last executing test programs:

1.584140264s ago: executing program 2 (id=2727):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x10, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x7d, 0xf}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)

1.519825895s ago: executing program 2 (id=2729):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000000)={[{@enospc_debug}]}, 0x1, 0x50f9, &(0x7f0000005140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}})

830.767304ms ago: executing program 2 (id=2739):
r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x664181bb8510ecc4, 0x31, 0xffffffffffffffff, 0x0)
mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0)
mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)

557.203078ms ago: executing program 2 (id=2744):
syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@quota}, {@noload}, {@norecovery}, {@noauto_da_alloc}, {@resgid}, {@inlinecrypt}, {@noauto_da_alloc}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
socket$packet(0x11, 0x3, 0x300)
r0 = open(&(0x7f0000000140)='.\x00', 0x80000, 0x103)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getdents(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

498.114361ms ago: executing program 1 (id=2747):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106}, 0x94)

430.615022ms ago: executing program 1 (id=2748):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x6}, 0xa)

360.177978ms ago: executing program 1 (id=2750):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedd07910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

277.656695ms ago: executing program 2 (id=2752):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4)

277.321134ms ago: executing program 1 (id=2753):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48)

168.685384ms ago: executing program 0 (id=2755):
setreuid(0xffffffffffffffff, 0xee01)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={<r2=>0x0, <r3=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x40044}}], 0x1, 0x4)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4)
write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x78)
splice(r0, 0x0, r4, 0x0, 0x39000, 0x0)

168.45295ms ago: executing program 1 (id=2756):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0)

168.375549ms ago: executing program 0 (id=2757):
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r0], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054)

164.471863ms ago: executing program 1 (id=2758):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x1)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1)
syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00')
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})

163.611317ms ago: executing program 2 (id=2759):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7beda18e355adf8636110f251ff757040047bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c8d8c9d924624781014d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYRES64, @ANYRES64, @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0))

78.974682ms ago: executing program 0 (id=2760):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup3(r0, r1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/178, 0xb2, 0x0, 0x0}, &(0x7f0000000300)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40)

78.837198ms ago: executing program 0 (id=2761):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)

246.02µs ago: executing program 0 (id=2762):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)

0s ago: executing program 0 (id=2763):
r0 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x2000000, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1)

kernel console output (not intermixed with test programs):

