last executing test programs:

2m12.690089489s ago: executing program 2 (id=384):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x28, 0x0, &(0x7f0000000280)=[@increfs, @acquire, @clear_death={0x400c630f, 0x2}, @decrefs], 0x0, 0x0, 0x0})

2m12.639411159s ago: executing program 2 (id=386):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
recvfrom(r5, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0)

2m11.744970059s ago: executing program 2 (id=394):
setns(0xc9, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

2m11.510704382s ago: executing program 2 (id=396):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

2m11.413817998s ago: executing program 2 (id=397):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000004e000000040100000000000005000064"], 0x319003)

2m11.228885439s ago: executing program 2 (id=400):
syz_emit_ethernet(0x3a, &(0x7f0000000540)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x4000, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x6}}}}}}, 0x0)

2m11.151058022s ago: executing program 32 (id=400):
syz_emit_ethernet(0x3a, &(0x7f0000000540)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x4000, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x6}}}}}}, 0x0)

2m5.272553698s ago: executing program 3 (id=451):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x2})

2m5.180379234s ago: executing program 3 (id=452):
syz_emit_ethernet(0x300, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2f2, 0x0, 0x2000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x2de, 0x0, @wg=@data={0x4, 0x3, 0x0, "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"}}}}}}, 0x0)
getxattr(0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x0)

2m5.180219796s ago: executing program 3 (id=453):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

2m5.128777007s ago: executing program 3 (id=454):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000001c0), 0x1, 0xbc8, &(0x7f0000002380)="$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")
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2001091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

2m5.032809383s ago: executing program 3 (id=455):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x2, 0xa9, 0x5, 0xdc, 0x1})

2m4.780861017s ago: executing program 3 (id=458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0\x00')

2m4.700889336s ago: executing program 33 (id=458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0\x00')

1m24.687813006s ago: executing program 0 (id=890):
syz_emit_ethernet(0x8e, &(0x7f0000000200)={@broadcast, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x58, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x2b, 0x0, @mcast1, @dev, [@srh={0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}]}]}}}}}}}, 0x0)

1m24.61873582s ago: executing program 0 (id=892):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x90012, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0xd000)=nil, 0xd000, 0x0, 0x13, r6, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x3000008, 0x13, 0xffffffffffffffff, 0x1000)
r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x2}, 0x8f, 0x0, &(0x7f0000000200)="d321aa3f256c", 0x6, 0x7, 0x0, 0x8681, 0x2, 0x8b0, 0x0})
sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004)

1m23.689956208s ago: executing program 0 (id=905):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05a300000000fedbdf250d00000008000300", @ANYRES32], 0x1c}}, 0x20008000)

1m23.689750742s ago: executing program 0 (id=906):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x17, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b0000aa00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0)

1m23.505367638s ago: executing program 0 (id=907):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
pipe2(&(0x7f0000000200), 0x0)

1m23.201159523s ago: executing program 0 (id=908):
r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003230000002303"]}, 0x0)

1m23.200995018s ago: executing program 34 (id=908):
r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003230000002303"]}, 0x0)

1m1.439807677s ago: executing program 5 (id=1246):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0)

1m1.439685353s ago: executing program 5 (id=1247):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)

1m1.359494714s ago: executing program 5 (id=1248):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000040), 0x3, 0x573, &(0x7f0000000ac0)="$eJzs3c9vHFcdAPDvjH/s5ledQA9QFRKgEFCVdbxpo6qXJhcQqiohKg6IQ2rsrWWyzobYKbWJhPs3gASCE/wJHJA4IPXEgRtHJA4IqRyQAkSgGEGlQTM7dtb2WN1k17vE/nykyfx48+b7njaz7+3b9bwAjq0LEbEZEdMR8VZEzJTHk3KJa90lP+/hg3sLWw/uLSSRZW/+PSnS82PRkyd3qrxmPSK+/pWIbyf7466ub9ycb7dbd8r92bWV27Or6xuXllfml1pLrVvN5tW5q5dfufJyc2h1Pb/yy/tfXn79G7/59ac++P3ml76fF+t0mdZbj2HqVn1qJ05uMiJeP4xgYzBRrqf3pTxfneHa4ZaHx5NGxMci4rPF/T8TE8X/TgDgKMuyn0Y207sPABx1+ef/0/UkbUREmpadgEZ3DO/ZOJm2O6tryYdZdmuxO1Z2NqbSt5fbrcvnan/8bnHyVJLvzxVpRXqx39yzfyUizkXEj2oniv3GQqe9OJ4uDwAce6eK78DK9j8i/lVL00ajr6wV3+oBAE+N+hhyAgDj1duK18ZYDgBgdHyKB4Djp4/2v/yyf/PQywIAjIbP/wBw/Gj/AeD4edz2328EAeCp9rU33siXbKt8/vXiO+t3pzrvXFpsrd5srNxdaCx07txuLHU6S8Uze1Z2ZT7Rs132Cdqdzu25l+Luu7NrrdW12dX1jRsrnbu31m4Uz/W+0Zoaae0AgCrnzr//hyQiNl89USzRM5eDthqOtnTcBQDGZuLRZuvU42bWQYCn2pPN9vWfoZcDGL2+mvCik/C7Qy8LMB6VD/OuV27u9pPHCOJ3xvB/5eInd43/n+lN29s32D/HM/A0M/4Px9fEE+V6bejlAEbvycb/gaMgy5K9c/5P7yQBAEfSAD/hy34wrE4IMFYfNZn3UL7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCPmdER8J5K0UcwFnub/po1GxJmIOBtTydvL7dbliHgmzkfEVC3fnxt3oQGAAaV/Tcr5vy7OvHB6b+p08u9asY6I7/3szR+/O7+2dmcuP/6PneO17enDmo/yDTCvIADQn6zW54lF+90s1z0f5B8+uLewvRxWIavcvx4fllMRL2w9uFcs3ZTJyA9G1Iu+xMl/JjFZ5qlHxHMRMTGE+JvvRcQnquqfFGMjZ8uZT3vjRxn7zEjjp7vip0Vad513vj4+hLLAcfP+9Yi4VnX/pXGhWFff//XiHWpw9693L7b93rfVE3+yjDRRET+/5y/0G+Ol335138Fsppv2XsRzk1Xxk534yQHxX+gz/p+e//QPXzsgLft5xMWojt8ba3Zt5fbs6vrGpeWV+aXWUj2azatzVy+/cuXl5mwxRj27PVK9399effGZg8qW1//kAfHrlfWf3sn7+T7r/4v/vvWtzzzare2N/8XPVb/+z1bG78rbxC/sDpNFslkZf/7krw6cvjuPv3hA/T/q9X+xz/p/8JeNxT5PBQBGYHV94+Z8u926M9BGGlvZMK6zbyMvYn8nb3cXBwv65ziMWjzhxtTA1RnXxuROX3G4V/5mfsURVycdei0G2ng4qljje08CRuPRTT/ukgAAAAAAAAAAAAAAAAcZxZ8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHF3/CwAA//++MtQ/")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80)
lseek(r0, 0x6, 0x3)

1m1.249273826s ago: executing program 5 (id=1250):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5)
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x5b85, 0x75ea, 0x800004})

1m1.066078499s ago: executing program 5 (id=1256):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0)
sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x14, r2, 0x1}, 0x14}}, 0x0)

1m0.749223415s ago: executing program 5 (id=1259):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0x1, 0xffff, 0x20, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2004})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=<r4=>0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x2, 0x4002)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r9, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m0.645628025s ago: executing program 35 (id=1259):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0x1, 0xffff, 0x20, "4ae23ae17df2e98c69ba36c4095c911abad88f", 0x2004})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)=<r4=>0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x2, 0x4002)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, 0x0, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0xe4, r9, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.926746527s ago: executing program 6 (id=2118):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000500)={0x20, 0x7ffffffe, 0x0, 0x8, 0xf0cf})

1.925877561s ago: executing program 6 (id=2119):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)

1.358828409s ago: executing program 4 (id=2131):
syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xfd, 0x6a5, &(0x7f0000000f00)="$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")
r0 = fanotify_init(0xf00, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x1e7)

1.090414492s ago: executing program 4 (id=2133):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)

843.018531ms ago: executing program 6 (id=2134):
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x7, 0xc)

842.842044ms ago: executing program 6 (id=2135):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r3, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
close_range(r0, 0xffffffffffffffff, 0x0)

692.919368ms ago: executing program 6 (id=2136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600000000020000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

610.123337ms ago: executing program 6 (id=2137):
signalfd(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x1, &(0x7f00000000c0)={0x0})

269.936073ms ago: executing program 1 (id=2143):
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

200.156834ms ago: executing program 1 (id=2144):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x0, 0x7ffffcbb}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4)
write(r0, &(0x7f0000000040)="a9", 0x1)

199.941008ms ago: executing program 1 (id=2145):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000080)={[{@noinit_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8e6e}}, {@debug}, {@auto_da_alloc}]}, 0x2, 0x467, &(0x7f0000000fc0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020)

149.246391ms ago: executing program 1 (id=2146):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/148, 0x94}], 0x1}}], 0x1, 0x41, 0x0)

149.095396ms ago: executing program 4 (id=2147):
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81101)

87.255646ms ago: executing program 4 (id=2148):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4)

87.100385ms ago: executing program 1 (id=2149):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb2}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff17}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

234.631µs ago: executing program 4 (id=2150):
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140))
fcntl$setpipe(r0, 0x407, 0x0)

100.474µs ago: executing program 1 (id=2151):
r0 = fanotify_init(0x200, 0x0)
fanotify_mark(r0, 0x132, 0x40001002, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=2152):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/geth.usb0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200)

kernel console output (not intermixed with test programs):

