last executing test programs:

1m42.58264953s ago: executing program 0 (id=826):
r0 = semget(0x1, 0x5, 0x6b4)
semtimedop(r0, &(0x7f0000000280)=[{0x0, 0x7, 0x3800}], 0x1, 0x0)
semop(r0, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}], 0x12)
semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semop(0x0, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x3, 0x3ff])

1m41.731091014s ago: executing program 0 (id=830):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28)

1m41.631936523s ago: executing program 0 (id=831):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[], 0x1, 0x17d, &(0x7f0000000d80)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

1m41.61423237s ago: executing program 0 (id=832):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0)

1m41.450038192s ago: executing program 0 (id=835):
syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1m41.1608446s ago: executing program 0 (id=839):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0)

1m41.051838778s ago: executing program 32 (id=839):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0)

1.446519599s ago: executing program 1 (id=2336):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b7032d7a3d77ba65f6179d16cef7c34648024212402e69cc86c8fce5989be545ce26a9c4f5f2165f36561402b40d94de59edbb0507bf01e3ece0fd57e13bef384234e823d81383eac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f473cd22efb03bcddff402dacf8c1372a5e8ff5bc5b6a5015037cf1236a6167a302d5d082a447099b4ee2bc4"], 0x1, 0x10600, &(0x7f0000020cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file2\x00', 0x8442, 0x5c)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x1fb, 0xfff})

983.512686ms ago: executing program 2 (id=2342):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\n'], 0x1, 0xa07, &(0x7f0000000b00)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+pt6b7XzNVPdvT09PdVZWAsdVY+js/P12ldOmdN4/+/eG/bVlc8kQ7R2vp72THXDOlVOX5yfB6H04sp9c/eu1kt7RKc0t/y3x65lr7udtSSufTvnQ5tdKeS1feeG/u6eMXjl3c//5bh6/embUHAIDx8q3Lh+d3/+VP9+/8+O0HjqRN7eXl+LyV57fn4/4j+cC/HP830ur5qmPqNBXyTeapEfJNdMnXWU4z5JvsUf5UeN1mj3ybasqf6FjWbb1hlJXtuJWqxsyq+UZjZmb5N3la+l0/Vc2cPX3mhXNDqihw2/3zwZTSPpPJNI7Two5h74EAlsXrhTc5H88s3Jr2q032V/61Jxvdnw+3wXpv/8ofrfJ/dcEeh9tno25NZb3K52h7no/XEeL9S4N+/svrxesRzT7r2es6wqhcX+hVz4l1rsda9ap/3C42qq/ntLwP3wjxzs9P/J+Oyv8Y6O5fzv+bTGM7LQx7BwTcteJ9cwtZicf7+mJ8U018c018S018a018W00cxtlvX/5Jer1a+Z0ff9MPej6snGe7J6f/N2B94vnIQcuP9/0O6lbLj/cTw93s9yeePfWV55+7snz/f9Xe/m/k7X1fnm/lz9blnKGcL4zn1dv3/rdWl9Poke/eUJ97uuRferxrdb5q18rrpI79zE31mF79vB298u1dna8V8m3J0+ZQ33h8sjU8rxx/lP1qeb8mw/o2w3pMhXqU/crOnMZ6wFqU7bHX/f9l+5xOzeqF02dOPZ7ny3b6x4nmpsXlB9a53sCt67f9z3Ra3f5ne3t5s9G5X9ixsrzq3C+0wvK5HssP5vnyPfediS1Ly2dOfu/M87d75WHMnXvl1e+eOHPm1A888MADD9oPhr1nAu602Zdf+v7suVdefez0SydePPXiqbMHDx06ODd36KsH52eXjutnO4/ugY1k5Ut/2DUBAAAAAAAAAAAA+vXDY0ev/PndL3+w3P5/pf1faf9f7vwt7f9/HNr/x3bypR18aQe4s0t8KU/oYHUq5Gvm6f9DfXeFcnaH530ip+1x/HL7/1Jc7Ne11Oe+sDz231vyhe4EbuovZSr0QRLHC/x0Ti/m9JcJhqja0n1xTuv6ty7beumfQr8Uo6n838rWUPoxKe2/e/XrVPb/O9ehjtx+69GccNjrCHT3D/1/m0xjOy0sGMUDuDsMe/zPct6zpGf/8M3Ni1PJdu3J1fvL2H8p3Iq7ffxJ5W+s8T/b49/1vf8LI+a11lbuv3929YOOYtOefsuP61/6gd41WPkf5/LL2jyS+it/4Reh/HhBqE//CeVv7bP8m9Z/79rK/28uv7xtjz7Ub/nLNa4aq+sRzxuX63/xvHFxPax/6dtz4PVf40CNN3L5MM5GZZzZQY3K+L+9xPswvpTny46w3OcQxzsZtP7l/oryPbA7vH5V8/1m/N/R9rWc1n0eyvi/ZXtsdZlvdMw3u7y3G3VfA6PqQ9f/TKaxnRYWFu7sCa0aQy2cob//w/6dMOzyh/3+14nj/8Zj+Dj+b4zH8X9jPI7/G+NxfL0Yj+P/xvczjv8b4/eF143jA0/XxD9ZE99TE7+/Jr63Jv6pmvj+mvgDNfEHa+L31sQfqol/pib+2Zr4wzXxR2vin6uJb3SlPcq4rj+Ms9g+z+cfxke5/tPr87+rJg6Mrp++feCp537z7dZy+/+p9vmQch3vSEfexd/OP8qP43Xv1DG/GHs3z/81xO/28x0wTmL/GfH7/ZGaODC6yn1ePt8whqruPfb0229Vr+N8Rsvnc/qFnH4xp4/ldCanszk9kNO5daofd8ZTv/7d4derld/7O0K83/vJY3ug2E/UwT7rE88PDHo/e+zHb1C3Wv4am4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMTWPp7/z8dJXSpXfePPrs8dOzi0ueaOdoLf2d7Jhrtp+X0uM5ncjpz/OD6x+9drIzvZHTKs2lKlXt5emZa+2StqWUzqd96XJqpT2Xrrzx3tzTxy8cu7j//bcOX71z7wAAAABsfP8LAAD//zhdDZg=")
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40)

693.989388ms ago: executing program 1 (id=2344):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd2(0xff, 0x80801)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1})
read$eventfd(r1, &(0x7f0000000080), 0x8)

692.698177ms ago: executing program 2 (id=2345):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

611.575161ms ago: executing program 2 (id=2346):
syz_io_uring_setup(0xf89, &(0x7f0000000500)={0x0, 0x7d0d, 0x10, 0x1, 0x22b}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r0, 0x289e0cb5, 0x0)

611.206279ms ago: executing program 1 (id=2348):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='unlock me'], 0xb)

536.044167ms ago: executing program 3 (id=2349):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4800, 0x0, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="240000001600010400000000000000000a000000040000000c000b"], 0x24}, 0x1, 0xe0ffff}, 0x40080)

535.671478ms ago: executing program 1 (id=2350):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})

486.651311ms ago: executing program 3 (id=2351):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x2})

486.215669ms ago: executing program 3 (id=2352):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0800000012000000200012800e0001006970366772650000700000000c000280060002000104"], 0x40}}, 0x0)

421.54268ms ago: executing program 3 (id=2353):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3})

420.887699ms ago: executing program 1 (id=2354):
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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")

326.030755ms ago: executing program 3 (id=2355):
syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000002100)=ANY=[], 0x3, 0x1a9, &(0x7f0000000300)="$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")
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000ec0)={0x1, {{0xa, 0x3, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x5b6, @local, 0x3}}]}, 0x110)

325.838977ms ago: executing program 2 (id=2356):
r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x10038ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x10, r3, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

325.436921ms ago: executing program 1 (id=2357):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

155.613939ms ago: executing program 2 (id=2358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x74, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x2, 0x1, 'Q.931\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x74}}, 0x0)

360.098µs ago: executing program 3 (id=2359):
socketpair(0x3, 0x4, 0xac, &(0x7f0000000240))
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r1=>r0})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2})