es=0 errno=0
[  116.697856][ T8072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.739664][ T4987] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  116.766623][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1010'.
[  116.921133][ T8086] loop0: detected capacity change from 0 to 1024
[  117.819507][ T5576] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  117.980957][ T5576] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  117.985245][ T5576] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.989021][ T5576] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  117.995399][ T5576] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.999781][ T5576] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.005183][ T5576] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  118.008601][ T5576] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  118.013967][ T5576] usb 3-1: Product: syz
[  118.015673][ T5576] usb 3-1: Manufacturer: syz
[  118.025145][ T5576] cdc_wdm 3-1:1.0: skipping garbage
[  118.030735][ T5576] cdc_wdm 3-1:1.0: skipping garbage
[  118.044718][ T5576] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  118.047227][ T5576] cdc_wdm 3-1:1.0: Unknown control protocol
[  118.236568][ T8103] cdc_wdm 3-1:1.0: Error submitting int urb - -90
[  118.240483][ T5576] usb 3-1: USB disconnect, device number 11
[  118.949406][ T5674] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  119.133381][ T5674] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.136756][ T5674] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  119.140465][ T5674] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  119.143299][ T5674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.147398][ T5674] usb 1-1: config 0 descriptor??
[  119.360730][ T5674] Bluetooth: Can't get state to change to load ram patch err
[  119.369966][ T5674] Bluetooth: Loading patch file failed
[  119.373059][ T5674] ath3k 1-1:0.0: probe with driver ath3k failed with error -71
[  119.378392][ T5674] usb 1-1: USB disconnect, device number 15
[  119.951712][ T8160] loop0: detected capacity change from 0 to 128
[  119.961951][ T8160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  119.968062][ T8160] System zones: 1-3, 19-19, 35-36
[  119.973453][ T8160] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  119.979089][ T8160] ext4 filesystem being mounted at /301/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  120.024884][ T5597] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  120.053105][   T33] audit: type=1326 audit(1787678043.455:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.1047" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  120.073254][   T33] audit: type=1326 audit(1787678043.465:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.1047" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  120.089757][   T33] audit: type=1326 audit(1787678043.465:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.1047" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  120.109542][   T33] audit: type=1326 audit(1787678043.465:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.1047" exe="/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  120.127466][   T33] audit: type=1326 audit(1787678043.465:122): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.1047" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  120.149469][   T33] audit: type=1326 audit(1787678043.465:123): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.1047" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  120.160728][   T33] audit: type=1326 audit(1787678043.465:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.1047" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  120.175415][   T33] audit: type=1326 audit(1787678043.465:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.1047" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  120.194952][   T33] audit: type=1326 audit(1787678043.465:126): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.0.1047" exe="/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  120.204510][ T5576] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  120.370762][ T5576] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  120.374396][ T5576] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  120.381377][ T5576] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  120.384222][ T5576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.386816][ T5576] usb 3-1: Product: syz
[  120.388118][ T5576] usb 3-1: Manufacturer: syz
[  120.392377][ T5576] usb 3-1: SerialNumber: syz
[  120.400312][ T5576] etas_es58x 3-1:1.0: Starting syz syz (Serial Number syz)
[  120.458989][ T8197] dlm: non-version read from control device 36
[  120.606549][ T5576] etas_es58x 3-1:1.0: could not retrieve the product info string
[  120.640705][ T5576] usb 3-1: USB disconnect, device number 12
[  120.645348][ T5576] etas_es58x 3-1:1.0: Disconnecting syz syz
[  120.759593][   T32] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  120.909615][   T32] usb 1-1: Using ep0 maxpacket: 32
[  120.918683][   T32] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  120.926512][   T32] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  120.933592][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.937642][   T32] usb 1-1: Product: syz
[  120.940240][   T32] usb 1-1: Manufacturer: syz
[  120.942197][   T32] usb 1-1: SerialNumber: syz
[  121.158848][   T32] usb 1-1: selecting invalid altsetting 1
[  121.165730][   T32] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  121.165812][   T32] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[  121.176788][   T32] usb 1-1: USB disconnect, device number 16
[  121.194655][ T8218] loop2: detected capacity change from 0 to 512
[  121.202306][ T8218] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  121.218143][ T8218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  121.223388][ T8218] System zones: 1-12
[  121.224891][ T8218] EXT4-fs (loop2): orphan cleanup on readonly fs
[  121.232056][ T8218] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1067: bg 0: block 361: padding at end of block bitmap is not set
[  121.237900][ T8218] loop2: lost filesystem error report for type 5 error -117
[  121.238557][ T8218] EXT4-fs (loop2): Remounting filesystem read-only
[  121.240838][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  121.240847][    C0] EXT4-fs (loop2): initial error at time 1787678044: ext4_validate_block_bitmap:441
[  121.240857][    C0] EXT4-fs (loop2): last error at time 1787678044: ext4_validate_block_bitmap:441
[  121.251720][ T8218] EXT4-fs (loop2): 1 truncate cleaned up
[  121.255028][ T8218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  121.268040][ T8218] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.1067: error -EUCLEAN reading directory block
[  121.273341][ T8218] EXT4-fs warning (device loop2): dx_probe:791: inode #2: lblock 0: comm syz.2.1067: error -EUCLEAN reading directory block
[  121.288873][ T5603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  122.548512][ T8249] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1081'.
[  122.556901][ T8247] netlink: 'syz.1.1080': attribute type 4 has an invalid length.
[  122.578397][ T8247] netlink: 'syz.1.1080': attribute type 4 has an invalid length.
[  122.748464][ T8262] loop0: detected capacity change from 0 to 512
[  122.762230][ T8262] EXT4-fs warning (device loop0): read_mmp_block:110: Error -74 while reading MMP block 17
[  122.797356][ T8263] loop2: detected capacity change from 0 to 4096
[  122.870961][ T8263] ntfs3(loop2): Failed to load $Extend (-22).
[  122.873845][ T8263] ntfs3(loop2): Failed to initialize $Extend.
[  123.143877][ T8272] loop0: detected capacity change from 0 to 32768
[  123.147066][ T8272] xfs: Deprecated parameter 'noattr2'
[  123.150689][ T8272] XFS: noattr2 mount option is deprecated.
[  123.196593][ T8272] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.235925][ T8272] XFS (loop0): Ending clean mount
[  123.264016][ T5597] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.502440][ T8299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1101'.
[  123.571697][ T8303] loop0: detected capacity change from 0 to 8
[  123.879604][   T32] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  124.042485][   T32] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  124.049530][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.053200][   T32] usb 1-1: Product: syz
[  124.054511][   T32] usb 1-1: Manufacturer: syz
[  124.059044][   T32] usb 1-1: SerialNumber: syz
[  124.065165][   T32] usb 1-1: config 0 descriptor??
[  124.140211][ T5653] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  124.276738][   T32] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 017
[  124.294191][ T5653] usb 3-1: unable to get BOS descriptor or descriptor too short
[  124.301576][ T5653] usb 3-1: config 127 has an invalid interface number: 106 but max is 0
[  124.304013][ T5653] usb 3-1: config 127 has no interface number 0
[  124.305865][ T5653] usb 3-1: config 127 interface 106 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0
[  124.308798][ T5653] usb 3-1: config 127 interface 106 has no altsetting 0
[  124.314570][ T5653] usb 3-1: string descriptor 0 read error: -22
[  124.316569][ T5653] usb 3-1: New USB device found, idVendor=0403, idProduct=e80a, bcdDevice= 0.b8
[  124.320084][ T5653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.328187][ T5653] ftdi_sio 3-1:127.106: FTDI USB Serial Device converter detected
[  124.340961][ T5653] usb 3-1: Detected SIO
[  124.344527][ T5653] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15
[  124.351394][ T5653] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  124.476319][ T5653] usb 1-1: USB disconnect, device number 17
[  124.530994][   T10] usb 3-1: USB disconnect, device number 13
[  124.541872][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  124.562623][   T10] ftdi_sio 3-1:127.106: device disconnected
[  124.655044][ T8351] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  125.093656][ T8359] ip_tables: iptables: counters copy to user failed while replacing table
[  125.135829][ T8361] loop2: detected capacity change from 0 to 1024
[  125.485706][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1142'.
[  125.549436][   T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  125.701898][   T10] usb 1-1: Dual-Role OTG device on HNP port
[  125.707110][   T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  125.711953][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.737419][   T10] gspca_main: spca501-2.14.0 probing 0000:0000
[  125.743148][   T10] gspca_spca501: reg write: error -32