13.667694][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  113.667711][    C1] EXT4-fs (loop0): initial error at time 1785552568: ext4_expand_extra_isize_ea:2810: inode 11
[  113.667731][    C1] EXT4-fs (loop0): last error at time 1785552568: ext4_expand_extra_isize_ea:2810: inode 11
[  113.680220][ T7783] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.680: bg 0: block 7: invalid block bitmap
[  113.704493][ T7783] loop0: lost filesystem error report for type 5 error -117
[  113.705003][ T7783] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  113.718785][ T7783] loop0: lost filesystem error report for type 5 error -117
[  113.719182][ T7783] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #11: comm syz.0.680: corrupted xattr block 95: invalid header
[  113.726478][ T7783] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  113.726696][ T7783] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117)
[  113.732373][ T7783] EXT4-fs (loop0): 1 orphan inode deleted
[  113.736443][ T7783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.742448][ T7783] EXT4-fs (loop0): shut down requested (1)
[  113.756049][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.845659][ T7789] netlink: 'syz.0.683': attribute type 6 has an invalid length.
[  113.927003][ T7793] loop4: detected capacity change from 0 to 1024
[  113.944345][ T7793] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  114.099535][ T7803] can0: slcan on ttyS3.
[  114.183672][ T7803] can0 (unregistered): slcan off ttyS3.
[  114.262989][ T5666] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  114.300986][ T7805] loop4: detected capacity change from 0 to 512
[  114.309089][ T7805] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  114.359175][ T7805] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.689: bad orphan inode 13
[  114.363556][ T7805] loop4: lost filesystem error report for type 5 error -117
[  114.363845][ T7805] ext4_test_bit(bit=12, block=18) = 1
[  114.369069][ T7805] is_bad_inode(inode)=0
[  114.371054][ T7805] NEXT_ORPHAN(inode)=0
[  114.372812][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  114.372826][    C1] EXT4-fs (loop4): last error at time 1785552568: ext4_orphan_get:1425
[  114.380099][ T7805] max_ino=32
[  114.381686][ T7805] i_nlink=1
[  114.384878][ T7805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  114.396601][ T7805] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.689: bg 0: block 248: padding at end of block bitmap is not set
[  114.425558][ T5666] usb 1-1: unable to get BOS descriptor or descriptor too short
[  114.429520][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  114.435549][ T5666] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  114.439771][ T5666] usb 1-1: config 66 has 1 interface, different from the descriptor's value: 2
[  114.450658][ T5666] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  114.456942][ T5666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.460324][ T5666] usb 1-1: Product: syz
[  114.462068][ T5666] usb 1-1: Manufacturer: syz
[  114.467674][ T5666] usb 1-1: SerialNumber: syz
[  114.972964][   T33] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  115.127343][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.131641][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.135623][   T33] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  115.139518][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.615345][ T7813] loop1: detected capacity change from 0 to 32768
[  115.617832][ T7813] XFS (loop1): stripe width (8) must be a multiple of the stripe unit (65536)
[  115.714771][ T7821] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  115.717941][ T7821] EXT4-fs (loop1): group descriptors corrupted!
[  117.031484][   T33] usb 1-1: USB disconnect, device number 16
[  117.744132][ T5690] usb 5-1: USB disconnect, device number 4
[  117.775233][ T7877] set_capacity_and_notify: 1 callbacks suppressed
[  117.775244][ T7877] loop4: detected capacity change from 0 to 1764
[  117.781195][ T7877] isofs_fill_super: get root inode failed
[  117.874057][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.876558][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.100526][ T7897] loop1: detected capacity change from 0 to 256
[  118.123100][ T5690] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  118.161106][ T2231] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  118.196570][ T2231] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  118.274298][ T5690] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.278582][ T5690] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.287376][ T5690] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  118.292497][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  118.303018][ T5690] usb 5-1: SerialNumber: syz
[  118.307111][ T7904] loop1: detected capacity change from 0 to 4096
[  118.319414][ T7904] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  118.369661][ T7904] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  118.843381][ T7913] process 'syz.1.735' launched './file2' with NULL argv: empty string added
[  119.238343][ T7934] tipc: Started in network mode
[  119.240351][ T7934] tipc: Node identity ba8bf648ce84, cluster identity 4711
[  119.243012][ T7934] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.248415][ T7934] syzkaller0: entered promiscuous mode
[  119.250217][ T7934] syzkaller0: entered allmulticast mode
[  119.260929][ T7934] tipc: Resetting bearer <eth:syzkaller0>
[  119.265782][ T7933] tipc: Resetting bearer <eth:syzkaller0>
[  119.274745][ T7933] tipc: Disabling bearer <eth:syzkaller0>
[  119.467791][ T7942] loop1: detected capacity change from 0 to 2048
[  119.501567][ T7942]  loop1: p1 < > p4
[  119.501567][ T7942]  p4: <solaris: [s0] p5 [s1] p6 [s2] p7 >
[  119.517504][ T7942] loop1: p4 size 722688 extends beyond EOD, truncated
[  119.522603][ T7942] loop1: p6 start 262464109 is beyond EOD, truncated
[  119.527105][ T7942] loop1: p7 size 2304 extends beyond EOD, truncated
[  119.657625][ T6054] udevd[6054]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  119.661192][ T5618] udevd[5618]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  119.665070][ T6053] udevd[6053]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  119.771256][ T7954] loop0: detected capacity change from 0 to 512
[  119.796505][ T7954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.800377][ T7954] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.814193][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.176425][ T7974] loop0: detected capacity change from 0 to 256
[  120.239808][ T7976] loop0: detected capacity change from 0 to 1024
[  120.243411][ T7976] EXT4-fs: Ignoring removed orlov option
[  120.260550][ T7976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.295342][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.824201][ T5690] usb 5-1: USB disconnect, device number 5
[  121.498117][ T8011] loop1: detected capacity change from 0 to 32768
[  121.553152][ T5690] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  121.559330][ T8011] diRead: diIAGRead returned -5
[  121.561034][ T8011] jfs_lookup: iget failed on inum 1048352
[  121.670404][ T8019] mmap: syz.4.777 (8019) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  121.834242][ T5690] usb 1-1: config 43 interface 0 has no altsetting 0
[  121.841064][ T5690] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=db.82
[  121.846873][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.852687][ T5690] usb 1-1: Product: syz
[  121.856587][ T5690] usb 1-1: Manufacturer: syz
[  121.859548][ T5690] usb 1-1: SerialNumber: syz
[  121.988377][ T8022] loop1: detected capacity change from 0 to 32768
[  122.015684][ T8022] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  122.090286][ T5611] ocfs2: Unmounting device (7,1) on (node local)
[  122.250618][ T8030] loop1: detected capacity change from 0 to 64
[  122.274238][ T8030] bio_check_eod: 30 callbacks suppressed
[  122.274249][ T8030] syz.1.781: attempt to access beyond end of device
[  122.274249][ T8030] loop1: rw=8388608, sector=3584, nr_sectors = 2 limit=64
[  122.281163][ T8030] buffer_io_error: 16 callbacks suppressed
[  122.281171][ T8030] Buffer I/O error on dev loop1, logical block 1792, async page read
[  122.287549][ T8030] syz.1.781: attempt to access beyond end of device
[  122.287549][ T8030] loop1: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  122.301099][ T8030] Buffer I/O error on dev loop1, logical block 56576, async page read
[  122.640643][ T8042] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  122.671243][ T8042] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  122.696104][ T8042] ntfs3(loop1): ino=1e, mi_enum_attr
[  122.773244][ T8046] exfat: Deprecated parameter 'namecase'
[  122.777551][ T8046] exfat: Deprecated parameter 'utf8'
[  122.785729][ T8046] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  122.943669][ T5690] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  123.021291][ T8054] set_capacity_and_notify: 2 callbacks suppressed
[  123.021301][ T8054] loop1: detected capacity change from 0 to 32768
[  123.032524][ T8054] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  123.061484][ T5611] ocfs2: Unmounting device (7,1) on (node local)
[  123.096637][ T5690] usb 5-1: config 0 interface 0 has no altsetting 0
[  123.104324][ T5690] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  123.113034][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=21, SerialNumber=0
[  123.120249][ T5690] usb 5-1: Product: syz
[  123.269426][ T8060] loop1: detected capacity change from 0 to 32768
[  123.275111][ T8060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.794 (8060)
[  123.291899][ T8060] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.296217][ T8060] BTRFS info (device loop1): using sha256 checksum algorithm
[  123.323808][ T8060] BTRFS info (device loop1): enabling ssd optimizations
[  123.326179][ T8060] BTRFS info (device loop1): turning on async discard
[  123.328699][ T8060] BTRFS info (device loop1): enabling free space tree
[  123.331721][ T8060] BTRFS info (device loop1): use zlib compression, level 3
[  123.360960][ T5611] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.772914][ T5690] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  123.922847][ T5690] usb 2-1: Using ep0 maxpacket: 8
[  123.926318][ T5690] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.930481][ T5690] usb 2-1: config 0 interface 0 has no altsetting 0
[  123.933098][ T5690] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  123.936397][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.330404][    T9] usb 1-1: USB disconnect, device number 17
[  124.484231][ T8086] loop0: detected capacity change from 0 to 32768
[  124.494205][ T8086] JBD2: Ignoring recovery information on journal
[  124.523668][ T8086] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  124.530630][ T5681] (kworker/u8:3,5681,1):ocfs2_read_blocks_sync:110 ERROR: status = -12
[  124.536320][ T5681] (kworker/u8:3,5681,1):ocfs2_read_locked_inode:633 ERROR: status = -12
[  124.541397][ T5681] (kworker/u8:3,5681,1):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=256, inode=0, rec_len=0, name_len=0
[  124.558328][ T8086] (syz.0.800,8086,0):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=1099511627848, rec_len=12, name_len=0
[  124.564463][ T8086] (syz.0.800,8086,0):__ocfs2_delete_entry:1199 ERROR: status = -5
[  124.567634][ T8086] (syz.0.800,8086,0):ocfs2_orphan_del:2401 ERROR: status = -5
[  124.569854][ T8086] (syz.0.800,8086,0):ocfs2_orphan_del:2416 ERROR: status = -5
[  124.572185][ T8086] (syz.0.800,8086,0):ocfs2_remove_inode:788 ERROR: status = -5
[  124.575212][ T8086] (syz.0.800,8086,0):ocfs2_wipe_inode:933 ERROR: status = -5
[  124.578690][ T8086] (syz.0.800,8086,0):ocfs2_delete_inode:1194 ERROR: status = -5
[  124.606130][ T5607] ocfs2: Unmounting device (7,0) on (node local)
[  124.676869][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'.
[  124.708270][ T8092] loop9: detected capacity change from 0 to 2640
[  124.714688][ T6054] Buffer I/O error on dev loop9, logical block 0, async page read
[  124.718152][ T6054] Buffer I/O error on dev loop9, logical block 0, async page read
[  124.724086][ T6054] Buffer I/O error on dev loop9, logical block 0, async page read
[  124.729883][ T6054] Buffer I/O error on dev loop9, logical block 0, async page read
[  124.734687][ T6054] Buffer I/O error on dev loop9, logical block 0, async page read
[  124.738071][ T8092] Buffer I/O error on dev loop9, logical block 0, async page read
[  124.741381][ T8092] Buffer I/O error on dev loop9, logical block 0, async page read
[  124.745669][ T8092] Buffer I/O error on dev loop9, logical block 0, async page read
[  124.749580][ T8092] ldm_validate_partition_table(): Disk read failed.
[  124.752396][ T8092] Dev loop9: unable to read RDB block 0
[  124.755787][ T8092]  loop9: unable to read partition table
[  124.759029][ T8092] loop_reread_partitions: partition scan of loop9 (3) failed (rc=-5)
[  124.852279][ T8097] loop0: detected capacity change from 0 to 1024
[  124.856187][ T8097] EXT4-fs: Ignoring removed oldalloc option
[  124.858690][ T8097] EXT4-fs: Ignoring removed orlov option
[  124.872034][ T8097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.933475][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.263048][ T5690] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  125.436066][ T5690] usb 1-1: config 0 has an invalid interface number: 5 but max is 0
[  125.439184][ T5690] usb 1-1: config 0 has no interface number 0
[  125.441750][ T5690] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  125.445492][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.716543][ T5690] usb 5-1: USB disconnect, device number 6
[  125.769075][ T8108] loop4: detected capacity change from 0 to 4096
[  125.777764][ T8108] EXT4-fs (loop4): Test dummy encryption mode enabled
[  125.787947][ T8108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.889720][ T8108] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[  125.937756][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.181429][ T8124] loop4: detected capacity change from 0 to 32768
[  126.185304][ T8124] (syz.4.812,8124,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  126.190364][ T8124] (syz.4.812,8124,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  126.200875][ T8124] JBD2: Ignoring recovery information on journal
[  126.217443][ T8124] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  126.569414][ T5690] usb 2-1: USB disconnect, device number 16
[  126.666285][ T8129] loop1: detected capacity change from 0 to 512
[  126.687482][ T8129] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  126.706171][ T8129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.710145][ T8129] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  126.808306][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.360201][ T7096] ocfs2: Unmounting device (7,4) on (node local)
[  127.451336][ T8135] loop4: detected capacity change from 0 to 8192
[  127.780981][ T8144] loop1: detected capacity change from 0 to 4096
[  127.794375][ T8144] ntfs3(loop1): ino=19, mi_enum_attr
[  127.796221][ T8144] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  127.801681][ T8144] ntfs3(loop1): ino=5, "/" fiemap is not supported for compressed file
[  127.966930][ T8152] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.822: inode has both inline data and extents flags
[  127.972402][ T8152] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  127.972662][ T8152] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.822: couldn't read orphan inode 15 (err -117)
[  127.976339][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  127.976353][    C1] EXT4-fs (loop1): initial error at time 1785552582: ext4_orphan_get:1399: inode 15
[  127.976373][    C1] EXT4-fs (loop1): last error at time 1785552582: ext4_orphan_get:1399: inode 15
[  127.991351][ T8152] loop1: lost filesystem error report for type 5 error -117
[  127.993048][ T8152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.026606][ T5611] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.054776][ T5666] usb 1-1: USB disconnect, device number 18
[  128.137199][ T8157] set_capacity_and_notify: 1 callbacks suppressed