0s ago: executing program 2 (id=2360):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48182' (ED25519) to the list of known hosts.
syzkaller login: [   58.114251][ T5829] cgroup: Unknown subsys name 'net'
[   58.211252][ T5829] cgroup: Unknown subsys name 'cpuset'
[   58.217539][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.634763][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.144749][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.150092][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.153891][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.158311][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.161729][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.210259][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.217239][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.220674][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.225590][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.229202][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.283716][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.288528][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.291741][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.296085][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.302592][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.491464][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   66.614516][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   66.655089][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.659562][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.662872][ T5849] bridge_slave_0: entered allmulticast mode
[   66.666942][ T5849] bridge_slave_0: entered promiscuous mode
[   66.691164][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.694073][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.698443][ T5849] bridge_slave_1: entered allmulticast mode
[   66.702389][ T5849] bridge_slave_1: entered promiscuous mode
[   66.762200][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.778586][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.781044][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.783479][ T5854] bridge_slave_0: entered allmulticast mode
[   66.786248][ T5854] bridge_slave_0: entered promiscuous mode
[   66.791902][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.795672][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.799646][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.802430][ T5854] bridge_slave_1: entered allmulticast mode
[   66.806201][ T5854] bridge_slave_1: entered promiscuous mode
[   66.810728][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   66.879053][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.892932][ T5849] team0: Port device team_slave_0 added
[   66.899361][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.919822][ T5849] team0: Port device team_slave_1 added
[   66.962938][ T5854] team0: Port device team_slave_0 added
[   66.979620][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.982395][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.994246][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.002132][ T5854] team0: Port device team_slave_1 added
[   67.014645][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.017226][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.027054][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.079408][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.082220][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.084742][ T5856] bridge_slave_0: entered allmulticast mode
[   67.089161][ T5856] bridge_slave_0: entered promiscuous mode
[   67.094673][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.097779][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.100542][ T5856] bridge_slave_1: entered allmulticast mode
[   67.104323][ T5856] bridge_slave_1: entered promiscuous mode
[   67.123246][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.125997][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.137332][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.182976][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.185104][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.193950][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.216985][ T5849] hsr_slave_0: entered promiscuous mode
[   67.219660][ T5849] hsr_slave_1: entered promiscuous mode
[   67.224007][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.245336][ T5854] hsr_slave_0: entered promiscuous mode
[   67.248426][ T5854] hsr_slave_1: entered promiscuous mode
[   67.250649][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   67.252625][ T5854] Cannot create hsr debugfs directory
[   67.258265][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.308485][ T5856] team0: Port device team_slave_0 added
[   67.320584][ T5856] team0: Port device team_slave_1 added
[   67.370292][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.372770][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.383035][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.388272][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.390470][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.398997][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.493137][ T5856] hsr_slave_0: entered promiscuous mode
[   67.497049][ T5856] hsr_slave_1: entered promiscuous mode
[   67.499869][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   67.502192][ T5856] Cannot create hsr debugfs directory
[   67.695962][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.705106][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.727744][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.749010][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.808540][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.816253][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.837700][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.844832][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.896046][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.911229][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.918419][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.925532][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.054945][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.067682][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.091202][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   68.114983][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.118347][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.124046][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.126863][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.144631][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   68.167659][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.170507][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.192734][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.195659][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.204239][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.245594][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   68.250827][ T5238] Bluetooth: hci0: command tx timeout
[   68.250833][   T54] Bluetooth: hci1: command tx timeout
[   68.278959][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.281941][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.305276][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.308387][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.334809][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.336486][ T5238] Bluetooth: hci2: command tx timeout
[   68.375006][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.460239][ T5854] veth0_vlan: entered promiscuous mode
[   68.475208][ T5854] veth1_vlan: entered promiscuous mode
[   68.518847][ T5854] veth0_macvtap: entered promiscuous mode
[   68.525856][ T5854] veth1_macvtap: entered promiscuous mode
[   68.547888][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.565490][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.585008][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.598584][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.601866][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.605136][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.640667][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.685541][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.754430][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.761964][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.785786][ T5849] veth0_vlan: entered promiscuous mode
[   68.801096][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.804454][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.818974][ T5849] veth1_vlan: entered promiscuous mode
[   68.825561][ T5856] veth0_vlan: entered promiscuous mode
[   68.843061][ T5856] veth1_vlan: entered promiscuous mode
[   68.873858][ T5849] veth0_macvtap: entered promiscuous mode
[   68.879148][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.893405][ T5849] veth1_macvtap: entered promiscuous mode
[   68.943024][ T5856] veth0_macvtap: entered promiscuous mode
[   68.957483][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.961357][ T5856] veth1_macvtap: entered promiscuous mode
[   68.982401][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.999813][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.008154][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.018123][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.021141][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.037520][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.040571][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.055107][ T5711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.089937][ T5711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.111552][ T5711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.134934][ T5711] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.196141][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.203934][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.233623][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.236102][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.286991][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.293629][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.308789][ T5921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5'.
[   69.317104][ T5921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5'.
[   69.321248][ T5921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5'.
[   69.324678][ T5921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5'.
[   69.330146][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.333534][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.438778][ T5924] process 'syz.0.1' launched './file2' with NULL argv: empty string added
[   69.625459][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'.
[   69.629985][ T5935] loop0: detected capacity change from 0 to 16
[   69.642997][ T5935] erofs (device loop0): mounted with root inode @ nid 36.
[   70.326563][ T5238] Bluetooth: hci1: command tx timeout
[   70.342770][ T5238] Bluetooth: hci0: command tx timeout
[   70.406737][ T5238] Bluetooth: hci2: command tx timeout
[   70.639314][ T5948] loop0: detected capacity change from 0 to 256
[   70.652604][ T5948] =======================================================
[   70.652604][ T5948] WARNING: The mand mount option has been deprecated and
[   70.652604][ T5948]          and is ignored by this kernel. Remove the mand
[   70.652604][ T5948]          option from the mount to silence this warning.
[   70.652604][ T5948] =======================================================
[   70.692959][ T5948] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[   70.717719][ T5948] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[   70.892712][ T5946] loop1: detected capacity change from 0 to 40427
[   70.939891][ T5946] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   70.951283][ T5946] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   71.015841][ T5946] F2FS-fs (loop1): invalid crc value
[   71.174827][ T5946] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   71.183114][ T5946] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   71.185453][ T5946] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   71.290526][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.292680][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.415295][ T5849] syz-executor: attempt to access beyond end of device
[   71.415295][ T5849] loop1: rw=2051, sector=77824, nr_sectors = 2560 limit=40427
[   71.433791][ T5849] F2FS-fs (loop1): Issue discard(9728, 9728, 320) failed, ret: -5
[   72.407440][ T5238] Bluetooth: hci0: command tx timeout
[   72.407480][   T54] Bluetooth: hci1: command tx timeout
[   72.487969][   T54] Bluetooth: hci2: command tx timeout
[   72.629350][ T5968] loop2: detected capacity change from 0 to 32768
[   72.675813][ T5968] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   72.696722][ T5968] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   72.783189][ T5854] ocfs2: Unmounting device (7,2) on (node local)
[   73.144491][ T6008] loop0: detected capacity change from 0 to 128
[   73.152856][ T6008] vfat: Unknown parameter '0177777777777777777777701777777777777777777777'
[   74.267113][  T794] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.416484][  T794] usb 1-1: Using ep0 maxpacket: 8
[   74.422352][  T794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   74.426198][  T794] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[   74.431396][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.438752][  T794] usb 1-1: config 0 descriptor??
[   74.449100][  T794] gspca_main: vc032x-2.14.0 probing 046d:0892
[   74.488512][   T54] Bluetooth: hci1: command tx timeout
[   74.488794][ T5238] Bluetooth: hci0: command tx timeout
[   74.568161][ T5238] Bluetooth: hci2: command tx timeout
[   74.714080][ T6065] loop2: detected capacity change from 0 to 4096
[   74.811903][ T1091] ntfs3(loop2): ino=5, mi_enum_attr
[   75.060965][ T6067] loop2: detected capacity change from 0 to 32768
[   75.104104][ T6067] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   75.120748][ T6067] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   75.130806][ T6067] XFS (loop2): Starting recovery (logdev: internal)
[   75.144608][ T6067] XFS (loop2): Ending recovery (logdev: internal)
[   75.169065][ T5854] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   75.366158][ T6081] loop2: detected capacity change from 0 to 512
[   75.406023][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.411324][ T6081] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.474410][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.892972][ T5896] usb 1-1: USB disconnect, device number 2
[   76.454687][ T6121] input: syz0 as /devices/virtual/input/input4
[   78.616449][ T6165] loop2: detected capacity change from 0 to 32768
[   78.624205][ T6165] bcachefs (/dev/loop2): error validating superblock: Invalid option shard_inode_numbers_bits: too big (max 8)
[   78.628872][ T6165] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big
[   78.849334][ T6172] fuse: Bad value for 'fd'
[   79.883575][ T6208] vivid-001: disconnect
[   79.933820][ T5896] vivid-001: reconnect
[   80.432664][ T6181] loop2: detected capacity change from 0 to 262144
[   80.441044][ T6181] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.103 (6181)
[   80.452219][ T6181] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   80.455676][ T6181] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   80.521499][   T33] audit: type=1400 audit(1758774513.635:2): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6227 comm="syz.1.120"
[   80.568535][ T6181] BTRFS info (device loop2): enabling ssd optimizations
[   80.570808][ T6181] BTRFS info (device loop2): enabling free space tree
[   80.580834][   T33] audit: type=1800 audit(1758774513.695:3): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.103" name="file1" dev="loop2" ino=260 res=0 errno=0
[   80.687256][ T5854] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   81.155544][ T6256] IPVS: sh: UDP 172.20.20.187:0 - no destination available
[   81.158561][ T5896] IPVS: starting estimator thread 0...
[   81.257113][ T6260] IPVS: using max 62 ests per chain, 148800 per kthread
[   81.262334][ T6264] loop0: detected capacity change from 0 to 64
[   81.350666][ T6266] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   81.396692][   T97] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   81.568743][   T97] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.576931][   T97] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[   81.583983][   T97] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.599222][   T97] usb 3-1: config 0 descriptor??
[   81.707824][  T794] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   81.859380][  T794] usb 1-1: Using ep0 maxpacket: 8
[   81.868966][  T794] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f
[   81.884009][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.887606][  T794] usb 1-1: Product: syz
[   81.889252][  T794] usb 1-1: Manufacturer: syz
[   81.891103][  T794] usb 1-1: SerialNumber: syz
[   81.898487][  T794] usb 1-1: config 0 descriptor??
[   81.911850][  T794]  (null): radio-mr800 - initialization failed
[   81.914542][  T794] radio-mr800 1-1:0.0: probe with driver radio-mr800 failed with error -22
[   81.919526][  T794] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   82.035420][   T97] hid_mf 0003:0079:1846.0001: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0
[   82.039045][   T97] hid_mf 0003:0079:1846.0001: Invalid report, this should never happen!
[   82.041543][   T97] hid_mf 0003:0079:1846.0001: Force feedback init failed.
[   82.112203][  T794] usb 1-1: USB disconnect, device number 3
[   82.183738][ T6284] netlink: 'syz.1.141': attribute type 2 has an invalid length.
[   82.217806][   T97] usb 3-1: USB disconnect, device number 2
[   82.665932][ T6294] syzkaller1: entered promiscuous mode
[   82.670345][ T6294] syzkaller1: entered allmulticast mode
[   82.822984][ T6300] loop2: detected capacity change from 0 to 256
[   82.837748][   T33] audit: type=1800 audit(1758774515.955:4): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.149" name="file1" dev="loop2" ino=1048593 res=0 errno=0
[   82.839897][ T6300] FAT-fs (loop2): error, clusters badly computed (0 != 128)
[   82.850968][ T6300] FAT-fs (loop2): Filesystem has been set read-only
[   82.853155][ T6300] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   82.863388][ T6300] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[   83.046646][ T5896] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   83.198325][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   83.207297][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34151, setting to 64
[   83.221309][ T5896] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=d4.aa
[   83.225227][ T5896] usb 1-1: New USB device strings: Mfr=16, Product=150, SerialNumber=0
[   83.229955][ T5896] usb 1-1: Product: syz
[   83.231670][ T5896] usb 1-1: Manufacturer: syz
[   83.247539][ T5896] usb 1-1: config 0 descriptor??
[   83.250274][ T6298] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   83.265567][ T5896] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[   83.304179][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.307359][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.310329][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.312927][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.315429][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.318414][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.321318][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.324136][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.327023][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.329635][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.332044][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.334557][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.336985][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.339805][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.342679][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.345609][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.348517][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.351385][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.354357][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.357410][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.360044][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.362503][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.365003][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.367663][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.370645][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.373274][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.375693][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.378093][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.381006][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.383957][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.386996][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.389406][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.391990][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.394798][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.397811][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.400646][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.403480][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.406454][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.409167][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.411848][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.414760][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.417693][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.420659][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.423122][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.425476][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.427878][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.430358][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.432707][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.435076][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.437559][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.440141][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.442527][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.444976][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.449092][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.452010][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.454516][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.457050][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.459598][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.462578][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.464998][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.467412][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.469827][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.472409][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.474823][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.477267][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.479641][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.482061][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.484444][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.488319][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.491233][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.493987][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.496490][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.498855][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.501419][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.504283][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.507205][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.510102][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.513022][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.515881][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.518826][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.521721][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.524627][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.527494][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.529872][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.532260][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.534976][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.537886][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.540839][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.543739][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.546701][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.549363][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.551746][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.554134][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.556601][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.559326][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.562246][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.565107][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.567787][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.570675][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.573565][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.576482][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.579143][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.581569][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.583964][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.586430][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.588823][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.591480][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.593865][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.596372][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.598854][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.601597][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.604262][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.607285][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.610207][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.613231][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.616215][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.619270][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.622264][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.624969][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.627699][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.630002][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.632353][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.634720][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.637103][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.639552][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.641868][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.644491][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.647150][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.650118][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.652976][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.655662][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.658096][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.660473][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.662820][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.665163][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.667850][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.670229][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.672571][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.675015][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.677413][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.679841][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.682342][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.684743][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.687173][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.689908][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.692301][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.695297][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.698387][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.701379][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.704121][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.707167][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.710036][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.712669][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.715245][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.717642][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.720020][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.722357][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.724886][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.727740][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.730713][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.733506][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.736213][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.738810][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.741524][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.743910][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.746618][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.749212][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.752235][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.754699][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.757268][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.759732][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.762212][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.765498][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.765927][ T5283] usb 1-1: control msg error: -71
