last executing test programs:

2m56.807484698s ago: executing program 0 (id=86):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x8000}, 0x0)

2m56.729769082s ago: executing program 0 (id=87):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

2m56.630590221s ago: executing program 0 (id=89):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002b00), r1)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:fonts_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000014}, 0x40)

2m56.553982575s ago: executing program 0 (id=91):
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xc, 0x27e, &(0x7f00000005c0)="$eJzs3U9rY1UUAPDz0tTUQklBobQIPuk+tBX3LdJCMSBYstCNFpuiNLXQQkEXNq5cu3KjGz+AbgS3ggtx6xcQQerAbNpZdTGQIU0madKX6Z8hzTD9/TY5vHtO7r3vPd5NFrn55I3dna29g+3T0+PITSTj+eX4de4sienIxVi01AMAeJmcNRpx0mgZ9VgAgLth/QeA+6e7/ieX1v+k3v5M8NpP87OjGBwAMBS+/wPA/bPx4UfvrZTLqx+cpBMRu98eVg4rrddW+8p2fB61qMZCFONxRKOjFX+/Xl5dSJv+n47K7lG7/uiwMtZbvxjFmL5cv7ZeXl1MW3rrx2OyXf/PZFRjKYrxenb9Ulb9eETMX+i/FMX4+9PYi1psRbO2W//xYpq++365r//CeR4AAAAAAAAAAAAAAAAAAAAAAAxDKXe+dU6jkKaZ+/eUSulTfe2t+ov7A72asT/QWmd/oP79ffIxlx/t3AEAAAAAAAAAAAAAAAAAAOBFcfDlVzubtVp1/1nBF3/9/MdVOdcMkna/mTmFiHj+Lq4ZTL313w+Dc765yfm5RbDcDqbiUtPvbw597r1B87TftOrP489m3z6YeadzJN+bE/mhjTl3xUXJZ03nYXHArdW+Ieu3H88vnWv66Mrk7zbu6g4f6z8y8+Py5m9f//vguu+T/bwo3MlTCQAAAAAAAAAAAAAAAAAA7qfuj35HPRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJ3u//8PCJJoBvmIGJxTq+4nkUTEK5HRVB/1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EkAAAD//zZqmhk=")
openat$dir(0xffffffffffffff9c, 0x0, 0x200, 0x100)
io_submit(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000380)=""/52, 0x34)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2m56.328291175s ago: executing program 0 (id=95):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0x70bd31, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800)

2m55.578818356s ago: executing program 0 (id=96):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)=ANY=[], 0x4)

2m55.474283056s ago: executing program 32 (id=96):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)=ANY=[], 0x4)

1m0.623784284s ago: executing program 3 (id=1227):
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
splice(r1, 0x0, r0, 0x0, 0x80000000002, 0x6)

1m0.541940787s ago: executing program 3 (id=1229):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000001c0)=0x800, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10)

1m0.341747757s ago: executing program 3 (id=1231):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0xff4, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x2, 0xfffd, 0xff, 0x0, 0x40000045, [0x0, 0x4]}})

1m0.333682085s ago: executing program 3 (id=1234):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1c0281, 0x81)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1004401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000017c0)='./file0\x00')
creat(&(0x7f0000000000)='./file1\x00', 0x2)

59.534030732s ago: executing program 3 (id=1241):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x4}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

58.606382108s ago: executing program 3 (id=1251):
socket$inet6(0xa, 0x1, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x1db)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1)
write$sndseq(r0, &(0x7f0000000280)=[{0x9, 0xa, 0x9, 0x4, @time={0x1, 0xc}, {0x4, 0x17}, {0x42, 0x7}, @raw32={[0x8, 0x63b, 0xf3]}}, {0xb, 0x6, 0xc4, 0x1, @tick=0x6, {0xc8, 0x4}, {0x43, 0x1}, @quote={{0x0, 0xb}}}, {0xb, 0xf3, 0xe, 0x6, @tick=0x2b4d0, {0x4, 0x2}, {0x4, 0x1d}, @control={0x0, 0x8, 0x6}}, {0x18, 0xff, 0xff, 0xa4, @time={0xc6, 0x80000000}, {0x8, 0x7f}, {0xdf, 0x6}, @raw8={"78aa8024c0ce600c03be34af"}}], 0x70)

58.532568343s ago: executing program 33 (id=1251):
socket$inet6(0xa, 0x1, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x1db)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1)
write$sndseq(r0, &(0x7f0000000280)=[{0x9, 0xa, 0x9, 0x4, @time={0x1, 0xc}, {0x4, 0x17}, {0x42, 0x7}, @raw32={[0x8, 0x63b, 0xf3]}}, {0xb, 0x6, 0xc4, 0x1, @tick=0x6, {0xc8, 0x4}, {0x43, 0x1}, @quote={{0x0, 0xb}}}, {0xb, 0xf3, 0xe, 0x6, @tick=0x2b4d0, {0x4, 0x2}, {0x4, 0x1d}, @control={0x0, 0x8, 0x6}}, {0x18, 0xff, 0xff, 0xa4, @time={0xc6, 0x80000000}, {0x8, 0x7f}, {0xdf, 0x6}, @raw8={"78aa8024c0ce600c03be34af"}}], 0x70)

1.636284964s ago: executing program 2 (id=1976):
modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x10)
r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xdb6e, 0x38c1, 0x2, 0xb6})
io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1)

1.582394154s ago: executing program 2 (id=1977):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@allocspi={0x148, 0x16, 0x1, 0x0, 0x80, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x1, 0xfffffffffffffffe}, {0x0, 0x6, 0x796}, 0x0, 0x3507, 0x0, 0x3, 0x2, 0x2}, 0x0, 0x1a0b1}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, @in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1, 0x0, 0x3507, 0x2, 0x2}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4005}, 0x0)

1.582205959s ago: executing program 2 (id=1978):
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000b80))

1.518037599s ago: executing program 2 (id=1979):
syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES64], 0x0)
syz_open_dev$evdev(&(0x7f0000000280), 0x408000000020, 0x2000)

1.132044186s ago: executing program 4 (id=1981):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x20, 0xa, 0x0, "0506ddff0600000000000000000000ea0000001000", 0x50565559})

1.046780413s ago: executing program 4 (id=1982):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000500)='l', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x7, 0x30, 0x5, 0x5}, &(0x7f00000000c0)=0x18)

919.358729ms ago: executing program 4 (id=1983):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000ec0), 0x22000, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil)

853.376543ms ago: executing program 4 (id=1986):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)

769.974931ms ago: executing program 1 (id=1987):
socketpair(0x2a, 0x802, 0x9, &(0x7f0000000040))

765.23973ms ago: executing program 1 (id=1988):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @remote, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000001)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000300)="bb", 0x1}], 0x1}, 0x24000008)
recvmsg$kcm(r0, &(0x7f0000001940)={0x0, 0xffffffffffffff87, &(0x7f0000001800), 0x1b}, 0x3062)

715.785629ms ago: executing program 4 (id=1989):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0x29, 0xd)
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c706172743d3078303030303030303030303030306630332c6e6c733d6d61637475726b6973682c008866a7758e550da0947fc42499952002356575bac0cb11c22f31b6605838f92fc821ef9ee4df4806500b7738a217e12f5c0000000000000000"], 0x1, 0x5e7, &(0x7f0000000680)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

641.381044ms ago: executing program 4 (id=1990):
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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")
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000000000002", 0x8)
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147441, 0x94)
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg1\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x8401, 0xffffffffffffffff, 0x4fbb, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r1}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x44}, @alu={0xda0130e7bde4d69c, 0x0, 0xb, 0x6, 0x2, 0xffffffffffffffff, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc)
write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'udf\x00', 0x3a, 'udf\x00', 0x3a, './file1'}, 0x2f)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04070620"], 0x7)

641.144244ms ago: executing program 1 (id=1991):
r0 = socket(0x2, 0x2, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004800)
connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)

556.195356ms ago: executing program 1 (id=1992):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000851}, 0x800)

555.939306ms ago: executing program 1 (id=1993):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x4, 0x0, 0xf})

468.481229ms ago: executing program 1 (id=1994):
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r2, &(0x7f0000004280)={0x2020}, 0x2020)

244.281297ms ago: executing program 2 (id=1995):
socket$nl_netfilter(0x10, 0x3, 0xc)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000})
setpriority(0x1, 0x0, 0x80000000)

0s ago: executing program 2 (id=1996):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000300)={[{@user_xattr}, {@discard}, {@errors_remount}, {@quota}, {@mblk_io_submit}, {@mblk_io_submit}, {@nombcache}, {@barrier_val}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {}, {@grpid}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x146)
pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)='5', 0x1}], 0x1, 0x7ffffe, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x4)

kernel console output (not intermixed with test programs):