[  128.137213][ T8157] loop1: detected capacity change from 0 to 4096
[  128.211690][ T8162] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.228589][ T8157] NILFS (loop1): error -22 preparing GC: cannot mark copying blocks dirty
[  128.291401][ T8164] loop1: detected capacity change from 0 to 256
[  128.297165][ T8164] exfat: Deprecated parameter 'namecase'
[  128.313875][ T8164] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  128.433920][ T8168] loop1: detected capacity change from 0 to 4096
[  128.437844][ T8168] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  128.455109][ T8168] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  128.463986][ T8168] ntfs3(loop1): Failed to load $Extend (-22).
[  128.466585][ T8168] ntfs3(loop1): Failed to initialize $Extend.
[  128.514999][ T8170] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  128.528150][ T8170] CIFS: Attempting to mount //127.0.0.1/share
[  128.536244][ T8170] CIFS: VFS: Error connecting to socket. Aborting operation.
[  128.539480][ T8170] CIFS: VFS: cifs_mount failed w/return code = -111
[  128.946474][ T8195] bridge0: port 3(dummy0) entered blocking state
[  128.949517][ T8195] bridge0: port 3(dummy0) entered disabled state
[  128.951843][ T8195] dummy0: entered allmulticast mode
[  128.959423][ T8195] dummy0: entered promiscuous mode
[  128.967446][ T8195] dummy0: left allmulticast mode
[  128.969277][ T8195] dummy0: left promiscuous mode
[  128.973505][ T8195] bridge0: port 3(dummy0) entered disabled state
[  129.021685][ T8197] loop4: detected capacity change from 0 to 256
[  129.059241][ T8197] syz.4.841: attempt to access beyond end of device
[  129.059241][ T8197] loop4: rw=8912896, sector=1768, nr_sectors = 4 limit=256
[  129.071320][ T8197] syz.4.841: attempt to access beyond end of device
[  129.071320][ T8197] loop4: rw=8388608, sector=1768, nr_sectors = 4 limit=256
[  129.087936][   T34] audit: type=1800 audit(1785552583.683:15): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.841" name="file1" dev="loop4" ino=1048629 res=0 errno=0
[  129.107371][ T8197] syz.4.841: attempt to access beyond end of device
[  129.107371][ T8197] loop4: rw=2049, sector=1768, nr_sectors = 4 limit=256
[  129.351365][ T5690] kernel read not supported for file /ppp (pid: 5690 comm: kworker/1:5)
[  129.506626][ T8227] loop0: detected capacity change from 0 to 1764
[  129.539190][ T8227] iso9660: Corrupted directory entry in block 14 of inode 1920
[  129.684108][ T8235] loop0: detected capacity change from 0 to 32768
[  129.686732][ T8235] btrfs: Deprecated parameter 'usebackuproot'
[  129.688949][ T8235] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  129.692473][ T8235] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.860 (8235)
[  129.701750][ T8235] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.704924][ T8235] BTRFS info (device loop0): using crc32c checksum algorithm
[  129.782494][ T6781] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  129.794737][ T8235] BTRFS error (device loop0): failed to load root extent
[  129.797004][ T8235] BTRFS warning (device loop0): try to load backup roots slot 1
[  129.799560][   T26] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  129.804240][ T8235] BTRFS warning (device loop0): couldn't read tree root
[  129.806597][ T8235] BTRFS warning (device loop0): try to load backup roots slot 2
[  129.809511][ T6781] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  129.814009][ T8235] BTRFS warning (device loop0): couldn't read tree root
[  129.816579][ T8235] BTRFS warning (device loop0): try to load backup roots slot 3
[  129.823517][ T8235] BTRFS info (device loop0): rebuilding free space tree
[  129.833765][ T8235] BTRFS info (device loop0): checking UUID tree
[  129.837551][ T8235] BTRFS info (device loop0): enabling ssd optimizations
[  129.839678][ T8235] BTRFS info (device loop0): turning on async discard
[  129.841641][ T8235] BTRFS info (device loop0): enabling free space tree
[  129.843812][ T8235] BTRFS info (device loop0): force clearing of disk cache
[  129.846015][ T8235] BTRFS info (device loop0): enabling auto defrag
[  129.848007][ T8235] BTRFS info (device loop0): trying to use backup root at mount time
[  129.850431][ T8235] BTRFS info (device loop0): use zstd compression, level 3
[  129.853710][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  129.895862][ T5607] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.002831][    T9] usb 2-1: Using ep0 maxpacket: 8
[  130.008754][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.019614][    T9] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  130.027366][    T9] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  130.037341][    T9] usb 2-1: Product: syz
[  130.038701][    T9] usb 2-1: Manufacturer: syz
[  130.043013][    T9] usb 2-1: SerialNumber: syz
[  130.314684][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'.
[  130.391513][ T8267] loop0: detected capacity change from 0 to 2048
[  130.418143][ T8267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.466702][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.745822][ T8276] syzkaller0: entered promiscuous mode
[  130.747790][ T8276] syzkaller0: entered allmulticast mode
[  130.961528][ T8281] loop0: detected capacity change from 0 to 1024
[  130.971983][ T8281] EXT4-fs: Ignoring removed nomblk_io_submit option
[  130.994762][ T8281] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[  131.059090][ T8284] loop4: detected capacity change from 0 to 8192
[  131.137289][ T8288] loop4: detected capacity change from 0 to 512
[  131.148653][ T8288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.162096][ T8288] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.244277][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.283578][ T8296] exfat: Deprecated parameter 'namecase'
[  131.290862][ T8296] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d)
[  131.508251][ T8306] sctp: [Deprecated]: syz.4.882 (pid 8306) Use of int in max_burst socket option deprecated.
[  131.508251][ T8306] Use struct sctp_assoc_value instead
[  132.362593][ T8312] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  132.365214][ T8312] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  132.548011][ T8318] EXT4-fs: inline encryption not supported
[  132.551296][ T8318] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  132.569690][    T9] usb 2-1: USB disconnect, device number 17
[  132.575445][ T8318] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 1
[  132.595644][ T8318] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[  132.598710][ T8318] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.887: Failed to acquire dquot type 1
[  132.602142][ T8318] loop0: lost filesystem error report for type 5 error -5
[  132.602431][ T8318] EXT4-fs (loop0): Remounting filesystem read-only
[  132.604714][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  132.604724][    C0] EXT4-fs (loop0): initial error at time 1785552587: ext4_acquire_dquot:7041
[  132.604733][    C0] EXT4-fs (loop0): last error at time 1785552587: ext4_acquire_dquot:7041
[  132.626575][ T8318] EXT4-fs (loop0): 1 truncate cleaned up
[  132.629903][ T8318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.652979][ T5690] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  132.669172][ T8325] hfsplus: bad catalog file entry
[  132.676358][ T8325] hfsplus: walked past end of dir
[  132.688793][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.703123][  T420] hfsplus: bad catalog file entry
[  132.774686][ T8331] clocksource: Switched to clocksource tsc
[  132.795915][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  132.797958][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  132.881064][ T5690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  132.882924][ T8340] 9p: Could not find request transport: fd$rfdno=BN|ɿq`o4K'IY1|޺aCLI
[  132.884570][ T5690] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  132.890792][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.198451][ T8351] binder: 8350:8351 ioctl c0306201 200000000680 returned -14
[  133.743645][ T8363] set_capacity_and_notify: 4 callbacks suppressed
[  133.743655][ T8363] loop0: detected capacity change from 0 to 2048
[  133.766417][ T8363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.775231][ T8363] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  133.833441][ T8363] loop0: detected capacity change from 2048 to 64
[  133.843753][ T8363] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.906: corrupted xattr entries
[  133.884801][ T5607] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.896818][ T8364] kmmpd-loop0: attempt to access beyond end of device
[  133.896818][ T8364] loop0: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  133.903365][ T8364] buffer_io_error: 344 callbacks suppressed
[  133.903379][ T8364] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  134.210839][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.242668][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  134.250193][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  134.254010][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  134.257494][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  134.260475][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  134.331015][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.385559][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.449999][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.584407][   T13] bridge_slave_1: left allmulticast mode
[  134.587432][   T13] bridge_slave_1: left promiscuous mode
[  134.589817][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.596329][   T13] bridge_slave_0: left allmulticast mode
[  134.598628][   T13] bridge_slave_0: left promiscuous mode
[  134.600941][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.715790][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.720103][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.724449][   T13] bond0 (unregistering): Released all slaves
[  134.788502][   T13] tipc: Left network mode
[  134.866588][ T8369] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.868959][ T8369] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.871297][ T8369] bridge_slave_0: entered allmulticast mode
[  134.874190][ T8369] bridge_slave_0: entered promiscuous mode
[  134.877643][ T8369] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.879976][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.882428][ T8369] bridge_slave_1: entered allmulticast mode
[  134.888334][ T8369] bridge_slave_1: entered promiscuous mode
[  134.892099][ T5352] 8021q: adding VLAN 0 to HW filter on device eth9
[  134.923945][ T8369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.928429][ T8369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.945310][ T8369] team0: Port device team_slave_0 added
[  134.948535][ T8369] team0: Port device team_slave_1 added
[  134.979105][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.981332][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  134.991081][ T8369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.998029][   T13] hsr_slave_0: left promiscuous mode
[  135.000074][   T13] hsr_slave_1: left promiscuous mode
[  135.002092][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.004735][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.007439][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.010278][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.019458][   T13] veth1_macvtap: left promiscuous mode
[  135.021254][   T13] veth0_macvtap: left promiscuous mode
[  135.023341][   T13] veth1_vlan: left promiscuous mode
[  135.025145][   T13] veth0_vlan: left promiscuous mode
[  135.320275][   T13] team0 (unregistering): Port device team_slave_1 removed
[  135.329990][   T13] team0 (unregistering): Port device team_slave_0 removed
[  135.431966][ T8369] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.434441][ T8369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.439698][    T9] usb 5-1: USB disconnect, device number 7
[  135.442132][ T8369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.500667][ T8369] hsr_slave_0: entered promiscuous mode
[  135.503374][ T8369] hsr_slave_1: entered promiscuous mode
[  135.507104][ T8369] debugfs: 'hsr0' already exists in 'hsr'
[  135.509169][ T8369] Cannot create hsr debugfs directory
[  135.579400][ T8408] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  135.725391][ T8414] loop1: detected capacity change from 0 to 256
[  135.793631][ T8414] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  135.815214][   T13] IPVS: stop unused estimator thread 0...
[  135.817303][ T8414] FAT-fs (loop1): Filesystem has been set read-only
[  135.919288][ T8422] loop4: detected capacity change from 0 to 1024
[  135.940886][ T8422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.947769][ T8422] UDF-fs: error (device loop4): udf_read_inode: (ino 832) failed !bh
[  135.951933][ T8422] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=48, partition=0
[  135.961039][ T5352] 8021q: adding VLAN 0 to HW filter on device eth10
[  135.986590][ T8424] Bluetooth: MGMT ver 1.23
[  136.081081][ T8369] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  136.089705][ T8369] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  136.096469][ T8369] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  136.117789][ T8369] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  136.126717][ T8369] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  136.143904][ T8369] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  136.150380][ T8369] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  136.162586][ T8369] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  136.209157][ T8444] loop1: detected capacity change from 0 to 256
[  136.212551][ T8444] exfat: Deprecated parameter 'namecase'
[  136.233536][ T8444] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  136.270973][ T8444] exFAT-fs (loop1): IO charset cp95ime_offset=0x0000000000000009 not found
[  136.302088][ T8369] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.313419][   T55] Bluetooth: hci0: command tx timeout
[  136.369427][ T8369] 8021q: adding VLAN 0 to HW filter on device team0
[  136.398083][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.401134][ T6781] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.419305][ T5352] 8021q: adding VLAN 0 to HW filter on device eth11
[  136.444924][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.447239][ T6781] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.707376][ T8456] loop1: detected capacity change from 0 to 32768
[  136.712643][ T8456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.930 (8456)
[  136.750104][ T5352] 8021q: adding VLAN 0 to HW filter on device eth12
[  136.753232][ T8456] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.759696][ T8453] loop4: detected capacity change from 0 to 32768
[  136.765232][ T8456] BTRFS info (device loop1): using sha256 checksum algorithm
[  136.765326][ T8453] BTRFS info: device /dev/loop4 (7:4) using temp-fsid d6bb2b62-40ef-48a3-b2bc-5e14a5a2c754
[  136.796829][ T8453] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.931 (8453)
[  136.814610][ T8453] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.832974][ T8453] BTRFS info (device loop4): using sha256 checksum algorithm
[  136.838550][ T8456] BTRFS info (device loop1): enabling ssd optimizations
[  136.847367][ T8456] BTRFS info (device loop1): turning on async discard
[  136.859957][ T8456] BTRFS info (device loop1): enabling free space tree
[  136.907184][ T8453] BTRFS info (device loop4): enabling ssd optimizations
[  136.916963][ T8453] BTRFS info (device loop4): turning on async discard
[  136.920183][ T8456] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.921091][ T8453] BTRFS info (device loop4): enabling free space tree
[  136.958060][ T8369] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.205145][ T8453] BTRFS info (device loop4): balance: start -susage=3840,drange=7..7,vrange=7..2199023255806,limit=1073741833..9,stripes=1..131
[  137.238054][ T8369] veth0_vlan: entered promiscuous mode
[  137.253822][ T8369] veth1_vlan: entered promiscuous mode