[   83.768016][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.768729][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.768974][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.777996][    C1] usb 1-1: pegasus_irq - usb_submit_urb failed with result -1
[   83.794252][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.796713][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[   83.798716][ T5896] usb 1-1: USB disconnect, device number 4
[   83.798937][    C0] usb 1-1: pegasus_irq - usb_submit_urb failed with result -19
[   83.806282][ T5283] usb 1-1: control msg error: -19
[   83.839560][ T6314] loop2: detected capacity change from 0 to 32768
[   83.857362][ T6314] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   83.882888][ T6314] (syz.2.156,6314,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1
[   83.904123][ T6314] (syz.2.156,6314,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[   83.913190][ T6314] (syz.2.156,6314,0):ocfs2_mknod:301 ERROR: status = -2
[   83.915770][ T6314] (syz.2.156,6314,0):ocfs2_mknod:505 ERROR: status = -2
[   83.918323][ T6314] (syz.2.156,6314,0):ocfs2_create:678 ERROR: status = -2
[   83.943358][ T6322] netlink: 'syz.1.157': attribute type 15 has an invalid length.
[   83.945682][ T6322] netlink: 'syz.1.157': attribute type 7 has an invalid length.
[   83.947317][ T5854] ocfs2: Unmounting device (7,2) on (node local)
[   84.327367][  T794] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   84.490124][  T794] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[   84.493693][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.508983][  T794] usb 3-1: config 0 descriptor??
[   84.876735][ T5896] usb 3-1: USB disconnect, device number 3
[   84.923155][ T6350] Zero length message leads to an empty skb
[   85.536589][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   85.593234][ T6370] loop2: detected capacity change from 0 to 512
[   85.613974][ T6370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.618960][ T6370] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.632872][   T33] audit: type=1800 audit(1758774518.745:5): pid=6370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.177" name="file2" dev="loop2" ino=16 res=0 errno=0
[   85.658581][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.691441][   T10] usb 1-1: Using ep0 maxpacket: 32
[   85.696140][   T10] usb 1-1: config 0 has an invalid interface number: 13 but max is 0
[   85.701776][   T10] usb 1-1: config 0 has no interface number 0
[   85.705199][   T10] usb 1-1: config 0 interface 13 has no altsetting 0
[   85.711296][   T10] usb 1-1: New USB device found, idVendor=54d5, idProduct=953f, bcdDevice=82.82
[   85.715265][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.718831][   T10] usb 1-1: Product: syz
[   85.720691][   T10] usb 1-1: Manufacturer: syz
[   85.725357][   T10] usb 1-1: SerialNumber: syz
[   85.731774][   T10] usb 1-1: config 0 descriptor??
[   85.736004][   T10] usb-storage 1-1:0.13: USB Mass Storage device detected
[   85.771917][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'.
[   85.834932][ T6381] program syz.2.180 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   85.940095][   T10] usb 1-1: USB disconnect, device number 5
[   85.948273][ T1090] Bluetooth: hci3: Frame reassembly failed (-84)
[   85.957219][ T6385] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2
[   85.962554][ T1090] Bluetooth: hci3: Frame reassembly failed (-84)
[   86.653523][   T24] cfg80211: failed to load regulatory.db
[   86.687888][ T6387] loop0: detected capacity change from 0 to 32768
[   86.692382][ T6387] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section ext: field too small (64 < 88)
[   86.692382][ T6387] ext (size 64):
[   86.692382][ T6387] Recovery passes required:      recovery_pass_empty,scan_for_btree_nodes,accounting_read,stripes_read,set_may_go_rw,journal_replay,check_btree_backpointers,check_backpointers_to_extents,bucket_gens_init,reconstruct_snapshots,check_snapshot_trees,check_snapshots,check_subvols,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_unreachable_inodes,check_nlinks,resume_logged_ops,fix_reflink_p
[   86.692382][ T6387] Errors to silently fix:        jset_unknown_csum,bkey_at_pos_max,alloc_key_empty_but_have_data,lru_entry_bad,btree_ptr_val_too_big,btree_ptr_v2_val_too_big,extent_ptrs_invalid_entry,extent_ptrs_no_ptrs,extent_ptrs_redundant_crc,extent_ptrs_unwritten,extent_ptrs_written_and_unwritten,ptr_to_invalid_device,ptr_to_duplicate_device,ptr_after_last_bucket,ptr_before_first_bucket,ptr_to_missing_alloc_key,ptr_to_missing_replicas_entry,ptr_too_stale,stale_dirty_ptr,ptr_crc_uncompress
[   86.692531][ T6387] bcachefs: bch2_fs_get_tree() error: invalid_sb_ext
[   88.006605][ T5238] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   88.203235][ T6401] loop0: detected capacity change from 0 to 128
[   88.446659][  T794] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   88.644989][  T794] usb 3-1: config 0 has an invalid interface number: 56 but max is 0
[   88.647746][  T794] usb 3-1: config 0 has no interface number 0
[   88.652249][  T794] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76
[   88.655224][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.658772][  T794] usb 3-1: Product: syz
[   88.660467][  T794] usb 3-1: Manufacturer: syz
[   88.662318][  T794] usb 3-1: SerialNumber: syz
[   88.670940][  T794] usb 3-1: config 0 descriptor??
[   89.173495][  T794] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[   89.379201][  T794] peak_usb 3-1:0.56 can0: sending command failure: -22
[   89.381700][  T794] peak_usb 3-1:0.56 can0: sending command failure: -22
[   89.383892][  T794] peak_usb 3-1:0.56 can0: sending command failure: -22
[   89.453723][  T794] peak_usb 3-1:0.56: probe with driver peak_usb failed with error -22
[   89.610841][ T5896] usb 3-1: USB disconnect, device number 4
[   89.874672][ T6435] loop0: detected capacity change from 0 to 32768
[   89.878388][ T6435] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas: bad nr_required in entry (unknown data_type 155): 239/36 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 8 26 41 44 51 70 73 87 93 102 106 112 120 128 144 184 203 237 245]
[   89.878388][ T6435] replicas (size 64):
[   89.878388][ T6435] (unknown data_type 155): 239/36 [237 106 112 73 203 144 87 44 70 41 26 120 93 128 0 0 0 0 0 0 0 0 0 0 1 8 0 0 0 184 245 51 102 0 0 0]
[   89.878388][ T6435] 
[   89.897759][ T6435] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[   90.231078][ T6445] 8021q: adding VLAN 0 to HW filter on device bond1
[   90.311340][ T6450] loop2: detected capacity change from 0 to 7
[   90.321877][ T6450]  loop2:
[   90.323291][ T6450] loop2: partition table partially beyond EOD, truncated
[   90.555152][ T6460] loop0: detected capacity change from 0 to 8192
[   90.602814][ T5851] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[   90.610828][ T5851] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   90.621515][ T5851]  loop0: unable to read partition table
[   90.621868][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'.
[   90.642102][ T6460] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[   90.645810][ T6460] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   90.650324][ T6460]  loop0: unable to read partition table
[   90.652645][ T6460] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[   90.879768][ T6475] syz_tun: entered allmulticast mode
[   90.889536][ T6474] syz_tun: left allmulticast mode
[   90.967710][ T5316] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   91.079021][ T6481] loop0: detected capacity change from 0 to 2048
[   91.104116][ T6481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.128797][ T5316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.133179][ T5316] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00
[   91.138460][ T6481] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.223: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   91.149692][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.155026][ T6481] EXT4-fs (loop0): Remounting filesystem read-only
[   91.159802][ T5316] usb 3-1: config 0 descriptor??
[   91.193615][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.319219][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'.
[   91.632301][ T5316] hid (null): unknown global tag 0xd
[   91.674095][ T5316] itetech 0003:06CB:73F4.0002: ignoring exceeding usage max
[   91.690324][ T5316] itetech 0003:06CB:73F4.0002: unknown global tag 0xd
[   91.698827][ T5316] itetech 0003:06CB:73F4.0002: item 0 2 1 13 parsing failed
[   91.706150][ T5316] itetech 0003:06CB:73F4.0002: probe with driver itetech failed with error -22
[   91.836991][  T794] usb 3-1: USB disconnect, device number 5
[   91.936739][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   92.026278][ T6511] @: renamed from vlan0 (while UP)
[   92.106475][    T9] usb 1-1: Using ep0 maxpacket: 8
[   92.120000][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   92.123542][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.127261][    T9] usb 1-1: Product: syz
[   92.128791][    T9] usb 1-1: Manufacturer: syz
[   92.130625][    T9] usb 1-1: SerialNumber: syz
[   92.133182][ T6513] warning: `syz.1.237' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   92.143035][    T9] usb 1-1: config 0 descriptor??
[   92.360648][    T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   92.892195][    T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[   92.900721][    T9] usb 1-1: USB disconnect, device number 6
[   92.953065][ T6532] loop2: detected capacity change from 0 to 2048
[   92.974958][ T6532] NILFS (loop2): invalid segment: Magic number mismatch
[   92.980961][ T6532] NILFS (loop2): trying rollback from an earlier position
[   92.997051][ T6532] NILFS (loop2): recovery complete
[   93.002366][ T6533] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   93.072275][ T6535] loop2: detected capacity change from 0 to 128
[   93.084745][ T6535] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   93.092042][ T6535] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   93.127120][ T5854] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   93.283166][ T6544] capability: warning: `syz.2.250' uses deprecated v2 capabilities in a way that may be insecure
[   93.464878][ T6556] loop0: detected capacity change from 0 to 128
[   93.482453][ T6556] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   93.495536][ T6556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.567405][ T5316] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   93.736458][ T5316] usb 3-1: Using ep0 maxpacket: 8
[   93.744619][ T5316] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[   93.748442][ T5316] usb 3-1: config 0 has no interface number 0
[   93.750840][ T5316] usb 3-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4
[   93.755369][ T5316] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8
[   93.767665][ T5316] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[   93.772508][ T5316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.786295][ T5316] usb 3-1: Product: syz
[   93.788119][ T5316] usb 3-1: Manufacturer: syz
[   93.789984][ T5316] usb 3-1: SerialNumber: syz
[   93.794209][ T5316] usb 3-1: config 0 descriptor??
[   93.801009][ T6548] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   93.846473][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   94.006450][    T9] usb 1-1: Using ep0 maxpacket: 16
[   94.019159][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.021958][ T5316] ath6kl: Failed to submit usb control message: -71
[   94.026442][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.028876][ T5316] ath6kl: unable to send the bmi data to the device: -71
[   94.030160][    T9] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[   94.030180][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.032490][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'.
[   94.033323][ T5316] ath6kl: Unable to send get target info: -71
[   94.042354][    T9] usb 1-1: config 0 descriptor??
[   94.062513][ T5316] ath6kl: Failed to init ath6kl core: -71
[   94.072138][ T5316] ath6kl_usb 3-1:0.239: probe with driver ath6kl_usb failed with error -71
[   94.087104][ T5316] usb 3-1: USB disconnect, device number 6
[   94.119891][ T6587] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253
[   94.122723][ T6587] PKCS7: Only support pkcs7_signedData type
[   94.211225][ T6591] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   94.484140][    T9] hid (null): unknown global tag 0xc
[   94.649355][ T6608] netlink: 'syz.1.281': attribute type 2 has an invalid length.
[   94.679386][    T9] usb 1-1: string descriptor 0 read error: -71
[   94.714488][    T9] usb 1-1: Max retries (5) exceeded reading string descriptor 200
[   94.727117][    T9] letsketch 0003:6161:4D15.0003: probe with driver letsketch failed with error -32
[   94.742799][    T9] usb 1-1: USB disconnect, device number 7
[   94.814439][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'.
[   94.923686][ T6619] loop2: detected capacity change from 0 to 1024
[   94.927450][ T6619] EXT4-fs: inline encryption not supported
[   94.929698][ T6619] EXT4-fs: Ignoring removed bh option
[   94.950369][ T6619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.981835][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.124303][ T6625] netlink: 'syz.2.288': attribute type 9 has an invalid length.
[   95.131808][ T6625] netlink: 184 bytes leftover after parsing attributes in process `syz.2.288'.
[   95.356021][ T6633] loop2: detected capacity change from 0 to 4096
[   95.360693][ T6633] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   95.397665][ T6633] ntfs3(loop2): ino=0, mi_enum_attr
[   95.399936][ T6633] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   95.414915][ T6633] ntfs3(loop2): failed to replay log file. Can't mount rw!
[   95.584227][ T6641] loop2: detected capacity change from 0 to 4096
[   95.614830][ T6645] Illegal XDP return value 4294967294 on prog  (id 29) dev N/A, expect packet loss!
[   95.619018][ T6641] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   95.668733][ T6641] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   95.676047][ T6641] ntfs3(loop2): Failed to load $Extend (-22).
[   95.682866][ T6641] ntfs3(loop2): Failed to initialize $Extend.
[   95.833646][ T6655] loop2: detected capacity change from 0 to 256
[   95.947806][ T6659] tipc: Started in network mode
[   95.949766][ T6659] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[   95.952711][ T6659] tipc: Enabled bearer <eth:macvlan0>, priority 10
[   96.016262][ T6663] batadv_slave_1: entered promiscuous mode
[   96.062677][ T6662] batadv_slave_1: left promiscuous mode
[   96.529830][ T6688] loop2: detected capacity change from 0 to 512
[   96.538097][ T6688] EXT4-fs: Ignoring removed oldalloc option
[   96.547163][ T6688] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.552895][ T6688] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   96.564137][ T6688] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   96.576611][ T6688] EXT4-fs (loop2): 1 truncate cleaned up
[   96.581157][ T6688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.601801][ T6688] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.318: invalid fast symlink length 39
[   96.643485][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.699014][ T6692] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.769090][ T6685] loop0: detected capacity change from 0 to 32768
[   96.800267][ T6685] JBD2: journal file too short 1,0
[   96.808378][ T6685] (syz.0.317,6685,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[   96.821519][ T6685] (syz.0.317,6685,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[   96.832435][ T6685] (syz.0.317,6685,1):ocfs2_check_volume:2432 ERROR: status = -22
[   96.840864][ T6685] (syz.0.317,6685,1):ocfs2_mount_volume:1764 ERROR: status = -22
[   96.848356][ T6685] (syz.0.317,6685,1):ocfs2_fill_super:1177 ERROR: status = -22
[   96.872173][ T6697] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   96.874963][ T6697] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   96.901823][ T6697] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   97.094712][   T24] tipc: Node number set to 10398378
[   97.591622][ T6711] loop0: detected capacity change from 0 to 2048
[   97.612671][ T6711] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051
[   97.630742][ T6711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.905692][ T6720] loop0: detected capacity change from 0 to 2048
[   97.908560][ T6722] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.912802][ T6722] syzkaller0: entered promiscuous mode
[   97.914838][ T6722] syzkaller0: entered allmulticast mode
[   97.931009][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'.
[   97.938977][ T6722] tipc: Resetting bearer <eth:syzkaller0>
[   97.944764][ T6721] tipc: Resetting bearer <eth:syzkaller0>
[   97.948697][ T5851]  loop0: p1 < > p4
[   97.950252][ T5851] loop0: partition table partially beyond EOD, truncated
[   97.963728][ T6721] tipc: Disabling bearer <eth:syzkaller0>
[   97.964043][ T5851] loop0: p4 start 268435456 is beyond EOD, truncated
[   97.984155][ T6720]  loop0: p1 < > p4
[   97.985735][ T6720] loop0: partition table partially beyond EOD, truncated
[   97.991885][ T6720] loop0: p4 start 268435456 is beyond EOD, truncated
[   98.106137][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   98.466006][ T6747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.344'.
[   98.471028][ T6747] netlink: 60 bytes leftover after parsing attributes in process `syz.1.344'.
[   98.619001][ T6755] input: syz0 as /devices/virtual/input/input6
[   98.853649][ T6759] loop2: detected capacity change from 0 to 32768
[   99.374313][ T6782] futex_wake_op: syz.0.360 tries to shift op by -2048; fix this program
[   99.496459][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   99.684850][   T24] usb 3-1: Using ep0 maxpacket: 16
[   99.751517][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.762461][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   99.772948][   T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   99.778544][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.838296][   T24] usb 3-1: config 0 descriptor??
[  100.145590][ T6797] loop0: detected capacity change from 0 to 512
[  100.149255][ T6797] ext2: Unknown parameter 'euid<00000000000000000000'
[  100.318417][   T24] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input7
[  100.422636][   T24] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  100.505300][   T24] usb 3-1: USB disconnect, device number 7
[  100.806493][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  100.966477][   T10] usb 1-1: Using ep0 maxpacket: 32
[  100.971077][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.975451][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00
[  100.981645][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.988153][   T10] usb 1-1: config 0 descriptor??
[  101.157115][   T24] IPVS: starting estimator thread 0...
[  101.200804][ T6823] mmap: syz.1.378 (6823) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  101.247909][ T6821] IPVS: using max 47 ests per chain, 112800 per kthread
[  101.501642][ T6826] loop2: detected capacity change from 0 to 32768
[  101.523717][ T6826] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  101.568411][ T5854] ocfs2: Unmounting device (7,2) on (node local)
[  101.601822][   T10] usb 1-1: USB disconnect, device number 8
[  101.734663][ T6844] loop2: detected capacity change from 0 to 1024
[  101.805380][  T794] Process accounting resumed
[  101.832085][ T3561] hfsplus: b-tree write err: -5, ino 4
[  101.905286][ T6842] Process accounting resumed
[  101.955492][ T6853] syz.2.390 uses obsolete (PF_INET,SOCK_PACKET)
[  102.161133][ T6865] 9pnet_fd: Insufficient options for proto=fd
[  102.558385][ T6867] loop0: detected capacity change from 0 to 40427
[  102.574305][ T6867] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(32256)
[  102.594969][ T6867] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  102.598882][ T6867] F2FS-fs (loop0): build fault injection rate: 14
[  102.601597][ T6867] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  102.610605][ T6867] F2FS-fs (loop0): invalid crc value
[  102.620298][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  102.643040][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  102.732735][ T6867] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.736249][ T6867] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  102.747286][ T6867] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  102.749516][ T6867] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  102.756138][ T6867] syz.0.397: attempt to access beyond end of device
[  102.756138][ T6867] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  102.771997][ T6867] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  102.782435][ T6867] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of __vfs_getxattr+0x3f4/0x430
[  102.804680][ T5856] syz-executor: attempt to access beyond end of device
[  102.804680][ T5856] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  102.818845][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  102.818869][ T5856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.818878][ T5856] Call Trace:
[  102.818885][ T5856]  <TASK>
[  102.818892][ T5856]  dump_stack_lvl+0x189/0x250
[  102.818930][ T5856]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.818946][ T5856]  ? __pfx_queue_work_on+0x10/0x10
[  102.818960][ T5856]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  102.818982][ T5856]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  102.819013][ T5856]  f2fs_handle_critical_error+0x37c/0x540
[  102.819040][ T5856]  f2fs_write_end_io+0x886/0xb60
[  102.819072][ T5856]  __submit_merged_bio+0x27a/0x6a0
[  102.819097][ T5856]  __submit_merged_write_cond+0x255/0x530
[  102.819128][ T5856]  f2fs_write_data_pages+0x261d/0x3000
[  102.819173][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  102.819226][ T5856]  ? __mod_zone_page_state+0xd7/0x140
[  102.819255][ T5856]  ? folios_put_refs+0x560/0x640
[  102.819282][ T5856]  ? __lock_acquire+0xab9/0xd20
[  102.819311][ T5856]  ? do_raw_spin_lock+0x121/0x290
[  102.819338][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  102.819354][ T5856]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  102.819368][ T5856]  do_writepages+0x32e/0x550
[  102.819397][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  102.819417][ T5856]  filemap_fdatawrite+0x199/0x240
[  102.819437][ T5856]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  102.819526][ T5856]  ? do_raw_spin_unlock+0x4d/0x240
[  102.819547][ T5856]  f2fs_sync_dirty_inodes+0x31f/0x830
[  102.819576][ T5856]  f2fs_write_checkpoint+0x95a/0x1df0
[  102.819612][ T5856]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  102.819670][ T5856]  ? kill_f2fs_super+0x298/0x6c0
[  102.819690][ T5856]  kill_f2fs_super+0x2c3/0x6c0
[  102.819710][ T5856]  ? __pfx_kill_f2fs_super+0x10/0x10
[  102.819722][ T5856]  ? radix_tree_delete_item+0x2b6/0x400
[  102.819743][ T5856]  ? shrinker_free+0x2ce/0x3e0
[  102.819760][ T5856]  deactivate_locked_super+0xbc/0x130
[  102.819780][ T5856]  cleanup_mnt+0x425/0x4c0
[  102.819796][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.819813][ T5856]  task_work_run+0x1d4/0x260
[  102.819835][ T5856]  ? __pfx_task_work_run+0x10/0x10
[  102.819850][ T5856]  ? __x64_sys_umount+0x122/0x160
[  102.819873][ T5856]  ? exit_to_user_mode_loop+0x40/0x110
[  102.819897][ T5856]  exit_to_user_mode_loop+0xec/0x110
[  102.819916][ T5856]  do_syscall_64+0x2bd/0x3b0
[  102.819930][ T5856]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.819943][ T5856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.819956][ T5856]  ? exc_page_fault+0x9f/0xf0
[  102.819972][ T5856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.819984][ T5856] RIP: 0033:0x7fe22318ff57
[  102.819999][ T5856] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  102.820010][ T5856] RSP: 002b:00007ffea31563e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  102.820025][ T5856] RAX: 0000000000000000 RBX: 00007fe223211c2d RCX: 00007fe22318ff57
[  102.820034][ T5856] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea31564a0
[  102.820041][ T5856] RBP: 00007ffea31564a0 R08: 0000000000000000 R09: 0000000000000000
[  102.820049][ T5856] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea3157530
[  102.820057][ T5856] R13: 00007fe223211c2d R14: 000000000001911b R15: 00007ffea3157570
[  102.820082][ T5856]  </TASK>
[  102.820090][ T5856] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  102.929956][ T6906] netlink: 16 bytes leftover after parsing attributes in process `syz.1.414'.
[  103.090348][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.093973][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.218580][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'.
[  103.320400][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.341088][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.703006][ T6901] tipc: Resetting bearer <eth:macvlan0>
[  103.813624][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.818541][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.833494][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.845404][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.904849][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'.
[  106.242376][ T6968] loop2: detected capacity change from 0 to 32768
[  106.251618][ T6968] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: freespace initialized but fs has no alloc info
[  106.251618][ T6968] members_v2 (size 152):
[  106.251618][ T6968] Device:                        0
[  106.251618][ T6968]   Label:                       (none)
[  106.251618][ T6968]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  106.251618][ T6968]   Size:                        16777216
[  106.251618][ T6968]   read errors:                 0
[  106.251618][ T6968]   write errors:                0
[  106.251618][ T6968]   checksum errors:             0
[  106.251618][ T6968]   seqread iops:                0
[  106.251618][ T6968]   seqwrite iops:               0
[  106.251618][ T6968]   randread iops:               0
[  106.251618][ T6968]   randwrite iops:              0
[  106.251618][ T6968]   Bucket size:                 131072
[  106.251618][ T6968]   First bucket:                0
[  106.251618][ T6968]   Buckets:                     128
[  106.251618][ T6968]   Last mount:                  1714681267