connect, device number 12
[  128.818281][ T7286] openvswitch: netlink: Actions may not be safe on all matching packets
[  129.532425][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  129.671476][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  129.675171][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  129.682659][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'.
[  129.985810][ T7300] loop3: detected capacity change from 0 to 128
[  129.989855][ T7300] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  129.999068][ T7300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.440702][ T7332] loop3: detected capacity change from 0 to 128
[  130.446991][ T7332] EXT4-fs (loop3): Test dummy encryption mode enabled
[  130.457881][ T7332] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  130.471232][ T7332] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.523270][ T5879] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  130.951922][ T5809] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  131.101417][ T5809] usb 4-1: Using ep0 maxpacket: 8
[  131.104871][ T5809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  131.114579][ T5809] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  131.119755][ T5809] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  131.125649][ T5809] usb 4-1: Product: syz
[  131.130402][ T5809] usb 4-1: Manufacturer: syz
[  131.134874][ T5809] usb 4-1: SerialNumber: syz
[  131.219305][ T7379] ipip0: entered promiscuous mode
[  131.266753][ T7381] loop1: detected capacity change from 0 to 512
[  131.284788][ T7381] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.668: Unrecognised inode hash code 255
[  131.292263][ T7381] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.668: Corrupt directory, running e2fsck is recommended
[  131.306074][ T7381] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  131.308724][ T7381] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.668: corrupted in-inode xattr: e_name out of bounds
[  131.314592][ T7381] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  131.315096][ T7381] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.668: couldn't read orphan inode 15 (err -117)
[  131.321947][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  131.321959][    C0] EXT4-fs (loop1): initial error at time 1782883553: ext4_iget_extra_inode:5180: inode 15
[  131.321973][    C0] EXT4-fs (loop1): last error at time 1782883553: ext4_iget_extra_inode:5180: inode 15
[  131.331750][ T7381] loop1: lost filesystem error report for type 5 error -117
[  131.333512][ T7381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.345431][ T5809] usb 4-1: Handspring Visor / Palm OS: port 128, is for unknown use
[  131.347999][ T5809] usb 4-1: Handspring Visor / Palm OS: port 4, is for Generic use
[  131.349498][   T35] audit: type=1326 audit(1782883553.447:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff903d9ce59 code=0x7ffc0000
[  131.350486][ T5809] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2
[  131.394218][   T35] audit: type=1326 audit(1782883553.467:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff903d9ce59 code=0x7ffc0000
[  131.395148][ T7387] loop2: detected capacity change from 0 to 2048
[  131.413430][ T7387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.426663][   T35] audit: type=1326 audit(1782883553.467:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff903d9ce59 code=0x7ffc0000
[  131.448356][ T7381] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.668: Unrecognised inode hash code 255
[  131.456938][ T7381] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.668: Corrupt directory, running e2fsck is recommended
[  131.463357][   T35] audit: type=1326 audit(1782883553.467:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.668" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff903d9ce59 code=0x7ffc0000
[  131.471836][ T7381] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 4: comm syz.1.668: path /179/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0
[  131.478740][ T7381] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.668: path /179/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0
[  131.483643][   T35] audit: type=1326 audit(1782883553.467:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.668" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff903d9cbc2 code=0x7ffc0000
[  131.504280][   T35] audit: type=1326 audit(1782883553.477:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.668" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff903d5d68e code=0x7ffc0000
[  131.513507][   T35] audit: type=1326 audit(1782883553.497:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.668" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff903d9cc87 code=0x7ffc0000
[  131.523660][   T35] audit: type=1326 audit(1782883553.507:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.668" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff903d5d68e code=0x7ffc0000
[  131.533332][   T35] audit: type=1326 audit(1782883553.507:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.668" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff903d5d68e code=0x7ffc0000
[  131.546863][ T5809] usb 4-1: palm_os_3_probe - error -71 getting bytes available request
[  131.551402][   T35] audit: type=1326 audit(1782883553.517:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7380 comm="syz.1.668" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff903d9ce59 code=0x7ffc0000
[  131.552216][ T5809] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  131.572142][ T5809] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  131.577415][ T5809] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  131.584158][ T5809] usb 4-1: USB disconnect, device number 8
[  131.606565][ T5809] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  131.706399][ T5704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.708768][ T5809] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  131.717423][ T5809] visor 4-1:1.0: device disconnected
[  131.902911][ T7394] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  132.119766][ T7403] loop1: detected capacity change from 0 to 1024
[  132.149020][ T7403] hfsplus: failed to load catalog file
[  132.393808][ T7415] loop1: detected capacity change from 0 to 1024
[  132.527124][ T7415] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  132.775864][ T7421] loop2: detected capacity change from 0 to 8192
[  132.796388][ T7421] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  132.842033][ T7419] loop3: detected capacity change from 0 to 32768
[  133.222880][ T7419] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  133.253592][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'.
[  133.365227][ T7419] (syz.3.682,7419,0):ocfs2_rename:1287 ERROR: status = -2
[  133.370653][ T7419] (syz.3.682,7419,0):ocfs2_rename:1700 ERROR: status = -2
[  133.419755][ T7419] syz.3.682 (7419) used greatest stack depth: 18976 bytes left
[  133.462938][ T5879] ocfs2: Unmounting device (7,3) on (node local)
[  133.641628][ T7440] loop2: detected capacity change from 0 to 4096
[  133.699025][ T7444] loop3: detected capacity change from 0 to 8
[  133.719123][ T7444] SQUASHFS error: zlib decompression failed, data probably corrupt
[  133.724039][ T7444] SQUASHFS error: Failed to read block 0x9b: -5
[  133.729313][ T7444] SQUASHFS error: Unable to read metadata cache entry [99]
[  133.736905][ T7444] SQUASHFS error: Unable to read inode 0x127
[  136.231829][ T7489] netlink: 766 bytes leftover after parsing attributes in process `syz.2.705'.
[  136.885862][ T7496] loop1: detected capacity change from 0 to 512
[  136.909786][ T7496] EXT4-fs (loop1): Test dummy encryption mode enabled
[  136.988199][ T7496] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.708: inode has both inline data and extents flags
[  137.008449][ T7496] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  137.011352][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  137.016223][    C1] EXT4-fs (loop1): initial error at time 1782883559: ext4_orphan_get:1399: inode 15
[  137.019223][    C1] EXT4-fs (loop1): last error at time 1782883559: ext4_orphan_get:1399: inode 15
[  137.027691][ T7496] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.708: couldn't read orphan inode 15 (err -117)
[  137.039209][ T7496] loop1: lost filesystem error report for type 5 error -117
[  137.056508][ T7496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.167447][ T5704] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.676994][ T7504] loop2: detected capacity change from 0 to 512
[  137.686063][ T7504] EXT4-fs: Ignoring removed orlov option
[  137.690193][ T7504] EXT4-fs: Ignoring removed mblk_io_submit option
[  137.699789][ T7504] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.711: corrupted in-inode xattr: e_value size too large
[  137.712176][ T7504] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  137.713715][ T7504] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.711: couldn't read orphan inode 15 (err -117)
[  137.722419][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  137.722449][    C1] EXT4-fs (loop2): initial error at time 1782883559: ext4_iget_extra_inode:5180: inode 15
[  137.722472][    C1] EXT4-fs (loop2): last error at time 1782883559: ext4_iget_extra_inode:5180: inode 15
[  137.741599][ T7504] loop2: lost filesystem error report for type 5 error -117
[  137.743331][ T7504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.821883][ T5705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.875776][ T7502] loop1: detected capacity change from 0 to 32768
[  137.887646][ T7502] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.710 (7502)
[  137.920781][ T7513] syz_tun: entered allmulticast mode
[  137.949337][ T7502] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  137.963441][ T7502] BTRFS info (device loop1): using xxhash64 checksum algorithm
[  137.999936][ T7513] syz_tun (unregistering): left allmulticast mode
[  138.056441][ T7502] BTRFS info (device loop1): enabling ssd optimizations
[  138.064063][ T7502] BTRFS info (device loop1): turning on async discard
[  138.069793][ T7502] BTRFS info (device loop1): enabling free space tree
[  138.120219][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  138.122824][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  138.205105][ T5704] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  138.478754][ T5809] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  138.540119][ T5809] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  138.605315][ T7546] loop3: detected capacity change from 0 to 4096
[  138.625971][ T7546] EXT4-fs: Ignoring removed orlov option
[  138.632413][ T7546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  138.641492][ T7546] EXT4-fs (loop3): Test dummy encryption mode enabled
[  138.651244][ T7546] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.673743][ T7546] hid-generic 0000:0000:0000.0005: pid 7546 passed too large report
[  138.730064][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.748201][ T7544] loop2: detected capacity change from 0 to 32768
[  138.773177][ T5757] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  138.820792][ T7544] JBD2: journal file too short
[  138.833635][ T7544] (syz.2.723,7544,0):ocfs2_journal_init:972 ERROR: Linux journal layer error
[  138.844648][ T7544] (syz.2.723,7544,0):ocfs2_check_volume:2344 ERROR: Could not initialize journal!
[  138.854641][ T7544] (syz.2.723,7544,0):ocfs2_check_volume:2429 ERROR: status = -22
[  138.860481][ T7544] (syz.2.723,7544,0):ocfs2_mount_volume:1763 ERROR: status = -22
[  138.873202][ T7544] (syz.2.723,7544,0):ocfs2_fill_super:1177 ERROR: status = -22
[  138.909121][ T7552] input: syz1 as /devices/virtual/input/input11
[  138.913300][ T7552] input: failed to attach handler leds to device input11, error: -6
[  138.936742][ T5757] usb 2-1: Using ep0 maxpacket: 8
[  138.942513][ T5757] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.951150][ T5757] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  138.958863][ T5757] usb 2-1: config 0 interface 0 has no altsetting 0
[  138.969524][ T5757] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00
[  138.979333][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.004003][ T5757] usb 2-1: config 0 descriptor??
[  139.097342][ T7554] loop3: detected capacity change from 0 to 512
[  139.116439][ T7554] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  139.121016][ T7554] System zones: 0-2, 18-18, 34-35
[  139.128430][ T7554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.132851][ T7554] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.167741][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.458566][ T7569] loop2: detected capacity change from 0 to 512
[  139.480786][ T7569] EXT4-fs: Ignoring removed oldalloc option
[  139.510619][ T7569] EXT4-fs: journaled quota format not specified
[  139.603135][ T5757] wacom 0003:056A:0315.0006: unknown main item tag 0x0
[  139.687953][ T7571] loop2: detected capacity change from 0 to 8192
[  139.767838][ T7572] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.966162][ T7574] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  139.970036][ T7574] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  139.985716][ T7574] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  139.994855][ T7574] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  139.997523][ T7574] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  140.007334][ T7574] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  140.083492][ T5757] wacom 0003:056A:0315.0006: unknown main item tag 0x0
[  140.086478][ T5757] wacom 0003:056A:0315.0006: unknown main item tag 0x0
[  140.089259][ T5757] wacom 0003:056A:0315.0006: unknown main item tag 0x0
[  140.092457][ T5757] wacom 0003:056A:0315.0006: unknown main item tag 0x0
[  140.098684][ T5757] wacom 0003:056A:0315.0006: unknown main item tag 0x0
[  140.102856][ T5757] wacom 0003:056A:0315.0006: unknown main item tag 0x0
[  140.111239][ T5757] usb 2-1: USB disconnect, device number 9
[  140.355835][ T7597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.744'.
[  140.477466][ T7607] loop3: detected capacity change from 0 to 4096
[  140.521244][ T7607] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  140.549081][ T7607] ntfs3(loop3): Failed to load $Extend (-22).
[  140.551131][ T7607] ntfs3(loop3): Failed to initialize $Extend.
[  140.758975][ T5709] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  140.805589][ T7619] loop2: detected capacity change from 0 to 32768
[  140.861889][ T7619] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  140.911667][ T7619] XFS (loop2): Ending clean mount
[  141.044686][   T26] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  141.085615][ T5705] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.550677][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.767'.
[  141.646288][ T7653] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.763 (7653)
[  141.661185][ T7653] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.664857][ T7653] BTRFS info (device loop2): using sha256 checksum algorithm
[  141.691829][ T7653] BTRFS info (device loop2): enabling ssd optimizations
[  141.694150][ T7653] BTRFS info (device loop2): turning on sync discard
[  141.696490][ T7653] BTRFS info (device loop2): enabling free space tree
[  141.698918][ T7653] BTRFS info (device loop2): use zlib compression, level 3
[  141.800092][ T5705] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.831729][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  141.953323][   T35] kauditd_printk_skb: 53 callbacks suppressed
[  141.953366][   T35] audit: type=1326 audit(1782883564.047:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  141.991997][   T35] audit: type=1326 audit(1782883564.067:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  142.012443][   T10] usb 2-1: Using ep0 maxpacket: 8
[  142.016194][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  142.018618][   T35] audit: type=1326 audit(1782883564.067:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  142.018768][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  142.034976][ T5709] Bluetooth: hci0: command 0x0c1a tx timeout
[  142.043222][ T5709] Bluetooth: hci1: command 0x0c1a tx timeout