[  137.256610][ T8453] BTRFS info (device loop4): balance: ended with status: 0
[  137.302558][ T8369] veth0_macvtap: entered promiscuous mode
[  137.310782][ T8517] overlayfs: failed to clone upperpath
[  137.313886][ T8369] veth1_macvtap: entered promiscuous mode
[  137.330459][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.344933][ T8369] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.357112][ T7096] BTRFS info (device loop4): last unmount of filesystem d6bb2b62-40ef-48a3-b2bc-5e14a5a2c754
[  137.360797][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.372962][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.389643][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.393265][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.519016][ T6781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.526683][ T6781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.610954][ T8527] program syz.4.936 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  137.613489][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.617622][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.700671][ T8536] ptrace attach of "/syz-executor exec"[5611] was attempted by "                                                                                                                                                                                                                                        ./file1                                                         ext3                                                                                                                                                                                                                                                                                                                                                                                                                                                          /dev/sequencer                                                                                                                                                                              
[  138.112543][ T8565] loop4: detected capacity change from 0 to 4096
[  138.191370][ T8570] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.196608][ T8565] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  138.218054][ T8565] Remounting filesystem read-only
[  138.393513][   T55] Bluetooth: hci0: command tx timeout
[  138.514413][ T8579] loop4: detected capacity change from 0 to 512
[  138.570207][ T8579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.404390][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.629332][ T8595] loop5: detected capacity change from 0 to 32768
[  140.095762][ T8620] loop4: detected capacity change from 0 to 32768
[  140.098707][ T8620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.977 (8620)
[  140.126151][ T8620] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.130447][ T8620] BTRFS info (device loop4): using crc32c checksum algorithm
[  140.209835][ T8620] BTRFS info (device loop4): enabling ssd optimizations
[  140.219431][ T8620] BTRFS info (device loop4): turning on flush-on-commit
[  140.227530][ T8620] BTRFS info (device loop4): enabling free space tree
[  140.231009][ T8620] BTRFS info (device loop4): enabling auto defrag
[  140.253643][ T8620] BTRFS info (device loop4): use lzo compression, level 1
[  140.280635][ T8620] BTRFS info (device loop4): max_inline set to 4096
[  140.326912][ T7096] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.343629][ T8647] Zero length message leads to an empty skb
[  140.483039][   T55] Bluetooth: hci0: command tx timeout
[  140.815312][ T8681] loop5: detected capacity change from 0 to 512
[  140.821212][ T8680] loop4: detected capacity change from 0 to 512
[  140.827529][ T8680] EXT4-fs: Invalid commit interval -1, must be smaller than 21474836
[  140.836662][ T8681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.848177][ T8681] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.883105][ T8681] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.997: corrupted xattr block 33: bad e_name length
[  140.908526][ T8369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.972251][ T8687] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.202849][ T2231] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  142.272851][ T2231] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  142.275718][ T2231] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  142.279245][ T2231] usb 5-1: config 220 has no interface number 2
[  142.281337][ T2231] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  142.286526][ T2231] usb 5-1: config 220 interface 0 has no altsetting 0
[  142.291062][ T2231] usb 5-1: config 220 interface 76 has no altsetting 0
[  142.293720][ T2231] usb 5-1: config 220 interface 1 has no altsetting 0
[  142.302921][ T2231] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  142.311694][ T2231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.316164][ T2231] usb 5-1: Product: syz
[  142.317930][ T2231] usb 5-1: Manufacturer: syz
[  142.320388][ T2231] usb 5-1: SerialNumber: syz
[  142.562820][   T55] Bluetooth: hci0: command tx timeout
[  142.916748][ T8727] loop5: detected capacity change from 0 to 4096
[  142.925500][ T8727] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  143.120209][ T8729] loop5: detected capacity change from 0 to 512
[  143.129399][ T8729] EXT4-fs: Ignoring removed orlov option
[  143.131708][ T8729] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  143.140277][ T8729] EXT4-fs (loop5): 1 truncate cleaned up
[  143.145275][ T8729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.167774][ T8369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.235671][ T8739] loop5: detected capacity change from 0 to 256
[  143.463070][ T8735] overlayfs: failed to clone upperpath
[  143.552935][ T5690] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  143.702891][ T5690] usb 6-1: Using ep0 maxpacket: 8
[  143.707035][ T5690] usb 6-1: unable to get BOS descriptor or descriptor too short
[  143.711111][ T5690] usb 6-1: config 3 has an invalid interface number: 161 but max is 0
[  143.714510][ T5690] usb 6-1: config 3 has no interface number 0
[  143.720725][ T5690] usb 6-1: New USB device found, idVendor=19ff, idProduct=0239, bcdDevice=9e.6d
[  143.726220][ T5690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.729345][ T5690] usb 6-1: Product: syz
[  143.730947][ T5690] usb 6-1: Manufacturer: syz
[  143.732706][ T5690] usb 6-1: SerialNumber: syz
[  143.908053][ T5690] usb 5-1: USB disconnect, device number 8
[  143.985044][ T8773] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.043914][ T8779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1039'.
[  144.120353][ T8790] loop4: detected capacity change from 0 to 128
[  144.130681][ T8790] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  144.168129][ T8790] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  144.241157][ T8800] loop4: detected capacity change from 0 to 256
[  144.251486][ T8800] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  144.344241][   T34] audit: type=1326 audit(1785552598.939:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.4.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74859e019 code=0x7ffc0000
[  144.355182][ T8806] loop4: detected capacity change from 0 to 512
[  144.357205][   T34] audit: type=1326 audit(1785552598.939:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.4.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb74859e019 code=0x7ffc0000
[  144.365262][   T34] audit: type=1326 audit(1785552598.939:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.4.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb74859e019 code=0x7ffc0000
[  144.377962][   T34] audit: type=1326 audit(1785552598.939:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.4.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb74859dd82 code=0x7ffc0000
[  144.391372][   T34] audit: type=1326 audit(1785552598.949:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.4.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb74855e84e code=0x7ffc0000
[  144.413397][ T8806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.418257][   T34] audit: type=1326 audit(1785552598.949:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.4.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb74859de47 code=0x7ffc0000
[  144.424901][   T34] audit: type=1326 audit(1785552598.949:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.4.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb74855e84e code=0x7ffc0000
[  144.431758][   T34] audit: type=1326 audit(1785552598.949:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.4.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb74859dcab code=0x7ffc0000
[  144.443988][   T34] audit: type=1326 audit(1785552598.959:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.4.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb74855e84e code=0x7ffc0000
[  144.448165][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.451131][   T34] audit: type=1326 audit(1785552598.959:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8805 comm="syz.4.1051" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb74855e84e code=0x7ffc0000
[  144.591979][ T8823] NILFS (loop4): invalid segment: Checksum error in segment payload
[  144.597719][ T8825] overlayfs: failed to resolve './file0': -2
[  144.598151][ T8823] NILFS (loop4): trying rollback from an earlier position
[  144.610094][ T8823] NILFS (loop4): recovery complete
[  144.613654][ T8826] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.042866][   T33] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  145.192837][   T33] usb 5-1: Using ep0 maxpacket: 32
[  145.195840][   T33] usb 5-1: config 9 has an invalid interface number: 39 but max is 1
[  145.198347][   T33] usb 5-1: config 9 has an invalid interface number: 220 but max is 1
[  145.201314][   T33] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  145.207218][   T33] usb 5-1: config 9 has no interface number 0
[  145.209220][   T33] usb 5-1: config 9 has no interface number 1
[  145.211206][   T33] usb 5-1: too many endpoints for config 9 interface 39 altsetting 2: 57, using maximum allowed: 30
[  145.214802][   T33] usb 5-1: config 9 interface 39 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 57
[  145.218978][   T33] usb 5-1: config 9 interface 220 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  145.222587][   T33] usb 5-1: config 9 interface 220 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  145.226119][   T33] usb 5-1: config 9 interface 39 has no altsetting 0
[  145.230126][   T33] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=8e.33
[  145.233123][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.235589][   T33] usb 5-1: Product: syz
[  145.236951][   T33] usb 5-1: Manufacturer: syz
[  145.238403][   T33] usb 5-1: SerialNumber: syz
[  145.412884][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1071'.
[  145.536406][ T8852] fuse: Bad value for 'fd'
[  146.330673][ T2231] usb 6-1: USB disconnect, device number 2
[  147.426728][ T8897] set_capacity_and_notify: 1 callbacks suppressed
[  147.426739][ T8897] loop5: detected capacity change from 0 to 512
[  147.445603][ T8897] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  147.448684][ T8897] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.1091: corrupted in-inode xattr: e_value size too large
[  147.453418][ T8897] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  147.453593][ T8897] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1091: couldn't read orphan inode 15 (err -117)
[  147.460674][ T8897] loop5: lost filesystem error report for type 5 error -117
[  147.461561][ T8897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.480627][ T8897] EXT4-fs error (device loop5): ext4_check_dx_root:2201: inode #2: comm syz.5.1091: Corrupt dir, invalid name_len for '..', running e2fsck is recommended
[  147.510147][ T8369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.630648][ T8913] vlan0: entered promiscuous mode
[  147.831451][ T5690] usb 5-1: USB disconnect, device number 9
[  147.836555][ T8930] loop5: detected capacity change from 0 to 64
[  147.995869][ T8942] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1112' resets device
[  148.038125][ T8948] loop5: detected capacity change from 0 to 1024
[  148.041069][ T8948] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  148.052111][ T8948] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 2: comm syz.5.1115: lblock 2 mapped to illegal pblock 2 (length 1)
[  148.057151][ T8948] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  148.059151][ T8948] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.1115: lblock 0 mapped to illegal pblock 48 (length 1)
[  148.066395][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  148.066406][    C1] EXT4-fs (loop5): initial error at time 1785552602: ext4_map_blocks:791: inode 3: block 2
[  148.066421][    C1] EXT4-fs (loop5): last error at time 1785552602: ext4_map_blocks:791: inode 3: block 2
[  148.078981][ T8948] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  148.079162][ T8948] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.1115: Failed to acquire dquot type 0
[  148.086269][ T8948] loop5: lost filesystem error report for type 5 error -117
[  148.086430][ T8948] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  148.092073][ T8948] loop5: lost filesystem error report for type 5 error -117
[  148.092217][ T8948] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #11: comm syz.5.1115: mark_inode_dirty error
[  148.098579][ T8948] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  148.103383][ T8948] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  148.111192][ T8948] EXT4-fs (loop5): 1 orphan inode deleted
[  148.119395][ T8948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.125395][ T1115] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 1: comm kworker/u10:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  148.150008][ T1115] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u10:8: Failed to release dquot type 0
[  148.155413][ T8948] EXT4-fs: Ignoring removed bh option
[  148.165503][ T8948] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[  148.191648][ T8948] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #3: block 48: comm syz.5.1115: lblock 0 mapped to illegal pblock 48 (length 1)
[  148.221219][ T8948] EXT4-fs: Ignoring removed bh option
[  148.226903][ T8948] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[  148.278021][ T8369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.376139][ T8967] loop4: detected capacity change from 0 to 256
[  148.404275][ T8967] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  148.514639][ T8980] loop4: detected capacity change from 0 to 2048
[  148.527838][ T8980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.554764][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.714937][ T8997] loop4: detected capacity change from 0 to 128
[  149.052823][ T2231] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  149.214890][ T2231] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  149.219311][ T2231] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253
[  149.226422][ T2231] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  149.230631][ T2231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.233524][ T2231] usb 5-1: Product: syz
[  149.234990][ T2231] usb 5-1: Manufacturer: syz
[  149.236426][ T2231] usb 5-1: SerialNumber: syz
[  149.892926][ T5690] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  150.042826][ T5690] usb 6-1: Using ep0 maxpacket: 16
[  150.046198][ T5690] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  150.050201][ T5690] usb 6-1: config 0 interface 0 has no altsetting 0
[  150.052318][ T5690] usb 6-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  150.059002][ T5690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.028205][ T9074] bridge_slave_1: default FDB implementation only supports local addresses
[  151.703133][   T34] kauditd_printk_skb: 20 callbacks suppressed