[  106.251618][ T6968]   Last superblock write:       42
[  106.251618][ T6968]   State:                       rw
[  106.251618][ T6968]   Data allowed:                journal,btree,user
[  106.251618][ T6968]   Has data:                    (none)
[  106.251618][ T6968]   Btree allocated bitmap blocksize:256
[  106.251618][ T6968]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  106.251618][ T6968]  
[  106.251711][ T6968] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  106.369174][ T6974] IPVS: stopping master sync thread 6975 ...
[  106.580331][   T33] audit: type=1326 audit(1758774539.695:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22318ec29 code=0x7ffc0000
[  106.588183][   T33] audit: type=1326 audit(1758774539.705:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22318ec29 code=0x7ffc0000
[  106.595389][   T33] audit: type=1326 audit(1758774539.705:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe22318d590 code=0x7ffc0000
[  106.605797][   T33] audit: type=1326 audit(1758774539.705:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe22318d590 code=0x7ffc0000
[  106.614961][   T33] audit: type=1326 audit(1758774539.705:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22318ec29 code=0x7ffc0000
[  106.623225][   T33] audit: type=1326 audit(1758774539.705:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22318ec29 code=0x7ffc0000
[  106.630822][   T33] audit: type=1326 audit(1758774539.725:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fe22318ec29 code=0x7ffc0000
[  106.641153][   T33] audit: type=1326 audit(1758774539.725:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22318ec29 code=0x7ffc0000
[  106.648604][   T33] audit: type=1326 audit(1758774539.725:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22318ec29 code=0x7ffc0000
[  106.655735][   T33] audit: type=1326 audit(1758774539.735:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.0.447" exe="/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe22318ec29 code=0x7ffc0000
[  107.102361][ T7020] netlink: 68 bytes leftover after parsing attributes in process `syz.2.460'.
[  107.298251][ T7037] overlayfs: failed to clone upperpath
[  107.357104][ T5897] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  107.529360][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.533922][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.539731][ T5897] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  107.544213][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.553722][ T5897] usb 1-1: config 0 descriptor??
[  107.968403][ T5897] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  107.971426][ T5897] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  107.974320][ T5897] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  107.978011][ T5897] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  107.980961][ T5897] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  107.991810][ T5897] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  108.206753][ T5897] playstation 0003:054C:0DF2.0006: Invalid byte count transferred, expected 20 got 0
[  108.210467][ T5897] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22
[  108.213379][ T5897] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense
[  108.216249][ T5897] playstation 0003:054C:0DF2.0006: Failed to create dualsense.
[  108.229078][ T5897] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22
[  108.600189][ T5897] usb 1-1: USB disconnect, device number 9
[  109.469390][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'.
[  109.491732][ T7071] loop0: detected capacity change from 0 to 32768
[  109.505003][ T7071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.484 (7071)
[  109.552562][ T7071] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.559394][ T7071] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  109.691140][ T7071] BTRFS info (device loop0): enabling ssd optimizations
[  109.694013][ T7071] BTRFS info (device loop0): enabling free space tree
[  109.741899][ T5856] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.005846][ T7118] loop2: detected capacity change from 0 to 16
[  110.009843][ T7118] erofs (device loop2): mounted with root inode @ nid 36.
[  110.143144][ T7126] netlink: 176 bytes leftover after parsing attributes in process `syz.0.502'.
[  110.175681][ T7125] syz_tun: entered promiscuous mode
[  110.188027][ T7125] batadv_slave_0: entered promiscuous mode
[  110.203551][ T7125] hsr1: entered allmulticast mode
[  110.205599][ T7125] syz_tun: entered allmulticast mode
[  110.211980][ T7125] batadv_slave_0: entered allmulticast mode
[  110.253111][ T7133] loop0: detected capacity change from 0 to 2048
[  110.289722][ T7133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.329481][ T7144] capability: warning: `syz.2.510' uses 32-bit capabilities (legacy support in use)
[  110.354548][   T68] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  110.364655][   T68] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  110.373415][   T68] EXT4-fs (loop0): This should not happen!! Data will be lost
[  110.373415][   T68] 
[  110.378102][   T68] EXT4-fs (loop0): Total free blocks count 0
[  110.380459][   T68] EXT4-fs (loop0): Free/Dirty block details
[  110.382828][   T68] EXT4-fs (loop0): free_blocks=4096
[  110.384950][   T68] EXT4-fs (loop0): dirty_blocks=0
[  110.391236][   T68] EXT4-fs (loop0): Block reservation details
[  110.393697][   T68] EXT4-fs (loop0): i_reserved_data_blocks=0
[  110.399772][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.483211][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'.
[  110.491600][ T7151] loop2: detected capacity change from 0 to 2048
[  110.502443][ T7151] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  110.538301][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'.
[  110.538703][ T7151] syz.2.514: attempt to access beyond end of device
[  110.538703][ T7151] loop2: rw=0, sector=111568486480, nr_sectors = 2 limit=2048
[  110.551218][ T7151] NILFS (loop2): I/O error reading meta-data file (ino=4, block-offset=0)
[  110.555123][ T7151] NILFS (loop2): error -5 while loading last checkpoint (checkpoint number=2)
[  110.663538][ T7159] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  110.740339][ T5897] IPVS: starting estimator thread 0...
[  110.838401][ T7162] IPVS: using max 43 ests per chain, 103200 per kthread
[  110.847335][ T7168] loop2: detected capacity change from 0 to 256
[  110.877265][ T7168] FAT-fs (loop2): Directory bread(block 64) failed
[  110.880175][ T7168] FAT-fs (loop2): Directory bread(block 65) failed
[  110.882772][ T7168] FAT-fs (loop2): Directory bread(block 66) failed
[  110.885437][ T7168] FAT-fs (loop2): Directory bread(block 67) failed
[  110.891302][ T7168] FAT-fs (loop2): Directory bread(block 68) failed
[  110.897661][ T7168] FAT-fs (loop2): Directory bread(block 69) failed
[  110.900274][ T7168] FAT-fs (loop2): Directory bread(block 70) failed
[  110.902778][ T7168] FAT-fs (loop2): Directory bread(block 71) failed
[  110.905393][ T7168] FAT-fs (loop2): Directory bread(block 72) failed
[  110.917356][ T7168] FAT-fs (loop2): Directory bread(block 73) failed
[  110.943665][ T7173] loop0: detected capacity change from 0 to 1024
[  110.970350][ T7173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.974648][ T7173] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.006110][ T7173] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.523: lblock 1 mapped to illegal pblock 1 (length 15)
[  111.021459][ T7173] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  111.025436][ T7173] EXT4-fs (loop0): This should not happen!! Data will be lost
[  111.025436][ T7173] 
[  111.056123][ T7173] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.523: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  111.068509][ T7173] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[  111.105270][ T7179] loop2: detected capacity change from 0 to 1024
[  111.122172][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.163717][ T7179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.207092][ T7179] EXT4-fs: Ignoring sb option on remount
[  111.209333][ T7179] EXT4-fs: Ignoring removed orlov option
[  111.217650][ T7179] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.220274][ T7179] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  111.223828][ T7179] EXT4-fs: Remounting fs w/o journal so ignoring data_err option
[  111.234840][ T7179] EXT4-fs: can't change dax mount option while remounting
[  111.270066][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.362996][ T7190] loop0: detected capacity change from 0 to 16
[  111.375397][ T7190] erofs (device loop0): mounted with root inode @ nid 36.
[  111.400121][ T7190] erofs (device loop0): bogus dirent @ nid 36
[  111.455485][ T7193] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  111.470571][ T7195] netlink: 'syz.2.532': attribute type 2 has an invalid length.
[  111.486587][ T7195] netlink: 'syz.2.532': attribute type 1 has an invalid length.
[  111.489938][ T7195] netlink: 152 bytes leftover after parsing attributes in process `syz.2.532'.
[  111.891796][ T7224] bond1: entered promiscuous mode
[  111.893587][ T7224] bond1: entered allmulticast mode
[  111.904710][ T7224] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.198439][ T7239] netlink: 'syz.2.553': attribute type 7 has an invalid length.
[  112.201357][ T7239] netlink: 'syz.2.553': attribute type 8 has an invalid length.
[  112.241788][ T7241] netlink: 'syz.1.554': attribute type 11 has an invalid length.
[  112.244384][ T7241] netlink: 'syz.1.554': attribute type 5 has an invalid length.
[  112.249059][ T7241] netlink: 4112 bytes leftover after parsing attributes in process `syz.1.554'.
[  112.305151][ T7245] netlink: 'syz.1.556': attribute type 29 has an invalid length.
[  112.310943][ T7245] netlink: 'syz.1.556': attribute type 29 has an invalid length.
[  112.697637][ T7269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.567'.
[  113.113088][ T7279] netlink: 316 bytes leftover after parsing attributes in process `syz.0.571'.
[  113.461740][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  113.461759][   T33] audit: type=1800 audit(1758774546.575:19): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.576" name="bus" dev="tmpfs" ino=978 res=0 errno=0
[  113.814626][ T7309] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[  113.814626][ T7309] SȘȞZ6'
[  114.015955][ T7321] loop2: detected capacity change from 0 to 2048
[  114.072971][ T7321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.701288][ T7329] loop0: detected capacity change from 0 to 256
[  114.934875][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.054429][ T7365] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  116.152856][ T7369] loop0: detected capacity change from 0 to 4096
[  116.161195][ T7369] EXT4-fs (loop0): Test dummy encryption mode enabled
[  116.169874][ T7369] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled
[  116.177275][ T7369] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002]
[  116.180465][ T7369] System zones: 0-5
[  116.183633][ T7369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.222043][ T7361] loop2: detected capacity change from 0 to 32768
[  116.279385][ T7369] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  116.352516][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.816417][   T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  116.969059][   T24] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  116.973542][   T24] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  116.978100][   T24] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  116.982381][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  116.985908][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.993377][ T7391] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  117.406305][   T24] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  117.428600][   T24] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input8
[  117.511034][   T24] usb 3-1: USB disconnect, device number 8
[  117.513584][    C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  118.435960][ T7437] loop2: detected capacity change from 0 to 8
[  118.449149][ T7437] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  118.532287][ T7440] netlink: 20 bytes leftover after parsing attributes in process `syz.0.635'.
[  118.558877][ T7440] loop0: detected capacity change from 0 to 64
[  119.299103][ T7465] loop0: detected capacity change from 0 to 128
[  119.304654][ T7465] EXT4-fs: Ignoring removed nobh option
[  119.319738][ T7465] EXT4-fs (loop0): Invalid log block size: 4294967295
[  119.402844][ T7469] netlink: 33912 bytes leftover after parsing attributes in process `syz.1.655'.
[  119.450378][ T7471] loop0: detected capacity change from 0 to 4096
[  119.462553][ T7471] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  119.478975][ T7471] ntfs3(loop0): ino=3, mi_enum_attr
[  119.540160][ T7471] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  119.543601][ T7471] ntfs3(loop0): ino=1f, "file2" failed to open parent directory r=5 to update
[  119.596277][ T1090] ntfs3(loop0): ino=1f, failed to open parent directory r=5 to update
[  119.774525][ T7493] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  119.780446][ T7493] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.009024][ T5897] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  120.136652][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  120.156597][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  120.162521][ T5897] usb 1-1: config 0 has an invalid interface number: 191 but max is 0
[  120.165707][ T5897] usb 1-1: config 0 has no interface number 0
[  120.169818][ T5897] usb 1-1: config 0 interface 191 has no altsetting 0
[  120.174474][ T5897] usb 1-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=c2.08
[  120.178794][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.181308][ T5897] usb 1-1: Product: syz
[  120.182759][ T5897] usb 1-1: Manufacturer: syz
[  120.184516][ T5897] usb 1-1: SerialNumber: syz
[  120.189273][ T5897] usb 1-1: config 0 descriptor??
[  120.559694][ T5896] usb 1-1: USB disconnect, device number 10
[  120.656490][    T9] usb 3-1: Using ep0 maxpacket: 32
[  120.660964][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.664801][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  120.677859][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.693764][    T9] usb 3-1: config 0 descriptor??
[  121.117980][    T9] magicmouse 0003:05AC:0265.0007: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0
[  121.147579][ T7521] loop0: detected capacity change from 0 to 64
[  121.255508][ T7526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.682'.
[  121.313175][ T5896] usb 3-1: USB disconnect, device number 9
[  121.336974][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.683'.
[  121.425200][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'.
[  121.479554][ T7542] 8021q: adding VLAN 0 to HW filter on device bond2
[  121.502426][ T7542] veth0: entered promiscuous mode
[  121.508689][ T7542] bond2: (slave macvlan2): making interface the new active one
[  121.512028][ T7542] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  121.740310][ T7559] lo speed is unknown, defaulting to 1000
[  121.742857][ T7559] lo speed is unknown, defaulting to 1000
[  121.747076][ T7559] lo speed is unknown, defaulting to 1000
[  121.753340][ T7559] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.761255][ T7559] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  121.782369][ T7559] lo speed is unknown, defaulting to 1000
[  121.785266][ T7559] lo speed is unknown, defaulting to 1000
[  121.793678][ T7559] lo speed is unknown, defaulting to 1000
[  123.641816][ T7593] netlink: 71 bytes leftover after parsing attributes in process `syz.0.706'.
[  123.655958][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'.
[  123.703914][   T33] audit: type=1400 audit(1758774556.815:20): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7599 comm="syz.0.708"
[  124.096697][   T33] audit: type=1326 audit(1758774557.185:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  124.097062][   T33] audit: type=1326 audit(1758774557.185:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  124.097261][   T33] audit: type=1326 audit(1758774557.185:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.713" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  124.099737][   T33] audit: type=1326 audit(1758774557.185:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  124.101119][   T33] audit: type=1326 audit(1758774557.185:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  124.104373][   T33] audit: type=1326 audit(1758774557.185:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.713" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  124.106035][   T33] audit: type=1326 audit(1758774557.195:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  124.114039][   T33] audit: type=1326 audit(1758774557.195:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  124.119235][   T33] audit: type=1326 audit(1758774557.195:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7607 comm="syz.2.713" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  124.476800][ T7619] loop0: detected capacity change from 0 to 128
[  124.479560][ T7619] vfat: Unknown parameter 'dos1loppy'
[  124.752090][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'.
[  124.755650][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'.
[  124.760714][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'.
[  124.763849][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'.
[  124.786581][ T5897] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  124.846887][ T7625] 9pnet_rdma: rdma_create_trans (7625): problem binding to privport: 13
[  124.941958][ T5897] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.946537][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  124.951620][ T5897] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  124.955086][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.963603][ T5897] usb 1-1: config 0 descriptor??
[  125.546930][ T5897] usb 1-1: string descriptor 0 read error: -71
[  125.551539][ T5897] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  125.557524][ T5897] usb 1-1: USB disconnect, device number 11
[  125.650016][ T7639] netlink: 'syz.1.726': attribute type 4 has an invalid length.
[  126.057061][ T5897] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  126.246471][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short
[  126.252707][ T5897] usb 3-1: config 1 interface 1 has no altsetting 0
[  126.259592][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  126.262527][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.265035][ T5897] usb 3-1: Product: syz
[  126.276874][ T5897] usb 3-1: Manufacturer: syz
[  126.278686][ T5897] usb 3-1: SerialNumber: syz
[  126.433083][ T7653] loop0: detected capacity change from 0 to 32768
[  126.454612][ T7653] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.486883][ T7653] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  126.524113][ T7653] XFS (loop0): Ending clean mount
[  126.529352][ T5897] usb 3-1: found format II with max.bitrate = 2418, frame size=7
[  126.532198][ T5897] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  126.566736][ T5897] usb 3-1: USB disconnect, device number 10
[  126.599299][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  126.638754][ T5856] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.855147][ T7677] loop0: detected capacity change from 0 to 256
[  126.861809][ T7677] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  126.875114][ T7677] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  126.891004][ T7677] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  127.199408][ T7685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.803872][ T7697] loop0: detected capacity change from 0 to 128
[  127.832687][ T7697] omfs: sysblock size (-58445445) is out of range
[  128.394249][ T7708] bond0: entered promiscuous mode
[  128.397889][ T7708] bond_slave_0: entered promiscuous mode
[  128.400292][ T7708] bond_slave_1: entered promiscuous mode
[  128.645914][ T7721] loop0: detected capacity change from 0 to 8
[  128.678360][ T7721] SQUASHFS error: xz decompression failed, data probably corrupt
[  128.681371][ T7721] SQUASHFS error: Failed to read block 0x108: -5
[  128.688284][ T7721] SQUASHFS error: Unable to read metadata cache entry [106]
[  128.691241][ T7721] SQUASHFS error: Unable to read inode 0x11f
[  128.701015][ T7719] loop2: detected capacity change from 0 to 4096
[  128.724947][ T7719] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  128.755464][ T7719] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  128.804154][ T7727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.761'.
[  129.150491][ T7751] loop0: detected capacity change from 0 to 16
[  129.162260][ T7751] erofs (device loop0): too large lz4 pclusterblks 16832
[  129.386618][    T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  129.570529][    T9] usb 3-1: config 7 has an invalid interface number: 192 but max is 0
[  129.573964][    T9] usb 3-1: config 7 has no interface number 0
[  129.584360][    T9] usb 3-1: config 7 interface 192 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0
[  129.591767][    T9] usb 3-1: config 7 interface 192 has no altsetting 0
[  129.597644][    T9] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d
[  129.601246][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.604307][    T9] usb 3-1: Product: syz
[  129.606036][    T9] usb 3-1: Manufacturer: syz
[  129.612307][    T9] usb 3-1: SerialNumber: syz
[  129.650930][ T7755] loop0: detected capacity change from 0 to 40427
[  129.656313][ T7755] F2FS-fs (loop0): Image doesn't support compression
[  129.658750][ T7755] F2FS-fs (loop0): build fault injection rate: 690
[  129.660866][ T7755] F2FS-fs (loop0): build fault injection type: 0x35f7
[  129.668166][ T7755] F2FS-fs (loop0): invalid crc value
[  129.728412][ T7755] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.732560][ T7755] F2FS-fs (loop0): Start checkpoint disabled!
[  129.743085][ T7755] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  129.783560][ T7755] F2FS-fs (loop0): inject kmalloc in f2fs_kmalloc of f2fs_getxattr+0xa52/0xe70
[  129.833395][   T36] kworker/u10:1: attempt to access beyond end of device
[  129.833395][   T36] loop0: rw=2049, sector=45096, nr_sectors = 40 limit=40427
[  129.851990][    T9] usb 3-1: USB disconnect, device number 11
[  129.862856][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  129.862872][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.862878][   T36] Workqueue: writeback wb_workfn (flush-7:0)
[  129.862895][   T36] Call Trace:
[  129.862900][   T36]  <TASK>
[  129.862905][   T36]  dump_stack_lvl+0x189/0x250
[  129.862921][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.862931][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  129.862940][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.862954][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.862972][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  129.862989][   T36]  f2fs_write_end_io+0x886/0xb60
[  129.863009][   T36]  __submit_merged_bio+0x27a/0x6a0
[  129.863025][   T36]  __submit_merged_write_cond+0x255/0x530
[  129.863040][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  129.863066][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.863080][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  129.863107][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  129.863126][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  129.863138][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  129.863152][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  129.863161][   T36]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  129.863178][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.863186][   T36]  do_writepages+0x32e/0x550
[  129.863200][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  129.863208][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  129.863223][   T36]  __writeback_single_inode+0x145/0xff0
[  129.863234][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  129.863246][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  129.863278][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  129.863311][   T36]  ? rcu_is_watching+0x15/0xb0
[  129.863325][   T36]  wb_writeback+0x43b/0xaf0
[  129.863340][   T36]  ? queue_io+0x361/0x590
[  129.863351][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  129.863365][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.863380][   T36]  wb_workfn+0x409/0xef0
[  129.863397][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  129.863408][   T36]  ? __lock_acquire+0xab9/0xd20
[  129.863425][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  129.863436][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.863447][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  129.863454][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  129.863462][   T36]  process_scheduled_works+0xae1/0x17b0
[  129.863485][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  129.863502][   T36]  worker_thread+0x8a0/0xda0
[  129.863525][   T36]  kthread+0x711/0x8a0
[  129.863538][   T36]  ? __pfx_worker_thread+0x10/0x10
[  129.863546][   T36]  ? __pfx_kthread+0x10/0x10
[  129.863556][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.863568][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.863577][   T36]  ? __pfx_kthread+0x10/0x10
[  129.863587][   T36]  ret_from_fork+0x439/0x7d0
[  129.863598][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  129.863609][   T36]  ? __switch_to_asm+0x39/0x70
[  129.863619][   T36]  ? __switch_to_asm+0x33/0x70
[  129.863627][   T36]  ? __pfx_kthread+0x10/0x10
[  129.863638][   T36]  ret_from_fork_asm+0x1a/0x30
[  129.863656][   T36]  </TASK>
[  129.863661][   T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  129.991255][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  129.991277][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.991283][   T36] Workqueue: writeback wb_workfn (flush-7:0)
[  129.991309][   T36] Call Trace:
[  129.991315][   T36]  <TASK>
[  129.991322][   T36]  dump_stack_lvl+0x189/0x250
[  129.991351][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.991365][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  129.991379][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.991401][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.991425][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  129.991442][   T36]  f2fs_write_end_io+0x886/0xb60
[  129.991460][   T36]  __submit_merged_bio+0x27a/0x6a0
[  129.991481][   T36]  __submit_merged_write_cond+0x255/0x530
[  129.991505][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  129.991549][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.991576][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  129.991609][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  129.991627][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  129.991639][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  129.991652][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  129.991661][   T36]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  129.991678][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.991717][   T36]  do_writepages+0x32e/0x550
[  129.991743][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  129.991757][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  129.991773][   T36]  __writeback_single_inode+0x145/0xff0
[  129.991784][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  129.991796][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  129.991819][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  129.991851][   T36]  ? rcu_is_watching+0x15/0xb0
[  129.991865][   T36]  wb_writeback+0x43b/0xaf0
[  129.991880][   T36]  ? queue_io+0x361/0x590
[  129.991891][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  129.991906][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.991920][   T36]  wb_workfn+0x409/0xef0
[  129.991937][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  129.991948][   T36]  ? __lock_acquire+0xab9/0xd20