[  125.747165][   T10] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  125.752596][   T10] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  125.800869][ T8406] loop0: detected capacity change from 0 to 2048
[  125.817922][ T8406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  125.824892][ T8406] EXT4-fs (loop0): shut down requested (2)
[  125.860515][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  126.246197][ T8447] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  126.259884][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  126.270461][ T8449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.275503][ T8449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.411664][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  126.415301][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.427111][   T10] pwc: Logitech/Cisco VT Camera webcam detected.
[  126.830716][   T10] pwc: send_video_command error -71
[  126.834591][   T10] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  126.844983][   T10] Philips webcam 3-1:127.0: probe with driver Philips webcam failed with error -71
[  126.854908][   T10] usb 3-1: USB disconnect, device number 14
[  126.862026][ T8451] bond0: invalid ARP target specified
[  127.074555][ T8469] loop0: detected capacity change from 0 to 2048
[  127.085844][ T5600] udevd[5600]: incorrect nilfs2 checksum on /dev/loop0
[  127.088972][ T8469] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  127.102268][ T8474] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.136625][ T8474] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  127.140600][ T8474] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  127.146425][ T8474] Remounting filesystem read-only
[  127.150991][ T5597] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  127.173200][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.175964][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.184026][ T8476] overlayfs: failed to clone upperpath
[  127.311907][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  127.311922][   T33] audit: type=1326 audit(1787678050.715:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  127.323087][   T33] audit: type=1326 audit(1787678050.715:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  127.333316][   T33] audit: type=1326 audit(1787678050.715:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  127.345723][   T33] audit: type=1326 audit(1787678050.715:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  127.353869][   T33] audit: type=1326 audit(1787678050.715:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  127.360933][   T33] audit: type=1326 audit(1787678050.715:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  127.367546][   T33] audit: type=1326 audit(1787678050.715:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  127.383955][   T33] audit: type=1326 audit(1787678050.715:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  127.409369][   T33] audit: type=1326 audit(1787678050.715:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  127.421982][   T33] audit: type=1326 audit(1787678050.715:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8487 comm="syz.1.1187" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  127.482398][ T8498] loop2: detected capacity change from 0 to 64
[  127.816515][ T8520] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  127.902161][ T8528] netlink: 'syz.0.1207': attribute type 21 has an invalid length.
[  127.908552][ T8528] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1207'.
[  127.916785][ T8528] netlink: 'syz.0.1207': attribute type 4 has an invalid length.
[  127.928107][ T8528] netlink: 'syz.0.1207': attribute type 5 has an invalid length.
[  127.935350][ T8528] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1207'.
[  128.031317][ T8536] loop0: detected capacity change from 0 to 2048
[  128.044450][ T8536] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.251575][ T8554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.261022][ T8554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.838839][ T8566] netlink: 'syz.0.1225': attribute type 1 has an invalid length.
[  128.931315][ T8572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1228'.
[  129.556612][ T8598] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  129.560680][ T8598] bond2 (unregistering): Released all slaves
[  130.163992][ T8643] nbd: illegal input index -1
[  130.959428][ T5675] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  131.119561][ T5675] usb 3-1: Using ep0 maxpacket: 16
[  131.123660][ T5675] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  131.128258][ T5675] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  131.131812][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.134666][ T5675] usb 3-1: Product: syz
[  131.136062][ T5675] usb 3-1: Manufacturer: syz
[  131.137912][ T5675] usb 3-1: SerialNumber: syz
[  131.152940][ T5675] r8152-cfgselector 3-1: Unknown version 0x0000
[  131.160404][ T5675] r8152-cfgselector 3-1: config 0 descriptor??
[  131.464485][ T8675] netlink: 'syz.1.1271': attribute type 9 has an invalid length.
[  131.597563][ T5675] r8152-cfgselector 3-1: USB disconnect, device number 15
[  132.058576][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'.
[  132.087437][ T8696] hsr_slave_1 (unregistering): left promiscuous mode
[  132.161330][ T8705] loop0: detected capacity change from 0 to 512
[  132.166410][ T8705] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  132.194909][ T8705] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  132.209503][ T8705] EXT4-fs (loop0): mount failed
[  132.793228][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  132.795906][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  133.148876][ T8737] loop0: detected capacity change from 0 to 16
[  133.184662][ T8737] erofs (device loop0): mounted with root inode @ nid 36.
[  133.732842][ T8759] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 6 out of range (51000000..2150000000)
[  133.753298][ T8762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1306'.
[  133.782416][ T8762] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1306'.
[  133.803228][ T8762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1306'.
[  133.823979][ T8762] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1306'.
[  134.455677][ T8786] loop0: detected capacity change from 0 to 32768
[  134.674788][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.685244][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.059446][ T5674] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  135.215568][ T5674] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  135.221485][ T5674] usb 3-1: config 0 has no interface number 0
[  135.226425][ T5674] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  135.243999][ T5674] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  135.250610][ T5675] IPVS: starting estimator thread 0...
[  135.253712][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.258460][ T5674] usb 3-1: Product: syz
[  135.263953][ T5674] usb 3-1: Manufacturer: syz
[  135.268404][ T5674] usb 3-1: SerialNumber: syz
[  135.273687][ T5674] usb 3-1: config 0 descriptor??
[  135.285772][ T4987] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  135.291758][ T4987] Bluetooth: hci0: Injecting HCI hardware error event
[  135.293825][ T5674] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  135.296661][   T53] Bluetooth: hci0: hardware error 0x00
[  135.324303][ T8832] loop0: detected capacity change from 0 to 16
[  135.338071][ T8832] erofs (device loop0): mounted with root inode @ nid 36.
[  135.368736][ T8832] syz.0.1338: attempt to access beyond end of device
[  135.368736][ T8832] loop0: rw=524288, sector=12296, nr_sectors = 8 limit=16
[  135.369771][ T8828] IPVS: using max 77 ests per chain, 184800 per kthread
[  135.383573][ T8832] syz.0.1338: attempt to access beyond end of device
[  135.383573][ T8832] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  135.389856][ T8832] syz.0.1338: attempt to access beyond end of device
[  135.389856][ T8832] loop0: rw=0, sector=12296, nr_sectors = 8 limit=16
[  135.395279][ T8832] erofs (device loop0): read error -5 @ 0 of nid 89
[  135.446924][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  135.446937][   T33] audit: type=1800 audit(1787678058.845:151): pid=8832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1338" name="file2" dev="loop0" ino=89 res=0 errno=0
[  135.561998][ T8837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.172511][ T8874] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  136.213903][ T8876] netlink: 'syz.0.1359': attribute type 1 has an invalid length.
[  136.269070][ T8876] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.283989][ T8880] vlan2: entered allmulticast mode
[  136.286320][ T8880] bond1: entered allmulticast mode
[  136.326771][ T8876] bond1: (slave geneve2): making interface the new active one
[  136.331027][ T8876] geneve2: entered allmulticast mode
[  136.335540][ T8876] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  136.339111][ T7056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.347289][ T7056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.357867][ T7056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.361746][ T7056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.778552][ T8889] jffs2: notice: (8889) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  136.906028][   T33] audit: type=1326 audit(1787678060.305:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.1364" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe86059e0d9 code=0x0
[  137.349339][   T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  137.371663][ T8896] trusted_key: encrypted_key: hex blob is missing
[  137.464528][ T8900] xt_hashlimit: overflow, rate too high: 0
[  137.857717][ T5675] usb 3-1: USB disconnect, device number 16
[  137.875876][ T5675] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  137.941023][ T8913] loop0: detected capacity change from 0 to 256
[  137.955055][ T8915] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  138.203686][ T8922] netlink: 'syz.0.1377': attribute type 3 has an invalid length.
[  138.209657][ T8922] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1377'.
[  138.388262][   T33] audit: type=1326 audit(1787678061.785:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.0.1382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  138.402232][   T33] audit: type=1326 audit(1787678061.785:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.0.1382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  138.415867][   T33] audit: type=1326 audit(1787678061.785:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.0.1382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  138.425816][ T8934] kAFS: unable to lookup cell 'syze@s0'