[  151.703144][   T34] audit: type=1326 audit(1785552606.299:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.1.1170" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  151.713297][   T34] audit: type=1326 audit(1785552606.299:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.1.1170" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  151.720151][   T34] audit: type=1326 audit(1785552606.309:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.1.1170" exe="/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  151.727753][   T34] audit: type=1326 audit(1785552606.309:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.1.1170" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  151.735492][   T34] audit: type=1326 audit(1785552606.309:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.1.1170" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  151.814512][    T9] usb 5-1: USB disconnect, device number 10
[  152.203641][   T34] audit: type=1326 audit(1785552606.789:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9119 comm="syz.1.1185" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3427f9e019 code=0x0
[  152.671614][    T9] usb 6-1: USB disconnect, device number 3
[  152.702096][ T9123] netlink: 'syz.5.1186': attribute type 12 has an invalid length.
[  152.707081][ T9123] netlink: 'syz.5.1186': attribute type 29 has an invalid length.
[  152.710054][ T9123] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1186'.
[  152.714480][ T9123] netlink: 'syz.5.1186': attribute type 1 has an invalid length.
[  153.251177][ T9125] loop4: detected capacity change from 0 to 131072
[  153.293536][ T9125] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  153.296291][ T9125] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  153.300267][ T9125] F2FS-fs (loop4): invalid crc value
[  153.367841][ T9125] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  153.376073][ T9125] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  153.378824][ T9125] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  153.422033][ T9139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1191'.
[  153.612240][ T9153] fuse: fd is not a fuse device
[  153.741499][ T5690] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  153.763857][ T5690] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  153.861587][ T9163] loop4: detected capacity change from 0 to 512
[  153.883749][ T9163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.895335][ T9163] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.956605][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.033500][ T9172] loop4: detected capacity change from 0 to 4096
[  154.039982][ T9172] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  154.049466][ T9172] ntfs3(loop4): ino=3, mi_enum_attr
[  154.052415][ T9172] ntfs3(loop4): Failed to load $Volume (-22).
[  154.309618][ T9189] loop4: detected capacity change from 0 to 128
[  154.312976][ T5690] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  154.335357][ T9189] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  154.343989][ T9189] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.361326][ T9189] syz.4.1212 (pid 9189) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  154.409248][ T9189] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)"
[  154.452241][ T7096] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  154.452315][ T9199] loop5: detected capacity change from 0 to 2048
[  154.457670][ T9199] udf: Unexpected value for 'adinicb'
[  154.468315][ T5690] usb 1-1: Dual-Role OTG device on HNP port
[  154.474121][ T5690] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0000, bcdDevice= 7.02
[  154.485117][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.531173][   T55] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  155.058571][ T9224] loop4: detected capacity change from 0 to 512
[  155.066863][ T9224] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  155.600394][ T9248] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  155.668143][ T9256] netlink: 'syz.5.1240': attribute type 2 has an invalid length.
[  155.723662][ T5690] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  155.731307][ T5690] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  155.922859][ T2231] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  155.990710][    T9] IPVS: starting estimator thread 0...
[  155.997593][ T9271] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  156.034055][ T9274] loop5: detected capacity change from 0 to 512
[  156.058335][ T9274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.064928][ T9274] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  156.072803][ T2231] usb 5-1: Using ep0 maxpacket: 32
[  156.081399][ T2231] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 959, setting to 64
[  156.083498][ T9274] EXT4-fs error (device loop5): ext4_map_blocks:791: inode #2: block 3: comm syz.5.1248: lblock 8 mapped to illegal pblock 3 (length 26)
[  156.087502][ T2231] usb 5-1: string descriptor 0 read error: -22
[  156.093005][ T2231] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  156.095763][ T2231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.099418][ T9272] IPVS: using max 52 ests per chain, 124800 per kthread
[  156.133284][ T8369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.190469][ T9280] loop5: detected capacity change from 0 to 512
[  156.214612][ T9280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.224189][ T9280] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.281204][ T9280] loop5: detected capacity change from 512 to 0
[  156.294769][ T9280] EXT4-fs error (device loop5): ext4_get_inode_loc:5024: inode #15: block 34: comm syz.5.1250: unable to read itable block
[  156.304883][ T9280] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  156.308311][ T9280] EXT4-fs (loop5): I/O error while writing superblock
[  156.310985][ T9280] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: IO failure
[  156.315607][ T9280] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  156.319064][ T9280] EXT4-fs (loop5): I/O error while writing superblock
[  156.323846][ T9280] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.1250: mark_inode_dirty error
[  156.330062][ T9280] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  156.334005][ T9280] EXT4-fs (loop5): I/O error while writing superblock
[  156.365344][ T6774] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:5009: inode #15: block 34: comm kworker/u9:6: unable to read itable block
[  156.370904][ T6774] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  156.373859][ T6774] EXT4-fs (loop5): I/O error while writing superblock
[  156.377629][ T8369] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.387945][ T8369] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  156.391077][ T8369] EXT4-fs (loop5): I/O error while writing superblock
[  156.396225][ T9281] Buffer I/O error on dev loop5, logical block 12, lost sync page write
[  156.681770][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.791674][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.879487][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  156.888841][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  156.892483][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  156.897478][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  156.900791][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.905573][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  157.012492][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.152420][   T13] bridge_slave_1: left allmulticast mode
[  157.155398][   T13] bridge_slave_1: left promiscuous mode
[  157.157542][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.161353][   T13] bridge_slave_0: left allmulticast mode
[  157.163877][   T13] bridge_slave_0: left promiscuous mode
[  157.165797][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.305648][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.309768][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.314081][   T13] bond0 (unregistering): Released all slaves
[  157.509004][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.511604][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.517337][ T9302] bridge_slave_0: entered allmulticast mode
[  157.521714][ T9302] bridge_slave_0: entered promiscuous mode
[  157.529582][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.536963][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.539661][ T9302] bridge_slave_1: entered allmulticast mode
[  157.546647][ T9302] bridge_slave_1: entered promiscuous mode
[  157.556223][   T13] hsr_slave_0: left promiscuous mode
[  157.558444][   T13] hsr_slave_1: left promiscuous mode
[  157.560461][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  157.563965][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.566587][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  157.569157][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.578858][   T13] veth1_macvtap: left promiscuous mode
[  157.580770][   T13] veth0_macvtap: left promiscuous mode
[  157.582515][   T13] veth1_vlan: left promiscuous mode
[  157.585164][   T13] veth0_vlan: left promiscuous mode
[  157.728008][   T13] team0 (unregistering): Port device team_slave_1 removed
[  157.735347][   T13] team0 (unregistering): Port device team_slave_0 removed
[  157.811722][ T5352] 8021q: adding VLAN 0 to HW filter on device eth13
[  157.821489][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  157.855414][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  157.885414][ T9302] team0: Port device team_slave_0 added
[  157.891756][ T9302] team0: Port device team_slave_1 added
[  157.939440][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0
[  157.942030][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.953742][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.963028][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.965226][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  157.973245][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.021029][ T9302] hsr_slave_0: entered promiscuous mode
[  158.029759][ T9302] hsr_slave_1: entered promiscuous mode
[  158.032640][ T9302] debugfs: 'hsr0' already exists in 'hsr'
[  158.035305][ T9302] Cannot create hsr debugfs directory
[  158.051490][ T5352] 8021q: adding VLAN 0 to HW filter on device eth14
[  158.120851][   T13] IPVS: stop unused estimator thread 0...
[  158.206306][ T9302] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  158.210519][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  158.213297][ T9302] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  158.217726][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  158.220743][ T9302] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  158.227832][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  158.230577][ T9302] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  158.234574][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  158.251308][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.253613][ T9302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.256148][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.258436][ T9302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.280994][ T5352] 8021q: adding VLAN 0 to HW filter on device eth15
[  158.293802][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.299935][  T537] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.303340][  T537] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.310847][ T9302] 8021q: adding VLAN 0 to HW filter on device team0
[  158.318721][  T537] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.320996][  T537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.333434][  T537] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.335606][  T537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.458658][ T5352] 8021q: adding VLAN 0 to HW filter on device eth16
[  158.539437][ T9302] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.816970][ T2231] usb 5-1: USB disconnect, device number 11
[  158.875338][ T9302] veth0_vlan: entered promiscuous mode
[  158.880060][ T9302] veth1_vlan: entered promiscuous mode
[  158.915559][ T9302] veth0_macvtap: entered promiscuous mode
[  158.919691][ T9302] veth1_macvtap: entered promiscuous mode
[  158.928531][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.936158][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.946318][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.955999][   T55] Bluetooth: hci0: command tx timeout
[  158.963558][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.970118][   T57] block nbd0: Receive control failed (result -32)
[  158.979315][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.985946][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.154522][ T6781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.159883][ T6781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.177840][ T6781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.181530][ T6781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.196515][ T9391] loop4: detected capacity change from 0 to 32768
[  159.219120][   T34] audit: type=1800 audit(1785552613.809:48): pid=9391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1269" name="file1" dev="loop4" ino=7 res=0 errno=0
[  159.465217][ T9396] loop6: detected capacity change from 0 to 40427
[  159.469601][ T9396] F2FS-fs: inline encryption not supported
[  159.486754][ T9396] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288)
[  159.495335][ T9396] F2FS-fs (loop6): invalid crc value
[  159.497813][ T9396] F2FS-fs (loop6): invalid crc value
[  159.499786][ T9396] F2FS-fs (loop6): Failed to get valid F2FS checkpoint
[  159.612931][ T5690] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  159.727537][ T9405] loop6: detected capacity change from 0 to 32768
[  159.738468][ T9405] JBD2: Ignoring recovery information on journal
[  159.766870][ T9405] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  159.784280][ T5690] usb 5-1: Using ep0 maxpacket: 8
[  159.790777][ T5690] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.797029][ T5690] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  159.804981][ T5690] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  159.809754][ T5690] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  159.820332][ T5690] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  159.826285][ T9302] ocfs2: Unmounting device (7,6) on (node local)
[  159.843466][ T5690] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  159.850563][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.863050][ T5690] usb 5-1: Product: syz
[  159.864849][ T5690] usb 5-1: Manufacturer: syz
[  159.866798][ T5690] usb 5-1: SerialNumber: syz
[  161.054424][   T55] Bluetooth: hci0: command tx timeout
[  161.564680][ T9423] overlayfs: failed to clone lowerpath
[  161.571043][ T9423] overlayfs: failed to clone lowerpath
[  161.598239][   T55] Bluetooth: hci2: link tx timeout
[  161.601786][   T55] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  161.942920][   T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  162.095825][   T24] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  162.099796][   T24] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  162.104155][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.369799][ T5688] usb 5-1: USB disconnect, device number 12
[  162.393314][ T9439] loop4: detected capacity change from 0 to 1024
[  162.421042][ T9439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  162.425404][ T9439] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.431200][ T9439] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.1288: lblock 3 mapped to illegal pblock 3 (length 2)
[  162.439950][ T9439] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.1288: lblock 0 mapped to illegal pblock 0 (length 3)
[  162.447007][ T9439] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  162.451842][ T9439] EXT4-fs (loop4): This should not happen!! Data will be lost
[  162.451842][ T9439] 
[  162.468141][   T26] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 4: comm kworker/u9:0: lblock 4 mapped to illegal pblock 4 (length 1)
[  162.481143][   T26] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117
[  162.485293][   T26] EXT4-fs (loop4): This should not happen!! Data will be lost
[  162.485293][   T26] 