[  129.991974][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  129.991986][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.991996][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  129.992003][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  129.992011][   T36]  process_scheduled_works+0xae1/0x17b0
[  129.992034][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  129.992050][   T36]  worker_thread+0x8a0/0xda0
[  129.992073][   T36]  kthread+0x711/0x8a0
[  129.992085][   T36]  ? __pfx_worker_thread+0x10/0x10
[  129.992093][   T36]  ? __pfx_kthread+0x10/0x10
[  129.992104][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.992115][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.992123][   T36]  ? __pfx_kthread+0x10/0x10
[  129.992133][   T36]  ret_from_fork+0x439/0x7d0
[  129.992144][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  129.992155][   T36]  ? __switch_to_asm+0x39/0x70
[  129.992166][   T36]  ? __switch_to_asm+0x33/0x70
[  129.992175][   T36]  ? __pfx_kthread+0x10/0x10
[  129.992185][   T36]  ret_from_fork_asm+0x1a/0x30
[  129.992203][   T36]  </TASK>
[  129.992208][   T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  130.102640][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  130.102653][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.102659][   T36] Workqueue: writeback wb_workfn (flush-7:0)
[  130.102710][   T36] Call Trace:
[  130.102716][   T36]  <TASK>
[  130.102721][   T36]  dump_stack_lvl+0x189/0x250
[  130.102737][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.102747][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  130.102755][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  130.102770][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.102788][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  130.102805][   T36]  f2fs_write_end_io+0x886/0xb60
[  130.102824][   T36]  __submit_merged_bio+0x27a/0x6a0
[  130.102840][   T36]  __submit_merged_write_cond+0x255/0x530
[  130.102855][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  130.102881][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.102896][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  130.102922][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  130.102941][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  130.102958][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  130.102972][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  130.102981][   T36]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  130.102998][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.103006][   T36]  do_writepages+0x32e/0x550
[  130.103021][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  130.103030][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  130.103045][   T36]  __writeback_single_inode+0x145/0xff0
[  130.103055][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  130.103067][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  130.103091][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  130.103123][   T36]  ? rcu_is_watching+0x15/0xb0
[  130.103138][   T36]  wb_writeback+0x43b/0xaf0
[  130.103152][   T36]  ? queue_io+0x361/0x590
[  130.103163][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  130.103178][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.103193][   T36]  wb_workfn+0x409/0xef0
[  130.103211][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  130.103222][   T36]  ? __lock_acquire+0xab9/0xd20
[  130.103240][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  130.103256][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.103272][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  130.103282][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  130.103296][   T36]  process_scheduled_works+0xae1/0x17b0
[  130.103331][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  130.103359][   T36]  worker_thread+0x8a0/0xda0
[  130.103389][   T36]  kthread+0x711/0x8a0
[  130.103408][   T36]  ? __pfx_worker_thread+0x10/0x10
[  130.103420][   T36]  ? __pfx_kthread+0x10/0x10
[  130.103439][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.103458][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.103471][   T36]  ? __pfx_kthread+0x10/0x10
[  130.103485][   T36]  ret_from_fork+0x439/0x7d0
[  130.103497][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  130.103508][   T36]  ? __switch_to_asm+0x39/0x70
[  130.103519][   T36]  ? __switch_to_asm+0x33/0x70
[  130.103528][   T36]  ? __pfx_kthread+0x10/0x10
[  130.103538][   T36]  ret_from_fork_asm+0x1a/0x30
[  130.103557][   T36]  </TASK>
[  130.103562][   T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  130.219284][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  130.219306][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.219315][   T36] Workqueue: writeback wb_workfn (flush-7:0)
[  130.219341][   T36] Call Trace:
[  130.219347][   T36]  <TASK>
[  130.219355][   T36]  dump_stack_lvl+0x189/0x250
[  130.219379][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.219396][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  130.219410][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  130.219433][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.219463][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  130.219491][   T36]  f2fs_write_end_io+0x886/0xb60
[  130.219522][   T36]  __submit_merged_bio+0x27a/0x6a0
[  130.219548][   T36]  __submit_merged_write_cond+0x255/0x530
[  130.219574][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  130.219618][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.219644][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  130.219715][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  130.219749][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  130.219769][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  130.219794][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  130.219809][   T36]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  130.219839][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.219854][   T36]  do_writepages+0x32e/0x550
[  130.219878][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  130.219892][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  130.219917][   T36]  __writeback_single_inode+0x145/0xff0
[  130.219935][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  130.219957][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  130.219998][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  130.220052][   T36]  ? rcu_is_watching+0x15/0xb0
[  130.220075][   T36]  wb_writeback+0x43b/0xaf0
[  130.220099][   T36]  ? queue_io+0x361/0x590
[  130.220119][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  130.220144][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.220167][   T36]  wb_workfn+0x409/0xef0
[  130.220197][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  130.220217][   T36]  ? __lock_acquire+0xab9/0xd20
[  130.220248][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  130.220274][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.220292][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  130.220305][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  130.220319][   T36]  process_scheduled_works+0xae1/0x17b0
[  130.220362][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  130.220394][   T36]  worker_thread+0x8a0/0xda0
[  130.220433][   T36]  kthread+0x711/0x8a0
[  130.220455][   T36]  ? __pfx_worker_thread+0x10/0x10
[  130.220468][   T36]  ? __pfx_kthread+0x10/0x10
[  130.220486][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.220505][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.220519][   T36]  ? __pfx_kthread+0x10/0x10
[  130.220536][   T36]  ret_from_fork+0x439/0x7d0
[  130.220555][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  130.220574][   T36]  ? __switch_to_asm+0x39/0x70
[  130.220590][   T36]  ? __switch_to_asm+0x33/0x70
[  130.220605][   T36]  ? __pfx_kthread+0x10/0x10
[  130.220622][   T36]  ret_from_fork_asm+0x1a/0x30
[  130.220653][   T36]  </TASK>
[  130.220660][   T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  130.366608][   T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  130.366629][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.366638][   T36] Workqueue: writeback wb_workfn (flush-7:0)
[  130.366689][   T36] Call Trace:
[  130.366696][   T36]  <TASK>
[  130.366702][   T36]  dump_stack_lvl+0x189/0x250
[  130.366725][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.366741][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  130.366770][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  130.366792][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.366821][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  130.366848][   T36]  f2fs_write_end_io+0x886/0xb60
[  130.366877][   T36]  __submit_merged_bio+0x27a/0x6a0
[  130.366902][   T36]  __submit_merged_write_cond+0x255/0x530
[  130.366927][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  130.366975][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.367001][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  130.367046][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  130.367075][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  130.367095][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  130.367118][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  130.367133][   T36]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  130.367162][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.367177][   T36]  do_writepages+0x32e/0x550
[  130.367200][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  130.367214][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  130.367239][   T36]  __writeback_single_inode+0x145/0xff0
[  130.367256][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  130.367276][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  130.367319][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  130.367376][   T36]  ? rcu_is_watching+0x15/0xb0
[  130.367400][   T36]  wb_writeback+0x43b/0xaf0
[  130.367425][   T36]  ? queue_io+0x361/0x590
[  130.367445][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  130.367469][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.367491][   T36]  wb_workfn+0x409/0xef0
[  130.367519][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  130.367537][   T36]  ? __lock_acquire+0xab9/0xd20
[  130.367566][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  130.367583][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.367597][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  130.367608][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  130.367620][   T36]  process_scheduled_works+0xae1/0x17b0
[  130.367659][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  130.367713][   T36]  worker_thread+0x8a0/0xda0
[  130.367753][   T36]  kthread+0x711/0x8a0
[  130.367774][   T36]  ? __pfx_worker_thread+0x10/0x10
[  130.367787][   T36]  ? __pfx_kthread+0x10/0x10
[  130.367804][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.367823][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.367837][   T36]  ? __pfx_kthread+0x10/0x10
[  130.367853][   T36]  ret_from_fork+0x439/0x7d0
[  130.367871][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  130.367892][   T36]  ? __switch_to_asm+0x39/0x70
[  130.367908][   T36]  ? __switch_to_asm+0x33/0x70
[  130.367921][   T36]  ? __pfx_kthread+0x10/0x10
[  130.367949][   T36]  ret_from_fork_asm+0x1a/0x30
[  130.367982][   T36]  </TASK>
[  130.369166][   T36] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  130.538408][ T7774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.600763][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'.
[  130.784070][ T7783] binder_alloc: 7779: binder_alloc_buf, no vma
[  130.799087][ T7785] loop0: detected capacity change from 0 to 512
[  130.806139][ T7785] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  131.542008][ T7789] loop0: detected capacity change from 0 to 32768
[  132.732160][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'.
[  132.740092][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.742591][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.768004][ T7810] loop0: detected capacity change from 0 to 128
[  132.785944][ T7810] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  132.835548][ T7810] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  133.211369][ T5856] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  133.620968][ T7826] netlink: 80 bytes leftover after parsing attributes in process `syz.1.805'.
[  133.624815][ T7826] netlink: 80 bytes leftover after parsing attributes in process `syz.1.805'.
[  133.687865][ T7830] overlayfs: failed to clone upperpath
[  133.700909][ T7832] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  133.863030][ T7843] loop0: detected capacity change from 0 to 256
[  133.872417][ T7843] FAT-fs (loop0): Directory bread(block 1285) failed
[  133.889873][ T7843] FAT-fs (loop0): Directory bread(block 1285) failed
[  133.892810][ T7843] FAT-fs (loop0): Directory bread(block 1285) failed
[  133.895424][ T7843] FAT-fs (loop0): Directory bread(block 1285) failed
[  133.971187][ T7849] input: syz0 as /devices/virtual/input/input9
[  134.115488][ T7858] loop0: detected capacity change from 0 to 4096
[  134.118722][ T7858] ntfs3: Unknown parameter 'nohide_dot_files'
[  134.147168][ T5316] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  134.298399][ T5316] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  134.302817][ T5316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  134.313920][ T5316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  134.329781][ T5316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  134.334754][ T5316] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  134.344672][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.354848][ T5316] usb 3-1: config 0 descriptor??
[  135.042656][ T5316] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  135.269736][ T7887] loop0: detected capacity change from 0 to 8
[  135.296058][ T7887] SQUASHFS error: lzo decompression failed, data probably corrupt
[  135.306819][ T7887] SQUASHFS error: Failed to read block 0x202: -5
[  135.309327][ T7887] SQUASHFS error: Unable to read metadata cache entry [200]
[  135.775681][ T5873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.855486][ T5873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.940891][ T5873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.021519][ T5873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.109447][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  136.113316][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  136.116246][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  136.124054][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  136.128082][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  136.148011][ T5873] bridge_slave_1: left allmulticast mode
[  136.152709][ T5873] bridge_slave_1: left promiscuous mode
[  136.156988][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.164488][ T5873] bridge_slave_0: left allmulticast mode
[  136.166761][ T5873] bridge_slave_0: left promiscuous mode
[  136.168775][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.541827][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.549353][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.553947][ T5873] bond0 (unregistering): Released all slaves
[  136.665779][ T5873] bond1 (unregistering): Released all slaves
[  136.763811][ T5873] bond2 (unregistering): (slave macvlan2): Releasing backup interface
[  136.768503][ T5873] veth0: left promiscuous mode
[  136.771143][ T5873] bond2 (unregistering): Released all slaves
[  136.842592][ T7906] lo speed is unknown, defaulting to 1000
[  137.305544][   T97] usb 3-1: USB disconnect, device number 12
[  137.314275][ T5873] hsr_slave_0: left promiscuous mode
[  137.318023][ T5873] hsr_slave_1: left promiscuous mode
[  137.320586][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.326268][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.397381][ T7936] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.847'.
[  137.573928][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.584175][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.601783][ T5873] veth1_macvtap: left promiscuous mode
[  137.605227][ T5873] veth0_macvtap: left promiscuous mode
[  137.607799][ T5873] veth1_vlan: left promiscuous mode
[  137.609811][ T5873] veth0_vlan: left promiscuous mode
[  138.078013][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  138.128138][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  138.181724][ T5238] Bluetooth: hci2: command tx timeout
[  138.369478][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'.
[  138.580050][ T7955] comedi comedi0: Minor 5 could not be opened
[  138.607651][ T7906] chnl_net:caif_netlink_parms(): no params data found
[  138.712355][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  138.712369][   T33] audit: type=1326 audit(1758774571.825:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.1.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  138.757361][   T33] audit: type=1326 audit(1758774571.825:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.1.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  138.784891][   T33] audit: type=1326 audit(1758774571.845:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.1.854" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  138.792870][   T33] audit: type=1326 audit(1758774571.865:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.1.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  138.832660][   T33] audit: type=1326 audit(1758774571.895:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7957 comm="syz.1.854" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  138.840092][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.842434][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.844758][ T7906] bridge_slave_0: entered allmulticast mode
[  138.867716][ T7906] bridge_slave_0: entered promiscuous mode
[  138.874342][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.886755][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.889707][ T7906] bridge_slave_1: entered allmulticast mode
[  138.895973][ T7906] bridge_slave_1: entered promiscuous mode
[  139.006174][ T7971] __vm_enough_memory: pid: 7971, comm: syz.2.856, bytes: 4503599627366400 not enough memory for the allocation
[  139.022439][ T7906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.037318][ T7906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.100597][ T7906] team0: Port device team_slave_0 added
[  139.104186][ T7906] team0: Port device team_slave_1 added
[  139.151251][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.153606][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.164764][ T7906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.176806][ T7906] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.179007][ T7906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.196792][ T7906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.221994][ T5873] IPVS: stop unused estimator thread 0...
[  139.302976][ T7906] hsr_slave_0: entered promiscuous mode
[  139.310717][ T7906] hsr_slave_1: entered promiscuous mode
[  139.319334][ T7906] debugfs: 'hsr0' already exists in 'hsr'
[  139.321164][ T7906] Cannot create hsr debugfs directory
[  139.760177][ T7906] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  139.780762][ T7906] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  139.799168][ T7906] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  139.822185][ T7906] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  139.842911][ T8012] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  140.007191][ T7906] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.042123][ T7906] 8021q: adding VLAN 0 to HW filter on device team0
[  140.062891][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.064993][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.080763][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.083804][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.246627][ T5238] Bluetooth: hci2: command tx timeout
[  140.265003][ T7906] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.314927][ T7906] veth0_vlan: entered promiscuous mode
[  140.328811][ T7906] veth1_vlan: entered promiscuous mode
[  140.357491][ T7906] veth0_macvtap: entered promiscuous mode
[  140.367846][ T7906] veth1_macvtap: entered promiscuous mode
[  140.381060][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.395322][ T7906] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.403783][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.410473][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.413709][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.421550][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.434947][ T8037] loop2: detected capacity change from 0 to 8192
[  140.449107][ T8037] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  140.497066][ T8037] ntfs3(loop2): $Secure::$SII is corrupted.
[  140.499451][ T8037] ntfs3(loop2): Failed to initialize $Secure (-22).
[  140.546770][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.549280][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.577307][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.579748][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.830601][ T8042] loop3: detected capacity change from 0 to 40427
[  140.833234][ T8042] f2fs: Unknown parameter '?cYt<SsBpL-<Si4`o+T2zo}K0 lCGr>r7X7ė}%'
[  141.070222][ T8040] loop2: detected capacity change from 0 to 32768
[  141.168127][ T8050] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  141.322704][ T8040] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  141.995836][   T56] block nbd3: Receive control failed (result -107)
[  142.002121][ T5854] ocfs2: Unmounting device (7,2) on (node local)
[  142.048180][ T8056] block nbd3: shutting down sockets
[  142.320727][ T8066] loop2: detected capacity change from 0 to 32768
[  142.327282][ T5238] Bluetooth: hci2: command tx timeout
[  142.358708][ T8066] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.382698][ T8066] XFS (loop2): Ending clean mount
[  142.394736][ T8066] XFS (loop2): Quotacheck needed: Please wait.
[  142.396638][ T5897] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  142.434561][ T8066] XFS (loop2): Quotacheck: Done.
[  142.454241][ T8078] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  142.498210][ T5854] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.577448][ T5897] usb 4-1: Using ep0 maxpacket: 8
[  142.590488][ T8084] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[  142.591394][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  142.596054][ T8084] PKCS7: Only support pkcs7_signedData type
[  142.608552][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.611740][ T5897] usb 4-1: Product: syz
[  142.613410][ T5897] usb 4-1: Manufacturer: syz
[  142.615211][ T5897] usb 4-1: SerialNumber: syz
[  142.784209][   T33] audit: type=1326 audit(1758774575.895:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.2.890" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff37418ec29 code=0x0
[  142.863943][ T5897] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  143.089984][ T5897] usb 4-1: USB disconnect, device number 2
[  143.102634][ T5897] usblp0: removed
[  143.523609][ T8100] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  144.406691][ T5238] Bluetooth: hci2: command tx timeout
[  145.991514][ T8139] loop2: detected capacity change from 0 to 32768
[  145.994887][ T8139] btrfs: Bad value for 'metadata_ratio'
[  146.519002][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.926'.
[  146.522642][ T8169] tc_dump_action: action bad kind
[  146.864776][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.933'.
[  147.262058][ T8204] loop3: detected capacity change from 0 to 512
[  147.274133][ T8204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  147.290944][ T8204] EXT4-fs (loop3): 1 truncate cleaned up
[  147.302462][ T8204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.314901][ T8204] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.942: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  147.331420][ T8204] EXT4-fs (loop3): Remounting filesystem read-only
[  147.334063][ T8204] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.942: Deleting old file: nlink 5, error=-117
[  147.375627][ T7906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.456579][  T794] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  147.474429][ T8216] netlink: 'syz.3.947': attribute type 1 has an invalid length.
[  147.482052][ T8216] netlink: 'syz.3.947': attribute type 4 has an invalid length.
[  147.485264][ T8216] netlink: 208 bytes leftover after parsing attributes in process `syz.3.947'.
[  147.489400][ T8216] NCSI netlink: No device for ifindex 3088861696
[  147.528758][ T8218] netlink: 'syz.1.948': attribute type 4 has an invalid length.
[  147.615289][  T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  147.626041][  T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.633412][  T794] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  147.643546][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.649396][  T794] usb 3-1: config 0 descriptor??
[  147.847115][ T8224] loop3: detected capacity change from 0 to 32768
[  147.871725][ T8224] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  147.902980][   T33] audit: type=1800 audit(1758774581.015:45): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.951" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  147.969670][ T7906] ocfs2: Unmounting device (7,3) on (node local)
[  148.073248][  T794] logitech-djreceiver 0003:046D:C52F.0009: ignoring exceeding usage max
[  148.083255][  T794] logitech-djreceiver 0003:046D:C52F.0009: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.2-1/input0
[  148.366782][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.371620][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.405349][ T8198] loop2: detected capacity change from 0 to 128
[  148.419046][ T8198] vfat: Unknown parameter '18446744073709551615'
[  148.436166][   T24] usb 3-1: USB disconnect, device number 13
[  149.171367][ T8243] loop2: detected capacity change from 0 to 128
[  149.244004][ T8243] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8)
[  149.253925][ T8243] FAT-fs (loop2): Filesystem has been set read-only
[  149.796500][ T5316] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  149.948525][ T5316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  149.952241][ T5316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  149.959701][ T5316] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  149.963115][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.968232][ T5316] usb 4-1: Product: syz
[  149.969919][ T5316] usb 4-1: Manufacturer: syz
[  149.971729][ T5316] usb 4-1: SerialNumber: syz
[  149.975784][ T5316] usb 4-1: config 0 descriptor??
[  149.983814][ T5316] iguanair 4-1:0.0: probe with driver iguanair failed with error -12
[  150.182990][ T5897] usb 4-1: USB disconnect, device number 3
[  150.219417][ T8299] netlink: 'syz.1.980': attribute type 83 has an invalid length.
[  150.296648][ T8305] netlink: 'syz.1.983': attribute type 1 has an invalid length.
[  150.299259][ T8305] netlink: 'syz.1.983': attribute type 2 has an invalid length.
[  150.303069][ T8305] netlink: 'syz.1.983': attribute type 1 has an invalid length.
[  150.305436][ T8305] netlink: 'syz.1.983': attribute type 2 has an invalid length.
[  150.734687][ T8323] netlink: 'syz.3.989': attribute type 29 has an invalid length.
[  150.749472][ T8323] netlink: 'syz.3.989': attribute type 29 has an invalid length.
[  150.942679][ T8329] loop3: detected capacity change from 0 to 32768
[  150.960163][ T8329] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.992 (8329)
[  150.990155][ T8329] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.993704][ T8329] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  151.115822][ T8329] BTRFS info (device loop3): enabling ssd optimizations
[  151.138886][ T8329] BTRFS info (device loop3): enabling free space tree
[  151.339453][ T7906] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.941228][ T8390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1009'.