[  142.056004][   T35] audit: type=1326 audit(1782883564.077:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  142.074541][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  142.080130][   T35] audit: type=1326 audit(1782883564.077:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.769" exe="/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  142.087794][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  142.093286][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  142.102316][   T35] audit: type=1326 audit(1782883564.077:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  142.113562][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  142.124932][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  142.129150][   T35] audit: type=1326 audit(1782883564.077:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  142.146007][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  142.156992][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  142.158939][   T35] audit: type=1326 audit(1782883564.077:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.769" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  142.171657][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  142.178278][   T10] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  142.185138][   T35] audit: type=1326 audit(1782883564.077:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.2.769" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  142.191275][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  142.211450][   T10] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  142.216139][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  142.222027][   T10] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  142.236703][   T10] usb 2-1: string descriptor 0 read error: -22
[  142.240985][   T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  142.248000][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.269764][   T10] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  142.300478][ T7690] set_capacity_and_notify: 2 callbacks suppressed
[  142.300494][ T7690] loop2: detected capacity change from 0 to 256
[  142.312096][ T7690] exfat: Deprecated parameter 'utf8'
[  142.343677][ T7690] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  142.483979][   T10] usb 2-1: USB disconnect, device number 10
[  143.024054][ T7710] loop2: detected capacity change from 0 to 256
[  143.192627][ T7716] Bluetooth: MGMT ver 1.23
[  143.341964][ T5911] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  143.503525][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.512173][ T5911] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  143.527724][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.536745][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  143.549494][ T5911] usb 2-1: SerialNumber: syz
[  143.576753][ T5911] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  143.784148][ T5764] usb 2-1: USB disconnect, device number 11
[  143.848347][ T7733] loop3: detected capacity change from 0 to 40427
[  143.856005][ T7733] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  143.859254][ T7733] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  143.925598][ T7733] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.939927][ T7733] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  143.943499][ T7733] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  144.020014][ T5879] syz-executor: attempt to access beyond end of device
[  144.020014][ T5879] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  144.032947][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  144.032962][ T5879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.032968][ T5879] Call Trace:
[  144.032972][ T5879]  <TASK>
[  144.032976][ T5879]  dump_stack_lvl+0xe8/0x150
[  144.032990][ T5879]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  144.033001][ T5879]  f2fs_write_end_io+0x124b/0x1710
[  144.033019][ T5879]  __submit_merged_bio+0x258/0x6a0
[  144.033029][ T5879]  ? rcu_is_watching+0x15/0xb0
[  144.033045][ T5879]  f2fs_submit_merged_write+0x27d/0x380
[  144.033056][ T5879]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  144.033069][ T5879]  f2fs_sync_node_pages+0x1055/0x1210
[  144.033085][ T5879]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  144.033109][ T5879]  f2fs_write_checkpoint+0xf91/0x2710
[  144.033118][ T5879]  ? __lock_acquire+0x683/0x2cf0
[  144.033138][ T5879]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  144.033167][ T5879]  kill_f2fs_super+0x2f6/0x700
[  144.033179][ T5879]  ? __pfx_kill_f2fs_super+0x10/0x10
[  144.033192][ T5879]  ? call_rcu+0x64b/0x8b0
[  144.033200][ T5879]  ? lockdep_hardirqs_on+0x7a/0x110
[  144.033215][ T5879]  deactivate_locked_super+0xbc/0x130
[  144.033226][ T5879]  cleanup_mnt+0x3d3/0x460
[  144.033237][ T5879]  task_work_run+0x1d9/0x270
[  144.033247][ T5879]  ? __pfx_task_work_run+0x10/0x10
[  144.033259][ T5879]  exit_to_user_mode_loop+0x1fa/0x730
[  144.033267][ T5879]  ? rcu_is_watching+0x15/0xb0
[  144.033276][ T5879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.033283][ T5879]  do_syscall_64+0x353/0x580
[  144.033293][ T5879]  ? trace_irq_disable+0x3b/0x140
[  144.033302][ T5879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.033310][ T5879] RIP: 0033:0x7f3f8779e097
[  144.033367][ T5879] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  144.033373][ T5879] RSP: 002b:00007ffe29ac8258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  144.033383][ T5879] RAX: 0000000000000000 RBX: 00007f3f878322ca RCX: 00007f3f8779e097
[  144.033388][ T5879] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe29ac8310
[  144.033394][ T5879] RBP: 00007ffe29ac8310 R08: 00007ffe29ac9310 R09: 00000000ffffffff
[  144.033399][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe29ac93a0
[  144.033404][ T5879] R13: 00007f3f878322ca R14: 00000000000231fa R15: 00007ffe29ac93e0
[  144.033415][ T5879]  </TASK>
[  144.034660][ T5879] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  144.131159][ T5707] Bluetooth: hci1: command 0x0c1a tx timeout
[  144.133839][ T5707] Bluetooth: hci0: command 0x0c1a tx timeout
[  144.172865][ T7739] loop2: detected capacity change from 0 to 256
[  144.192486][ T7739] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  144.370917][ T7746] loop1: detected capacity change from 0 to 256
[  144.376947][ T7744] loop3: detected capacity change from 0 to 2048
[  144.386041][ T7744] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  144.433191][ T7749] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.453514][ T7748] capability: warning: `syz.2.801' uses 32-bit capabilities (legacy support in use)
[  144.478844][ T7751] netlink: 120 bytes leftover after parsing attributes in process `syz.2.803'.
[  144.483815][ T7751] netlink: 120 bytes leftover after parsing attributes in process `syz.2.803'.
[  144.685857][ T7763] loop2: detected capacity change from 0 to 256
[  144.696246][ T7763] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  144.939094][ T5757] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  145.134927][ T5757] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  145.140989][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.150949][ T5757] usb 4-1: Product: syz
[  145.154190][ T5757] usb 4-1: Manufacturer: syz
[  145.156216][ T5757] usb 4-1: SerialNumber: syz
[  145.204297][ T7775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.812'.
[  145.395167][ T5757] gspca_main: pac207-2.14.0 probing 093a:2476
[  145.398988][ T5757] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  145.403491][ T5757] uvcvideo 4-1:13.0: Found UVC 0.00 device syz (093a:2476)
[  145.406609][ T5757] uvcvideo 4-1:13.0: No valid video chain found.
[  145.413717][ T5757] usb 4-1: USB disconnect, device number 9
[  145.609625][ T5764] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  145.700441][ T7789] netdevsim netdevsim1 : renamed from netdevsim0
[  145.745035][ T7791] loop1: detected capacity change from 0 to 4096
[  145.770137][ T7791] ntfs3(loop1): Failed to load $Extend (-22).
[  145.772662][ T7791] ntfs3(loop1): Failed to initialize $Extend.
[  145.783234][ T5764] usb 3-1: Using ep0 maxpacket: 8
[  145.789332][ T5764] usb 3-1: config 0 has an invalid interface number: 131 but max is 0
[  145.793261][ T5764] usb 3-1: config 0 has no interface number 0
[  145.798065][ T5764] usb 3-1: config 0 interface 131 has no altsetting 0
[  145.806905][ T5764] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= a.10
[  145.808009][ T1113] ntfs3(loop1): ino=5, mi_enum_attr
[  145.811614][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.811633][ T5764] usb 3-1: Product: syz
[  145.811643][ T5764] usb 3-1: Manufacturer: syz
[  145.811654][ T5764] usb 3-1: SerialNumber: syz
[  145.831674][ T5764] usb 3-1: config 0 descriptor??
[  146.059961][ T5764] ims_pcu 3-1:0.131: Missing CDC union descriptor
[  146.068804][ T5764] ims_pcu 3-1:0.131: probe with driver ims_pcu failed with error -22
[  146.089904][ T5764] usb 3-1: USB disconnect, device number 13
[  146.225171][ T7815] loop1: detected capacity change from 0 to 512
[  146.253022][ T7807] loop3: detected capacity change from 0 to 32768
[  146.255998][ T7815] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  146.274973][ T7815] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  146.288030][ T7807] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.296239][ T5707] Bluetooth: hci1: command 0x0c1a tx timeout
[  146.298658][ T5709] Bluetooth: hci0: command 0x0c1a tx timeout
[  146.321390][ T7807] XFS (loop3): Ending clean mount
[  146.334791][ T7807] XFS (loop3): Quotacheck needed: Please wait.
[  146.385259][ T7807] XFS (loop3): Quotacheck: Done.
[  146.463037][ T5879] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.465255][   T35] audit: type=1326 audit(1782883568.442:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.834" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff903d9ce59 code=0x0
[  147.414914][ T7840] syzkaller0: entered promiscuous mode
[  147.417466][ T7840] syzkaller0: entered allmulticast mode
[  147.663824][ T7846] dns_resolver: Unsupported server list version (0)
[  147.834692][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'.
[  147.885557][ T7855] loop2: detected capacity change from 0 to 1024
[  147.889489][ T7855] EXT4-fs: quotafile must be on filesystem root
[  147.906052][ T7855] loop2: detected capacity change from 0 to 512
[  147.909408][ T7855] EXT4-fs: Ignoring removed nobh option
[  147.920580][ T7855] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  147.924325][ T7855] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  147.928016][ T7855] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.845: inode has both inline data and extents flags
[  147.933835][ T7855] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  147.934364][ T7855] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.845: couldn't read orphan inode 13 (err -117)
[  147.943124][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  147.943146][    C1] EXT4-fs (loop2): initial error at time 1782883569: ext4_orphan_get:1399: inode 13
[  147.943169][    C1] EXT4-fs (loop2): last error at time 1782883569: ext4_orphan_get:1399: inode 13
[  147.955018][ T7855] loop2: lost filesystem error report for type 5 error -117
[  147.956995][ T7855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.196521][ T7869] loop3: detected capacity change from 0 to 8
[  149.231487][ T7869] Filesystem uses "lzma" compression. This is not supported
[  149.460915][ T7871] nbd1: detected capacity change from 0 to 63
[  149.475516][ T7874] block nbd1: NBD_DISCONNECT
[  149.487714][ T7874] block nbd1: Disconnected due to user request.
[  149.499695][ T7874] block nbd1: shutting down sockets
[  149.603166][ T7873] loop3: detected capacity change from 0 to 40427
[  149.609701][ T7873] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  149.612807][ T7873] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  149.620658][ T7873] F2FS-fs (loop3): invalid crc value
[  149.644823][  T136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  149.651391][  T136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  149.657224][  T136] Buffer I/O error on dev nbd1, logical block 1, async page read
[  149.660116][  T136] Buffer I/O error on dev nbd1, logical block 2, async page read
[  149.663173][  T136] Buffer I/O error on dev nbd1, logical block 3, async page read
[  149.664878][ T7873] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  149.670059][  T136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.673530][  T136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  149.680273][  T136] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  149.684052][  T136] Buffer I/O error on dev nbd1, logical block 1, async page read
[  149.684454][ T7873] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  149.686946][  T136] Buffer I/O error on dev nbd1, logical block 2, async page read
[  149.688991][ T7873] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  149.691649][  T136] Buffer I/O error on dev nbd1, logical block 3, async page read
[  149.714012][  T136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  149.718543][   T35] audit: type=1800 audit(1782883571.482:100): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.851" name="file1" dev="loop3" ino=10 res=0 errno=0
[  149.726661][  T136] Buffer I/O error on dev nbd1, logical block 0, async page read
[  149.729787][  T136] Buffer I/O error on dev nbd1, logical block 1, async page read
[  149.733075][  T136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.737245][  T136] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.741009][  T136] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.744246][  T136] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.747405][  T136] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.751628][  T136] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  149.756998][ T5688] ldm_validate_partition_table(): Disk read failed.
[  149.764873][ T5688] Dev nbd1: unable to read RDB block 0
[  149.773614][ T5688]  nbd1: unable to read partition table
[  150.108086][ T5705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.336218][ T5688] ldm_validate_partition_table(): Disk read failed.
[  150.343400][ T5879] syz-executor: attempt to access beyond end of device
[  150.343400][ T5879] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  150.349432][ T5879] CPU: 0 UID: 0 PID: 5879 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  150.349446][ T5879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.349452][ T5879] Call Trace:
[  150.349457][ T5879]  <TASK>
[  150.349461][ T5879]  dump_stack_lvl+0xe8/0x150
[  150.349477][ T5879]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  150.349490][ T5879]  f2fs_write_end_io+0x124b/0x1710
[  150.349518][ T5879]  __submit_merged_bio+0x258/0x6a0
[  150.349530][ T5879]  ? rcu_is_watching+0x15/0xb0
[  150.349547][ T5879]  f2fs_submit_merged_write+0x27d/0x380
[  150.349566][ T5879]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  150.349589][ T5879]  f2fs_sync_node_pages+0x1055/0x1210
[  150.349638][ T5879]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  150.349685][ T5879]  f2fs_write_checkpoint+0xf91/0x2710
[  150.349701][ T5879]  ? __lock_acquire+0x683/0x2cf0
[  150.349737][ T5879]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  150.349792][ T5879]  kill_f2fs_super+0x2f6/0x700
[  150.349813][ T5879]  ? __pfx_kill_f2fs_super+0x10/0x10
[  150.349834][ T5879]  ? call_rcu+0x64b/0x8b0
[  150.349848][ T5879]  ? lockdep_hardirqs_on+0x7a/0x110
[  150.349877][ T5879]  deactivate_locked_super+0xbc/0x130
[  150.349894][ T5879]  cleanup_mnt+0x3d3/0x460
[  150.349915][ T5879]  task_work_run+0x1d9/0x270
[  150.349932][ T5879]  ? __pfx_task_work_run+0x10/0x10
[  150.349953][ T5879]  exit_to_user_mode_loop+0x1fa/0x730
[  150.349966][ T5879]  ? rcu_is_watching+0x15/0xb0
[  150.349981][ T5879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.349994][ T5879]  do_syscall_64+0x353/0x580
[  150.350009][ T5879]  ? trace_irq_disable+0x3b/0x140
[  150.350033][ T5879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.350046][ T5879] RIP: 0033:0x7f3f8779e097
[  150.350060][ T5879] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  150.350071][ T5879] RSP: 002b:00007ffe29ac8258 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  150.350086][ T5879] RAX: 0000000000000000 RBX: 00007f3f878322ca RCX: 00007f3f8779e097
[  150.350094][ T5879] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe29ac8310
[  150.350102][ T5879] RBP: 00007ffe29ac8310 R08: 00007ffe29ac9310 R09: 00000000ffffffff
[  150.350110][ T5879] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe29ac93a0
[  150.350117][ T5879] R13: 00007f3f878322ca R14: 000000000002493a R15: 00007ffe29ac93e0
[  150.350136][ T5879]  </TASK>
