sn9c20x failed with error -71
[  357.983737][ T5665] usb 5-1: USB disconnect, device number 38
[  358.185155][T17540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5099'.
[  359.273585][T17572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.469266][T17582] loop4: detected capacity change from 0 to 512
[  359.477675][T17582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  359.496229][T17582] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.5118: iget: bad i_size value: 38620345925642
[  359.501266][T17582] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  359.501529][T17582] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.5118: couldn't read orphan inode 15 (err -117)
[  359.508927][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  359.508938][    C1] EXT4-fs (loop4): initial error at time 1790263750: ext4_orphan_get:1403: inode 15
[  359.508950][    C1] EXT4-fs (loop4): last error at time 1790263750: ext4_orphan_get:1403: inode 15
[  359.517274][T17582] loop4: lost filesystem error report for type 5 error -117
[  359.518620][T17582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.544953][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.602658][T17588] netlink: 'syz.4.5120': attribute type 5 has an invalid length.
[  359.627137][T17590] netlink: 'syz.4.5121': attribute type 23 has an invalid length.
[  360.123275][ T4992] Bluetooth: hci0: unexpected event for opcode 0x0c1c
[  360.503551][T17614] fuse: fd is not a fuse device
[  361.416240][T17625] netlink: 774 bytes leftover after parsing attributes in process `syz.1.5137'.
[  361.910649][T17630] fuse: fd is not a fuse device
[  361.954058][T17632] xt_hashlimit: size too large, truncated to 1048576
[  362.347018][T17650] af_packet: tpacket_rcv: packet too big, clamped from 3953 to 3952. macoff=96
[  362.933479][T17659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5152'.
[  363.107598][T17663] netlink: 'syz.1.5154': attribute type 5 has an invalid length.
[  363.289702][T17674] loop4: detected capacity change from 0 to 256
[  363.296204][T17674] exfat: Deprecated parameter 'utf8'
[  363.296286][T17674] exfat: Deprecated parameter 'utf8'
[  363.341187][T17674] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  363.424264][T17678] loop4: detected capacity change from 0 to 256
[  363.428763][T17678] exfat: Deprecated parameter 'namecase'
[  363.432432][T17678] exfat: Deprecated parameter 'namecase'
[  363.446126][T17678] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  365.584263][T17737] batman_adv: batadv0: Adding interface: wlan0
[  365.584319][T17737] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.584479][T17737] batman_adv: batadv0: Interface activated: wlan0
[  365.601310][T17737] batman_adv: batadv0: Adding interface: virt_wifi0
[  365.601372][T17737] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.601426][T17737] batman_adv: batadv0: Interface activated: virt_wifi0
[  365.607032][T17737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.611996][T17737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.365933][T17761] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  366.365981][T17761] CIFS mount error: No usable UNC path provided in device string!
[  366.365981][T17761] 
[  366.366298][T17761] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  367.365297][T17805] loop4: detected capacity change from 0 to 512
[  367.371515][T17805] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  367.371763][T17805] EXT4-fs (loop4): orphan cleanup on readonly fs
[  367.372245][T17805] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  367.372685][T17805] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  367.407368][T17805] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #16: comm syz.4.5216: corrupted xattr block 31: invalid header
[  367.407456][T17805] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  367.416715][T17805] EXT4-fs (loop4): Remounting filesystem read-only
[  367.416875][T17805] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117)
[  367.417279][T17805] EXT4-fs (loop4): 1 orphan inode deleted
[  367.559689][T17805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  367.604388][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.831534][T17824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  369.522379][T17885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.347730][T17916] loop4: detected capacity change from 0 to 131072
[  370.348903][T17916] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24)
[  370.348915][T17916] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  370.348926][T17916] F2FS-fs (loop4): Test dummy encryption mode enabled
[  370.350044][T17916] F2FS-fs (loop4): invalid crc value
[  370.374340][T17929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.385439][T17916] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  370.386190][T17916] loop4: lost filesystem error report for type 5 error -117
[  370.391478][T17916] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  370.395758][T17916] F2FS-fs (loop4): checkpoint=disable on readonly fs
[  371.654379][T17985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5294'.