[  152.035513][ T8394] syzkaller0: entered allmulticast mode
[  152.042062][ T8394] syzkaller0: entered promiscuous mode
[  152.065123][ T8394] syzkaller0 (unregistering): left allmulticast mode
[  152.069355][ T8394] syzkaller0 (unregistering): left promiscuous mode
[  152.211250][ T8406] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.593295][ T8419] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  152.608880][ T8419] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.615383][ T8419] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.692314][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1025'.
[  152.895638][ T8439] loop3: detected capacity change from 0 to 1024
[  152.957868][   T52] hfsplus: b-tree write err: -5, ino 4
[  153.012448][ T8443] loop3: detected capacity change from 0 to 128
[  153.026617][ T8443] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  153.035303][ T8443] hpfs: filesystem error: improperly stopped
[  153.038953][ T8443] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  153.045266][ T8443] hpfs: You really don't want any checks? You are crazy...
[  153.065693][ T8443] hpfs: hpfs_map_sector(): read error
[  153.075150][ T8443] hpfs: code page support is disabled
[  153.082507][ T8443] hpfs: hpfs_map_4sectors(): unaligned read
[  153.084897][ T8443] hpfs: hpfs_map_4sectors(): unaligned read
[  153.094784][ T8443] hpfs: filesystem error: unable to find root dir
[  153.184061][ T8451] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1039'.
[  153.363094][ T8464] netlink: 182 bytes leftover after parsing attributes in process `syz.3.1043'.
[  153.543282][ T8476] loop3: detected capacity change from 0 to 2048
[  153.570562][ T8476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.584876][ T8476] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.1050: bit already cleared for inode 15
[  153.616221][ T7906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.077154][ T5316] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  154.114728][   T24] lo speed is unknown, defaulting to 1000
[  154.226542][ T5316] usb 4-1: Using ep0 maxpacket: 8
[  154.235647][ T5316] usb 4-1: unable to get BOS descriptor or descriptor too short
[  154.242229][ T5316] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  154.245436][ T5316] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  154.266836][ T5316] usb 4-1: config 4 has no interface number 0
[  154.273421][ T5316] usb 4-1: string descriptor 0 read error: -22
[  154.275932][ T5316] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  154.284216][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.292595][ T5316] usb 4-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[  154.295322][ T5316] usb 4-1: No valid video chain found.
[  154.333461][   T33] audit: type=1326 audit(1758774587.445:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.2.1063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  154.340866][   T33] audit: type=1326 audit(1758774587.445:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.2.1063" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  154.503810][ T5897] usb 4-1: USB disconnect, device number 4
[  154.525230][ T8520] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  155.283468][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1085'.
[  155.292085][ T8549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.627542][ T8568] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  155.638279][ T8568] CIFS mount error: No usable UNC path provided in device string!
[  155.638279][ T8568] 
[  155.646984][ T8568] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  156.684530][ T5883] kernel write not supported for file bpf-prog (pid: 5883 comm: kworker/0:3)
[  156.836511][  T794] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  156.987459][  T794] usb 4-1: Using ep0 maxpacket: 16
[  156.991993][  T794] usb 4-1: config 0 has an invalid interface number: 249 but max is 0
[  156.995115][  T794] usb 4-1: config 0 has no interface number 0
[  156.998329][  T794] usb 4-1: config 0 interface 249 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 64
[  157.002402][  T794] usb 4-1: config 0 interface 249 has no altsetting 0
[  157.008775][  T794] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1
[  157.012611][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.015994][  T794] usb 4-1: Product: syz
[  157.017809][  T794] usb 4-1: Manufacturer: syz
[  157.019837][  T794] usb 4-1: SerialNumber: syz
[  157.024703][  T794] usb 4-1: config 0 descriptor??
[  157.027574][ T8600] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  157.031784][  T794] aircable 4-1:0.249: aircable converter detected
[  157.042528][  T794] usb 4-1: aircable converter now attached to ttyUSB0
[  157.247097][  T794] usb 4-1: USB disconnect, device number 5
[  157.259178][  T794] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0
[  157.263476][  T794] aircable 4-1:0.249: device disconnected
[  157.905215][ T8648] loop3: detected capacity change from 0 to 32768
[  157.918709][ T8648] OCFS2: ERROR (device loop3): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 75 has an invalid extent (next_free_rec 32, count 19)
[  157.928348][ T8648] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  157.931940][ T8648] OCFS2: File system is now read-only.
[  157.933654][ T8648] (syz.3.1129,8648,0):ocfs2_get_clusters:634 ERROR: status = -30
[  157.936883][ T8648] (syz.3.1129,8648,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  157.939658][ T8648] (syz.3.1129,8648,0):ocfs2_bmap:469 ERROR: get_blocks() failed, block = 0
[  157.942513][ T8648] (syz.3.1129,8648,0):ocfs2_bmap:470 ERROR: status = -30
[  157.944701][ T8648] jbd2_journal_init_inode: Cannot locate journal superblock
[  157.947869][ T8648] (syz.3.1129,8648,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  157.951101][ T8648] (syz.3.1129,8648,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  157.954591][ T8648] (syz.3.1129,8648,0):ocfs2_check_volume:2432 ERROR: status = -22
[  157.957939][ T8648] (syz.3.1129,8648,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  157.962703][ T8648] (syz.3.1129,8648,0):ocfs2_fill_super:1177 ERROR: status = -22
[  158.093459][ T8651] loop3: detected capacity change from 0 to 4096
[  158.102153][ T8651] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  158.118990][ T8651] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  158.369777][ T8655] loop3: detected capacity change from 0 to 32768
[  158.387700][ T8655] JBD2: Ignoring recovery information on journal
[  158.461923][ T8655] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  158.514694][ T8655] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  158.514732][ T8655] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  158.527497][ T8655] OCFS2: File system is now read-only.
[  158.529672][ T8655] (syz.3.1132,8655,0):ocfs2_calc_xattr_init:638 ERROR: status = -117
[  158.546508][ T8655] (syz.3.1132,8655,0):ocfs2_mknod:337 ERROR: status = -117
[  158.549055][ T8655] (syz.3.1132,8655,0):ocfs2_mknod:505 ERROR: status = -117
[  158.552844][ T8655] (syz.3.1132,8655,0):ocfs2_create:678 ERROR: status = -117
[  158.579075][ T8655] syz.3.1132 (8655) used greatest stack depth: 18640 bytes left
[  158.592416][ T7906] ocfs2: Unmounting device (7,3) on (node local)
[  159.815583][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'.
[  159.948450][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'.
[  161.442101][ T8700] loop3: detected capacity change from 0 to 32768
[  161.484200][ T8700] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  161.508815][ T7906] ocfs2: Unmounting device (7,3) on (node local)
[  161.764566][ T8733] tmpfs: Bad value for 'nr_blocks'
[  161.893477][ T8739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'.
[  162.098585][ T8759] loop3: detected capacity change from 0 to 512
[  162.114443][ T8759] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1175: casefold flag without casefold feature
[  162.127926][ T8759] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1175: couldn't read orphan inode 15 (err -117)
[  162.150096][ T8759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.177877][ T7906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.415532][ T8767] loop3: detected capacity change from 0 to 40427
[  162.423056][ T8767] F2FS-fs (loop3): invalid crc value
[  162.462228][ T8767] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  162.465588][ T8767] F2FS-fs (loop3): Start checkpoint disabled!
[  162.471598][ T8767] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  163.119471][ T3525] kworker/u9:4: attempt to access beyond end of device
[  163.119471][ T3525] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  163.125646][ T3525] CPU: 0 UID: 0 PID: 3525 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  163.125666][ T3525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.125675][ T3525] Workqueue: writeback wb_workfn (flush-7:3)
[  163.125703][ T3525] Call Trace:
[  163.125710][ T3525]  <TASK>
[  163.125718][ T3525]  dump_stack_lvl+0x189/0x250
[  163.125743][ T3525]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.125760][ T3525]  ? __pfx_queue_work_on+0x10/0x10
[  163.125774][ T3525]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  163.125798][ T3525]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.125828][ T3525]  f2fs_handle_critical_error+0x37c/0x540
[  163.125859][ T3525]  f2fs_write_end_io+0x886/0xb60
[  163.125888][ T3525]  __submit_merged_bio+0x27a/0x6a0
[  163.125916][ T3525]  __submit_merged_write_cond+0x255/0x530
[  163.125942][ T3525]  f2fs_write_data_pages+0x261d/0x3000
[  163.126005][ T3525]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.126033][ T3525]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  163.126078][ T3525]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  163.126110][ T3525]  ? trace_f2fs_writepages+0x7f/0x200
[  163.126130][ T3525]  ? f2fs_write_node_pages+0x478/0x6e0
[  163.126169][ T3525]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.126185][ T3525]  do_writepages+0x32e/0x550
[  163.126210][ T3525]  ? reacquire_held_locks+0x127/0x1d0
[  163.126226][ T3525]  ? writeback_sb_inodes+0x384/0x1010
[  163.126251][ T3525]  __writeback_single_inode+0x145/0xff0
[  163.126269][ T3525]  ? do_raw_spin_unlock+0x4d/0x240
[  163.126290][ T3525]  writeback_sb_inodes+0x6c7/0x1010
[  163.126305][ T3525]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.126342][ T3525]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  163.126393][ T3525]  ? rcu_is_watching+0x15/0xb0
[  163.126415][ T3525]  wb_writeback+0x43b/0xaf0
[  163.126438][ T3525]  ? queue_io+0x361/0x590
[  163.126458][ T3525]  ? __pfx_wb_writeback+0x10/0x10
[  163.126482][ T3525]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.126529][ T3525]  wb_workfn+0x409/0xef0
[  163.126575][ T3525]  ? __pfx_wb_workfn+0x10/0x10
[  163.126595][ T3525]  ? __lock_acquire+0xab9/0xd20
[  163.126625][ T3525]  ? process_scheduled_works+0x9ef/0x17b0
[  163.126653][ T3525]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.126672][ T3525]  ? process_scheduled_works+0x9ef/0x17b0
[  163.126683][ T3525]  ? process_scheduled_works+0x9ef/0x17b0
[  163.126698][ T3525]  process_scheduled_works+0xae1/0x17b0
[  163.126739][ T3525]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.126768][ T3525]  worker_thread+0x8a0/0xda0
[  163.126808][ T3525]  kthread+0x711/0x8a0
[  163.126830][ T3525]  ? __pfx_worker_thread+0x10/0x10
[  163.126844][ T3525]  ? __pfx_kthread+0x10/0x10
[  163.126862][ T3525]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.126881][ T3525]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.126893][ T3525]  ? __pfx_kthread+0x10/0x10
[  163.126910][ T3525]  ret_from_fork+0x439/0x7d0
[  163.126928][ T3525]  ? __pfx_ret_from_fork+0x10/0x10
[  163.126949][ T3525]  ? __switch_to_asm+0x39/0x70
[  163.126964][ T3525]  ? __switch_to_asm+0x33/0x70
[  163.126980][ T3525]  ? __pfx_kthread+0x10/0x10
[  163.126997][ T3525]  ret_from_fork_asm+0x1a/0x30
[  163.127029][ T3525]  </TASK>
[  163.256387][ T3525] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  163.259277][ T3525] CPU: 0 UID: 0 PID: 3525 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  163.259295][ T3525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.259305][ T3525] Workqueue: writeback wb_workfn (flush-7:3)
[  163.259326][ T3525] Call Trace:
[  163.259332][ T3525]  <TASK>
[  163.259339][ T3525]  dump_stack_lvl+0x189/0x250
[  163.259357][ T3525]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.259371][ T3525]  ? __pfx_queue_work_on+0x10/0x10
[  163.259384][ T3525]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  163.259404][ T3525]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.259435][ T3525]  f2fs_handle_critical_error+0x37c/0x540
[  163.259462][ T3525]  f2fs_write_end_io+0x886/0xb60
[  163.259520][ T3525]  __submit_merged_bio+0x27a/0x6a0
[  163.259547][ T3525]  __submit_merged_write_cond+0x255/0x530
[  163.259573][ T3525]  f2fs_write_data_pages+0x261d/0x3000
[  163.259618][ T3525]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.259644][ T3525]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  163.259693][ T3525]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  163.259723][ T3525]  ? trace_f2fs_writepages+0x7f/0x200
[  163.259742][ T3525]  ? f2fs_write_node_pages+0x478/0x6e0
[  163.259783][ T3525]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.259796][ T3525]  do_writepages+0x32e/0x550
[  163.259815][ T3525]  ? reacquire_held_locks+0x127/0x1d0
[  163.259828][ T3525]  ? writeback_sb_inodes+0x384/0x1010
[  163.259853][ T3525]  __writeback_single_inode+0x145/0xff0
[  163.259878][ T3525]  ? do_raw_spin_unlock+0x4d/0x240
[  163.259898][ T3525]  writeback_sb_inodes+0x6c7/0x1010
[  163.259914][ T3525]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.259951][ T3525]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  163.260009][ T3525]  ? rcu_is_watching+0x15/0xb0
[  163.260032][ T3525]  wb_writeback+0x43b/0xaf0
[  163.260058][ T3525]  ? queue_io+0x361/0x590
[  163.260077][ T3525]  ? __pfx_wb_writeback+0x10/0x10
[  163.260103][ T3525]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.260128][ T3525]  wb_workfn+0x409/0xef0
[  163.260157][ T3525]  ? __pfx_wb_workfn+0x10/0x10
[  163.260176][ T3525]  ? __lock_acquire+0xab9/0xd20
[  163.260205][ T3525]  ? process_scheduled_works+0x9ef/0x17b0
[  163.260226][ T3525]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.260244][ T3525]  ? process_scheduled_works+0x9ef/0x17b0
[  163.260256][ T3525]  ? process_scheduled_works+0x9ef/0x17b0
[  163.260271][ T3525]  process_scheduled_works+0xae1/0x17b0
[  163.260313][ T3525]  ? __pfx_process_scheduled_works+0x10/0x10
[  163.260350][ T3525]  worker_thread+0x8a0/0xda0
[  163.260391][ T3525]  kthread+0x711/0x8a0
[  163.260411][ T3525]  ? __pfx_worker_thread+0x10/0x10
[  163.260424][ T3525]  ? __pfx_kthread+0x10/0x10
[  163.260442][ T3525]  ? _raw_spin_unlock_irq+0x23/0x50
[  163.260462][ T3525]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.260473][ T3525]  ? __pfx_kthread+0x10/0x10
[  163.260515][ T3525]  ret_from_fork+0x439/0x7d0
[  163.260533][ T3525]  ? __pfx_ret_from_fork+0x10/0x10
[  163.260551][ T3525]  ? __switch_to_asm+0x39/0x70
[  163.260568][ T3525]  ? __switch_to_asm+0x33/0x70
[  163.260583][ T3525]  ? __pfx_kthread+0x10/0x10
[  163.260600][ T3525]  ret_from_fork_asm+0x1a/0x30
[  163.260631][ T3525]  </TASK>
[  163.260637][ T3525] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  163.968698][ T8805] loop3: detected capacity change from 0 to 32768
[  164.060185][ T8805] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  164.060210][ T8805]   allowing incompatible features above 0.0: (unknown version)
[  164.060220][ T8805]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  164.075380][ T8805] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  164.078119][ T8805] bcachefs (loop3): initializing new filesystem
[  164.087185][ T8805] bcachefs (loop3): going read-write
[  164.100807][ T8805] bcachefs (loop3): marking superblocks
[  164.112347][ T8805] bcachefs (loop3): initializing freespace
[  164.116933][ T8805] bcachefs (loop3): done initializing freespace
[  164.121602][ T8805] bcachefs (loop3): reading snapshots table
[  164.123816][ T8805] bcachefs (loop3): reading snapshots done
[  164.160258][ T8805] bcachefs (loop3): done starting filesystem
[  164.189258][ T8805] syz.3.1193 (8805) used greatest stack depth: 17448 bytes left
[  164.230877][ T7906] bcachefs (loop3): shutting down
[  164.235483][ T7906] bcachefs (loop3): going read-only
[  164.246263][ T7906] bcachefs (loop3): finished waiting for writes to stop
[  164.262039][ T7906] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  164.350201][ T7906] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  164.355724][ T7906] bcachefs (loop3): clean shutdown complete, journal seq 4
[  164.359043][ T7906] bcachefs (loop3): marking filesystem clean
[  164.390655][ T7906] bcachefs (loop3): shutdown complete
[  165.914348][ T8886] netlink: 'syz.3.1203': attribute type 10 has an invalid length.
[  165.930289][ T8886] 8021q: adding VLAN 0 to HW filter on device team0
[  165.938047][ T8886] bond0: (slave team0): Enslaving as an active interface with an up link
[  165.969123][   T33] audit: type=1326 audit(1758774599.085:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8891 comm="syz.2.1228" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x0
[  166.549689][ T8901] vxcan1: entered allmulticast mode
[  166.552296][ T8901] vxcan1: left allmulticast mode
[  166.601197][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1232'.
[  167.257396][ T8918] loop3: detected capacity change from 0 to 512
[  167.350746][ T8918] EXT4-fs (loop3): 1 truncate cleaned up
[  167.365094][ T8918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.891667][ T7906] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.183132][ T8949] batman_adv: batadv0: Adding interface: dummy0
[  168.186020][ T8949] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.202511][ T8949] batman_adv: batadv0: Interface activated: dummy0
[  168.221307][ T8949] batadv0: mtu less than device minimum
[  168.224917][ T8949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  168.229305][ T8949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  168.234074][ T8949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  168.238695][ T8949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  168.243743][ T8949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  168.248885][ T8949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  168.253788][ T8949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  168.257901][ T8949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  168.261872][ T8949] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272)
[  168.431986][ T8965] 9pnet_fd: p9_fd_create_tcp (8965): problem connecting socket to 127.0.0.1
[  168.467032][ T8967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1260'.
[  168.633093][ T8978] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  168.695383][   T33] audit: type=1326 audit(1758774601.805:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.3.1261" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x7fc00000
[  169.336782][   T33] audit: type=1326 audit(1758774602.425:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8968 comm="syz.3.1261" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f093898ec29 code=0x7fc00000
[  169.701735][ T9011] batman_adv: batadv0: Interface deactivated: dummy0
[  169.789808][ T9011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.796310][ T9011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.882722][ T5711] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.887842][ T5711] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.894697][ T5711] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.899953][ T5711] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  170.224469][ T9043] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1289'.
[  171.100454][ T9073] netlink: 'syz.2.1304': attribute type 14 has an invalid length.
[  171.113275][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1304'.
[  171.149683][ T5873] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.149707][ T9073] netlink: 'syz.2.1304': attribute type 14 has an invalid length.
[  171.164425][ T5873] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.168994][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1304'.
[  171.180178][ T5873] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.189124][ T5873] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.825273][   T33] audit: type=1326 audit(1758774604.935:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  171.834352][   T33] audit: type=1326 audit(1758774604.935:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  171.843446][   T33] audit: type=1326 audit(1758774604.935:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  171.852626][   T33] audit: type=1326 audit(1758774604.955:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9122 comm="syz.1.1328" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  173.093013][ T9154] bond0: option use_carrier: invalid value (5)
[  173.725401][ T9170] macvtap0: entered allmulticast mode
[  173.728346][ T9170] veth0_macvtap: entered allmulticast mode
[  173.961718][ T9178] bridge0: port 3(syz_tun) entered blocking state
[  173.964521][ T9178] bridge0: port 3(syz_tun) entered disabled state
[  173.971383][ T9178] netlink: 'syz.1.1353': attribute type 10 has an invalid length.
[  173.975152][ T9178] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.978625][ T9178] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.024659][ T9178] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.027718][ T9178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.031939][ T9178] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.034919][ T9178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.043390][ T9178] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  174.979755][ T9205] netlink: 'syz.2.1363': attribute type 1 has an invalid length.
[  174.982955][ T9205] netlink: 'syz.2.1363': attribute type 4 has an invalid length.
[  174.986180][ T9205] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1363'.
[  175.541767][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'.
[  175.545001][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1375'.
[  175.884097][ T9257] netlink: 'syz.2.1387': attribute type 9 has an invalid length.
[  176.040368][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'.
[  176.282563][ T9283] tipc: Enabling of bearer <eth:vlan0> rejected, failed to enable media
[  176.516569][  T794] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  176.594802][ T9304] ref_ctr increment failed for inode: 0xc7d offset: 0x7 ref_ctr_offset: 0x2710 of mm: 0xffff88802b162040
[  176.671134][  T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.674993][  T794] usb 4-1: config 0 interface 0 has no altsetting 0
[  176.689192][  T794] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  176.692813][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.699657][  T794] usb 4-1: Product: syz
[  176.701275][  T794] usb 4-1: Manufacturer: syz
[  176.703108][  T794] usb 4-1: SerialNumber: syz
[  176.709854][  T794] usb 4-1: config 0 descriptor??
[  176.718962][  T794] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  176.734448][  T794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  176.739321][  T794] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  176.749559][  T794] usb 4-1: media controller created
[  176.779342][  T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  176.825400][ T9310] futex_wake_op: syz.1.1413 tries to shift op by 144; fix this program
[  176.828522][  T794] DVB: Unable to find symbol tda10046_attach()
[  176.831480][  T794] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  176.834996][  T794] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  177.173703][  T794] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  177.184156][  T794] usb 4-1: USB disconnect, device number 6
[  178.548058][ T9346] netlink: 'syz.1.1427': attribute type 2 has an invalid length.
[  178.552444][ T9346] netlink: 'syz.1.1427': attribute type 1 has an invalid length.
[  179.861002][ T9399] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  179.943631][ T9405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1452'.
[  180.038715][ T9415] overlayfs: failed to clone upperpath
[  180.202906][ T9430] kernel read not supported for file /$@ (pid: 9430 comm: syz.3.1465)
[  180.205796][ T9431] netlink: 'syz.2.1464': attribute type 1 has an invalid length.
[  180.211459][   T33] audit: type=1800 audit(1758774613.315:55): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1465" name="$@" dev="mqueue" ino=16944 res=0 errno=0
[  180.239879][ T9433] loop3: detected capacity change from 0 to 256
[  180.243413][ T9433] exfat: Deprecated parameter 'utf8'
[  180.246764][ T9433] exfat: Deprecated parameter 'namecase'
[  180.251913][ T9433] exfat: Deprecated parameter 'namecase'
[  180.254177][ T9433] exfat: Deprecated parameter 'utf8'
[  180.262453][ T9433] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[  180.291024][   T33] audit: type=1804 audit(1758774613.405:56): pid=9433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1466" name="/newroot/125/file1/file1" dev="loop3" ino=1048605 res=1 errno=0
[  180.355060][ T9438] block nbd3: Attempted send on invalid socket
[  180.360112][ T9438] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.363588][ T9438] vxfs: unable to read disk superblock at 1
[  180.367242][ T9438] block nbd3: Attempted send on invalid socket
[  180.371591][ T9438] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  180.374791][ T9438] vxfs: unable to read disk superblock at 8
[  180.377421][ T9438] vxfs: can't find superblock.
[  180.995922][ T9482] netlink: 'syz.2.1489': attribute type 16 has an invalid length.
[  181.655383][ T9512] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1502'.
[  183.359229][ T9562] loop3: detected capacity change from 0 to 4096
[  183.375342][ T9562] NILFS (loop3): invalid segment: Checksum error in segment payload
[  183.380604][ T9562] NILFS (loop3): trying rollback from an earlier position
[  183.395223][ T9562] NILFS (loop3): recovery complete
[  183.401928][ T9563] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.583233][ T9567] netlink: 'syz.3.1525': attribute type 1 has an invalid length.
[  183.908113][ T9583] 9pnet_fd: Insufficient options for proto=fd
[  183.973905][ T9587] netlink: 'syz.2.1535': attribute type 27 has an invalid length.
[  183.976514][ T9587] netlink: 'syz.2.1535': attribute type 3 has an invalid length.
[  183.978877][ T9587] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1535'.
[  184.130822][   T33] audit: type=1326 audit(1758774617.245:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.3.1539" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x0
[  184.447760][ T9613] loop3: detected capacity change from 0 to 256
[  184.451175][ T9613] exfat: Deprecated parameter 'namecase'
[  184.453393][ T9613] exfat: Deprecated parameter 'namecase'
[  184.479537][ T9613] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  184.926646][ T9631] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.1552'.
[  184.931017][ T9631] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.1552'.
[  185.363208][ T9636] loop3: detected capacity change from 0 to 256
[  185.419074][ T9636] FAT-fs (loop3): Directory bread(block 64) failed
[  185.421767][ T9636] FAT-fs (loop3): Directory bread(block 65) failed
[  185.424485][ T9636] FAT-fs (loop3): Directory bread(block 66) failed
[  185.430950][ T9636] FAT-fs (loop3): Directory bread(block 67) failed
[  185.433755][ T9636] FAT-fs (loop3): Directory bread(block 68) failed
[  185.437765][ T9636] FAT-fs (loop3): Directory bread(block 69) failed
[  185.440626][ T9636] FAT-fs (loop3): Directory bread(block 70) failed
[  185.443344][ T9636] FAT-fs (loop3): Directory bread(block 71) failed
[  185.445994][ T9636] FAT-fs (loop3): Directory bread(block 72) failed
[  185.450586][ T9636] FAT-fs (loop3): Directory bread(block 73) failed
[  185.723894][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'.