[  138.434969][   T33] audit: type=1326 audit(1787678061.785:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.0.1382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  138.446746][   T33] audit: type=1326 audit(1787678061.805:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.0.1382" exe="/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  138.465317][   T33] audit: type=1326 audit(1787678061.805:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.0.1382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  138.476009][   T33] audit: type=1326 audit(1787678061.805:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.0.1382" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  138.493918][   T33] audit: type=1326 audit(1787678061.805:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.0.1382" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe86059e0d9 code=0x7ffc0000
[  139.174994][ T8958] loop0: detected capacity change from 0 to 32768
[  139.456862][ T8972] libceph: secret too big 289
[  139.528492][ T8978] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1402'.
[  139.846605][ T9000] loop0: detected capacity change from 0 to 512
[  139.849170][ T9000] EXT4-fs: Ignoring removed nobh option
[  139.851523][ T9000] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  139.858717][ T9000] EXT4-fs (loop0): 1 truncate cleaned up
[  139.863300][ T9000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.888763][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.994262][ T9005] fuse: Bad value for 'fd'
[  140.474624][ T7058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.686225][ T7058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.787606][ T4987] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  140.794023][ T4987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  140.801237][ T4987] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  140.804716][ T4987] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  140.807925][ T4987] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  140.821592][ T7058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.964044][ T7058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.104202][ T9032] ip_tables: iptables: counters copy to user failed while replacing table
[  141.147880][ T9035] loop0: detected capacity change from 0 to 8
[  141.166058][ T9035] SQUASHFS error: lzo decompression failed, data probably corrupt
[  141.175449][ T9035] SQUASHFS error: Failed to read block 0x1c6: -5
[  141.181313][ T9035] SQUASHFS error: Unable to read metadata cache entry [1c4]
[  141.187841][ T9035] SQUASHFS error: Unable to read inode 0x11f
[  141.296619][ T9043] loop0: detected capacity change from 0 to 512
[  141.298964][ T9043] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  141.467743][ T7058] bridge_slave_1: left allmulticast mode
[  141.473336][ T7058] bridge_slave_1: left promiscuous mode
[  141.478748][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.494243][ T7058] bridge_slave_0: left allmulticast mode
[  141.496514][ T7058] bridge_slave_0: left promiscuous mode
[  141.500510][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.673317][ T7058] bond1 (unregistering): (slave ip6gre1): Releasing backup interface
[  141.676543][ T7058] ip6gre1 (unregistering): left promiscuous mode
[  141.977734][ T7058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  141.986208][ T7058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  141.989977][ T7058] bond0 (unregistering): Released all slaves
[  141.995979][ T7058] bond1 (unregistering): Released all slaves
[  142.264453][ T5343] 8021q: adding VLAN 0 to HW filter on device eth1
[  142.340245][ T9011] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.342680][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.348813][ T9011] bridge_slave_0: entered allmulticast mode
[  142.353290][ T9011] bridge_slave_0: entered promiscuous mode
[  142.357758][ T9011] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.360227][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.362416][ T9011] bridge_slave_1: entered allmulticast mode
[  142.365031][ T9011] bridge_slave_1: entered promiscuous mode
[  142.458544][ T9011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  142.464556][ T9011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  142.482950][ T9079] netlink: 'syz.1.1437': attribute type 4 has an invalid length.
[  142.545004][ T9086] netlink: 'syz.1.1437': attribute type 4 has an invalid length.
[  142.584519][ T9011] team0: Port device team_slave_0 added
[  142.587103][ T5343] 8021q: adding VLAN 0 to HW filter on device eth2
[  142.605279][ T9011] team0: Port device team_slave_1 added
[  142.649658][ T9011] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.651782][ T9011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  142.659428][ T9011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.680768][ T7058] hsr_slave_0: left promiscuous mode
[  142.688728][ T7058] hsr_slave_1: left promiscuous mode
[  142.694264][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.698734][ T7058] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.710588][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.713457][ T7058] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.756816][ T7058] veth1_macvtap: left promiscuous mode
[  142.758800][ T7058] veth0_macvtap: left promiscuous mode
[  142.761721][ T7058] veth1_vlan: left promiscuous mode
[  142.763465][ T7058] veth0_vlan: left promiscuous mode
[  142.811961][ T9088] loop0: detected capacity change from 0 to 32768
[  142.853733][ T9088] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  142.869684][ T4987] Bluetooth: hci1: command tx timeout
[  142.888200][ T9088] XFS (loop0): Ending clean mount
[  142.892706][ T9088] XFS (loop0): Quotacheck needed: Please wait.
[  142.917124][ T7058] team0 (unregistering): Port device team_slave_1 removed
[  142.941929][ T9088] XFS (loop0): Quotacheck: Done.
[  142.945176][ T7058] team0 (unregistering): Port device team_slave_0 removed
[  143.018126][ T5597] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  143.069357][ T9011] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.072172][ T9011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  143.079966][ T9011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.131552][ T9011] hsr_slave_0: entered promiscuous mode
[  143.136166][ T9011] hsr_slave_1: entered promiscuous mode
[  143.140988][ T9011] debugfs: 'hsr0' already exists in 'hsr'
[  143.142832][ T9011] Cannot create hsr debugfs directory
[  143.436570][ T5343] 8021q: adding VLAN 0 to HW filter on device eth3
[  143.634318][ T7058] IPVS: stop unused estimator thread 0...
[  144.036703][ T9011] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  144.041829][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  144.049868][ T9011] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  144.065778][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  144.070910][ T9011] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  144.080391][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  144.083668][ T9011] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  144.094343][ T9011] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  144.166767][ T9011] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.183176][ T9011] 8021q: adding VLAN 0 to HW filter on device team0
[  144.201305][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.204153][ T6921] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.210520][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.213166][ T6921] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.456726][ T9011] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.502002][ T9011] veth0_vlan: entered promiscuous mode
[  144.512819][ T9011] veth1_vlan: entered promiscuous mode
[  144.535958][ T9011] veth0_macvtap: entered promiscuous mode
[  144.540133][ T9011] veth1_macvtap: entered promiscuous mode
[  144.547910][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.557344][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.568854][ T7058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.572456][ T7058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.575780][ T7058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.578437][ T7058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.676186][ T6933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.684006][ T6933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.713869][  T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.716851][  T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.949527][ T4987] Bluetooth: hci1: command tx timeout
[  145.583170][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  145.583190][   T33] audit: type=1326 audit(1787678068.985:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fd9e0d9 code=0x7fc00000
[  145.830810][ T9198] loop2: detected capacity change from 0 to 32768
[  145.849843][ T9198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1461 (9198)
[  145.865650][ T9198] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.870709][ T9198] BTRFS info (device loop2): using sha256 checksum algorithm
[  146.013018][ T9198] BTRFS info (device loop2): enabling ssd optimizations
[  146.015559][ T9198] BTRFS info (device loop2): turning on async discard
[  146.018296][ T9198] BTRFS info (device loop2): enabling free space tree
[  146.111453][ T9011] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.489842][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'.
[  146.553588][ T9234] netlink: 'syz.1.1471': attribute type 10 has an invalid length.
[  146.647250][ T9234] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  146.680082][ T9234] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  146.726418][   T33] audit: type=1326 audit(1787678070.125:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fd9e0d9 code=0x7ffc0000
[  146.741715][   T33] audit: type=1326 audit(1787678070.135:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fd9e0d9 code=0x7ffc0000
[  146.755626][   T33] audit: type=1326 audit(1787678070.135:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1476" exe="/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f768fd9e0d9 code=0x7ffc0000
[  146.804742][   T33] audit: type=1326 audit(1787678070.135:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fd9e0d9 code=0x7ffc0000
[  146.825917][   T33] audit: type=1326 audit(1787678070.135:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fd9e0d9 code=0x7ffc0000
[  146.836673][   T33] audit: type=1326 audit(1787678070.135:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fd9e0d9 code=0x7ffc0000
[  146.846134][   T33] audit: type=1326 audit(1787678070.135:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fd9e0d9 code=0x7ffc0000