[  371.783781][T17999] loop4: detected capacity change from 0 to 8
[  371.789798][T17999] SQUASHFS error: zlib decompression failed, data probably corrupt
[  371.789871][T17999] SQUASHFS error: Failed to read block 0x9b: -5
[  371.789912][T17999] SQUASHFS error: Unable to read metadata cache entry [99]
[  371.789935][T17999] SQUASHFS error: Unable to read inode 0x127
[  371.856445][T18001] loop4: detected capacity change from 0 to 512
[  371.886777][T18001] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[  371.889199][T18001] System zones: 0-2, 18-18, 34-34
[  371.906124][T18001] EXT4-fs (loop4): 1 orphan inode deleted
[  371.912625][T18001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.912984][T18001] ext4 filesystem being mounted at /973/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  371.955765][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.531724][T18039] : renamed from bond_slave_0 (while UP)
[  373.133318][T18062] loop4: detected capacity change from 0 to 1024
[  373.139869][T18062] EXT4-fs: Ignoring removed bh option
[  373.153231][T18062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.181853][ T8773] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.772170][T18080] bond0: option all_slaves_active: invalid value (255)
[  374.014362][T18096] bond6: option all_slaves_active: invalid value (255)
[  374.019240][T18096] bond6 (unregistering): Released all slaves
[  374.286930][T18112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5348'.
[  374.530245][T18121] loop4: detected capacity change from 0 to 1024
[  374.535106][T18121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  375.314829][T18129] bond6: option all_slaves_active: invalid value (255)
[  375.319608][T18129] bond6 (unregistering): Released all slaves
[  375.475375][T18145] scsi_nl_rcv_msg: discarding partial skb
[  375.719493][T18160] loop4: detected capacity change from 0 to 1024
[  375.724577][T18160] EXT4-fs: Invalid want_extra_isize 8388736
[  376.352543][   T33] audit: type=1800 audit(1790263767.012:988): pid=18191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5377" name="file1" dev="tmpfs" ino=10472 res=0 errno=0
[  377.214679][T18212] loop4: detected capacity change from 0 to 131072
[  377.215674][T18212] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[  377.215692][T18212] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  377.236620][T18212] F2FS-fs (loop4): invalid crc value
[  377.290939][T18212] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  377.299169][T18212] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  377.299235][T18212] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  377.315890][   T33] audit: type=1800 audit(1790263767.972:989): pid=18212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5387" name="file1" dev="loop4" ino=7 res=0 errno=0
[  377.495543][T18212] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI
[  377.499800][T18212] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[  377.502839][T18212] CPU: 1 UID: 0 PID: 18212 Comm: syz.4.5387 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  377.506407][T18212] Tainted: [L]=SOFTLOCKUP
[  377.507890][T18212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  377.511190][T18212] RIP: 0010:new_curseg+0x1134/0x3580
[  377.513002][T18212] Code: e8 41 db ce fd 48 8b 7c 24 30 48 8b 07 49 6b cf 70 4c 8d 34 08 49 83 c6 61 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 73 11 00 00 41 80 3e 00 0f 84 e6 00 00 00
[  377.519765][T18212] RSP: 0018:ffffc9000607f068 EFLAGS: 00010206
[  377.522004][T18212] RAX: 000000000000000c RBX: 0000000000008000 RCX: dffffc0000000000
[  377.524495][T18212] RDX: ffffc9000f831000 RSI: 000000000007ffff RDI: ffff8881b3c59a88
[  377.527168][T18212] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  377.529909][T18212] R10: dffffc0000000000 R11: fffff52000c0fdfc R12: ffff8881b3d90000
[  377.532542][T18212] R13: 0000000000000004 R14: 0000000000000061 R15: 0000000000000000
[  377.535138][T18212] FS:  00007f521bb476c0(0000) GS:ffff8882a8cda000(0000) knlGS:0000000000000000
[  377.538108][T18212] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  377.540276][T18212] CR2: 0000000000000000 CR3: 000000017a4c4000 CR4: 00000000000006f0