[  185.735558][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'.
[  187.088945][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'.
[  187.415626][ T9719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1594'.
[  187.466418][   T33] audit: type=1326 audit(1758774620.575:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.1596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  187.486664][   T33] audit: type=1326 audit(1758774620.575:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.1596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  187.510761][   T33] audit: type=1326 audit(1758774620.575:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.1596" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  187.531156][   T33] audit: type=1326 audit(1758774620.575:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.1596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  187.547923][   T33] audit: type=1326 audit(1758774620.575:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.1596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  187.565112][   T33] audit: type=1326 audit(1758774620.575:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.1596" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  187.575633][   T33] audit: type=1326 audit(1758774620.695:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.1596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  187.585022][   T33] audit: type=1326 audit(1758774620.695:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.1.1596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fb138ec29 code=0x7ffc0000
[  187.703521][ T9717] loop3: detected capacity change from 0 to 32768
[  187.781456][ T9717] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  187.824952][ T9717] XFS (loop3): Ending clean mount
[  187.933478][ T7906] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.108510][ T9755] raw_sendmsg: syz.3.1608 forgot to set AF_INET. Fix it!
[  188.871442][ T9779] net_ratelimit: 10 callbacks suppressed
[  188.871476][ T9779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  188.883018][   T97] lo speed is unknown, defaulting to 1000
[  188.885566][   T97] syz2: Port: 1 Link DOWN
[  188.979887][ T9781] netlink: 'syz.1.1619': attribute type 1 has an invalid length.
[  188.983110][ T9781] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1619'.
[  189.488481][ T9799] IPv6: Can't replace route, no match found
[  189.768981][ T9813] sctp: [Deprecated]: syz.2.1632 (pid 9813) Use of struct sctp_assoc_value in delayed_ack socket option.
[  189.768981][ T9813] Use struct sctp_sack_info instead
[  189.878896][   T97] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0
[  189.886139][   T97] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0
[  189.897503][   T97] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0
[  189.901818][   T97] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0
[  189.906032][   T97] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0
[  189.912322][   T97] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0
[  189.917889][   T97] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0
[  189.920835][   T97] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0
[  189.923747][   T97] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0
[  189.927989][   T97] hid-generic 0006:0004:0009.000A: unknown main item tag 0x0
[  189.941333][   T97] hid-generic 0006:0004:0009.000A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  190.136542][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  190.561698][   T24] usb 4-1: Using ep0 maxpacket: 32
[  190.594712][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.599409][   T24] usb 4-1: config 0 has no interfaces?
[  190.606529][   T24] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  190.610141][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.613321][   T24] usb 4-1: Product: syz
[  190.615099][   T24] usb 4-1: Manufacturer: syz
[  190.621291][   T24] usb 4-1: SerialNumber: syz
[  190.625764][   T24] usb 4-1: config 0 descriptor??
[  190.895092][ T5883] usb 4-1: USB disconnect, device number 7
[  191.126578][ T5852] Bluetooth: hci1: command 0x0406 tx timeout
[  191.128544][ T5852] Bluetooth: hci0: command 0x0406 tx timeout
[  192.257117][ T9889] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1669'.
[  192.302900][ T9891] overlayfs: failed to clone upperpath
[  192.584828][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'.
[  192.591045][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'.
[  192.594283][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'.
[  192.598086][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'.
[  192.601645][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'.
[  192.605433][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'.
[  192.608806][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'.
[  192.612050][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'.
[  192.614812][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1678'.
[  192.735231][ T9918] sch_fq: defrate 0 ignored.
[  193.357956][ T9927] netlink: 'syz.3.1686': attribute type 17 has an invalid length.
[  194.157419][ T9948] netlink: 'syz.2.1694': attribute type 4 has an invalid length.
[  194.247582][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.250466][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.076920][ T9980] loop3: detected capacity change from 0 to 64
[  195.090304][ T9980] MINIX-fs: mounting file system with errors, running fsck is recommended
[  195.241661][ T9985] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0)
[  196.543314][T10017] loop3: detected capacity change from 0 to 256
[  196.572191][T10017] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  196.578440][T10017] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  196.595439][T10017] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  198.123219][T10081] __nla_validate_parse: 48 callbacks suppressed
[  198.123229][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1754'.
[  198.153958][T10081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.144049][ T5238] Bluetooth: unknown link type 7
[  199.150216][ T5238] Bluetooth: hci1: connection err: -111
[  199.340226][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'.
[  199.576706][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1780'.
[  200.896955][T10217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1816'.
[  202.419175][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'.
[  203.141125][T10267] netlink: 'syz.1.1837': attribute type 12 has an invalid length.
[  203.157342][ T5897] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  203.312284][ T5897] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  203.319246][ T5897] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4
[  203.322861][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.329620][ T5897] usb 4-1: Product: syz
[  203.332470][ T5897] usb 4-1: Manufacturer: syz
[  203.336424][ T5897] usb 4-1: SerialNumber: syz
[  203.441344][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1844'.
[  203.481025][T10284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1845'.
[  203.484651][T10284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1845'.
[  203.491690][T10284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1845'.
[  203.560514][ T5897] usbserial_generic 4-1:9.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  203.565784][ T5897] usbserial_generic 4-1:9.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  203.572900][ T5897] usbserial_generic 4-1:9.0: device has no bulk endpoints
[  203.582689][ T5897] usb 4-1: USB disconnect, device number 8
[  203.673576][T10292] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000
[  204.109889][T10300] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  204.833312][T10321] loop3: detected capacity change from 0 to 32768
[  204.854722][T10321] 
[  204.854722][T10321]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.854722][T10321] 
[  204.865331][T10321] 
[  204.865331][T10321]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.865331][T10321] 
[  204.874061][T10321] 
[  204.874061][T10321]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.874061][T10321] 
[  204.901197][T10321] 
[  204.901197][T10321]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.901197][T10321] 
[  204.922114][ T7906] 
[  204.922114][ T7906]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.922114][ T7906] 
[  204.929115][ T7906] 
[  204.929115][ T7906]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.929115][ T7906] 
[  205.068014][T10331] loop3: detected capacity change from 0 to 736
[  205.191061][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1869'.
[  205.292825][T10343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1872'.
[  205.309337][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1873'.
[  205.596146][   T33] audit: type=1326 audit(1758774638.635:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.3.1877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  205.605289][   T33] audit: type=1326 audit(1758774638.635:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.3.1877" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  205.615890][   T33] audit: type=1326 audit(1758774638.635:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.3.1877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  205.635934][   T33] audit: type=1326 audit(1758774638.635:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.3.1877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  205.658190][   T33] audit: type=1326 audit(1758774638.635:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.3.1877" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  205.665213][   T33] audit: type=1326 audit(1758774638.635:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.3.1877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  205.674459][   T33] audit: type=1326 audit(1758774638.635:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.3.1877" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  205.682751][   T33] audit: type=1326 audit(1758774638.635:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.3.1877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  205.691121][   T33] audit: type=1326 audit(1758774638.635:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.3.1877" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  205.699453][   T33] audit: type=1326 audit(1758774638.635:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10352 comm="syz.3.1877" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  206.777694][T10394] dvmrp9: entered allmulticast mode
[  206.823783][T10396] loop3: detected capacity change from 0 to 8
[  206.858688][T10396] SQUASHFS error: Unable to read inode 0xe3
[  207.485607][T10431] loop3: detected capacity change from 0 to 256
[  207.492373][T10429] netlink: 'syz.2.1909': attribute type 1 has an invalid length.
[  207.497125][T10429] netlink: 'syz.2.1909': attribute type 4 has an invalid length.
[  207.515700][T10431] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  207.534868][T10431] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008)
[  207.539949][T10431] exFAT-fs (loop3): Filesystem has been set read-only
[  208.015334][T10455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'.
[  208.712217][T10467] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1924'.
[  208.998798][ T5883] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  209.177580][ T5883] usb 4-1: Using ep0 maxpacket: 8
[  209.183509][ T5883] usb 4-1: config 0 has an invalid interface number: 229 but max is 0
[  209.193780][ T5883] usb 4-1: config 0 has no interface number 0
[  209.198642][ T5883] usb 4-1: New USB device found, idVendor=0830, idProduct=0003, bcdDevice=9a.68
[  209.202060][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.216528][ T5883] usb 4-1: Product: syz
[  209.218387][ T5883] usb 4-1: Manufacturer: syz
[  209.223773][ T5883] usb 4-1: SerialNumber: syz
[  209.232464][ T5883] usb 4-1: config 0 descriptor??
[  209.253171][ T5883] usb 4-1: active config #0 != 1 ??
[  209.291143][T10497] lo speed is unknown, defaulting to 1000
[  209.441118][ T5883] usb 4-1: USB disconnect, device number 9
[  209.675315][T10518] netlink: 'syz.1.1949': attribute type 10 has an invalid length.
[  209.692145][T10518] team0: Device ipvlan1 failed to register rx_handler
[  210.630802][T10545] bond0: default FDB implementation only supports local addresses
[  210.695032][T10550] overlayfs: failed to clone upperpath
[  210.872210][ T5238] Bluetooth: hci1: unexpected event for opcode 0x2035
[  211.210374][T10592] netlink: 'syz.2.1983': attribute type 8 has an invalid length.
[  211.715052][T10602] loop3: detected capacity change from 0 to 40427
[  211.725006][T10602] F2FS-fs (loop3): invalid crc value
[  211.772909][T10602] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  211.776602][T10602] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  211.850419][T10628] netlink: 'syz.1.2000': attribute type 30 has an invalid length.
[  214.099666][T10721] ceph: No mds server is up or the cluster is laggy
[  214.543917][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'.
[  214.544672][T10732] loop3: detected capacity change from 0 to 8192
[  214.900128][ T5238] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  214.903738][ T5238] Bluetooth: hci1: Injecting HCI hardware error event
[  214.911118][ T5238] Bluetooth: hci1: hardware error 0x00
[  215.199861][T10756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2053'.
[  215.579353][T10763] loop3: detected capacity change from 0 to 32768
[  215.586096][T10763] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2057 (10763)
[  215.595276][T10763] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.604235][T10763] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  215.692988][T10763] BTRFS info (device loop3): enabling ssd optimizations
[  215.701155][T10763] BTRFS info (device loop3): enabling free space tree
[  215.795186][ T7906] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  216.368521][T10813] loop3: detected capacity change from 0 to 8
[  216.380291][T10813] SQUASHFS error: lzo decompression failed, data probably corrupt
[  216.383637][T10813] SQUASHFS error: Failed to read block 0x91: -5
[  216.386264][T10813] SQUASHFS error: Unable to read metadata cache entry [8f]
[  216.391466][T10813] SQUASHFS error: Unable to read inode 0x11f
[  216.786924][ T5883] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  216.952055][ T5883] usb 4-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22
[  216.957017][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.976502][ T5238] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  216.987880][ T5883] usb 4-1: config 0 descriptor??
[  216.998979][ T5883] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0
[  217.099210][T10846] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  217.102391][T10846] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  217.116507][T10846] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  217.120701][T10846] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  217.124424][T10846] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  217.129155][T10846] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  217.131657][T10846] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  217.134152][T10846] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  217.138189][T10846] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  217.141158][T10846] netlink: 'syz.1.2089': attribute type 1 has an invalid length.
[  217.209420][ T5883] gspca_sn9c20x: Write register 1000 failed -71
[  217.211989][ T5883] gspca_sn9c20x: Device initialization failed
[  217.214480][ T5883] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  217.239098][ T5883] usb 4-1: USB disconnect, device number 10
[  217.874183][T10876] loop3: detected capacity change from 0 to 2048
[  217.989034][T10868] trusted_key: encrypted_key: insufficient parameters specified
[  218.042556][T10885] loop3: detected capacity change from 0 to 8
[  218.045360][T10885] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  218.865664][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881132acc00: rx timeout, send abort
[  218.929960][T10926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2125'.
[  218.938628][T10926] team0: Port device geneve0 added
[  218.941173][ T5711] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.946640][ T9024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.950197][ T9024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.953616][ T9024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.365751][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881132ad400: rx timeout, send abort
[  219.370728][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881132acc00: abort rx timeout. Force session deactivation
[  219.385595][    C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8881132ad400: connection exists (fe ff). last cmd: 20
[  219.391231][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2135'.
[  219.446472][ T5897] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  219.503292][T10949] overlayfs: failed to clone upperpath
[  219.599200][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short
[  219.606849][ T5897] usb 4-1: not running at top speed; connect to a high speed hub
[  219.617481][ T5897] usb 4-1: config 129 has an invalid interface number: 135 but max is 0
[  219.620352][ T5897] usb 4-1: config 129 has an invalid interface number: 5 but max is 0
[  219.623114][ T5897] usb 4-1: config 129 descriptor has 1 excess byte, ignoring
[  219.625669][ T5897] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  219.630716][ T5897] usb 4-1: config 129 has no interface number 0
[  219.633144][ T5897] usb 4-1: config 129 has no interface number 1
[  219.635123][ T5897] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  219.640229][ T5897] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  219.643702][ T5897] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  219.648249][ T5897] usb 4-1: config 129 interface 135 has no altsetting 0
[  219.650979][ T5897] usb 4-1: config 129 interface 5 has no altsetting 0
[  219.656982][ T5897] usb 4-1: string descriptor 0 read error: -22
[  219.659472][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  219.663853][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.691883][ T5897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  219.699038][ T5897] usb 4-1: MIDIStreaming interface descriptor not found
[  219.899838][ T5883] usb 4-1: USB disconnect, device number 11
[  220.793012][T10983] loop3: detected capacity change from 0 to 1024
[  221.019074][T10990] loop3: detected capacity change from 0 to 47
[  222.204183][T11015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2163'.
[  222.207115][T11015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2163'.
[  222.389871][   T97] libceph: connect (1)[c::]:6789 error -101
[  222.401207][   T97] libceph: mon0 (1)[c::]:6789 connect error
[  222.526769][T11025] ceph: No mds server is up or the cluster is laggy
[  222.779393][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2177'.
[  222.782919][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2177'.
[  224.447410][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'.
[  224.451092][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2199'.
[  225.972399][T11126] Invalid source name
[  225.974207][T11126] UBIFS error (pid: 11126): cannot open "ubifs", error -22
[  226.349768][   T33] kauditd_printk_skb: 34 callbacks suppressed
[  226.349790][   T33] audit: type=1326 audit(1758774659.465:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.2.2218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  226.383091][   T33] audit: type=1326 audit(1758774659.465:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.2.2218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  226.391053][   T33] audit: type=1326 audit(1758774659.475:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.2.2218" exe="/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  226.406691][   T33] audit: type=1326 audit(1758774659.475:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.2.2218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  226.414260][   T33] audit: type=1326 audit(1758774659.475:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.2.2218" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff37418ec29 code=0x7ffc0000
[  226.482778][T11147] loop3: detected capacity change from 0 to 32768
[  226.485614][T11147] XFS: noikeep mount option is deprecated.
[  226.500442][T11147] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.521963][T11147] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  226.535253][T11147] XFS (loop3): Starting recovery (logdev: internal)
[  226.545424][T11147] XFS (loop3): Ending recovery (logdev: internal)
[  226.582493][T11147] XFS (loop3): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  226.585860][T11147] XFS (loop3): Unmount and run xfs_repair
[  226.588995][T11147] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  226.591339][T11147] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  226.594032][T11147] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  226.598409][T11147] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  226.601090][T11147] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  226.603995][T11147] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  226.609946][T11147] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  226.613354][T11147] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  226.617642][T11147] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  226.621575][T11147] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  226.651352][ T7906] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.656033][ T7906] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  227.061388][T11182] validate_nla: 46 callbacks suppressed
[  227.061402][T11182] netlink: 'syz.3.2230': attribute type 1 has an invalid length.
[  227.457678][T11185] 8021q: adding VLAN 0 to HW filter on device bond2
[  227.464832][T11185] bond1: (slave bond2): making interface the new active one
[  227.477050][T11185] bond1: (slave bond2): Enslaving as an active interface with an up link
[  227.496081][T11186] bond1: (slave gretap1): Enslaving as a backup interface with an up link
[  227.880994][T11193] loop3: detected capacity change from 0 to 32768
[  227.884548][T11193] XFS: attr2 mount option is deprecated.
[  227.939647][T11193] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  227.950754][T11193] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.999361][T11193] XFS (loop3): Ending clean mount
[  228.027220][T11193] XFS (loop3): Quotacheck needed: Please wait.
[  228.089816][T11193] XFS (loop3): Quotacheck: Done.
[  228.139328][ T7906] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  228.438399][   T33] audit: type=1326 audit(1758777239.555:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11227 comm="syz.3.2241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  228.454186][   T33] audit: type=1326 audit(1758777239.555:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11227 comm="syz.3.2241" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  228.478122][   T33] audit: type=1326 audit(1758777239.555:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11227 comm="syz.3.2241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  228.490420][   T33] audit: type=1326 audit(1758777239.555:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11227 comm="syz.3.2241" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  228.558719][   T33] audit: type=1326 audit(1758777239.555:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11227 comm="syz.3.2241" exe="/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f093898ec29 code=0x7ffc0000
[  228.572516][T11231] netlink: 'syz.3.2245': attribute type 12 has an invalid length.
[  228.575830][T11231] netlink: 'syz.3.2245': attribute type 29 has an invalid length.
[  228.580074][T11231] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2245'.
[  228.641742][T11233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2246'.
[  229.266480][   T97] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  229.428890][   T97] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  229.432663][   T97] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.436766][   T97] usb 4-1: config 0 has no interface number 0
[  229.439348][   T97] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  229.443355][   T97] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  229.451273][   T97] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  229.455070][   T97] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.458558][   T97] usb 4-1: Product: syz
[  229.460293][   T97] usb 4-1: Manufacturer: syz
[  229.462225][   T97] usb 4-1: SerialNumber: syz
[  229.470850][   T97] usb 4-1: config 0 descriptor??
[  229.691248][   T97] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71
[  229.701352][   T97] usb 4-1: USB disconnect, device number 12
[  229.865708][T11272] lo: entered allmulticast mode
[  229.878657][T11271] lo: left allmulticast mode
[  231.184348][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'.
[  231.589475][ T5316] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  231.914071][ T5316] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  231.938735][ T5316] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.970120][ T5316] usb 4-1: config 0 interface 0 has no altsetting 0
[  231.989819][ T5316] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  232.005217][ T5316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.029515][ T5316] usb 4-1: config 0 descriptor??
[  232.474750][ T5316] lenovo 0003:17EF:60EE.000B: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0
[  232.671615][ T5316] lenovo 0003:17EF:60EE.000B: Failed to switch middle button: -71
[  232.715432][ T5316] lenovo 0003:17EF:60EE.000B: Fn-lock setting failed: -71
[  232.754020][ T5316] lenovo 0003:17EF:60EE.000B: Sensitivity setting failed: -71
[  232.782005][ T5316] usb 4-1: USB disconnect, device number 13
[  233.274155][T11370] use of bytesused == 0 is deprecated and will be removed in the future,
[  233.281016][T11370] use the actual size instead.
[  233.509770][T11388] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2314'.
[  234.317382][T11410] loop3: detected capacity change from 0 to 128
[  234.324285][T11410] EXT4-fs: Ignoring removed nobh option
[  234.344933][T11410] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  234.359377][T11410] ext4 filesystem being mounted at /333/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  234.403379][ T7906] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  234.522251][T11418] loop3: detected capacity change from 0 to 256
[  234.533045][T11418] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  234.539624][T11418] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  234.544468][T11418] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x11190002, checksum : 0x1119abd0)
[  234.549387][T11418] exFAT-fs (loop3): invalid boot region
[  234.551232][T11418] exFAT-fs (loop3): failed to recognize exfat type
[  234.681115][T11427] netlink: 'syz.2.2328': attribute type 3 has an invalid length.
[  234.685648][T11427] netlink: 'syz.2.2328': attribute type 2 has an invalid length.
[  236.023349][T11456] loop3: detected capacity change from 0 to 8192
[  236.394045][T11473] netlink: 'syz.3.2349': attribute type 11 has an invalid length.
[  236.624797][T11488] loop3: detected capacity change from 0 to 8
[  236.660118][T11488] SQUASHFS error: Failed to read block 0x62: -5
[  236.662716][T11488] squashfs image failed sanity check
[  236.810242][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2358'.
[  237.409676][ T5298] udevd[5298]: worker [9816] terminated by signal 33 (Unknown signal 33)
[  237.422441][ T5298] udevd[5298]: worker [9816] failed while handling '/devices/virtual/block/loop3'
Connection to localhost closed by remote host.
[  255.605397][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.607927][ T1364] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
04:31:20  Registers:
info registers vcpu 0