[  146.850880][ T9251] xt_recent: Unsupported userspace flags (000000c5)
[  146.855086][   T33] audit: type=1326 audit(1787678070.135:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768fd9e0d9 code=0x7ffc0000
[  146.873143][   T33] audit: type=1326 audit(1787678070.135:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9245 comm="syz.2.1476" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f768fd9e0d9 code=0x7ffc0000
[  146.943323][ T9258] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1482'.
[  146.953609][ T9258] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1482'.
[  146.971704][ T9258] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1482'.
[  146.977789][ T9258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1482'.
[  147.031662][ T4987] Bluetooth: hci1: command tx timeout
[  147.125588][ T9270] kernel read not supported for file /per_cpu/cpu0/trace_pipe (pid: 9270 comm: syz.2.1488)
[  147.275946][ T9268] loop0: detected capacity change from 0 to 32768
[  147.294676][ T9268] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1487 (9268)
[  147.326989][ T9268] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.334298][ T9268] BTRFS info (device loop0): using sha256 checksum algorithm
[  147.409824][ T9268] BTRFS info (device loop0): enabling ssd optimizations
[  147.417962][ T9268] BTRFS info (device loop0): turning on async discard
[  147.426604][ T9268] BTRFS info (device loop0): enabling free space tree
[  147.465457][ T9268] BTRFS error (device loop0): balance: mixed groups data and metadata options must be the same
[  147.524374][ T5597] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.179446][ T9324] loop0: detected capacity change from 0 to 8
[  148.505649][ T9331] loop0: detected capacity change from 0 to 32768
[  148.565708][ T9331] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  148.595665][ T9331] XFS (loop0): Ending clean mount
[  149.109384][ T4987] Bluetooth: hci1: command tx timeout
[  149.216936][ T5597] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  149.427200][ T9374] loop2: detected capacity change from 0 to 256
[  149.601471][ T9382] loop2: detected capacity change from 0 to 4096
[  149.621220][ T9385] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.843081][ T9393] program syz.2.1532 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  149.884337][ T9395] loop2: detected capacity change from 0 to 1024
[  149.887866][ T9395] EXT4-fs: Ignoring removed orlov option
[  149.943960][ T9397] loop2: detected capacity change from 0 to 2048
[  149.954382][ T9397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  149.971349][ T9397] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 201
[  150.177295][ T9415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.183332][ T9415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.333497][ T9423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1547'.
[  150.359969][ T5675] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  150.510651][ T5675] usb 3-1: Using ep0 maxpacket: 16
[  150.514341][ T5675] usb 3-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  150.518658][ T5675] usb 3-1: config 0 interface 0 has no altsetting 0
[  150.520994][ T5675] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  150.524160][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.527937][ T5675] usb 3-1: config 0 descriptor??
[  150.719416][ T9433] loop0: detected capacity change from 0 to 64
[  150.792197][ T9435] loop0: detected capacity change from 0 to 4096
[  150.817743][ T9435] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  150.825452][ T9435] ntfs3(loop0): ino=1a, mi_enum_attr
[  150.827170][ T9435] ntfs3(loop0): ino=1a, mi_enum_attr
[  150.830135][ T9435] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  150.845712][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  150.845722][   T33] audit: type=1800 audit(1787678074.245:176): pid=9435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1553" name="file1" dev="loop0" ino=30 res=0 errno=0
[  150.846541][ T9434] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex
[  150.953184][ T5675] glorious 0003:22D4:1503.0004: unknown main item tag 0x0
[  150.961503][ T5675] glorious 0003:22D4:1503.0004: unknown main item tag 0x4
[  150.964225][ T5675] glorious 0003:22D4:1503.0004: ignoring exceeding usage max
[  150.966881][ T5675] glorious 0003:22D4:1503.0004: unknown main item tag 0x7
[  150.969028][ T5675] glorious 0003:22D4:1503.0004: item fetching failed at offset 41/42
[  150.973706][ T5675] glorious 0003:22D4:1503.0004: probe with driver glorious failed with error -22
[  151.015379][ T9443] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1557'.
[  151.161702][ T5675] usb 3-1: USB disconnect, device number 17
[  151.638147][ T9475] sctp: [Deprecated]: syz.1.1572 (pid 9475) Use of int in max_burst socket option deprecated.
[  151.638147][ T9475] Use struct sctp_assoc_value instead
[  151.677571][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.681969][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.361825][ T9486] loop0: detected capacity change from 0 to 8192
[  152.504495][ T9488] loop0: detected capacity change from 0 to 1764
[  152.611626][ T9495] netlink: 'syz.1.1581': attribute type 5 has an invalid length.
[  152.684761][ T9500] binder: 9498:9500 ioctl c0306201 200000000080 returned -14
[  152.711714][ T9500] binder: 9498:9500 ioctl c0306201 2000000003c0 returned -14
[  152.714478][ T9506] netlink: 'syz.1.1586': attribute type 3 has an invalid length.
[  152.937205][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'.
[  152.949551][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'.
[  152.975528][ T9523] loop0: detected capacity change from 0 to 4096
[  153.009628][ T9523] NILFS (loop0): invalid segment: Checksum error in segment payload
[  153.022546][ T9523] NILFS (loop0): trying rollback from an earlier position
[  153.047548][ T9523] NILFS (loop0): recovery complete
[  153.055107][ T9533] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.379389][ T5675] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  153.394852][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.399875][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.531622][ T5675] usb 3-1: unable to get BOS descriptor or descriptor too short
[  153.535384][ T5675] usb 3-1: not running at top speed; connect to a high speed hub
[  153.540117][ T5675] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.547864][ T5675] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  153.551778][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  153.555084][ T5675] usb 3-1: Product: syz
[  153.556729][ T5675] usb 3-1: Manufacturer: syz
[  153.558629][ T5675] usb 3-1: SerialNumber: syz
[  153.566577][ T5675] usb 3-1: config 0 descriptor??
[  153.792336][ T5675] usb 3-1: USB disconnect, device number 18
[  153.823798][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'.
[  153.827517][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'.
[  154.168849][ T9579] kAFS: bad VL server IP address
[  154.263100][ T9585] i2c i2c-0: new_device: Instantiated device nb7vpq904m at 0x01
[  154.332824][ T9589] loop2: detected capacity change from 0 to 256
[  154.371354][ T9591] xt_hashlimit: size too large, truncated to 1048576
[  154.410317][ T9595] tipc: Started in network mode
[  154.413312][ T9595] tipc: Node identity 7f000001, cluster identity 4711
[  154.416935][ T9595] tipc: Enabled bearer <udp:syz1>, priority 10
[  154.595117][ T9608] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1633'.
[  154.609880][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1631'.
[  155.024326][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'.
[  155.333534][ T9652] dns_resolver: Unsupported content type (231)
[  155.534561][ T5576] tipc: Node number set to 2130706433
[  155.880781][ T9681] loop2: detected capacity change from 0 to 256
[  155.894096][ T9681] exfat: Deprecated parameter 'utf8'
[  155.917891][ T9681] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  156.027360][ T9686] loop2: detected capacity change from 0 to 512
[  156.037340][ T9686] EXT4-fs: Ignoring removed nomblk_io_submit option
[  156.041062][ T9686] EXT4-fs: Ignoring removed oldalloc option
[  156.044273][ T9686] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  156.049218][ T9686] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  156.053108][ T9686] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2846c01c, mo2=0002]
[  156.056620][ T9686] System zones: 0-2, 18-18, 34-34
[  156.066099][ T9686] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  156.074610][ T9686] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  156.079660][ T9686] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1669: bad orphan inode 20829
[  156.087854][ T9686] loop2: lost filesystem error report for type 5 error -117
[  156.089549][ T9686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.148444][ T9011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.200077][ T9698] xt_CONNSECMARK: invalid mode: 0
[  156.242184][ T9702] loop2: detected capacity change from 0 to 512
[  156.252104][ T9702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  156.265924][ T9702] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1674: bad orphan inode 131083
[  156.272793][ T9702] loop2: lost filesystem error report for type 5 error -117
[  156.273749][ T9702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.529447][   T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  156.680335][   T10] usb 3-1: Using ep0 maxpacket: 32
[  156.694540][   T10] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  156.700420][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.704873][   T10] usb 3-1: config 0 has no interface number 0
[  156.707743][   T10] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  156.715742][   T10] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0
[  156.723710][   T10] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.728977][   T10] usb 3-1: config 0 interface 196 has no altsetting 0
[  156.768911][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  156.772874][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.776304][   T10] usb 3-1: Product: syz
[  156.778400][   T10] usb 3-1: Manufacturer: syz
[  156.788705][   T10] usb 3-1: SerialNumber: syz
[  156.805709][   T10] usb 3-1: config 0 descriptor??
[  157.030434][   T10] ipheth 3-1:0.196: Unable to find endpoints
[  157.055305][   T10] usb 3-1: USB disconnect, device number 19
[  157.578000][ T9011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.847710][ T9815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.851696][ T9815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.075345][ T9839] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  159.196901][ T9855] overlayfs: failed to clone upperpath