[  150.352821][ T5879] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  150.378170][ T5688] Dev nbd1: unable to read RDB block 0
[  150.479492][ T7885] loop1: detected capacity change from 0 to 256
[  150.494331][ T7885] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  150.526838][ T5688]  nbd1: unable to read partition table
[  152.719419][ T7940] random: crng reseeded on system resumption
[  152.995434][ T7948] loop3: detected capacity change from 0 to 512
[  153.066638][ T7948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.072398][ T7948] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.198789][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.860523][ T7959] loop1: detected capacity change from 0 to 512
[  153.863283][ T7959] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  153.895463][ T7959] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.879: corrupted in-inode xattr: bad e_name length
[  153.901480][ T7959] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  153.902715][ T7959] EXT4-fs (loop1): get orphan inode failed
[  153.908232][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  153.908248][    C0] EXT4-fs (loop1): initial error at time 1782883575: ext4_iget_extra_inode:5180: inode 15
[  153.908268][    C0] EXT4-fs (loop1): last error at time 1782883575: ext4_iget_extra_inode:5180: inode 15
[  153.922681][ T7959] EXT4-fs (loop1): mount failed
[  154.263286][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  154.422755][   T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  154.428872][   T10] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  154.446163][   T10] usb 2-1: config 2 interface 0 has no altsetting 0
[  154.459984][   T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  154.464575][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.469747][   T10] usb 2-1: Product: syz
[  154.471574][   T10] usb 2-1: Manufacturer: syz
[  154.473899][   T10] usb 2-1: SerialNumber: syz
[  154.489315][ T7968] loop2: detected capacity change from 0 to 8192
[  154.489486][ T7966] netlink: 'syz.3.882': attribute type 10 has an invalid length.
[  154.499241][ T7966] syz_tun: entered promiscuous mode
[  154.512676][ T7966] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  154.533020][ T7968]  loop2: AHDI p2 p3 p4
[  154.540473][ T7968] loop2: p3 start 167772160 is beyond EOD, truncated
[  154.666376][ T7977] loop3: detected capacity change from 0 to 1024
[  154.716953][ T7977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.774756][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  154.808608][   T10] ims_pcu 2-1:2.0: Missing CDC union descriptor
[  154.820743][   T10] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22
[  154.837627][   T10] usb 2-1: USB disconnect, device number 12
[  155.039831][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.418020][ T7998] loop3: detected capacity change from 0 to 32768
[  156.574727][ T7998] JBD2: Ignoring recovery information on journal
[  156.686482][ T7998] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  156.755501][   T35] audit: type=1804 audit(1782883578.077:101): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.896" name="/newroot/248/file0" dev="fuse" ino=1 res=1 errno=0
[  156.821929][ T5879] ocfs2: Unmounting device (7,3) on (node local)
[  156.997520][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  157.157893][   T10] usb 3-1: Using ep0 maxpacket: 32
[  157.162250][   T10] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  157.167472][   T10] usb 3-1: config 0 has no interface number 0
[  157.178722][   T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  157.185726][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.191587][   T10] usb 3-1: Product: syz
[  157.196157][   T10] usb 3-1: Manufacturer: syz
[  157.198142][   T10] usb 3-1: SerialNumber: syz
[  157.221994][   T10] usb 3-1: config 0 descriptor??
[  157.230431][   T10] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  157.482991][   T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  157.529106][   T10] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  157.887820][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  157.888419][ T5911] usb 3-1: USB disconnect, device number 14
[  157.971288][ T5911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  157.997633][ T5911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  158.013941][ T5911] quatech2 3-1:0.51: device disconnected
[  158.567142][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'.
[  158.775947][ T8051] loop2: detected capacity change from 0 to 32768
[  159.134725][ T8059] netlink: 120 bytes leftover after parsing attributes in process `syz.2.918'.
[  159.547543][ T8065] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  159.669866][ T8067] loop3: detected capacity change from 0 to 256
[  159.748987][ T8069] loop3: detected capacity change from 0 to 128
[  159.776491][ T8069] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  159.783096][ T8069] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  159.804125][ T8069] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[  159.815752][ T8069] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w.
[  159.850726][ T5879] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.205016][ T5911] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  160.380151][ T5911] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  160.390086][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.396006][ T5911] usb 4-1: Product: syz
[  160.399631][ T5911] usb 4-1: Manufacturer: syz
[  160.401697][ T5911] usb 4-1: SerialNumber: syz
[  160.410575][ T5911] usb 4-1: config 0 descriptor??
[  160.639616][ T5911] usb 4-1: ignoring: probably an ADSL modem
[  160.724089][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'.
[  161.069041][ T5911] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  161.127746][ T8097] loop2: detected capacity change from 0 to 128
[  161.157259][ T8097] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  161.164476][ T8097] hpfs: filesystem error: improperly stopped
[  161.172277][ T8097] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  161.175636][ T8097] hpfs: You really don't want any checks? You are crazy...
[  161.181508][ T8097] hpfs: Code page index out of array
[  161.183819][ T8097] hpfs: code page support is disabled
[  161.187536][ T8097] hpfs: hpfs_map_4sectors(): unaligned read
[  161.191496][ T8097] hpfs: hpfs_map_4sectors(): unaligned read
[  161.194180][ T8097] hpfs: filesystem error: unable to find root dir
[  161.294004][ T5911] usb 4-1: USB disconnect, device number 10
[  161.619413][ T8112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.939'.
[  161.623621][ T8112] netlink: 28 bytes leftover after parsing attributes in process `syz.1.939'.
[  161.925842][ T5809] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  162.086277][ T5809] usb 2-1: Using ep0 maxpacket: 16
[  162.090273][ T5809] usb 2-1: config 16 has an invalid interface number: 75 but max is 0
[  162.095440][ T5809] usb 2-1: config 16 has no interface number 0
[  162.099089][ T5809] usb 2-1: config 16 interface 75 has no altsetting 0
[  162.103133][ T5809] usb 2-1: New USB device found, idVendor=2833, idProduct=0211, bcdDevice=1b.63
[  162.106149][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.110926][ T5809] usb 2-1: Product: syz
[  162.113634][ T5809] usb 2-1: Manufacturer: syz
[  162.115322][ T5809] usb 2-1: SerialNumber: syz
[  162.356224][ T5809] uvcvideo 2-1:16.75: probe with driver uvcvideo failed with error -22
[  162.361738][ T5809] usb 2-1: USB disconnect, device number 13
[  162.792477][ T5911] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  162.953680][ T5911] usb 3-1: Using ep0 maxpacket: 8
[  162.968432][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.981231][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x66, changing to 0x6
[  162.992532][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 255, changing to 11
[  163.007343][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59391, setting to 1024
[  163.018026][ T5911] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  163.026285][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.038045][ T5911] usb 3-1: Product: syz
[  163.039990][ T5911] usb 3-1: Manufacturer: syz
[  163.041884][ T5911] usb 3-1: SerialNumber: syz
[  163.051833][ T5911] usb 3-1: config 0 descriptor??
[  163.062947][ T8129] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  163.303191][ T5911] usb 3-1: USB disconnect, device number 15
[  164.227028][ T8150] process 'syz.1.952' launched './file0' with NULL argv: empty string added
[  164.280285][ T8153] loop2: detected capacity change from 0 to 256
[  164.288185][ T8153] exfat: Deprecated parameter 'utf8'
[  164.328919][ T8153] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  164.635251][ T8157] syz.1.955 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  165.574736][ T8172] loop3: detected capacity change from 0 to 256
[  165.579855][ T8172] exfat: Deprecated parameter 'utf8'
[  165.595255][ T8172] exfat: Deprecated parameter 'namecase'
[  165.602221][ T8172] exfat: Deprecated parameter 'namecase'
[  165.626682][ T8172] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  166.032954][ T8185] overlay: Unknown parameter '\/binderfs/binder0'
[  166.086852][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.968'.
[  166.113444][ T8187] bond0: (slave syz_tun): Releasing backup interface
[  166.285434][ T8196] netlink: 388 bytes leftover after parsing attributes in process `syz.3.972'.
[  166.347364][ T8198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.974'.
[  166.573678][   T35] audit: type=1326 audit(1782883587.253:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8199 comm="syz.2.973" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f496ed9ce59 code=0x0
[  166.834865][ T8217] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  167.598307][ T8230] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  167.598307][ T8230] Please contact the netfilter-devel mailing list or update your nftables rules.
[  167.637852][ T8232] loop1: detected capacity change from 0 to 256
[  167.866892][ T8242] netlink: 'syz.1.991': attribute type 9 has an invalid length.
[  167.875694][ T8242] netlink: 'syz.1.991': attribute type 1 has an invalid length.
[  167.882531][ T8242] netlink: 'syz.1.991': attribute type 8 has an invalid length.
[  167.907704][ T8244] openvswitch: netlink: Actions may not be safe on all matching packets
[  168.059773][ T8250] bridge_slave_0: left allmulticast mode
[  168.064861][ T8250] bridge_slave_0: left promiscuous mode
[  168.067333][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.072583][ T8250] bridge_slave_1: left allmulticast mode
[  168.074668][ T8250] bridge_slave_1: left promiscuous mode
[  168.076656][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.081072][ T8250] bond0: (slave bond_slave_0): Releasing backup interface
[  168.086092][ T8250] bond0: (slave bond_slave_1): Releasing backup interface
[  168.090381][ T8250] team0: Port device team_slave_0 removed
[  168.093201][ T8250] team0: Port device team_slave_1 removed
[  168.096407][ T8250] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.101619][ T8250] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.107253][ T8250] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  168.191532][ T8254] netlink: 'syz.1.997': attribute type 11 has an invalid length.
[  168.288522][ T8261] loop3: detected capacity change from 0 to 1024
[  168.320230][ T8261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  168.325172][ T8261] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.630743][ T8277] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1000: bg 0: block 112: padding at end of block bitmap is not set
[  168.647349][ T8277] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28
[  168.652841][ T8277] EXT4-fs (loop3): This should not happen!! Data will be lost
[  168.652841][ T8277] 
[  168.656692][ T8277] EXT4-fs (loop3): Total free blocks count 0
[  168.659259][ T8277] EXT4-fs (loop3): Free/Dirty block details
[  168.662181][ T8277] EXT4-fs (loop3): free_blocks=0
[  168.664603][ T8277] EXT4-fs (loop3): dirty_blocks=64
[  168.666737][ T8277] EXT4-fs (loop3): Block reservation details
[  168.669206][ T8277] EXT4-fs (loop3): i_reserved_data_blocks=4
[  168.788921][ T8276] loop2: detected capacity change from 0 to 4096
[  168.798869][ T8276] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  168.815309][ T8276] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  168.824104][ T8276] ntfs3(loop2): ino=1a, mi_enum_attr
[  169.279912][ T5879] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  169.293683][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  170.117355][ T8286] loop2: detected capacity change from 0 to 32768
[  170.197581][   T35] audit: type=1800 audit(1782883590.649:103): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1010" name="file1" dev="loop2" ino=4 res=0 errno=0
[  170.216925][ T8286] find_entry called with index >= next_index
[  170.223224][ T8286] find_entry called with index >= next_index
[  170.226740][ T8286] find_entry called with index >= next_index
[  170.231124][ T8286] find_entry called with index >= next_index
[  170.235389][ T8286] find_entry called with index >= next_index
[  170.237507][ T8286] add_index: next_index = 0.  Resetting!
[  170.247065][ T8286] find_entry called with index >= next_index
[  170.254511][ T8286] find_entry called with index >= next_index
[  170.256926][ T8286] find_entry called with index >= next_index
[  170.307689][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1015'.
[  170.487070][ T8302] loop1: detected capacity change from 0 to 256
[  170.504132][ T8302] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x59c3bfd0, utbl_chksum : 0xe619d30d)
[  171.971306][   T34] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  172.145108][   T34] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  172.162521][   T34] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  172.171510][   T34] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  172.176751][   T34] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  172.189540][   T34] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  172.194061][   T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.197564][   T34] usb 4-1: Product: syz
[  172.203192][   T34] usb 4-1: Manufacturer: syz
[  172.205968][   T34] usb 4-1: SerialNumber: syz
[  172.219937][ T8333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  172.392646][ T8345] Invalid source name
[  172.394199][ T8345] UBIFS error (pid: 8345): cannot open "ubifs", error -22
[  172.455419][ T8333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  172.999962][ T8359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1038'.
[  173.118058][ T8333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  173.338786][   T34] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  173.344060][   T34] cdc_ncm 4-1:1.0: dwNtbInMaxSize=15 is too small. Using 2048
[  173.350268][   T34] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  173.639197][ T8376] loop2: detected capacity change from 0 to 512
[  173.648314][   T34] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  173.651470][ T8376] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  173.679231][   T34] usb 4-1: USB disconnect, device number 11
[  173.684831][   T34] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  173.716570][ T8376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.724865][ T8376] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  173.781033][ T5705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.944115][   T33] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  174.464625][ T8406] loop3: detected capacity change from 0 to 2048
[  174.553602][ T8407] No such timeout policy "syz1"
[  174.595832][ T8406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.629879][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.947449][ T5757] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  175.109216][ T5757] usb 4-1: config 0 has no interfaces?
[  175.111234][ T5757] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  175.114197][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.120043][ T5757] usb 4-1: config 0 descriptor??
[  175.400511][ T5809] usb 4-1: USB disconnect, device number 12
[  175.992536][ T8419] loop3: detected capacity change from 0 to 512
[  176.017142][ T8419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.022583][ T8419] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.035929][ T8419] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes
[  176.054357][ T5879] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.225408][ T8386] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  176.868302][ T8441] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1071'.
[  176.872089][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'.
[  177.399703][ T8470] xt_CONNSECMARK: invalid mode: 0
[  177.619954][   T35] audit: type=1326 audit(1782883597.589:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8479 comm="syz.2.1091" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x0
[  178.892120][   T34] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  179.054590][   T34] usb 3-1: config 0 has an invalid interface number: 4 but max is 0
[  179.063164][   T34] usb 3-1: config 0 has no interface number 0
[  179.065818][   T34] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  179.071196][   T34] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.084568][   T34] usb 3-1: config 0 descriptor??
[  179.090704][   T34] ums-realtek 3-1:0.4: USB Mass Storage device detected
[  179.310769][   T34] usb 3-1: USB disconnect, device number 16
[  179.555123][ T8505] loop3: detected capacity change from 0 to 32768
[  179.559973][ T8505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1098 (8505)
[  179.581704][ T8505] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.586015][ T8505] BTRFS info (device loop3): using crc32c checksum algorithm
[  179.602803][   T35] audit: type=1326 audit(1782883599.442:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8510 comm="syz.1.1099" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff903d9ce59 code=0x0
[  179.645118][ T8505] BTRFS info (device loop3): enabling ssd optimizations
[  179.647891][ T8505] BTRFS info (device loop3): turning on flush-on-commit
[  179.650592][ T8505] BTRFS info (device loop3): enabling free space tree
[  179.653358][ T8505] BTRFS info (device loop3): enabling auto defrag
[  179.655873][ T8505] BTRFS info (device loop3): use lzo compression, level 1
[  179.659456][ T8505] BTRFS info (device loop3): max_inline set to 4096
[  179.776559][ T5879] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.729217][   T35] audit: type=1326 audit(1782883600.499:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.3.1100" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8779ce59 code=0x7fc00000
[  180.955460][ T8543] netlink: 'syz.3.1108': attribute type 12 has an invalid length.
[  180.961220][ T8543] netlink: 'syz.3.1108': attribute type 29 has an invalid length.
[  180.967016][ T8543] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1108'.
[  181.107742][ T8533] syz.2.1103 (8533): drop_caches: 2
[  181.871249][ T8571] loop2: detected capacity change from 0 to 128
[  181.881253][ T8571] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.894567][ T8571] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  181.914595][ T5705] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  181.962816][ T8575] netlink: 'syz.2.1122': attribute type 287 has an invalid length.
[  182.108545][ T8579] netlink: 'syz.2.1124': attribute type 10 has an invalid length.
[  182.111613][ T8579] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1124'.
[  182.123543][ T8579] team0: Port device geneve1 added
[  182.737447][   T35] audit: type=1326 audit(1782883602.379:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8587 comm="syz.1.1128" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff903d9ce59 code=0x0
[  183.339641][   T34] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  183.502400][   T34] usb 4-1: Using ep0 maxpacket: 32
[  183.509175][   T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.515133][   T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.522092][   T34] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  183.529076][   T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.538347][   T34] usb 4-1: config 0 descriptor??
[  183.542333][   T34] hub 4-1:0.0: USB hub found
[  183.708462][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'.
[  184.405477][   T34] hub 4-1:0.0: 1 port detected
[  184.637060][   T34] hub 4-1:0.0: activate --> -90
[  185.090918][ T8616] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1141'.
[  185.497079][   T34] usb 4-1-port1: cannot reset (err = -71)
[  185.497163][   T10] usb 4-1: USB disconnect, device number 13
[  185.500519][   T34] usb 4-1-port1: Cannot enable. Maybe the USB cable is bad?
[  185.500872][   T34] usb 4-1-port1: attempt power cycle
[  185.712620][ T5707] Bluetooth: hci3: command 0x1003 tx timeout
[  185.718151][ T5709] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  185.954109][ T8655] loop2: detected capacity change from 0 to 4096
[  186.286542][ T8655] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  186.342574][ T8655] ntfs3(loop2): failed to convert "0080" to cp437
[  186.376075][ T8655] ntfs3(loop2): failed to convert name for inode 1e.
[  186.392321][ T8655] ntfs3(loop2): ino=1f, mi_enum_attr
[  186.516711][ T8665] loop2: detected capacity change from 0 to 512
[  186.520213][ T8665] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  186.557371][ T8665] EXT4-fs (loop2): 1 truncate cleaned up
[  186.563496][ T8665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.613048][ T5705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.374943][ T8707] fuse: Bad value for 'fd'
[  188.482175][ T8737] loop2: detected capacity change from 0 to 256
[  188.489473][ T8737] exfat: Bad value for 'uid'
[  188.492643][ T8737] exfat: Bad value for 'uid'
[  189.391162][ T8747] loop3: detected capacity change from 0 to 256
[  189.398645][ T8747] vfat: Unknown parameter 'ich!rset'
[  190.213465][ T8757] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1203'.
[  190.221380][ T8757] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1203'.
[  190.369737][   T35] audit: type=1326 audit(1782883609.516:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.1.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff903d9ce59 code=0x7ffc0000
[  190.382205][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1211'.
[  190.392981][   T35] audit: type=1326 audit(1782883609.516:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.1.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff903d9ce59 code=0x7ffc0000
[  190.400644][   T35] audit: type=1326 audit(1782883609.525:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.1.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7ff903d9ce59 code=0x7ffc0000
[  190.409942][   T35] audit: type=1326 audit(1782883609.525:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.1.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff903d9ce59 code=0x7ffc0000
[  190.433156][   T35] audit: type=1326 audit(1782883609.525:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.1.1210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff903d9ce59 code=0x7ffc0000
[  190.527429][ T8785] 9p: Bad value for 'rfdno'
[  190.684246][ T8779] loop2: detected capacity change from 0 to 32768
[  190.696137][ T8779] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1214 (8779)
[  190.747045][ T8779] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  190.758327][ T8779] BTRFS info (device loop2): using crc32c checksum algorithm
[  190.805210][ T8779] BTRFS info (device loop2): enabling ssd optimizations
[  190.812312][ T8779] BTRFS info (device loop2): turning on async discard
[  190.814518][ T8779] BTRFS info (device loop2): enabling free space tree
[  190.879546][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1223'.
[  190.888640][ T8813] openvswitch: netlink: Missing key (keys=40, expected=80)
[  190.965088][ T8792] loop3: detected capacity change from 0 to 40427
[  190.968306][ T8792] F2FS-fs (loop3): build fault injection rate: 4
[  190.970372][ T8792] F2FS-fs (loop3): build fault injection type: 0x3bfe8d
[  190.983679][ T8792] F2FS-fs (loop3): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  190.992532][ T8792] F2FS-fs (loop3): Failed to read F2FS meta data inode
[  191.039190][ T8817] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1226'.
[  191.146552][ T5705] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  191.632330][ T8848] loop2: detected capacity change from 0 to 256
[  191.659501][ T8848] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  191.900026][ T8838] loop3: detected capacity change from 0 to 32768
[  191.978982][ T8838] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[  192.088256][ T8853] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[  192.109049][ T8853] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[  192.124212][ T8853] overlayfs: failed to get metacopy (-5)
[  192.173283][ T5879] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  192.173283][ T5879] 
[  192.212124][ T5879] ERROR: (device loop3): remounting filesystem as read-only
[  192.222479][ T5879] xtLookup: xtSearch returned -5
[  192.231386][ T5879] free_index: error reading directory table
[  192.243577][ T5879] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  192.243577][ T5879] 
[  192.255938][ T5879] xtLookup: xtSearch returned -5
[  192.260335][ T5879] free_index: error reading directory table
[  192.265113][ T5879] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  192.265113][ T5879] 
[  192.276187][ T5879] xtLookup: xtSearch returned -5
[  192.281794][ T5879] free_index: error reading directory table
[  192.286417][ T5879] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  192.286417][ T5879] 
[  192.297469][ T5879] xtLookup: xtSearch returned -5
[  192.301650][ T5879] free_index: error reading directory table
[  192.305815][ T5879] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  192.305815][ T5879] 
[  192.317492][ T5879] xtLookup: xtSearch returned -5
[  192.322378][ T5879] free_index: error reading directory table
[  192.337451][ T5879] non-latin1 character 0x2e66 found in JFS file name
[  192.362750][ T5879] mount with iocharset=utf8 to access
[  192.966706][ T8870] syz_tun: entered allmulticast mode
[  192.972904][ T8870] dvmrp6: entered allmulticast mode
[  192.993084][ T8870] syz_tun: left allmulticast mode
[  193.318442][ T5707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.332899][ T5707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.336875][ T5707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.344720][ T5707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.347964][ T5707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.411656][ T8886] netlink: 5720 bytes leftover after parsing attributes in process `syz.1.1255'.
[  193.415040][ T8886] netlink: 5720 bytes leftover after parsing attributes in process `syz.1.1255'.
[  193.476239][ T8894] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1258'.
[  193.765332][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.767900][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.770260][ T8878] bridge_slave_0: entered allmulticast mode
[  193.773594][ T8878] bridge_slave_0: entered promiscuous mode
[  193.777245][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.779551][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.781863][ T8878] bridge_slave_1: entered allmulticast mode
[  193.785043][ T8878] bridge_slave_1: entered promiscuous mode
[  193.803655][ T8878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.812665][ T8878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.859847][ T8878] team0: Port device team_slave_0 added
[  193.868097][ T8878] team0: Port device team_slave_1 added
[  193.916827][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.921781][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.931117][ T8878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.937269][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.939864][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  193.948769][ T8878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.989252][ T8878] hsr_slave_0: entered promiscuous mode
[  193.991617][ T8878] hsr_slave_1: entered promiscuous mode
[  193.993967][ T8878] debugfs: 'hsr0' already exists in 'hsr'
[  193.995952][ T8878] Cannot create hsr debugfs directory
[  194.156306][ T8878] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  194.188432][ T8878] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  194.196686][ T8878] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  194.221210][ T8878] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  194.229941][ T8878] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  194.250678][ T8878] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  194.255972][ T8878] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  194.260771][ T8878] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  194.309390][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.312053][ T8878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.316053][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.318951][ T8878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.508481][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.578355][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.586313][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.622127][ T8878] 8021q: adding VLAN 0 to HW filter on device team0
[  194.648720][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.651573][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.666405][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.668981][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.953324][ T8950] hub 8-0:1.0: USB hub found
[  194.955963][ T8950] hub 8-0:1.0: 1 port detected
[  195.412583][ T8878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.548709][ T5709] Bluetooth: hci0: command tx timeout
[  195.573632][ T8878] veth0_vlan: entered promiscuous mode
[  195.580417][ T8878] veth1_vlan: entered promiscuous mode
[  195.617991][ T8878] veth0_macvtap: entered promiscuous mode
[  195.623264][ T8878] veth1_macvtap: entered promiscuous mode
[  195.634793][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.648420][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.657624][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.661657][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.666390][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.669996][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.883336][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.894851][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.960573][  T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.963782][  T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.048021][ T8998] binder: BINDER_SET_CONTEXT_MGR already set
[  196.057495][ T8998] binder: 8996:8998 ioctl 4018620d 200000004a80 returned -16
[  197.669143][ T9032] loop2: detected capacity change from 0 to 32768
[  197.692366][ T9032] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  197.717222][ T9032] XFS (loop2): Ending clean mount
[  197.729152][ T9032] XFS (loop2): Quotacheck needed: Please wait.
[  197.775672][ T5709] Bluetooth: hci0: command tx timeout
[  197.795600][ T9032] XFS (loop2): Quotacheck: Done.
[  197.828744][ T5705] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.284773][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'.
[  199.500405][ T9072] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  199.674535][ T5911] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  199.813548][ T5911] usb 3-1: device descriptor read/64, error -71
[  199.845556][   T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  200.005848][ T5709] Bluetooth: hci0: command tx timeout
[  200.008140][   T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  200.008166][   T24] usb 5-1: config 0 has no interface number 0
[  200.008194][   T24] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  200.025182][   T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  200.031582][   T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  200.037083][   T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  200.041992][   T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  200.045105][   T24] usb 5-1: Product: syz
[  200.046940][   T24] usb 5-1: SerialNumber: syz
[  200.050712][   T24] usb 5-1: config 0 descriptor??
[  200.056168][   T24] cm109 5-1:0.8: invalid payload size 0, expected 4
[  200.060407][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input12
[  200.070211][ T5911] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  200.209023][ T5911] usb 3-1: device descriptor read/64, error -71
[  200.286863][ T9076] 9pnet_fd: Insufficient options for proto=fd