CPU#0
RAX=b509aa2cfefe0700 RBX=ffffffff819683f8 RCX=b509aa2cfefe0700 RDX=0000000000000001
RSI=ffffffff8d9ba2fc RDI=ffffffff8be33f80 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa3a730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff3f1694866 CR3=000000001f5b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=1000058004060141 b80030656c69662f
XMM02=fffb0800031c8240 8080808800038080 XMM03=0800060105be002e 01ffffffffffffff
XMM04=01018004020176fc 0030656c69662f2e XMM05=01ffffffffffffff ffef0801800307b8
XMM06=80080002016fe01f fffffff610000004 XMM07=01c70800060105be 002e01ffffffffff
XMM08=0300100002b0030f ffffffffffff0402 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=aeaad01e5e9bc300 RBX=ffffffff819683f8 RCX=aeaad01e5e9bc300 RDX=0000000000000001
RSI=ffffffff8d9ba2fc RDI=ffffffff8be33f80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a730 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7a53f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055891752dfe0 CR3=000000001f5b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=1000058004060141 b80030656c69662f
XMM02=fffb0800031c8240 8080808800038080 XMM03=0800060105be002e 01ffffffffffffff
XMM04=01018004020176fc 0030656c69662f2e XMM05=01ffffffffffffff ffef0801800307b8
XMM06=80080002016fe01f fffffff610000004 XMM07=01c70800060105be 002e01ffffffffff
XMM08=0300100002b0030f ffffffffffff0402 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