[  159.201439][ T9855] overlayfs: failed to clone upperpath
[  159.411470][ T9879] netlink: 'syz.1.1724': attribute type 2 has an invalid length.
[  159.420392][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'.
[  159.565412][ T9893] loop2: detected capacity change from 0 to 128
[  159.588721][ T9893] EXT4-fs (loop2): Test dummy encryption mode enabled
[  159.596276][ T9899] fuse: fd is not a fuse device
[  159.613056][ T9893] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  159.618331][ T9893] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  159.781021][ T9915] binder: 9906:9915 ioctl 4018620d 0 returned -22
[  160.531383][ T9011] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.285455][ T9983] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1772'.
[  162.288594][ T9983] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1772'.
[  163.303773][ T9992] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  163.620200][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'.
[  164.261429][T10043] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  164.410188][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'.
[  164.420018][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1802'.
[  164.488411][T10055] loop2: detected capacity change from 0 to 1024
[  164.495141][T10055] EXT4-fs: Ignoring removed oldalloc option
[  164.504131][T10055] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  164.512971][T10055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.555598][ T9011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.617433][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1809'.
[  164.627806][T10068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1809'.
[  164.735072][T10066] loop2: detected capacity change from 0 to 32768
[  164.755339][T10066] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  164.760251][T10066] JBD2: Ignoring recovery information on journal
[  164.781551][T10066] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  164.860475][T10076] bond2: option min_links: invalid value (18446744073709551613)
[  164.875209][T10066] syz.2.1808 (10066) used greatest stack depth: 20200 bytes left
[  164.878684][T10076] bond2: option min_links: allowed values 0 - 2147483647
[  164.888455][T10076] bond2 (unregistering): Released all slaves
[  164.927254][ T9011] ocfs2: Unmounting device (7,2) on (node local)
[  165.114780][T10083] Invalid argument reading file caps for ./file0
[  165.356820][T10085] loop0: detected capacity change from 0 to 32768
[  165.367499][T10085] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  165.377235][T10085] XFS (loop0): Ending clean mount
[  165.415827][ T5597] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  165.545574][T10105] loop0: detected capacity change from 0 to 2048
[  165.565509][T10105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.572324][T10105] EXT4-fs error (device loop0): ext4_ext_precache:648: inode #2: comm syz.0.1821: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  165.594672][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.739702][T10117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1825'.
[  165.856442][T10122] netlink: 'syz.0.1827': attribute type 4 has an invalid length.
[  166.897535][T10136] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1833'.
[  166.902921][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'.
[  167.038039][T10142] netlink: 'syz.0.1836': attribute type 4 has an invalid length.
[  167.041445][T10142] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1836'.
[  167.237495][T10147] loop0: detected capacity change from 0 to 32768
[  167.240596][T10147] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1838 (10147)
[  167.247944][T10147] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  167.251538][T10147] BTRFS info (device loop0): using xxhash64 checksum algorithm
[  167.279472][   T53] Bluetooth: hci3: command 0x1003 tx timeout
[  167.279556][ T4987] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  167.366765][T10147] BTRFS info (device loop0): enabling ssd optimizations
[  167.369706][T10147] BTRFS info (device loop0): turning on async discard
[  167.372325][T10147] BTRFS info (device loop0): enabling free space tree
[  167.424994][   T33] audit: type=1800 audit(1787678090.815:177): pid=10147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1838" name="bus" dev="loop0" ino=263 res=0 errno=0
[  167.566216][T10167] loop2: detected capacity change from 0 to 256
[  167.612902][T10167] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  167.623304][ T5597] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  167.626929][T10167] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[  167.655648][T10167] exFAT-fs (loop2): failed to exfat_utf8_to_utf16 (err : -22) nls len : 1
[  167.996300][T10177] loop2: detected capacity change from 0 to 1024
[  168.001587][T10177] EXT4-fs: Ignoring removed bh option
[  168.044094][T10177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  168.053812][T10182] loop0: detected capacity change from 0 to 256
[  168.058821][T10177] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.082720][T10177] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1846: lblock 0 mapped to illegal pblock 0 (length 1)
[  168.084729][T10182] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  168.093485][T10177] EXT4-fs (loop2): Remounting filesystem read-only
[  168.122679][ T9011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  168.262713][T10188] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1850'.
[  168.262893][T10186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1848'.
[  168.272210][T10186] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1848'.
[  168.275539][T10186] netlink: 'syz.2.1848': attribute type 5 has an invalid length.
[  168.278496][T10186] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1848'.
[  168.506060][T10197] loop0: detected capacity change from 0 to 1024
[  168.547364][T10197] syz.0.1855: attempt to access beyond end of device
[  168.547364][T10197] loop0: rw=8390665, sector=262, nr_sectors = 65274 limit=1024
[  168.723998][T10210] loop0: detected capacity change from 0 to 128
[  168.855475][T10214] ptrace attach of "/syz-executor exec"[5606] was attempted by "/syz-executor exec"[10214]
[  168.860554][T10208] loop2: detected capacity change from 0 to 32768
[  168.869144][T10208] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 69: extent list l_count is zero
[  168.879538][T10208] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  168.885068][T10208] OCFS2: File system is now read-only.
[  168.887211][T10208] (syz.2.1860,10208,1):ocfs2_read_locked_inode:633 ERROR: status = -30
[  168.890241][T10208] (syz.2.1860,10208,1):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  168.893595][T10208] (syz.2.1860,10208,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  168.896548][T10208] (syz.2.1860,10208,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[  168.896561][T10208] (syz.2.1860,10208,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  168.905349][T10208] (syz.2.1860,10208,1):ocfs2_initialize_super:2195 ERROR: status = -30
[  168.908357][T10208] (syz.2.1860,10208,1):ocfs2_fill_super:1177 ERROR: status = -30
[  169.602564][T10274] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  169.606169][T10274] overlayfs: failed to set xattr on upper
[  169.608307][T10274] overlayfs: ...falling back to redirect_dir=nofollow.
[  169.611279][T10274] overlayfs: ...falling back to index=off.
[  169.613311][T10274] overlayfs: ...falling back to uuid=null.
[  169.615271][T10274] overlayfs: ...falling back to xino=off.
[  169.617282][T10274] overlayfs: maximum fs stacking depth exceeded
[  169.660445][T10276] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[  169.800707][T10285] __nla_validate_parse: 1 callbacks suppressed
[  169.800718][T10285] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1895'.
[  169.811937][T10285] netlink: 'syz.0.1895': attribute type 8 has an invalid length.
[  169.814440][T10285] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.1895'.
[  169.878898][T10289] binder: 10288:10289 ioctl c0306201 2000000001c0 returned -14
[  170.041994][T10262] loop2: detected capacity change from 0 to 131072
[  170.047775][T10262] F2FS-fs (loop2): invalid crc value
[  170.089337][T10262] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  170.129905][T10262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  170.176249][   T33] audit: type=1804 audit(1787678093.585:178): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1885" name="/newroot/117/file1/file1" dev="loop2" ino=7 res=1 errno=0
[  170.311017][T10291] loop0: detected capacity change from 0 to 131072
[  170.313536][T10291] xfs: Deprecated parameter 'ikeep'
[  170.315234][T10291] XFS: ikeep mount option is deprecated.
[  170.356148][T10291] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  170.378658][T10291] XFS (loop0): Starting recovery (logdev: internal)
[  170.403169][T10291] XFS (loop0): Ending recovery (logdev: internal)
[  170.434344][ T5597] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  170.835109][T10339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1914'.
[  170.838004][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'.
[  170.959119][T10353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1921'.
[  171.422789][T10397] loop0: detected capacity change from 0 to 16
[  171.425885][T10397] erofs (device loop0): mounted with root inode @ nid 36.
[  171.520484][T10395] loop2: detected capacity change from 0 to 4096
[  171.530679][T10395] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  171.575796][T10395] ntfs3(loop2): ino=0, mi_enum_attr
[  171.581974][T10395] ntfs3(loop2): Failed to load $MFT.
[  171.620141][T10403] loop0: detected capacity change from 0 to 4096
[  171.626805][T10403] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  171.636262][T10403] ntfs3(loop0): It is recommended to use chkdsk.
[  171.639805][T10403] ntfs3(loop0): ino=0, mi_enum_attr
[  171.644870][T10403] ntfs3(loop0): Failed to load $MFT (-22).
[  171.684971][T10411] loop0: detected capacity change from 0 to 164
[  171.708694][T10411] iso9660: Corrupted directory entry in block 2 of inode 1920
[  171.826557][T10413] netlink: 'syz.1.1950': attribute type 1 has an invalid length.
[  172.068325][T10409] loop2: detected capacity change from 0 to 131072
[  172.116768][T10409] F2FS-fs (loop2): invalid crc value
[  172.164693][T10409] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.171550][T10409] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  172.827935][T10439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.834257][T10439] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.868217][T10444] fuse: fd is not a fuse device