[  162.492281][ T7096] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  162.497863][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  162.555783][ T9450] loop4: detected capacity change from 0 to 8
[  162.561818][ T9450] SQUASHFS error: zlib decompression failed, data probably corrupt
[  162.565004][ T9450] SQUASHFS error: Failed to read block 0x9b: -5
[  162.567124][ T9450] SQUASHFS error: Unable to read metadata cache entry [99]
[  162.569443][ T9450] SQUASHFS error: Unable to read inode 0x127
[  162.680317][   T55] Bluetooth: hci2: unexpected event for opcode 0x0c58
[  163.112997][   T55] Bluetooth: hci0: command tx timeout
[  163.671705][   T55] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  164.188382][ T9516] loop4: detected capacity change from 0 to 1024
[  164.212346][ T9516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.222560][ T9516] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.1317: missing EA_INODE flag
[  164.242333][ T9516] EXT4-fs (loop4): Remounting filesystem read-only
[  164.258646][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.535462][ T9530] syz.1.1321 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  164.610412][ T5617] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  164.705458][ T5666] usb 7-1: USB disconnect, device number 2
[  164.733751][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1322'.
[  164.759776][ T9534] loop6: detected capacity change from 0 to 256
[  164.870266][ T5688] kernel write not supported for file /33/gid_map (pid: 5688 comm: kworker/0:5)
[  165.127076][ T9524] Bluetooth: hci0: Opcode 0x080f failed: -4
[  165.222811][ T5617] Bluetooth: hci0: command tx timeout
[  165.497198][ T9574] fuse: fd is not a fuse device
[  165.514253][ T9567] loop4: detected capacity change from 0 to 32768
[  165.526189][ T9567] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  165.584199][ T7096] ocfs2: Unmounting device (7,4) on (node local)
[  166.025773][ T9609] loop4: detected capacity change from 0 to 32768
[  166.032235][ T9609] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1356 (9609)
[  166.065713][ T9609] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.075342][ T9609] BTRFS info (device loop4): using sha256 checksum algorithm
[  166.086452][ T9618] fuse: fd is not a fuse device
[  166.114325][ T5688] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  166.129439][ T9609] BTRFS info (device loop4): enabling ssd optimizations
[  166.136235][ T9609] BTRFS info (device loop4): turning on async discard
[  166.142840][ T9609] BTRFS info (device loop4): enabling free space tree
[  166.161479][ T7096] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.295222][ T5688] usb 7-1: unable to get BOS descriptor or descriptor too short
[  166.298362][ T5688] usb 7-1: not running at top speed; connect to a high speed hub
[  166.301934][ T5688] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 104, changing to 4
[  166.308920][ T5688] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  166.315186][ T5688] usb 7-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  166.318212][ T5688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.321038][ T5688] usb 7-1: Product: syz
[  166.322371][ T5688] usb 7-1: Manufacturer: syz
[  166.328741][ T5688] usb 7-1: SerialNumber: syz
[  166.367582][ T9638] Mass Storage Function, version: 2009/09/11
[  166.371019][ T9638] LUN: removable file: (no medium)
[  166.376352][   T34] audit: type=1800 audit(1785552620.969:49): pid=9638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1363" name="file" dev="configfs" ino=22256 res=0 errno=0
[  166.387724][ T9638] mass_storage.0/lun.0: file too small: file0
[  166.532146][ T9642] loop4: detected capacity change from 0 to 32768
[  166.535860][ T9642] (syz.4.1365,9642,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  166.544432][ T9642] (syz.4.1365,9642,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  166.553593][ T9642] JBD2: Ignoring recovery information on journal
[  166.572574][ T9642] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  166.677475][ T7096] ocfs2: Unmounting device (7,4) on (node local)
[  166.760115][ T9646] loop4: detected capacity change from 0 to 16
[  166.763702][ T9646] erofs (device loop4): mounted with root inode @ nid 36.
[  166.915018][ T9648] loop4: detected capacity change from 0 to 32768
[  166.920525][ T9648] btrfs: Deprecated parameter 'usebackuproot'
[  166.927792][ T9648] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  166.935832][ T9648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1367 (9648)
[  166.947022][ T9658] overlayfs: failed to clone upperpath
[  166.957202][ T9648] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.961960][ T9648] BTRFS info (device loop4): using crc32c checksum algorithm
[  166.988341][   T26] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  166.995555][ T9648] BTRFS error (device loop4): failed to load root extent
[  166.999417][ T9648] BTRFS warning (device loop4): try to load backup roots slot 1
[  167.004246][ T6783] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  167.009401][ T9648] BTRFS warning (device loop4): couldn't read tree root
[  167.011657][ T9648] BTRFS warning (device loop4): try to load backup roots slot 2
[  167.014705][   T26] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  167.018117][ T9648] BTRFS warning (device loop4): couldn't read tree root
[  167.020552][ T9648] BTRFS warning (device loop4): try to load backup roots slot 3
[  167.032676][ T9648] BTRFS info (device loop4): rebuilding free space tree
[  167.046379][ T9648] BTRFS info (device loop4): checking UUID tree
[  167.049691][ T9648] BTRFS info (device loop4): enabling ssd optimizations
[  167.052475][ T9648] BTRFS info (device loop4): turning on async discard
[  167.055431][ T9648] BTRFS info (device loop4): enabling free space tree
[  167.057564][ T9648] BTRFS info (device loop4): force clearing of disk cache
[  167.059837][ T9648] BTRFS info (device loop4): enabling auto defrag
[  167.061753][ T9648] BTRFS info (device loop4): trying to use backup root at mount time
[  167.064449][ T9648] BTRFS info (device loop4): use zstd compression, level 3
[  167.115292][ T7096] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  167.272931][ T5617] Bluetooth: hci0: command 0x080f tx timeout
[  167.277769][ T9687] 9p: Bad value for 'rfdno'
[  167.471102][ T9691] fuse: root generation should be zero
[  167.717229][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1382'.
[  168.009636][ T9711] overlayfs: failed to clone upperpath
[  168.181403][ T9721] loop4: detected capacity change from 0 to 2048
[  168.211556][ T9724] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.390061][ T9730] loop4: detected capacity change from 0 to 128
[  168.395094][ T9730] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  168.399729][ T9730] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.692855][ T5666] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  168.845296][ T5666] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.849237][ T5666] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  168.856215][ T5666] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40
[  168.859811][ T5666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.863428][ T5666] usb 5-1: Product: syz
[  168.865209][ T5666] usb 5-1: Manufacturer: syz
[  168.867019][ T5666] usb 5-1: SerialNumber: syz
[  168.883337][ T5688] usb 7-1: USB disconnect, device number 3
[  168.985156][ T9750] loop6: detected capacity change from 0 to 1024
[  169.941625][ T9771] option changes via remount are deprecated (pid=9770 comm=syz.6.1413)
[  169.946356][ T9771] cgroup: option or name mismatch, new: 0x14 "", old: 0x0 ""
[  170.058042][ T9777] loop6: detected capacity change from 0 to 4096
[  170.061841][ T9777] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  170.090694][ T9777] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  170.097997][ T9777] ntfs3(loop6): ino=19, mi_enum_attr
[  170.121696][ T9777] ntfs3(loop6): ino=23, "file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_rename
[  170.582955][   T33] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  170.712807][ T5617] Bluetooth: hci1: command 0x0406 tx timeout
[  170.734387][   T33] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  170.741747][   T33] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.479763][ T5688] usb 5-1: USB disconnect, device number 13
[  171.547620][ T9825] loop4: detected capacity change from 0 to 2048
[  171.552009][ T9825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.559923][   T34] audit: type=1800 audit(1785552626.159:50): pid=9825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1432" name="file1" dev="loop4" ino=1415 res=0 errno=0
[  171.725974][ T9833] usbip-vudc usbip-vudc.0: gadget not bound
[  172.010482][ T9843] loop4: detected capacity change from 0 to 32768
[  172.029267][ T9843] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.053839][ T9843] XFS (loop4): Ending clean mount
[  172.080518][ T7096] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.292946][   T55] Bluetooth: hci1: unexpected event for opcode 0x0c6d
[  172.395649][ T9856] loop4: detected capacity change from 0 to 40427
[  172.400945][ T9856] F2FS-fs (loop4): build fault injection type: 0x7
[  172.408976][ T9856] F2FS-fs (loop4): invalid crc value
[  172.452336][ T9856] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.462491][ T9856] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  172.465509][ T9856] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  172.469277][ T9856] F2FS-fs (loop4): Start checkpoint disabled!
[  172.480827][ T9856] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  172.486631][ T9856] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  172.526654][ T9856] F2FS-fs (loop4): ino:10, start:1, end:8193, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  172.556260][ T9856] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  173.366544][ T5533] usb 7-1: USB disconnect, device number 4
[  173.429941][ T9879] loop4: detected capacity change from 0 to 256
[  173.768598][ T9887] loop6: detected capacity change from 0 to 1024
[  173.887087][ T9897] loop6: detected capacity change from 0 to 2048
[  173.891537][ T9897] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  173.897477][ T9897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.976668][ T9901] loop6: detected capacity change from 0 to 256
[  173.980970][ T9901] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  174.121315][ T9905] loop6: detected capacity change from 0 to 512
[  174.139348][ T9905] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  174.159680][ T9905] EXT4-fs (loop6): 1 truncate cleaned up
[  174.166999][ T9905] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.201509][ T9302] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.604369][ T5533] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  174.649764][ T9920] loop6: detected capacity change from 0 to 32768
[  174.658381][ T9920] (syz.6.1471,9920,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  174.663395][ T9920] (syz.6.1471,9920,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  174.673805][ T9920] JBD2: Ignoring recovery information on journal
[  174.703211][ T9920] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  174.710355][ T9920] (syz.6.1471,9920,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  174.750768][ T9302] ocfs2: Unmounting device (7,6) on (node local)
[  174.763812][ T5533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  174.771849][ T5533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.781008][ T5533] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  174.789070][ T5533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.800461][ T5533] usb 5-1: Product: syz
[  174.802109][ T5533] usb 5-1: Manufacturer: syz
[  174.804061][ T5533] usb 5-1: SerialNumber: syz
[  177.089323][ T9964] openvswitch: netlink: Duplicate or invalid key (type 0).
[  177.092159][ T9964] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.318059][ T9977] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  177.349331][ T9979] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  177.370473][   T33] usb 5-1: USB disconnect, device number 14
[  177.430127][ T9983] loop4: detected capacity change from 0 to 256
[  177.440477][ T9983] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x3d0f6cf8, utbl_chksum : 0xe619d30d)
[  177.566432][   T55] Bluetooth: hci2: unexpected event for opcode 0x0404
[  178.520510][T10025] loop4: detected capacity change from 0 to 512
[  178.533366][T10016] loop6: detected capacity change from 0 to 32768
[  178.539319][T10016] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1514 (10016)
[  178.546060][T10016] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.549611][T10016] BTRFS info (device loop6): using crc32c checksum algorithm
[  178.555427][T10025] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.1518: missing EA_INODE flag
[  178.577959][T10025] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  178.582988][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  178.589101][    C0] EXT4-fs (loop4): initial error at time 1785552633: ext4_xattr_inode_iget:441: inode 12
[  178.592906][    C0] EXT4-fs (loop4): last error at time 1785552633: ext4_xattr_inode_iget:441: inode 12
[  178.609872][T10025] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1518: error while reading EA inode 12 err=-117
[  178.626682][T10025] loop4: lost filesystem error report for type 5 error -117
[  178.628824][T10016] BTRFS info (device loop6): enabling ssd optimizations
[  178.638758][T10016] BTRFS info (device loop6): turning on flush-on-commit
[  178.640412][T10025] EXT4-fs (loop4): 1 orphan inode deleted
[  178.643585][T10016] BTRFS info (device loop6): enabling free space tree
[  178.646052][T10016] BTRFS info (device loop6): enabling auto defrag
[  178.648477][T10016] BTRFS info (device loop6): use lzo compression, level 1
[  178.651122][T10016] BTRFS info (device loop6): max_inline set to 4096
[  178.656435][T10025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.787706][ T9302] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.393929][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.555473][T10072] loop4: detected capacity change from 0 to 40427
[  179.560143][T10072] F2FS-fs (loop4): build fault injection rate: 14
[  179.565875][T10072] F2FS-fs (loop4): build fault injection type: 0xe4
[  179.568460][T10072] F2FS-fs (loop4): invalid crc value
[  179.574106][T10072] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  179.606367][T10072] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  179.614387][T10072] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  179.622629][T10072] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x9ee/0x1ee0
[  179.729675][T10079] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1536'.
[  179.744250][T10079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.185750][T10092] loop6: detected capacity change from 0 to 32768
[  180.197740][T10092] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  180.216000][T10092] XFS (loop6): Ending clean mount
[  180.241806][ T9302] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  180.663006][ T5690] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  180.825078][ T5690] usb 7-1: Using ep0 maxpacket: 16
[  180.831273][ T5690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.841989][ T5690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.850680][ T5690] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.859547][ T5690] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  180.862365][ T5690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.083742][   T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  181.233029][   T10] usb 5-1: Using ep0 maxpacket: 16
[  181.237857][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  181.242217][   T10] usb 5-1: config 4 has an invalid interface number: 127 but max is 0
[  181.246419][   T10] usb 5-1: config 4 has no interface number 0
[  181.249054][   T10] usb 5-1: config 4 interface 127 has no altsetting 0
[  181.252542][   T10] usb 5-1: language id specifier not provided by device, defaulting to English
[  181.261895][   T10] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48