[  377.542901][T18212] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  377.545515][T18212] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  377.548571][T18212] Call Trace:
[  377.549972][T18212]  <TASK>
[  377.551172][T18212]  f2fs_allocate_data_block+0x229c/0x43c0
[  377.553433][T18212]  f2fs_map_blocks+0x1512/0x4c20
[  377.555414][T18212]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  377.557506][T18212]  ? lockdep_hardirqs_on+0x7b/0x110
[  377.559568][T18212]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[  377.561849][T18212]  ? seqcount_lockdep_reader_access+0xea/0x100
[  377.563824][T18212]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  377.566170][T18212]  ? current_time+0x22f/0x380
[  377.568065][T18212]  ? down_write+0x16b/0x200
[  377.569925][T18212]  f2fs_file_write_iter+0x173d/0x2920
[  377.572059][T18212]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  377.573985][T18212]  ? __asan_memset+0x22/0x50
[  377.575808][T18212]  iter_file_splice_write+0xa31/0x1240
[  377.577562][T18212]  ? __pfx_iter_file_splice_write+0x10/0x10
[  377.579446][T18212]  ? __pfx_iter_file_splice_write+0x10/0x10
[  377.581333][T18212]  direct_splice_actor+0x101/0x160
[  377.582995][T18212]  splice_direct_to_actor+0x57b/0xcb0
[  377.584701][T18212]  ? __pfx_direct_splice_actor+0x10/0x10
[  377.586481][T18212]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  377.588398][T18212]  do_splice_direct+0x195/0x290
[  377.590378][T18212]  ? __pfx_do_splice_direct+0x10/0x10
[  377.592369][T18212]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  377.594266][T18212]  ? rw_verify_area+0x203/0x4c0
[  377.596109][T18212]  do_sendfile+0x52e/0x7c0
[  377.597544][T18212]  ? __pfx_do_sendfile+0x10/0x10
[  377.599118][T18212]  ? __se_sys_futex+0x3a8/0x450
[  377.600675][T18212]  __se_sys_sendfile64+0x144/0x1a0
[  377.602329][T18212]  ? __pfx___se_sys_futex+0x10/0x10
[  377.604004][T18212]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  377.606078][T18212]  do_syscall_64+0x166/0x520
[  377.607596][T18212]  ? trace_irq_disable+0x3b/0x140
[  377.609218][T18212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.611621][T18212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.613973][T18212] RIP: 0033:0x7f521ab9e159
[  377.615766][T18212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.623467][T18212] RSP: 002b:00007f521bb47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  377.626835][T18212] RAX: ffffffffffffffda RBX: 00007f521ae25fa0 RCX: 00007f521ab9e159
[  377.629968][T18212] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  377.633314][T18212] RBP: 00007f521ac3506b R08: 0000000000000000 R09: 0000000000000000
[  377.636505][T18212] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
[  377.639060][T18212] R13: 00007f521ae26038 R14: 00007f521ae25fa0 R15: 00007ffe674c0128
[  377.641607][T18212]  </TASK>
[  377.642583][T18212] Modules linked in:
[  377.644022][T18212] ---[ end trace 0000000000000000 ]---
** replaying previous printk message **
[  377.645861][T18212] RIP: 0010:new_curseg+0x1134/0x3580
[  377.645896][T18212] Code: e8 41 db ce fd 48 8b 7c 24 30 48 8b 07 49 6b cf 70 4c 8d 34 08 49 83 c6 61 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 73 11 00 00 41 80 3e 00 0f 84 e6 00 00 00
[  377.645905][T18212] RSP: 0018:ffffc9000607f068 EFLAGS: 00010206
[  377.645913][T18212] RAX: 000000000000000c RBX: 0000000000008000 RCX: dffffc0000000000
[  377.645918][T18212] RDX: ffffc9000f831000 RSI: 000000000007ffff RDI: ffff8881b3c59a88
[  377.645924][T18212] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[  377.645929][T18212] R10: dffffc0000000000 R11: fffff52000c0fdfc R12: ffff8881b3d90000
[  377.645934][T18212] R13: 0000000000000004 R14: 0000000000000061 R15: 0000000000000000
[  377.645939][T18212] FS:  00007f521bb476c0(0000) GS:ffff8882a8cda000(0000) knlGS:0000000000000000
[  377.645945][T18212] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  377.645951][T18212] CR2: 0000000000000000 CR3: 000000017a4c4000 CR4: 00000000000006f0
[  377.645979][T18212] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  377.645985][T18212] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  377.645992][T18212] Kernel panic - not syncing: Fatal exception
[  377.689097][T18212] Kernel Offset: disabled
[  377.690526][T18212] Rebooting in 86400 seconds..