[  172.955937][T10439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  172.965694][T10439] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.078053][T10439] bond0: (slave netdevsim1): Releasing backup interface
[  173.093481][T10439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.098952][T10439] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.132447][T10458] netlink: 'syz.1.1968': attribute type 2 has an invalid length.
[  173.151204][T10439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  173.154302][T10439] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.193879][T10450] loop2: detected capacity change from 0 to 32768
[  173.209922][T10450] XFS (loop2): Invalid device [./file1], error=-2
[  173.417591][T10462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.421135][T10462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.444694][T10460] loop2: detected capacity change from 0 to 32768
[  173.465053][T10460] JBD2: Ignoring recovery information on journal
[  173.511390][T10460] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  173.560157][ T9011] ocfs2: Unmounting device (7,2) on (node local)
[  174.043882][T10492] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1982'.
[  174.085142][T10494] i2c i2c-0: delete_device: Extra parameters
[  174.178769][T10505] openvswitch: netlink: Tunnel attr 157 out of range max 16
[  174.333505][T10514] tmpfs: Bad value for 'mpol'
[  174.619379][T10524] ubi0: attaching mtd0
[  174.638368][T10524] ubi0: scanning is finished
[  174.640516][T10524] ubi0: empty MTD device detected
[  174.892132][T10524] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  174.895176][T10524] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  174.898055][T10524] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  174.902609][T10524] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  174.905405][T10524] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  174.907953][T10524] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  174.912085][T10524] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4173003676
[  174.915976][T10524] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  174.922663][T10527] ubi0: background thread "ubi_bgt0d" started, PID 10527
[  175.139427][T10532] loop2: detected capacity change from 0 to 32768
[  175.144115][T10532] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2001 (10532)
[  175.162805][T10532] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.166116][T10532] BTRFS info (device loop2): using sha256 checksum algorithm
[  175.183841][T10532] BTRFS info (device loop2): enabling ssd optimizations
[  175.188995][T10532] BTRFS info (device loop2): turning on async discard
[  175.192761][T10532] BTRFS info (device loop2): enabling free space tree
[  175.210258][ T9011] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.583415][T10548] loop0: detected capacity change from 0 to 65536
[  175.635396][T10548] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  175.656281][T10548] XFS (loop0): Metadata corruption detected at xfs_buf_ioend+0x31b/0x750, xfs_inode block 0x40 xfs_inode_buf_verify
[  175.661396][T10548] XFS (loop0): Unmount and run xfs_repair
[  175.663396][T10548] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  175.665811][T10548] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  175.668463][T10548] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  175.671588][T10548] 00000020: 34 f7 58 68 a7 8d ff 64 34 f7 58 68 a7 8d ff 64  4.Xh...d4.Xh...d
[  175.674467][T10548] 00000030: 34 f7 58 68 a7 8d ff 64 00 00 00 00 00 00 04 1a  4.Xh...d........
[  175.677425][T10548] 00000040: 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 01  ................
[  175.680446][T10548] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 4c 3b ce 39  ............L;.9
[  175.683367][T10548] 00000060: ff b8 00 00 00 29 b4 d3 00 00 00 00 00 00 00 05  .....)..........
[  175.686076][T10548] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  175.688913][T10548] XFS (loop0): metadata I/O error in "xfs_read_icluster+0x218/0x3e0" at daddr 0x40 len 32 error 117
[  175.693273][T10548] loop0: lost filesystem error report for type 5 error -117
[  175.693308][T10548] XFS (loop0): Failed to read root inode 0x40, error 117
[  175.698033][T10548] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_mountfs+0x132e/0x2380 (fs/xfs/xfs_mount.c:1261).  Shutting down filesystem.
[  175.702354][T10548] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  175.704888][T10548] loop0: lost filesystem error report for type 5 error -108
[  175.740996][T10565] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  175.818574][T10565] CIFS mount error: No usable UNC path provided in device string!
[  175.818574][T10565] 
[  175.836041][T10565] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  175.976215][T10570] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2008'.
[  176.003892][T10575] loop0: detected capacity change from 0 to 8
[  176.018163][T10575] squashfs image failed sanity check
[  176.586640][T10595] loop2: detected capacity change from 0 to 32768
[  176.631693][T10599] loop0: detected capacity change from 0 to 32768
[  176.640409][T10595]  loop2: p1 p3 < >
[  176.677078][T10599] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  176.677078][T10599] 
[  176.707601][T10599] ERROR: (device loop0): remounting filesystem as read-only
[  176.873034][ T5716] udevd[5716]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  176.876914][ T5600] udevd[5600]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  176.952956][T10613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.957851][T10613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.012083][ T5675] Process accounting resumed
[  177.137060][T10614] loop2: detected capacity change from 0 to 1024
[  177.141367][T10614] EXT4-fs: Ignoring removed i_version option
[  177.150393][T10614] EXT4-fs (loop2): Test dummy encryption mode enabled
[  177.157330][T10614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.218482][T10614] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  177.560883][T10631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.565426][T10631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.796689][ T9011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.985091][T10635] Mass Storage Function, version: 2009/09/11
[  177.989083][T10635] LUN: removable file: (no medium)
[  178.480124][T10640] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2036'.
[  178.697823][T10649] sch_fq: defrate 4294964870 ignored.
[  179.200890][T10666] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2050'.
[  179.406307][T10688] xt_hashlimit: size too large, truncated to 1048576
[  179.418272][T10690] tmpfs: Bad value for 'nr_blocks'
[  179.616429][T10710] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2068'.
[  179.621617][T10711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.632168][T10711] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.811220][T10722] loop2: detected capacity change from 0 to 8
[  180.082163][T10724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2075'.
[  180.361279][T10738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.391852][T10742] netlink: 'syz.1.2083': attribute type 4 has an invalid length.
[  180.397966][T10738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.405830][T10742] netlink: 'syz.1.2083': attribute type 4 has an invalid length.
[  180.583156][T10752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2089'.
[  180.639575][ T5675] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  180.792093][ T5675] usb 3-1: Using ep0 maxpacket: 16
[  180.798606][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.812965][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.817573][ T5675] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  180.823777][ T5675] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  180.827434][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.834121][ T5675] usb 3-1: config 0 descriptor??
[  180.950311][ T4987] Bluetooth: hci2: command 0x0406 tx timeout
[  181.038266][T10780] netlink: 'syz.0.2103': attribute type 2 has an invalid length.
[  181.138300][T10782] loop0: detected capacity change from 0 to 2048
[  181.166109][T10783] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.289650][ T5675] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input6
[  181.333309][ T5675] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  181.462058][   T10] usb 3-1: USB disconnect, device number 20
[  182.112324][T10816] loop2: detected capacity change from 0 to 2048
[  182.135447][T10816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.145579][T10816] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.164070][ T9011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.459780][ T5674] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  182.597669][T10852] loop0: detected capacity change from 0 to 32768
[  182.606777][T10852] syz.0.2113: attempt to access beyond end of device
[  182.606777][T10852] loop0: rw=8388608, sector=17179869440, nr_sectors = 8 limit=32768
[  182.612699][T10852] Read error 10 at 0x0
[  182.614629][T10852] read_mapping_page failed!
[  182.616411][T10852] jfs_mount: diMount failed w/rc = -5
[  182.619224][T10852] Mount JFS Failure: -5
[  182.622447][ T5674] usb 3-1: unable to get BOS descriptor or descriptor too short
[  182.625990][T10852] jfs_mount failed w/return code = -5
[  182.628844][ T5674] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  182.635310][ T5674] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  182.643512][ T5674] usb 3-1: config 1 interface 0 has no altsetting 1
[  182.652256][ T5674] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  182.657646][ T5674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.664308][ T5674] usb 3-1: Product: syz
[  182.668415][ T5674] usb 3-1: Manufacturer: syz
[  182.671391][ T5674] usb 3-1: SerialNumber: syz
[  182.683586][ T5674] smsusb:smsusb_probe: board id=8, interface number 0
[  182.848125][T10871] netlink: 'syz.0.2121': attribute type 2 has an invalid length.
[  182.890412][T10876] loop0: detected capacity change from 0 to 512
[  182.890924][ T5674] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  182.901229][T10876] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2123: inode has both inline data and extents flags
[  182.901624][ T5674] smsusb 3-1:1.0: probe with driver smsusb failed with error -71
[  182.909458][T10876] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  182.909693][T10876] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2123: couldn't read orphan inode 15 (err -117)
[  182.925894][T10876] loop0: lost filesystem error report for type 5 error -117