[  181.265983][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.269302][   T10] usb 5-1: Product: syz
[  181.270998][   T10] usb 5-1: SerialNumber: syz
[  181.510559][T10123] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  181.620558][T10131] fuse: fd is not a fuse device
[  183.438614][ T5690] usb 7-1: USB disconnect, device number 5
[  183.578996][T10155] loop6: detected capacity change from 0 to 32768
[  183.590579][T10155] read_mapping_page failed!
[  183.593356][T10155] ERROR: (device loop6): txCommit: 
[  183.593356][T10155] 
[  183.619906][  T124] ERROR: (device loop6): diUpdatePMap: the inode is not allocated in the working map
[  183.619906][  T124] 
[  183.865375][ T5690] usb 5-1: USB disconnect, device number 15
[  184.230753][T10184] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  184.273671][T10186] loop6: detected capacity change from 0 to 256
[  184.279146][T10186] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  184.284696][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'.
[  184.378821][T10190] se_device not configured yet, cannot port link
[  184.451162][T10198] syzkaller0: entered promiscuous mode
[  184.453126][T10198] syzkaller0: entered allmulticast mode
[  184.678578][T10212] loop4: detected capacity change from 0 to 1024
[  184.681137][T10212] EXT4-fs: Ignoring removed bh option
[  184.712542][T10212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  184.721446][T10212] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.738250][T10212] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.1592: Freeing blocks not in datazone - block = 0, count = 16
[  184.751291][T10212] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1592: bg 0: block 112: padding at end of block bitmap is not set
[  184.761464][T10212] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  184.761819][T10218] geneve2: entered promiscuous mode
[  184.780834][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  184.850225][T10222] loop4: detected capacity change from 0 to 512
[  184.879766][T10222] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1595: bg 0: block 433: padding at end of block bitmap is not set
[  184.884590][T10222] loop4: lost filesystem error report for type 5 error -117
[  184.884887][T10222] EXT4-fs (loop4): Remounting filesystem read-only
[  184.889558][T10222] EXT4-fs (loop4): 1 truncate cleaned up
[  184.892082][T10222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.896519][T10222] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.924574][ T6783] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  184.928975][ T6783] Quota error (device loop4): write_blk: dquota write failed
[  184.934277][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.939215][ T6783] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[  184.947284][ T6783] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  184.952919][ T6783] Quota error (device loop4): write_blk: dquota write failed
[  184.955294][ T6783] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[  184.958397][ T6783] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  184.961683][ T6783] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  184.967702][ T6783] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  185.140771][T10226] loop4: detected capacity change from 0 to 32768
[  185.167115][T10226] find_entry called with index >= next_index
[  185.177347][T10226] find_entry called with index >= next_index
[  185.179280][T10226] find_entry called with index >= next_index
[  185.181274][T10226] find_entry called with index >= next_index
[  185.184122][T10226] find_entry called with index >= next_index
[  185.186595][T10226] add_index: next_index = 0.  Resetting!
[  185.194285][T10226] find_entry called with index >= next_index
[  185.198168][T10226] find_entry called with index >= next_index
[  185.208212][T10226] find_entry called with index >= next_index
[  185.212500][T10226] non-latin1 character 0x3ff found in JFS file name
[  185.215421][T10226] mount with iocharset=utf8 to access
[  185.335310][T10236] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1601'.
[  185.559387][T10242] loop4: detected capacity change from 0 to 32768
[  185.573965][T10242] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  185.643835][   T55] Bluetooth: hci1: unexpected event for opcode 0x1002
[  185.664011][ T7096] ocfs2: Unmounting device (7,4) on (node local)
[  185.766148][T10254] xt_connbytes: Forcing CT accounting to be enabled
[  186.282989][ T5666] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  186.432961][ T5666] usb 5-1: Using ep0 maxpacket: 8
[  186.440440][ T5666] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  186.448581][ T5666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.452014][ T5666] usb 5-1: Product: syz
[  186.454053][ T5666] usb 5-1: Manufacturer: syz
[  186.455832][ T5666] usb 5-1: SerialNumber: syz
[  186.598381][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'.
[  187.216883][T10292] overlayfs: failed to resolve './file0': -2
[  187.493588][T10314] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1634'.
[  187.752938][ T5666] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  187.905342][ T5666] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.910492][ T5666] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  187.914596][ T5666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.917471][ T5666] usb 7-1: Product: syz
[  187.918826][ T5666] usb 7-1: Manufacturer: syz
[  187.920346][ T5666] usb 7-1: SerialNumber: syz
[  188.857090][ T5666] usb 5-1: USB disconnect, device number 16
[  189.003677][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1645'.
[  189.983716][   T34] audit: type=1326 audit(1785552644.579:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.1.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  190.000069][   T34] audit: type=1326 audit(1785552644.579:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.1.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  190.014958][T10363] loop4: detected capacity change from 0 to 64
[  190.017379][   T34] audit: type=1326 audit(1785552644.589:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.1.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  190.038520][   T34] audit: type=1326 audit(1785552644.589:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.1.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  190.056518][   T34] audit: type=1326 audit(1785552644.589:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.1.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  190.067995][   T34] audit: type=1326 audit(1785552644.589:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.1.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  190.075273][   T34] audit: type=1326 audit(1785552644.589:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.1.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  190.083716][   T34] audit: type=1326 audit(1785552644.589:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.1.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  190.091307][   T34] audit: type=1326 audit(1785552644.589:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.1.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  190.099332][   T34] audit: type=1326 audit(1785552644.589:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.1.1654" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3427f9e019 code=0x7ffc0000
[  190.126295][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'.
[  190.206999][T10369] loop4: detected capacity change from 0 to 8
[  190.212493][T10369] unable to read inode lookup table
[  190.301064][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1660'.
[  190.528470][T10384] overlayfs: failed to clone upperpath
[  190.584660][ T5688] usb 7-1: USB disconnect, device number 6
[  190.625499][T10388] overlayfs: failed to clone upperpath
[  190.698782][T10392] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  190.783268][ T5666] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  190.865938][T10402] loop6: detected capacity change from 0 to 256
[  190.955544][ T5666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  190.959468][ T5666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 189, setting to 64
[  190.963132][ T5666] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  190.966254][ T5666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.046502][T10416] loop6: detected capacity change from 0 to 256
[  191.088858][T10420] loop6: detected capacity change from 0 to 128
[  191.625660][T10444] fuse: fd is not a fuse device
[  192.145268][T10458] loop6: detected capacity change from 0 to 4096
[  192.524329][T10472] xfrm0: entered promiscuous mode
[  192.526392][T10472] xfrm0: entered allmulticast mode
[  193.327206][T10482] overlayfs: failed to clone lowerpath
[  193.566926][ T5533] usb 5-1: USB disconnect, device number 17
[  193.791704][T10499] loop4: detected capacity change from 0 to 16
[  193.795536][T10499] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  193.802540][T10499] cramfs: empty filesystem
[  194.213221][ T5533] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  194.240110][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  194.242834][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  194.364614][ T5533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  194.368117][ T5533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  194.371193][ T5533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  194.376460][ T5533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  194.382659][ T5533] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  194.386304][ T5533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.389073][ T5533] usb 5-1: Product: syz
[  194.390376][ T5533] usb 5-1: Manufacturer: syz
[  194.391908][ T5533] usb 5-1: SerialNumber: syz
[  195.963310][T10581] hsr0: entered promiscuous mode
[  195.966059][T10581] hsr0: entered allmulticast mode
[  195.969493][T10581] hsr_slave_0: entered allmulticast mode
[  195.974076][T10581] hsr_slave_1: entered allmulticast mode
[  196.045356][T10591] fuse: fd is not a fuse device
[  196.078624][T10593] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1764'.
[  196.335021][T10606] loop6: detected capacity change from 0 to 256
[  196.339743][T10606] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  196.549978][T10614] loop6: detected capacity change from 0 to 32768
[  196.884026][T10643] fuse: fd is not a fuse device
[  196.977158][ T5533] usb 5-1: USB disconnect, device number 18
[  197.054243][T10657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'.
[  197.322853][ T5533] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  197.473106][ T5533] usb 5-1: Using ep0 maxpacket: 32
[  197.477561][ T5533] usb 5-1: unable to get BOS descriptor or descriptor too short
[  197.481864][ T5533] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  197.485279][ T5533] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.489223][ T5533] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  197.492582][ T5533] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  197.500273][ T5533] usb 5-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  197.503914][ T5533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.506656][ T5533] usb 5-1: Product: syz
[  197.507973][ T5533] usb 5-1: Manufacturer: syz
[  197.509429][ T5533] usb 5-1: SerialNumber: syz
[  198.379940][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'.
[  198.643316][T10724] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1827'.
[  198.654140][T10697] syz.6.1814 (10697): drop_caches: 2
[  198.982902][ T5690] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  199.134542][ T5690] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  199.140971][ T5690] usb 7-1: config 0 has no interface number 0
[  199.146127][ T5690] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  199.150868][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.155573][ T5690] usb 7-1: Product: syz
[  199.158674][ T5690] usb 7-1: Manufacturer: syz
[  199.160821][ T5690] usb 7-1: SerialNumber: syz
[  199.835635][ T1113] wlan1: Trigger new scan to find an IBSS to join
[  200.017056][ T5533] usb 5-1: USB disconnect, device number 19
[  200.074488][T10774] loop4: detected capacity change from 0 to 128
[  200.080882][T10774] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  200.085075][T10774] hpfs: filesystem error: improperly stopped
[  200.087724][T10774] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  200.090487][T10774] hpfs: You really don't want any checks? You are crazy...
[  200.093499][T10774] hpfs: Code page index out of array
[  200.095102][T10774] hpfs: code page support is disabled
[  200.096774][T10774] hpfs: hpfs_map_4sectors(): unaligned read
[  200.098777][T10774] hpfs: hpfs_map_4sectors(): unaligned read
[  200.100439][T10774] hpfs: filesystem error: unable to find root dir
[  200.105407][T10774] hpfs: hpfs_map_4sectors(): unaligned read
[  200.249619][T10781] loop4: detected capacity change from 0 to 1024
[  200.268341][T10781] hfsplus: found bad thread record in catalog
[  200.476578][T10793] loop4: detected capacity change from 0 to 16
[  200.479091][T10793] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  200.530900][T10797] loop4: detected capacity change from 0 to 16
[  200.534003][T10797] erofs (device loop4): mounted with root inode @ nid 36.
[  200.748686][T10815] loop4: detected capacity change from 0 to 512
[  200.782339][T10815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.794752][T10815] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.819291][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.113492][ T5690] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  201.263303][ T5690] usb 5-1: Using ep0 maxpacket: 32
[  201.267053][ T5690] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  201.270607][ T5690] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  201.273917][ T5690] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  201.276915][ T5690] usb 5-1: config 1 has no interface number 0
[  201.278986][ T5690] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  201.281969][ T5690] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  201.286646][ T5690] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  201.289541][ T5690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.340622][T10841] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  201.761320][ T5533] usb 7-1: USB disconnect, device number 7
[  201.809531][T10845] vhci_hcd vhci_hcd.0: failed to lookup sock
[  202.108989][T10862] loop6: detected capacity change from 0 to 512
[  202.115754][T10862] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.1891: corrupted in-inode xattr: invalid ea_ino
[  202.119861][T10862] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  202.120002][T10862] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1891: couldn't read orphan inode 15 (err -117)
[  202.122903][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  202.122913][    C1] EXT4-fs (loop6): initial error at time 2000000009: ext4_iget_extra_inode:5180: inode 15
[  202.122926][    C1] EXT4-fs (loop6): last error at time 2000000009: ext4_iget_extra_inode:5180: inode 15
[  202.136420][T10862] loop6: lost filesystem error report for type 5 error -117
[  202.137224][T10862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.146094][T10862] EXT4-fs warning (device loop6): ext4_empty_dir:3094: inode #2: comm syz.6.1891: directory missing '.'
[  202.161845][ T9302] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.201887][T10866] loop6: detected capacity change from 0 to 1024
[  202.557218][ T5690] hid-generic 0005:0B57:0000.0007: item fetching failed at offset 0/1
[  202.564948][ T5690] hid-generic 0005:0B57:0000.0007: probe with driver hid-generic failed with error -22
[  202.640376][T10885] loop6: detected capacity change from 0 to 4096
[  202.645148][T10885] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  202.674069][T10885] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  202.679627][T10885] ntfs3(loop6): Inode r=b is not in use!
[  202.681654][T10885] ntfs3(loop6): Failed to load $Extend (-116).
[  202.684980][T10885] ntfs3(loop6): Failed to initialize $Extend.