[  200.306647][ T9076] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  200.313942][ T9076] loop4: detected capacity change from 0 to 128
[  200.330387][ T5911] usb usb3-port1: attempt power cycle
[  200.344489][ T9076] ufs: You didn't specify the type of your ufs filesystem
[  200.344489][ T9076] 
[  200.344489][ T9076] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  200.344489][ T9076] 
[  200.344489][ T9076] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  200.419539][ T9076] ufs: ufs_fill_super(): bad magic number
[  200.722614][ T5911] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  200.746475][ T5911] usb 3-1: device descriptor read/8, error -71
[  201.000259][ T5911] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  201.022274][ T5911] usb 3-1: device descriptor read/8, error -71
[  201.139684][ T5911] usb usb3-port1: unable to enumerate USB device
[  201.142711][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.147371][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.150139][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.152542][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.154917][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.157646][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.160495][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.163377][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.166118][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.169033][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  201.179036][ T9109] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1331'.
[  201.184135][ T5911] usb 5-1: USB disconnect, device number 2
[  201.184201][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  201.189333][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'.
[  201.196577][ T5911] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  201.318238][ T9115] 9p: Bad value for 'rfdno'
[  201.705593][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1341'.
[  201.946216][ T9146] batman_adv: batadv0: Adding interface: dummy0
[  201.948944][ T9146] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.960064][ T9146] batman_adv: batadv0: Interface activated: dummy0
[  202.043733][ T9147] batadv0: mtu less than device minimum
[  202.049177][ T9147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  202.054531][ T9147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  202.061609][ T9147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  202.066518][ T9147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  202.071877][ T9147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  202.077000][ T9147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  202.082266][ T9147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  202.087391][ T9147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  202.092676][ T9147] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  202.196226][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1349'.
[  202.229797][ T5709] Bluetooth: hci0: command tx timeout
[  202.239373][ T9157] ipt_rpfilter: unknown options
[  203.336477][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  203.339458][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  203.523507][ T9193] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1364'.
[  203.573437][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1365'.
[  203.669411][   T35] audit: type=1804 audit(1782883621.957:113): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1368" name="file0" dev="tmpfs" ino=2450 res=1 errno=0
[  203.717603][ T9205] loop4: detected capacity change from 0 to 1024
[  203.730269][ T9205] ext3: Bad value for 'mb_optimize_scan'
[  203.995180][ T9221] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1378'.
[  203.998935][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'.
[  204.002982][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'.
[  204.195286][   T35] audit: type=1326 audit(1782883622.443:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  204.233017][   T35] audit: type=1326 audit(1782883622.452:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  204.256867][   T35] audit: type=1326 audit(1782883622.452:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  204.266389][   T35] audit: type=1326 audit(1782883622.462:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  204.278579][   T35] audit: type=1326 audit(1782883622.462:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  204.298681][   T35] audit: type=1326 audit(1782883622.462:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  204.308286][   T35] audit: type=1326 audit(1782883622.462:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  204.319610][   T35] audit: type=1326 audit(1782883622.462:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  204.329241][   T35] audit: type=1326 audit(1782883622.462:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9231 comm="syz.4.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  204.795337][   T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  205.188123][   T10] usb 3-1: config 0 has no interfaces?
[  205.190069][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  205.193051][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.197715][   T10] usb 3-1: config 0 descriptor??
[  205.531031][ T9265] random: crng reseeded on system resumption
[  205.636757][ T9267] loop4: detected capacity change from 0 to 4096
[  207.112225][   T26] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  207.750720][ T5778] usb 3-1: USB disconnect, device number 21
[  208.553105][ T9323] overlayfs: failed to resolve './cgroup': -2
[  209.705273][ T9340] loop2: detected capacity change from 0 to 512
[  209.749043][ T9340] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1431: invalid block
[  209.756246][ T9340] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  209.758931][ T9340] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1431: invalid indirect mapped block 4294967295 (level 1)
[  209.769592][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  209.769614][    C0] EXT4-fs (loop2): initial error at time 1782883627: ext4_get_branch:178: inode 11: block 4294967295
[  209.769641][    C0] EXT4-fs (loop2): last error at time 1782883627: ext4_get_branch:178: inode 11: block 4294967295
[  209.785812][ T9340] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  209.788621][ T9340] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1431: invalid indirect mapped block 4294967295 (level 1)
[  209.797835][ T9340] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  209.809633][ T9340] EXT4-fs (loop2): 2 truncates cleaned up
[  209.817390][ T9340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.895689][ T5705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.311321][ T9346] loop2: detected capacity change from 0 to 128
[  210.364482][ T9360] net_ratelimit: 10 callbacks suppressed
[  210.364502][ T9360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  210.808671][ T9370] loop2: detected capacity change from 0 to 256
[  210.893625][ T9369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  211.059376][ T9383] IPVS: set_ctl: invalid protocol: 168 100.1.1.2:20014
[  211.712994][ T9394] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1455'.
[  211.903481][ T9398] ip6tnl1: entered promiscuous mode
[  211.920169][ T5736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  211.962510][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  211.969008][ T5736] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  212.031260][ T9403] loop2: detected capacity change from 0 to 1024
[  212.037500][ T9403] EXT4-fs: Ignoring removed bh option
[  212.048227][ T9403] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  212.142943][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  212.160643][ T9403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.631604][ T5809] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  212.897844][ T5705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.033329][ T9417] netlink: 'syz.1.1464': attribute type 2 has an invalid length.
[  213.036667][ T9417] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1464'.
[  213.040840][ T9417] netlink: 'syz.1.1464': attribute type 2 has an invalid length.
[  213.044060][ T9417] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1464'.
[  213.082317][   T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  213.312776][ T9427] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  214.239633][   T34] usb 5-1: unable to get BOS descriptor or descriptor too short
[  214.245937][   T34] usb 5-1: config 3 has an invalid interface number: 244 but max is 0
[  214.249210][   T34] usb 5-1: config 3 has no interface number 0
[  214.251715][   T34] usb 5-1: config 3 interface 244 has no altsetting 0
[  214.257710][   T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=51.4e
[  214.261240][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.264496][   T34] usb 5-1: Product: syz
[  214.266252][   T34] usb 5-1: Manufacturer: syz
[  214.268606][   T34] usb 5-1: SerialNumber: syz
[  214.511638][   T34] usbtest 5-1:3.244: couldn't get endpoints, -22
[  214.516463][   T34] usbtest 5-1:3.244: probe with driver usbtest failed with error -22
[  214.523222][   T34] usb 5-1: USB disconnect, device number 3
[  214.799113][ T9437] loop2: detected capacity change from 0 to 512
[  214.804458][ T9437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  214.828259][ T9437] EXT4-fs (loop2): 1 truncate cleaned up
[  214.831126][ T9437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.777082][ T5705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.867282][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'.
[  215.872214][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'.
[  215.877291][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'.
[  216.162530][ T9478] loop4: detected capacity change from 0 to 1764
[  216.244880][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  216.649690][ T9520] tipc: Started in network mode
[  216.656184][ T9520] tipc: Node identity 0047a2b78a000000000000000000001, cluster identity 4711
[  216.663805][ T9520] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  216.957719][ T9526] loop4: detected capacity change from 0 to 40427
[  216.961008][ T9526] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  216.963521][ T9526] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  216.968203][ T9526] F2FS-fs (loop4): invalid crc value
[  216.999044][ T9526] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  217.005825][ T9526] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  217.008194][ T9526] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  217.030194][ T9517] overlayfs: failed to clone upperpath
[  217.201973][ T9538] futex_wake_op: syz.1.1512 tries to shift op by 36; fix this program
[  217.497990][ T9539] Cannot find add_set index 0 as target
[  217.658052][ T9547] loop2: detected capacity change from 0 to 256
[  217.662901][ T9547] exfat: Deprecated parameter 'utf8'
[  217.669515][ T9547] exfat: Deprecated parameter 'namecase'
[  217.673061][ T9547] exfat: Deprecated parameter 'namecase'
[  217.678428][ T9547] exfat: Deprecated parameter 'utf8'
[  217.699408][ T9547] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  217.720965][ T9547] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[  218.497218][ T9569] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  218.805419][ T9575] loop4: detected capacity change from 0 to 512
[  218.817642][ T9575] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1526: inode has both inline data and extents flags
[  218.823325][ T9575] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  218.823638][ T9575] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1526: couldn't read orphan inode 15 (err -117)
[  218.832324][ T9575] loop4: lost filesystem error report for type 5 error -117
[  218.834083][ T9574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.849413][ T9575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.867021][ T9574] syzkaller0: entered promiscuous mode
[  218.875369][ T9574] syzkaller0: entered allmulticast mode
[  218.889193][ T8878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.946888][ T9574] tipc: Resetting bearer <eth:syzkaller0>
[  218.957621][ T9572] tipc: Resetting bearer <eth:syzkaller0>
[  219.009585][ T9572] tipc: Disabling bearer <eth:syzkaller0>
[  219.028312][ T9579] loop4: detected capacity change from 0 to 256
[  219.034223][ T9579] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  219.042061][   T35] kauditd_printk_skb: 7 callbacks suppressed
[  219.042071][   T35] audit: type=1800 audit(1782883636.334:130): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1529" name="bus" dev="loop4" ino=1048657 res=0 errno=0
[  219.215771][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'.
[  219.279692][ T9593] loop2: detected capacity change from 0 to 2048
[  219.291155][ T9593] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  219.296785][ T5688] udevd[5688]: incorrect nilfs2 checksum on /dev/loop2
[  219.300624][ T9593] NILFS (loop2): mounting unchecked fs
[  219.305148][ T9593] NILFS (loop2): recovery required for readonly filesystem
[  219.308356][ T9593] NILFS (loop2): write access will be enabled during recovery
[  219.348748][ T9593] NILFS (loop2): norecovery option specified, skipping roll-forward recovery
[  219.606255][ T9603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1540'.
[  219.944162][ T9611] netlink: 'syz.1.1544': attribute type 1 has an invalid length.
[  221.076039][ T9645] loop2: detected capacity change from 0 to 2048
[  221.091509][ T9645] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.248353][   T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  221.410778][   T34] usb 5-1: config 2 has an invalid interface number: 36 but max is 0
[  221.416384][   T34] usb 5-1: config 2 has no interface number 0
[  221.421677][   T34] usb 5-1: config 2 interface 36 has no altsetting 0
[  221.429475][   T34] usb 5-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a
[  221.436827][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.442833][   T34] usb 5-1: Product: syz
[  221.450755][   T34] usb 5-1: Manufacturer: syz
[  221.453189][   T34] usb 5-1: SerialNumber: syz
[  221.704764][   T34] cdc_acm 5-1:2.36: More than one union descriptor, skipping ...
[  221.722775][   T34] usb 5-1: USB disconnect, device number 4
[  221.988904][ T9669] bridge0: port 1(macvlan2) entered blocking state
[  221.991251][ T9669] bridge0: port 1(macvlan2) entered disabled state
[  221.993485][ T9669] macvlan2: entered allmulticast mode
[  221.995356][ T9669] gretap0: entered allmulticast mode
[  222.001212][ T9669] macvlan2: entered promiscuous mode
[  222.509828][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  222.552709][   T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  222.670317][    T9] usb 3-1: Using ep0 maxpacket: 32
[  222.674324][    T9] usb 3-1: config index 0 descriptor too short (expected 19, got 18)
[  222.681062][    T9] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  222.684439][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.687309][    T9] usb 3-1: Product: syz
[  222.688834][    T9] usb 3-1: Manufacturer: syz
[  222.690610][    T9] usb 3-1: SerialNumber: syz
[  222.700615][    T9] usb 3-1: config 0 descriptor??
[  222.709744][    T9] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  222.713497][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  222.714858][   T34] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 195, changing to 11
[  222.720910][   T34] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 8909, setting to 1024
[  222.726180][   T34] usb 5-1: config 0 interface 0 has no altsetting 0
[  222.726834][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  222.729459][   T34] usb 5-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00
[  222.737063][   T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.738303][    T9] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  222.745133][   T34] usb 5-1: config 0 descriptor??
[  222.759696][    T9] usb 3-1: media controller created
[  222.781610][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  222.804522][    T9] usb 3-1: selecting invalid altsetting 7
[  222.812584][    T9] cxusb: set interface failed
[  222.816108][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  222.853389][    T9] DVB: Unable to find symbol lgdt330x_attach()
[  222.856003][    T9] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  222.905553][    T9] rc_core: IR keymap rc-dvico-portable not found
[  222.910285][    T9] Registered IR keymap rc-empty
[  222.913110][    T9] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  222.929900][    T9] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input14
[  222.943787][    T9] dvb-usb: schedule remote query interval to 100 msecs.
[  222.946232][    T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  222.951186][    T9] usb 3-1: USB disconnect, device number 22
[  223.186127][   T34] hid (null): unknown global tag 0xe
[  223.193895][   T34] hid (null): global environment stack underflow
[  223.196094][   T34] hid (null): unknown global tag 0xc
[  223.198291][   T34] hid (null): unknown global tag 0xe4
[  223.204876][   T34] hid (null): unknown global tag 0x52
[  223.208722][   T34] hid (null): unknown global tag 0xe
[  223.212479][   T34] hid (null): invalid report_size 222345300
[  223.216315][   T34] hid (null): unknown global tag 0xf4
[  223.220133][   T34] hid (null): report_id 0 is invalid
[  223.229877][   T34] evision 0003:320F:5041.0007: unknown main item tag 0x0
[  223.236104][   T34] evision 0003:320F:5041.0007: unknown main item tag 0x0
[  223.240584][   T34] evision 0003:320F:5041.0007: unknown main item tag 0x0
[  223.245079][   T34] evision 0003:320F:5041.0007: unknown main item tag 0x0
[  223.249572][   T34] evision 0003:320F:5041.0007: unknown main item tag 0x0
[  223.255916][   T34] evision 0003:320F:5041.0007: unknown main item tag 0x0
[  223.260307][   T34] evision 0003:320F:5041.0007: unknown global tag 0xe
[  223.264198][   T34] evision 0003:320F:5041.0007: item 0 0 1 14 parsing failed
[  223.269067][   T34] evision 0003:320F:5041.0007: probe with driver evision failed with error -22
[  223.345473][    T9] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  223.410369][ T5809] usb 5-1: USB disconnect, device number 5
[  224.127428][    T9] IPVS: starting estimator thread 0...
[  224.230752][ T9726] IPVS: using max 54 ests per chain, 129600 per kthread
[  224.380769][   T34] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  224.521035][   T34] usb 5-1: device descriptor read/64, error -71
[  224.787901][   T34] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  224.882526][    T9] kernel read not supported for file /radio0 (pid: 9 comm: kworker/0:0)
[  224.939739][   T34] usb 5-1: device descriptor read/64, error -71
[  225.017505][ T9744] loop2: detected capacity change from 0 to 64
[  225.066956][   T34] usb usb5-port1: attempt power cycle
[  225.225112][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  225.428653][   T34] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  225.455561][   T34] usb 5-1: device descriptor read/8, error -71
[  225.516161][ T9752] loop2: detected capacity change from 0 to 512
[  225.606905][ T9752] FAT-fs (loop2): error, clusters badly computed (1 != 0)
[  225.611516][ T9752] FAT-fs (loop2): Filesystem has been set read-only
[  225.620032][ T9752] FAT-fs (loop2): error, clusters badly computed (2 != 1)
[  225.705176][ T9758] loop2: detected capacity change from 0 to 4096
[  225.708839][ T9758] EXT4-fs: Ignoring removed orlov option
[  225.717573][   T34] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  225.726482][ T9758] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  225.734621][ T9758] EXT4-fs (loop2): #clusters per group too big: 32768
[  225.740415][   T34] usb 5-1: device descriptor read/8, error -71
[  225.857740][   T34] usb usb5-port1: unable to enumerate USB device
[  227.663293][ T9818] bridge0: port 3(veth0_to_bridge) entered blocking state
[  227.666751][ T9818] bridge0: port 3(veth0_to_bridge) entered disabled state
[  227.669946][ T9818] veth0_to_bridge: entered allmulticast mode
[  227.675250][ T9818] veth0_to_bridge: entered promiscuous mode
[  227.677977][ T9818] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  227.693556][ T9818] bridge0: port 3(veth0_to_bridge) entered blocking state
[  227.697096][ T9818] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  228.055039][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'.
[  228.732743][ T9863] sctp: [Deprecated]: syz.2.1658 (pid 9863) Use of struct sctp_assoc_value in delayed_ack socket option.
[  228.732743][ T9863] Use struct sctp_sack_info instead
[  229.392401][ T9901] loop2: detected capacity change from 0 to 256
[  230.537982][ T9941] loop2: detected capacity change from 0 to 512
[  230.544025][ T9941] EXT4-fs: Ignoring removed nobh option
[  230.547110][ T9941] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  230.555606][ T9941] EXT4-fs (loop2): 1 truncate cleaned up
[  230.561942][ T9941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.598843][ T5705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.702751][ T9951] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  230.804598][ T9955] syzkaller0: entered promiscuous mode
[  230.808480][ T9955] syzkaller0: entered allmulticast mode
[  231.920661][ T9990] loop4: detected capacity change from 0 to 32768
[  231.923956][ T9990] BTRFS warning: excessive commit interval 3581, use with care
[  231.931905][ T9990] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1716 (9990)
[  231.952571][ T9990] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.960867][ T9990] BTRFS info (device loop4): using crc32c checksum algorithm
[  232.035744][ T9990] BTRFS info (device loop4): enabling ssd optimizations
[  232.045537][ T9990] BTRFS info (device loop4): turning on flush-on-commit
[  232.054129][ T9990] BTRFS info (device loop4): enabling free space tree
[  232.062340][ T9990] BTRFS info (device loop4): force zlib compression, level 3
[  232.072273][ T9990] BTRFS info (device loop4): max_inline set to 4096
[  232.168668][ T8878] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  232.280874][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  232.479314][    T9] usb 3-1: config 0 has no interfaces?
[  232.481120][    T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  232.487584][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.518907][    T9] usb 3-1: config 0 descriptor??
[  232.589325][   T35] audit: type=1326 audit(1782883649.008:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.4.1727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  232.610335][   T35] audit: type=1326 audit(1782883649.018:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.4.1727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  232.625334][   T35] audit: type=1326 audit(1782883649.018:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.4.1727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  232.640083][   T35] audit: type=1326 audit(1782883649.018:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.4.1727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  232.654862][   T35] audit: type=1326 audit(1782883649.018:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.4.1727" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  232.668609][   T35] audit: type=1326 audit(1782883649.018:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.4.1727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  232.697394][   T35] audit: type=1326 audit(1782883649.065:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.4.1727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  232.705191][   T35] audit: type=1326 audit(1782883649.065:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.4.1727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  232.727482][   T35] audit: type=1326 audit(1782883649.083:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.4.1727" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  232.751175][   T35] audit: type=1326 audit(1782883649.083:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10030 comm="syz.4.1727" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff61919ce59 code=0x7ffc0000
[  232.860971][    T9] usb 3-1: USB disconnect, device number 23
[  233.103969][   T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  233.264626][   T34] usb 5-1: Using ep0 maxpacket: 32
[  233.268536][   T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.272849][   T34] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  233.277692][   T34] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  233.282214][   T34] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  233.289531][   T34] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  233.293566][   T34] usb 5-1: config 1 interface 1 has no altsetting 0
[  233.299056][   T34] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  233.302894][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.306148][   T34] usb 5-1: Product: syz
[  233.308376][   T34] usb 5-1: Manufacturer: syz
[  233.310421][   T34] usb 5-1: SerialNumber: syz
[  233.548456][   T34] usb 5-1: selecting invalid altsetting 0
[  233.672217][T10059] vcan0: tx drop: invalid da for name 0x000000000000aa00
[  233.758974][   T34] usb 5-1: 1:1: cannot get freq (v2/v3): err -32
[  234.341844][    T9] usb 5-1: USB disconnect, device number 10
[  234.576775][T10086] netlink: 'syz.1.1752': attribute type 13 has an invalid length.
[  235.083894][   T34] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  235.211050][T10115] loop4: detected capacity change from 0 to 32768
[  235.216397][T10115] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1767 (10115)
[  235.230769][T10115] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.241201][T10115] BTRFS info (device loop4): using sha256 checksum algorithm
[  235.251811][   T34] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.259391][   T34] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  235.264921][   T34] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  235.269679][   T34] usb 3-1: config 1 interface 1 has no altsetting 0
[  235.277906][   T34] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  235.287791][   T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.291460][   T34] usb 3-1: Product: syz
[  235.293580][   T34] usb 3-1: Manufacturer: syz
[  235.299219][   T34] usb 3-1: SerialNumber: syz
[  235.315674][T10115] BTRFS info (device loop4): enabling ssd optimizations
[  235.320449][T10115] BTRFS info (device loop4): turning on async discard
[  235.322637][T10115] BTRFS info (device loop4): enabling free space tree
[  235.364342][ T8878] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.556676][   T34] usb 3-1: selecting invalid altsetting 0
[  235.560481][   T34] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  235.576577][   T34] usb 3-1: selecting invalid altsetting 0
[  235.578481][   T34] usb 3-1: unit 4 not found!
[  235.580052][   T34] usb 3-1: unit 2 not found!
[  235.694449][   T34] usb 3-1: USB disconnect, device number 24
[  235.812760][T10152] netlink: 'syz.4.1777': attribute type 11 has an invalid length.
[  235.816059][T10152] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1777'.
[  235.826088][T10152] ip6erspan0: entered allmulticast mode
[  235.834704][T10152] ALSA: mixer_oss: invalid OSS volume ''
[  235.960996][T10154] loop4: detected capacity change from 0 to 8192
[  236.362243][T10164] loop2: detected capacity change from 0 to 4096
[  236.372788][T10164] EXT4-fs (loop2): Test dummy encryption mode enabled
[  236.382553][T10164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.412162][ T5705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.747007][T10192] geneve2: entered promiscuous mode
[  236.756966][ T5736] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  236.760740][ T5736] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  236.765318][ T5736] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  236.769063][ T5736] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  236.879927][T10204] trusted_key: encrypted_key: insufficient parameters specified
[  237.209274][ T5911] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  237.371102][ T5911] usb 3-1: Using ep0 maxpacket: 32
[  237.381920][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.390631][ T5911] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  237.396732][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.399990][ T5911] usb 3-1: Product: syz
[  237.403874][ T5911] usb 3-1: Manufacturer: syz
[  237.405986][ T5911] usb 3-1: SerialNumber: syz
[  237.411041][ T5911] usb 3-1: config 0 descriptor??
[  237.428272][ T5911] cdc_ether 3-1:0.0: missing cdc header descriptor
[  237.443228][ T5911] usb 3-1: unsupported MDLM descriptors
[  237.639035][   T10] usb 3-1: USB disconnect, device number 25
[  237.755070][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  237.936088][    T9] usb 5-1: Using ep0 maxpacket: 16
[  237.940462][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  237.947524][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  237.951531][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.954881][    T9] usb 5-1: Product: syz
[  237.956747][    T9] usb 5-1: Manufacturer: syz
[  237.958801][    T9] usb 5-1: SerialNumber: syz
[  237.963406][    T9] usb 5-1: config 0 descriptor??
[  237.969398][    T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  237.973212][    T9] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  238.336395][T10231] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  238.379484][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'.
[  238.383333][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'.
[  238.387863][T10239] netlink: 'syz.2.1813': attribute type 6 has an invalid length.
[  238.612884][    T9] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  238.800881][T10270] binder: BINDER_SET_CONTEXT_MGR already set
[  238.803930][T10270] binder: 10269:10270 ioctl 4018620d 200000004a80 returned -16
[  239.368052][    T9] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  239.386882][    T9] em28xx 5-1:0.0: board has no eeprom
[  239.475529][    T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  239.478704][    T9] em28xx 5-1:0.0: dvb set to bulk mode.
[  239.492418][   T10] em28xx 5-1:0.0: Binding DVB extension
[  239.636960][    T9] usb 5-1: USB disconnect, device number 11
[  239.658978][    T9] em28xx 5-1:0.0: Disconnecting em28xx
[  239.727713][   T10] em28xx 5-1:0.0: Registering input extension
[  239.733115][    T9] em28xx 5-1:0.0: Closing input extension
[  239.862491][    T9] em28xx 5-1:0.0: Freeing device
[  240.282167][ T3413] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  242.164264][T10288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  242.296352][T10313] loop4: detected capacity change from 0 to 512
[  242.328242][T10313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback.
[  242.334121][T10313] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.352589][T10313] __quota_error: 28 callbacks suppressed
[  242.352610][T10313] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  242.368161][T10313] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 64512
[  242.372284][T10313] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.1843: Failed to acquire dquot type 0
[  242.412516][ T8878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0007-000000000000.
[  242.437736][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1846'.
[  242.440641][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1846'.
[  242.450997][T10323] netlink: 'syz.2.1846': attribute type 18 has an invalid length.
[  242.483123][T10325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1847'.
[  242.526785][T10329] openvswitch: netlink: Geneve option length err (len 856, max 255).
[  242.574799][T10333] netlink: 'syz.4.1851': attribute type 2 has an invalid length.
[  242.578481][T10333] netlink: 'syz.4.1851': attribute type 2 has an invalid length.
[  242.745294][T10331] loop2: detected capacity change from 0 to 32768
[  242.751443][T10331] BTRFS: device fsid 395ef67a-297e-0400-0000-000000003e5d devid 0 transid 8 /dev/loop2 (7:2) scanned by syz.2.1850 (10331)
[  243.125957][T10367] futex_wake_op: syz.1.1867 tries to shift op by 32; fix this program
[  243.465092][T10386] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  243.663275][T10390] loop2: detected capacity change from 0 to 4096
[  243.681713][T10392] loop4: detected capacity change from 0 to 2048
[  243.692732][T10392] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  243.697783][T10392] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  243.709043][T10393] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  243.718802][T10392] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.862619][T10401] loop2: detected capacity change from 0 to 64
[  244.061850][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  244.219055][T10425] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1894'.