[  202.694459][T10885] ntfs3(loop6): ino=1b, mi_enum_attr
[  202.794726][ T1113] wlan1: Trigger new scan to find an IBSS to join
[  203.002829][ T5690] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  203.287090][ T5690] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  203.289921][ T5690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.292248][ T5690] usb 7-1: Product: syz
[  203.293714][ T5690] usb 7-1: Manufacturer: syz
[  203.295377][ T5690] usb 7-1: SerialNumber: syz
[  203.887962][ T5690] usb 5-1: USB disconnect, device number 20
[  204.030224][T10923] xt_hashlimit: size too large, truncated to 1048576
[  204.280668][T10933] loop4: detected capacity change from 0 to 32768
[  204.296447][T10933] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  204.319154][T10933] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  204.326791][T10933] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30
[  204.336048][T10933] XFS (loop4): Ending clean mount
[  204.364053][ T7096] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  205.792185][ T5690] usb 7-1: USB disconnect, device number 8
[  205.820005][   T34] kauditd_printk_skb: 104 callbacks suppressed
[  205.820020][   T34] audit: type=1800 audit(2000000013.290:165): pid=10984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1941" name="scan_secs" dev="configfs" ino=25723 res=0 errno=0
[  205.835207][ T6774] wlan1: Trigger new scan to find an IBSS to join
[  205.916741][T10989] loop4: detected capacity change from 0 to 512
[  205.931121][T10989] EXT4-fs (loop4): orphan cleanup on readonly fs
[  205.937327][T10989] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  205.940986][T10989] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  205.959242][T10989] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1943: attempt to clear invalid blocks 2 len 1
[  205.963235][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  205.963247][    C1] EXT4-fs (loop4): initial error at time 2000000013: ext4_mb_generate_buddy:1317
[  205.963257][    C1] EXT4-fs (loop4): last error at time 2000000013: ext4_mb_generate_buddy:1317
[  205.970996][T10989] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  206.071074][T10989] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1943: invalid indirect mapped block 1819239214 (level 0)
[  206.117895][T10989] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  206.120636][T10989] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1943: invalid indirect mapped block 1819239214 (level 1)
[  206.132861][T10989] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  206.137633][T10989] EXT4-fs (loop4): 1 truncate cleaned up
[  206.146203][T10989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  206.169921][T10989] EXT4-fs error (device loop4): ext4_lookup:1782: inode #2: comm syz.4.1943: 'file1' linked to parent dir
[  206.196156][ T7096] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.803272][ T6774] wlan1: Creating new IBSS network, BSSID ae:27:34:a8:05:93
[  206.941498][T11018] loop6: detected capacity change from 0 to 128
[  206.960560][T11018] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  206.971052][T11018] hpfs: filesystem error: improperly stopped
[  206.975532][T11018] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  206.978728][T11018] hpfs: You really don't want any checks? You are crazy...
[  206.981697][T11018] hpfs: Code page index out of array
[  206.984722][T11018] hpfs: code page support is disabled
[  206.987185][T11018] hpfs: filesystem error: map_dirent: not a directory
[  206.989847][T11018] 
[  206.990810][T11018] hpfs: hpfs_map_4sectors(): unaligned read
[  206.994688][T11018] hpfs: filesystem error: unable to find root dir
[  207.113540][   T55] Bluetooth: hci0: unexpected event for opcode 0x1003
[  208.075458][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  208.321986][T11059] loop4: detected capacity change from 0 to 32768
[  208.327769][T11059] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1973 (11059)
[  208.346091][T11059] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  208.352379][T11059] BTRFS info (device loop4): using crc32c checksum algorithm
[  208.398236][T11059] BTRFS info (device loop4): rebuilding free space tree
[  208.461997][T11059] BTRFS info (device loop4): allowing degraded mounts
[  208.471032][T11059] BTRFS info (device loop4): enabling ssd optimizations
[  208.479735][T11059] BTRFS info (device loop4): enabling free space tree
[  208.488195][T11059] BTRFS info (device loop4): force clearing of disk cache
[  208.490572][T11059] BTRFS info (device loop4): force zlib compression, level 3
[  208.631176][ T7096] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  208.820853][T11116] geneve0: entered promiscuous mode
[  208.838000][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 35947 - 0
[  208.842858][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 35947 - 0
[  208.849190][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 35947 - 0
[  208.860350][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 35947 - 0
[  209.081599][T11137] tipc: Started in network mode
[  209.083508][T11137] tipc: Node identity , cluster identity 4711
[  209.085604][T11137] tipc: Failed to set node id, please configure manually
[  209.087876][T11137] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  209.092635][T11119] loop4: detected capacity change from 0 to 40427
[  209.097678][T11119] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  209.100124][T11119] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  209.104343][T11119] F2FS-fs (loop4): invalid crc value
[  209.152190][T11119] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  209.166824][T11119] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  209.169438][T11119] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  209.183663][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2006'.
[  209.190698][T11147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2006'.
[  211.116507][ T5617] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  211.121150][ T5617] Bluetooth: hci0: Injecting HCI hardware error event
[  211.130032][   T55] Bluetooth: hci0: hardware error 0x00
[  211.197053][T11208] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2033'.
[  211.201427][T11208] gretap0: entered promiscuous mode
[  211.212524][T11208] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2033'.
[  211.222501][T11208] 0{X: renamed from gretap0
[  211.229376][T11208] 0{X: left promiscuous mode
[  211.231211][T11208] 0{X: entered allmulticast mode
[  211.237560][T11208] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  212.214874][ T5673] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  212.364102][ T5673] usb 5-1: Using ep0 maxpacket: 16
[  212.370293][ T5673] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  212.374297][ T5673] usb 5-1: config 0 has no interface number 0
[  212.376641][ T5673] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  212.379981][ T5673] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  212.387767][ T5673] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  212.391630][ T5673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.397965][ T5673] usb 5-1: Product: syz
[  212.401051][ T5673] usb 5-1: Manufacturer: syz
[  212.405356][ T5673] usb 5-1: SerialNumber: syz
[  212.436355][T11278] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2066'.
[  213.193446][   T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  213.977708][T11325] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2088'.
[  214.579336][T11336] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  214.736457][T11349] fuse: Bad value for 'fd'
[  214.903957][T11356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  214.969081][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2104'.
[  214.978881][   T10] usb 5-1: USB disconnect, device number 21
[  215.008761][T11361] loop4: detected capacity change from 0 to 256
[  215.065961][T11365] input: syz0 as /devices/virtual/input/input11
[  215.238808][T11369] loop4: detected capacity change from 0 to 32768
[  215.251086][T11369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2109 (11369)
[  215.274174][T11369] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.277566][T11369] BTRFS info (device loop4): using sha256 checksum algorithm
[  215.306688][T11369] BTRFS info (device loop4): enabling ssd optimizations
[  215.308942][T11369] BTRFS info (device loop4): turning on async discard
[  215.311147][T11369] BTRFS info (device loop4): enabling free space tree
[  215.314789][T11369] BTRFS info (device loop4): force clearing of disk cache
[  215.317046][T11369] BTRFS info (device loop4): force zlib compression, level 3
[  215.319320][T11369] BTRFS info (device loop4): max_inline set to 0
[  215.331272][T11369] BTRFS error: failed to open device for path )p1*4(^u<moe{K@س׶<P̞Y8|c[Z	^։&shZRo+@R2=JM _	f^w&l?~# KXyTiӽy%#֭:zS/Ci)7ϙM?7Ag,.C=4)Y n.fƸ&L?ݛnI,7{|fvY&=<g;'߫*,ϖvF^sF#_R,N-נs4o)uU.;x>iݞC)"q(ë\.7r*)j;XTz?vȹxMn:SYO>ǁ*ZaD6fezCQtz-~u
[  215.331272][T11369] :pKnT,qHʆ4Һ1sTvmd0[̛t{csګ&$(}At}as>"uG9p\,4"ߞg.¨C]}>Uao؁xeyC."sγZH$ԝ^$_ with flags 0x1: -2
[  215.370646][ T7096] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.799649][T11417] loop4: detected capacity change from 0 to 4096
[  215.973938][T11425] loop4: detected capacity change from 0 to 8
[  216.039499][T11427] macvlan2: entered promiscuous mode
[  216.041258][T11427] bridge0: entered promiscuous mode
[  216.077484][T11429] loop4: detected capacity change from 0 to 1024
[  216.952826][ T5617] Bluetooth: hci1: command tx timeout
[  217.311732][T11473] loop4: detected capacity change from 0 to 64
[  217.447715][T11481] 
[  217.448532][T11481] ======================================================
[  217.450724][T11481] WARNING: possible circular locking dependency detected
[  217.452901][T11481] syzkaller #0 Tainted: G             L     
[  217.455251][T11481] ------------------------------------------------------
[  217.457913][T11481] syz.4.2152/11481 is trying to acquire lock:
[  217.460029][T11481] ffffffff8f9f0ae8 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5f0/0x950
[  217.462993][T11481] 
[  217.462993][T11481] but task is already holding lock:
[  217.465237][T11481] ffff88811bfde280 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0
[  217.468185][T11481] 
[  217.468185][T11481] which lock already depends on the new lock.
[  217.468185][T11481] 
[  217.471319][T11481] 
[  217.471319][T11481] the existing dependency chain (in reverse order) is:
[  217.474045][T11481] 
[  217.474045][T11481] -> #2 (&sb->s_type->i_mutex_key#29){++++}-{4:4}:
[  217.476671][T11481]        down_write+0x96/0x200
[  217.478146][T11481]        configfs_depend_item_unlocked+0x153/0x420
[  217.480524][T11481]        usbg_make_tpg+0x1f6/0x590
[  217.482468][T11481]        target_fabric_make_tpg+0xa8/0x6d0
[  217.484701][T11481]        configfs_mkdir+0x4f6/0x9e0
[  217.486703][T11481]        vfs_mkdir+0x406/0x620
[  217.488554][T11481]        filename_mkdirat+0x285/0x510
[  217.490591][T11481]        __se_sys_mkdir+0x34/0x150
[  217.492562][T11481]        do_syscall_64+0x174/0x580
[  217.494537][T11481]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.496972][T11481] 
[  217.496972][T11481] -> #1 (&opts->dep_lock){+.+.}-{4:4}:
[  217.499764][T11481]        __mutex_lock+0x19d/0x1550
[  217.501385][T11481]        tcm_set_name+0x2b/0xd0
[  217.502887][T11481]        function_make+0x1a8/0x360
[  217.504516][T11481]        configfs_mkdir+0x4f6/0x9e0
[  217.506093][T11481]        vfs_mkdir+0x406/0x620
[  217.507533][T11481]        filename_mkdirat+0x285/0x510
[  217.509169][T11481]        __se_sys_mkdir+0x34/0x150
[  217.510761][T11481]        do_syscall_64+0x174/0x580
[  217.512352][T11481]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.514302][T11481] 
[  217.514302][T11481] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}:
[  217.516746][T11481]        __lock_acquire+0x15ff/0x2e50
[  217.518299][T11481]        lock_acquire+0x115/0x350
[  217.519787][T11481]        __mutex_lock+0x19d/0x1550
[  217.521374][T11481]        configfs_rmdir+0x5f0/0x950
[  217.523004][T11481]        vfs_rmdir+0x3e6/0x6a0
[  217.524513][T11481]        filename_rmdir+0x292/0x520
[  217.526113][T11481]        __se_sys_unlinkat+0x71/0x1a0
[  217.527810][T11481]        do_syscall_64+0x174/0x580
[  217.529525][T11481]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.531446][T11481] 
[  217.531446][T11481] other info that might help us debug this:
[  217.531446][T11481] 
[  217.534421][T11481] Chain exists of:
[  217.534421][T11481]   gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#29
[  217.534421][T11481] 
[  217.538704][T11481]  Possible unsafe locking scenario:
[  217.538704][T11481] 
[  217.540884][T11481]        CPU0                    CPU1
[  217.542483][T11481]        ----                    ----
[  217.544050][T11481]   lock(&sb->s_type->i_mutex_key#29);
[  217.545737][T11481]                                lock(&opts->dep_lock);
[  217.547777][T11481]                                lock(&sb->s_type->i_mutex_key#29);
[  217.550120][T11481]   lock(gadget_subsys.su_mutex);
[  217.551710][T11481] 
[  217.551710][T11481]  *** DEADLOCK ***
[  217.551710][T11481] 
[  217.554162][T11481] 3 locks held by syz.4.2152/11481:
[  217.555779][T11481]  #0: ffff888101f7c450 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  217.558633][T11481]  #1: ffff8881ba7f0f80 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x1cd/0x520
[  217.562060][T11481]  #2: ffff88811bfde280 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: vfs_rmdir+0xf8/0x6a0
[  217.565141][T11481] 
[  217.565141][T11481] stack backtrace:
[  217.566952][T11481] CPU: 0 UID: 0 PID: 11481 Comm: syz.4.2152 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  217.566963][T11481] Tainted: [L]=SOFTLOCKUP
[  217.566966][T11481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.566971][T11481] Call Trace:
[  217.566975][T11481]  <TASK>
[  217.566979][T11481]  dump_stack_lvl+0xe8/0x150
[  217.566991][T11481]  print_circular_bug+0x2e2/0x300
[  217.566999][T11481]  check_noncircular+0x12f/0x150
[  217.567008][T11481]  __lock_acquire+0x15ff/0x2e50
[  217.567020][T11481]  ? __pfx_hlock_conflict+0x10/0x10
[  217.567027][T11481]  ? __bfs+0x153/0x290
[  217.567036][T11481]  ? __pfx_hlock_conflict+0x10/0x10
[  217.567044][T11481]  ? check_path+0x21/0x40
[  217.567050][T11481]  ? check_noncircular+0xdb/0x150
[  217.567058][T11481]  lock_acquire+0x115/0x350
[  217.567068][T11481]  ? configfs_rmdir+0x5f0/0x950
[  217.567078][T11481]  __mutex_lock+0x19d/0x1550
[  217.567089][T11481]  ? configfs_rmdir+0x5f0/0x950
[  217.567098][T11481]  ? reacquire_held_locks+0x117/0x1a0
[  217.567104][T11481]  ? configfs_rmdir+0x5f0/0x950
[  217.567112][T11481]  ? __pfx___mutex_lock+0x10/0x10
[  217.567122][T11481]  ? _raw_spin_unlock+0x28/0x50
[  217.567129][T11481]  ? fast_dput+0x469/0x670
[  217.567136][T11481]  configfs_rmdir+0x5f0/0x950
[  217.567146][T11481]  vfs_rmdir+0x3e6/0x6a0
[  217.567154][T11481]  ? bpf_lsm_path_rmdir+0x9/0x20
[  217.567162][T11481]  filename_rmdir+0x292/0x520
[  217.567172][T11481]  ? __pfx_filename_rmdir+0x10/0x10
[  217.567183][T11481]  ? do_getname+0x151/0x250
[  217.567192][T11481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.567200][T11481]  __se_sys_unlinkat+0x71/0x1a0
[  217.567209][T11481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.567235][T11481]  do_syscall_64+0x174/0x580
[  217.567246][T11481]  ? trace_irq_disable+0x3b/0x140
[  217.567257][T11481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.567264][T11481] RIP: 0033:0x7fb74859e019
[  217.567273][T11481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.567279][T11481] RSP: 002b:00007fb7493aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  217.567302][T11481] RAX: ffffffffffffffda RBX: 00007fb748825fa0 RCX: 00007fb74859e019
[  217.567308][T11481] RDX: 0000000000000200 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  217.567313][T11481] RBP: 00007fb74863500c R08: 0000000000000000 R09: 0000000000000000
[  217.567318][T11481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.567322][T11481] R13: 00007fb748826038 R14: 00007fb748825fa0 R15: 00007ffecbcf4c28
[  217.567329][T11481]  </TASK>