[  244.239788][    T9] usb 5-1: Using ep0 maxpacket: 16
[  244.264571][    T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  244.268573][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.278993][    T9] usb 5-1: Product: syz
[  244.281043][    T9] usb 5-1: Manufacturer: syz
[  244.281546][ T5709] Bluetooth: hci1: unknown advertising packet type: 0x6e
[  244.283142][ T5709] Bluetooth: hci1: Malformed LE Event: 0x02
[  244.285804][    T9] usb 5-1: SerialNumber: syz
[  244.315651][    T9] usb 5-1: config 0 descriptor??
[  244.328597][    T9] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  244.513735][T10442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1901'.
[  244.518200][T10442] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1901'.
[  244.548955][    T9] usb 5-1: clie_3_5_startup: get config number bad return length: 0
[  244.555616][    T9] visor 5-1:0.0: probe with driver visor failed with error -5
[  244.733717][T10462] xt_bpf: check failed: parse error
[  244.775390][    T9] usb 5-1: USB disconnect, device number 12
[  245.463511][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'.
[  245.541375][T10486] loop4: detected capacity change from 0 to 1024
[  245.789284][T10502] veth0: entered promiscuous mode
[  245.792252][T10501] veth0: left promiscuous mode
[  245.911348][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  245.933414][ T5778] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  246.082264][    T9] usb 5-1: Using ep0 maxpacket: 8
[  246.092533][    T9] usb 5-1: config index 0 descriptor too short (expected 26, got 18)
[  246.096199][ T5778] usb 3-1: Using ep0 maxpacket: 8
[  246.103953][    T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  246.106028][ T5778] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  246.108981][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.111511][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.115285][    T9] usb 5-1: Product: syz
[  246.120037][    T9] usb 5-1: Manufacturer: syz
[  246.121935][    T9] usb 5-1: SerialNumber: syz
[  246.123045][ T5778] usb 3-1: Product: syz
[  246.127500][    T9] usb 5-1: config 0 descriptor??
[  246.130251][ T5778] usb 3-1: Manufacturer: syz
[  246.132700][    T9] gspca_main: sq930x-2.14.0 probing 2770:930c
[  246.135523][ T5778] usb 3-1: SerialNumber: syz
[  246.143955][ T5778] usb 3-1: config 0 descriptor??
[  246.153900][ T5778] gspca_main: se401-2.14.0 probing 047d:5003
[  246.565469][    T9] gspca_sq930x: ucbus_write failed -71
[  246.570658][    T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  246.576236][    T9] usb 5-1: USB disconnect, device number 13
[  246.810215][ T5778] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17
[  247.022629][ T5778] usb 3-1: USB disconnect, device number 26
[  247.373119][T10521] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1939' sets config #-1
[  247.565341][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'.
[  247.591151][T10533] loop4: detected capacity change from 0 to 4096
[  247.594536][T10533] ntfs3: Unknown parameter 'kochar3S8R_ٺhset'
[  247.787685][T10543] lo: entered allmulticast mode
[  249.121704][T10593] loop2: detected capacity change from 0 to 512
[  249.132660][T10593] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  249.137493][T10593] EXT4-fs (loop2): bad geometry: first data block 1 is beyond end of filesystem (0)
[  249.503617][   T34] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  249.519852][T10597] loop2: detected capacity change from 0 to 32768
[  249.674971][   T34] usb 5-1: Using ep0 maxpacket: 8
[  249.681952][   T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.695800][   T34] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  249.699814][   T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  249.710276][   T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  249.713633][   T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  249.716823][   T34] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  249.723350][   T34] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  249.726342][   T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.729808][   T34] usb 5-1: Product: syz
[  249.731654][   T34] usb 5-1: Manufacturer: syz
[  249.733592][   T34] usb 5-1: SerialNumber: syz
[  249.761657][   T34] usb 5-1: config 0 descriptor??
[  249.764222][T10592] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  249.769903][   T34] ati_remote 5-1:0.0: ati_remote_probe: Unexpected endpoint_out
[  249.989342][   T35] audit: type=1326 audit(1782883665.284:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  249.991693][   T24] usb 5-1: USB disconnect, device number 14
[  250.001562][   T35] audit: type=1326 audit(1782883665.294:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  250.012936][   T35] audit: type=1326 audit(1782883665.303:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  250.021904][   T35] audit: type=1326 audit(1782883665.303:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  250.031640][   T35] audit: type=1326 audit(1782883665.303:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  250.040412][   T35] audit: type=1326 audit(1782883665.303:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  250.049222][   T35] audit: type=1326 audit(1782883665.303:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  250.060167][   T35] audit: type=1326 audit(1782883665.303:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  250.068743][   T35] audit: type=1326 audit(1782883665.303:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10606 comm="syz.2.1975" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f496ed9ce59 code=0x7ffc0000
[  250.454788][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  250.629632][    T9] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[  250.635575][    T9] usb 3-1: config 0 has no interface number 0
[  250.637944][    T9] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  250.641672][    T9] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  250.646951][    T9] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  250.656345][    T9] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  250.659753][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.674634][    T9] usb 3-1: config 0 descriptor??
[  250.677624][T10616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  250.688728][    T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input19
[  250.923860][ T5809] usb 3-1: USB disconnect, device number 27
[  251.012916][T10634] loop4: detected capacity change from 0 to 1024
[  251.102241][T10638] loop4: detected capacity change from 0 to 2048
[  251.107670][T10638] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  251.337998][T10648] fuse: fd is not a fuse device
[  251.781642][T10652] loop2: detected capacity change from 0 to 2048
[  251.792937][T10652] EXT4-fs: Ignoring removed mblk_io_submit option
[  251.800299][T10652] EXT4-fs: Ignoring removed mblk_io_submit option
[  251.831055][T10652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.887644][T10652] 
[  251.888513][T10652] ======================================================
[  251.890726][T10652] WARNING: possible circular locking dependency detected
[  251.892917][T10652] syzkaller #0 Tainted: G             L     
[  251.894981][T10652] ------------------------------------------------------
[  251.897208][T10652] syz.2.1996/10652 is trying to acquire lock:
[  251.899139][T10652] ffff8881b94ede80 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0
[  251.902190][T10652] 
[  251.902190][T10652] but task is already holding lock:
[  251.904499][T10652] ffff888170030c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  251.907589][T10652] 
[  251.907589][T10652] which lock already depends on the new lock.
[  251.907589][T10652] 
[  251.910865][T10652] 
[  251.910865][T10652] the existing dependency chain (in reverse order) is:
[  251.914387][T10652] 
[  251.914387][T10652] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  251.917664][T10652]        percpu_down_read_internal+0x48/0x1c0
[  251.919709][T10652]        ext4_writepages+0x205/0x3b0
[  251.921412][T10652]        do_writepages+0x338/0x560
[  251.923052][T10652]        __writeback_single_inode+0x12e/0xf90
[  251.925019][T10652]        writeback_single_inode+0x4ef/0xe70
[  251.926923][T10652]        write_inode_now+0x1c2/0x290
[  251.928588][T10652]        iput+0x98b/0xf00
[  251.929988][T10652]        ext4_xattr_block_set+0x1b0c/0x2a80
[  251.932174][T10652]        ext4_expand_extra_isize_ea+0x1342/0x1e70
[  251.934601][T10652]        __ext4_expand_extra_isize+0x30d/0x400
[  251.936998][T10652]        __ext4_mark_inode_dirty+0x455/0x700
[  251.939396][T10652]        ext4_evict_inode+0x976/0x10c0
[  251.941162][T10652]        evict+0x624/0xb50
[  251.942585][T10652]        ext4_orphan_cleanup+0xc7a/0x14c0
[  251.944409][T10652]        ext4_fill_super+0x5cb4/0x65c0
[  251.946136][T10652]        get_tree_bdev_flags+0x430/0x4f0
[  251.947898][T10652]        vfs_get_tree+0x92/0x2a0
[  251.949499][T10652]        do_new_mount+0x319/0xdc0
[  251.951128][T10652]        __se_sys_mount+0x31d/0x420
[  251.952760][T10652]        do_syscall_64+0x174/0x580
[  251.954369][T10652]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.956216][T10652] 
[  251.956216][T10652] -> #0 (&ei->xattr_sem){++++}-{4:4}:
[  251.958963][T10652]        __lock_acquire+0x1520/0x2cf0
[  251.960918][T10652]        lock_acquire+0x106/0x350
[  251.962871][T10652]        down_write+0x96/0x200
[  251.964458][T10652]        ext4_destroy_inline_data+0x28/0xe0
[  251.966458][T10652]        ext4_do_writepages+0x573/0x47a0
[  251.968095][T10652]        ext4_writepages+0x241/0x3b0
[  251.969758][T10652]        do_writepages+0x338/0x560
[  251.971403][T10652]        filemap_flush+0x1e1/0x2e0
[  251.973002][T10652]        ext4_rename2+0x1060/0x31d0
[  251.974750][T10652]        vfs_rename+0xbd9/0xef0
[  251.976383][T10652]        filename_renameat2+0x533/0x9a0
[  251.978125][T10652]        __se_sys_renameat2+0x5a/0x2c0
[  251.979807][T10652]        do_syscall_64+0x174/0x580
[  251.981407][T10652]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.983855][T10652] 
[  251.983855][T10652] other info that might help us debug this:
[  251.983855][T10652] 
[  251.987656][T10652]  Possible unsafe locking scenario:
[  251.987656][T10652] 
[  251.990053][T10652]        CPU0                    CPU1
[  251.991751][T10652]        ----                    ----
[  251.993700][T10652]   rlock(&sbi->s_writepages_rwsem);
[  251.995383][T10652]                                lock(&ei->xattr_sem);
[  251.997839][T10652]                                lock(&sbi->s_writepages_rwsem);
[  252.000505][T10652]   lock(&ei->xattr_sem);
[  252.002147][T10652] 
[  252.002147][T10652]  *** DEADLOCK ***
[  252.002147][T10652] 
[  252.004722][T10652] 7 locks held by syz.2.1996/10652:
[  252.006341][T10652]  #0: ffff888170032450 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  252.009102][T10652]  #1: ffff888170032758 (&type->s_vfs_rename_key){+.+.}-{4:4}, at: __start_renaming+0xed/0x410
[  252.012217][T10652]  #2: ffff8881b94e8ce0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: lock_two_directories+0x1a2/0x220
[  252.015545][T10652]  #3: ffff8881b94ea900 (&type->i_mutex_dir_key#3/5){+.+.}-{4:4}, at: lock_two_directories+0x1cc/0x220
[  252.018729][T10652]  #4: ffff8881b94ee140 (&sb->s_type->i_mutex_key#11){++++}-{4:4}, at: lock_two_nondirectories+0xe7/0x180
[  252.021971][T10652]  #5: ffff8881bd793bc0 (&sb->s_type->i_mutex_key#11/4){+.+.}-{4:4}, at: vfs_rename+0x696/0xef0
[  252.025279][T10652]  #6: ffff888170030c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  252.028484][T10652] 
[  252.028484][T10652] stack backtrace:
[  252.030323][T10652] CPU: 0 UID: 0 PID: 10652 Comm: syz.2.1996 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  252.030335][T10652] Tainted: [L]=SOFTLOCKUP
[  252.030338][T10652] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.030344][T10652] Call Trace:
[  252.030351][T10652]  <TASK>
[  252.030356][T10652]  dump_stack_lvl+0xe8/0x150
[  252.030369][T10652]  print_circular_bug+0x2e1/0x300
[  252.030383][T10652]  check_noncircular+0x12e/0x150
[  252.030393][T10652]  __lock_acquire+0x1520/0x2cf0
[  252.030404][T10652]  ? __lock_acquire+0x683/0x2cf0
[  252.030412][T10652]  ? rcu_is_watching+0x15/0xb0
[  252.030422][T10652]  ? trace_hrtimer_start+0x82/0x200
[  252.030436][T10652]  ? ext4_destroy_inline_data+0x28/0xe0
[  252.030446][T10652]  lock_acquire+0x106/0x350
[  252.030454][T10652]  ? ext4_destroy_inline_data+0x28/0xe0
[  252.030466][T10652]  down_write+0x96/0x200
[  252.030477][T10652]  ? ext4_destroy_inline_data+0x28/0xe0
[  252.030484][T10652]  ? __pfx_down_write+0x10/0x10
[  252.030493][T10652]  ? ext4_journal_check_start+0x1c/0x2b0
[  252.030506][T10652]  ? ext4_journal_check_start+0x1cf/0x2b0
[  252.030516][T10652]  ext4_destroy_inline_data+0x28/0xe0
[  252.030524][T10652]  ext4_do_writepages+0x573/0x47a0
[  252.030535][T10652]  ? kernel_text_address+0xa5/0xe0
[  252.030544][T10652]  ? __kernel_text_address+0xd/0x30
[  252.030552][T10652]  ? unwind_get_return_address+0x4d/0x90
[  252.030561][T10652]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  252.030572][T10652]  ? arch_stack_walk+0xfb/0x150
[  252.030583][T10652]  ? stack_trace_save+0xa9/0x100
[  252.030594][T10652]  ? check_path+0x21/0x40
[  252.030602][T10652]  ? add_lock_to_list+0xc7/0x100
[  252.030610][T10652]  ? __pfx_ext4_do_writepages+0x10/0x10
[  252.030619][T10652]  ? lockdep_unlock+0x5d/0xd0
[  252.030624][T10652]  ? __lock_acquire+0x13e8/0x2cf0
[  252.030634][T10652]  ? ext4_writepages+0x205/0x3b0
[  252.030641][T10652]  ? ext4_writepages+0x205/0x3b0
[  252.030650][T10652]  ext4_writepages+0x241/0x3b0
[  252.030657][T10652]  ? __pfx_ext4_writepages+0x10/0x10
[  252.030666][T10652]  ? do_raw_spin_unlock+0x4d/0x210
[  252.030675][T10652]  ? __pfx_ext4_writepages+0x10/0x10
[  252.030682][T10652]  do_writepages+0x338/0x560
[  252.030691][T10652]  ? do_raw_spin_unlock+0x4d/0x210
[  252.030701][T10652]  filemap_flush+0x1e1/0x2e0
[  252.030710][T10652]  ? __pfx_filemap_flush+0x10/0x10
[  252.030717][T10652]  ? ext4_fname_setup_filename+0x247/0x2e0
[  252.030732][T10652]  ? rcu_is_watching+0x15/0xb0
[  252.030741][T10652]  ext4_rename2+0x1060/0x31d0
[  252.030750][T10652]  ? check_noncircular+0xda/0x150
[  252.030759][T10652]  ? __pfx_ext4_rename2+0x10/0x10
[  252.030770][T10652]  ? vfs_rename+0x696/0xef0
[  252.030781][T10652]  ? vfs_rename+0x696/0xef0
[  252.030793][T10652]  ? down_write_nested+0x174/0x210
[  252.030804][T10652]  ? __pfx_down_write_nested+0x10/0x10
[  252.030815][T10652]  ? try_break_deleg+0x5e/0x190
[  252.030824][T10652]  ? __pfx_ext4_rename2+0x10/0x10
[  252.030833][T10652]  vfs_rename+0xbd9/0xef0
[  252.030847][T10652]  ? __pfx_vfs_rename+0x10/0x10
[  252.030856][T10652]  ? do_raw_spin_unlock+0x4d/0x210
[  252.030867][T10652]  ? bpf_lsm_path_rename+0x9/0x20
[  252.030875][T10652]  ? security_path_rename+0x17d/0x460
[  252.030884][T10652]  filename_renameat2+0x533/0x9a0
[  252.030891][T10652]  ? __might_fault+0xaf/0x130
[  252.030902][T10652]  ? __pfx_filename_renameat2+0x10/0x10
[  252.030911][T10652]  ? do_getname+0x151/0x250
[  252.030922][T10652]  __se_sys_renameat2+0x5a/0x2c0
[  252.030928][T10652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.030936][T10652]  do_syscall_64+0x174/0x580
[  252.030945][T10652]  ? trace_irq_disable+0x3b/0x140
[  252.030953][T10652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  252.030962][T10652] RIP: 0033:0x7f496ed9ce59
[  252.030972][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.030986][T10652] RSP: 002b:00007f496fbe5028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  252.030996][T10652] RAX: ffffffffffffffda RBX: 00007f496f015fa0 RCX: 00007f496ed9ce59
[  252.031002][T10652] RDX: ffffffffffffff9c RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  252.031007][T10652] RBP: 00007f496ee32e6f R08: 0000000000000004 R09: 0000000000000000
[  252.031013][T10652] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[  252.031019][T10652] R13: 00007f496f016038 R14: 00007f496f015fa0 R15: 00007ffd646eea18
[  252.031027][T10652]  </TASK>
[  252.356877][T10652] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1996: bg 0: block 234: padding at end of block bitmap is not set
[  252.363565][T10652] EXT4-fs (loop2): Remounting filesystem read-only
[  252.391922][ T5705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.287297][   T35] audit: type=1800 audit(1782883669.297:178): pid=10638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1990" name="file1" dev="loop4" ino=1346 res=0 errno=0