[  182.929207][T10876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.937017][ T5674] usb 3-1: USB disconnect, device number 21
[  182.954628][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.586548][T10897] x_tables: ip6_tables: DSCP target: only valid in mangle table, not syz1
[  183.677179][   T33] audit: type=1804 audit(1787678107.085:179): pid=10899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2132" name="file0" dev="tmpfs" ino=4879 res=1 errno=0
[  183.797106][T10904] overlayfs: failed to clone upperpath
[  183.840476][T10907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.929889][T10910] loop2: detected capacity change from 0 to 2048
[  183.944561][T10910] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  183.951251][ T5600] udevd[5600]: incorrect nilfs2 checksum on /dev/loop2
[  183.960083][T10910] NILFS (loop2): mounting unchecked fs
[  183.981647][T10910] NILFS (loop2): recovery complete
[  183.984543][T10913] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.105925][T10915] loop2: detected capacity change from 0 to 4096
[  184.110793][T10912] loop0: detected capacity change from 0 to 32768
[  184.111396][T10915] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  184.119619][T10912] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2137 (10912)
[  184.122866][T10915] ntfs3(loop2): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  184.139165][T10912] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.142419][T10912] BTRFS info (device loop0): using sha256 checksum algorithm
[  184.145867][T10915] ntfs3(loop2): It is recommended to use chkdsk.
[  184.155159][T10915] ntfs3(loop2): ino=0, mi_enum_attr
[  184.161321][T10915] ntfs3(loop2): failed to read volume at offset 0x201800
[  184.167740][T10915] ntfs3(loop2): failed to read volume at offset 0x201800
[  184.170991][T10915] ntfs3(loop2): failed to read volume at offset 0x201800
[  184.173434][T10915] ntfs3(loop2): failed to read volume at offset 0x201800
[  184.176215][T10915] ntfs3(loop2): failed to read volume at offset 0x202800
[  184.178982][T10915] ntfs3(loop2): failed to read volume at offset 0x203800
[  184.213152][T10912] BTRFS info (device loop0): enabling ssd optimizations
[  184.217685][T10912] BTRFS info (device loop0): turning on sync discard
[  184.223675][T10912] BTRFS info (device loop0): enabling free space tree
[  184.504504][ T5597] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.701609][T10953] netlink: 'syz.1.2149': attribute type 1 has an invalid length.
[  184.758035][T10953] 8021q: adding VLAN 0 to HW filter on device bond2
[  184.779689][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2149'.
[  185.050177][T10985] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2163'.
[  185.051187][T10973] loop2: detected capacity change from 0 to 32768
[  185.056103][T10973] XFS (loop2): Invalid device [./file0], error=-15
[  186.771149][T11054] PKCS7: Unsupported SignerInfo version
[  187.004985][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2208'.
[  187.063396][T11086] netlink: 'syz.0.2212': attribute type 6 has an invalid length.
[  188.099206][T11115] loop2: detected capacity change from 0 to 2048
[  188.121339][T11116] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.138406][T11115] syz.2.2225: attempt to access beyond end of device
[  188.138406][T11115] loop2: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  188.145782][T11115] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15)
[  188.159513][T11115] NILFS (loop2): error -5 truncating bmap (ino=16)
[  188.446402][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2233'.
[  188.662218][T11142] loop2: detected capacity change from 0 to 4096
[  188.676430][T11142] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  188.686191][T11142] UDF-fs: Scanning with blocksize 512 failed
[  188.723411][T11142] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.988456][T11159] netlink: 'syz.2.2247': attribute type 1 has an invalid length.
[  189.053589][T11159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2247'.
[  189.059938][T11159] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.093442][T11159] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.102305][T11159] bond1: (slave geneve2): making interface the new active one
[  189.111091][T11159] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  189.114160][T10418] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  189.139431][T10418] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  189.157495][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  189.162449][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  189.213273][T11172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2253'.
[  189.216343][T11172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2253'.
[  189.404818][T11188] loop2: detected capacity change from 0 to 1024
[  189.414343][T11188] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  189.556744][T11196] binder: 11195:11196 ioctl c0306201 200000000100 returned -14
[  190.273597][T11232] syz.2.2279 (11232): drop_caches: 0
[  190.318601][T11234] loop2: detected capacity change from 0 to 512
[  190.332301][T11234] EXT4-fs (loop2): 1 truncate cleaned up
[  190.336344][T11234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.364270][ T9011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.733233][T11245] xt_hashlimit: size too large, truncated to 1048576
[  190.839928][T11243] loop2: detected capacity change from 0 to 131072
[  190.845428][T11243] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24)
[  190.847883][T11243] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  190.850926][T11243] F2FS-fs (loop2): Test dummy encryption mode enabled
[  190.853841][T11243] F2FS-fs (loop2): invalid crc value
[  190.880227][T11243] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  190.883962][T11243] loop2: lost filesystem error report for type 5 error -117
[  190.886179][T11243] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  190.893969][T11243] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0
[  190.896257][T11243] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  190.899840][T11243] F2FS-fs (loop2): Start checkpoint disabled!
[  190.909829][T11243] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0
[  190.914965][T11243] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  190.917157][T11243] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  190.974524][T11243] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  191.570171][T11280] loop2: detected capacity change from 0 to 8
[  191.585856][T11280] SQUASHFS error: Failed to read block 0x6e6: -5
[  191.602610][T11280] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  191.611965][T11280] SQUASHFS error: Unable to read directory block [631:26]
[  191.736239][   T33] audit: type=1326 audit(1787678115.135:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.1.2302" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  191.749358][   T33] audit: type=1326 audit(1787678115.135:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.1.2302" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  191.768682][   T33] audit: type=1326 audit(1787678115.135:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.1.2302" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  191.782267][   T33] audit: type=1326 audit(1787678115.135:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.1.2302" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  191.789102][   T33] audit: type=1326 audit(1787678115.135:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.1.2302" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  191.795605][   T33] audit: type=1326 audit(1787678115.135:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.1.2302" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  191.808087][   T33] audit: type=1326 audit(1787678115.135:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.1.2302" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  191.824732][   T33] audit: type=1326 audit(1787678115.135:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.1.2302" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  191.832826][   T33] audit: type=1326 audit(1787678115.135:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.1.2302" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  191.842785][   T33] audit: type=1326 audit(1787678115.135:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11287 comm="syz.1.2302" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x7ffc0000
[  192.398194][T11313] loop0: detected capacity change from 0 to 32768
[  192.401801][T11313] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2313 (11313)
[  192.415426][T11313] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.419036][T11313] BTRFS info (device loop0): using crc32c checksum algorithm
[  192.456203][T11313] BTRFS info (device loop0): enabling ssd optimizations
[  192.461082][T11313] BTRFS info (device loop0): turning on flush-on-commit
[  192.464090][T11313] BTRFS info (device loop0): enabling free space tree
[  192.472651][T11313] BTRFS info (device loop0): enabling auto defrag
[  192.479704][T11313] BTRFS info (device loop0): use lzo compression, level 1
[  192.482439][T11313] BTRFS info (device loop0): max_inline set to 0
[  192.514933][T11329] loop2: detected capacity change from 0 to 16
[  192.518712][T11329] erofs (device loop2): mounted with root inode @ nid 36.
[  192.548174][   T55] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  192.564487][T11329] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  192.569006][T11329] erofs (device loop2): read error -117 @ 2 of nid 89
[  192.580761][ T5597] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.590511][T11329] syz.2.2314 (11329) used greatest stack depth: 20024 bytes left
[  193.049759][   T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  193.062987][T11348] loop0: detected capacity change from 0 to 8192
[  193.167448][T11350] loop0: detected capacity change from 0 to 4096
[  193.195826][T11350] ntfs3(loop0): Failed to load $Extend (-22).
[  193.201649][T11350] ntfs3(loop0): Failed to initialize $Extend.
[  193.209959][   T10] usb 3-1: Using ep0 maxpacket: 16
[  193.214793][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  193.225023][   T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40
[  193.228802][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.232521][   T10] usb 3-1: Product: 缆쒏
[  193.234430][   T10] usb 3-1: SerialNumber: syz
[  193.464854][   T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  193.474464][   T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  193.536954][   T10] usb 3-1: USB disconnect, device number 22
[  193.613826][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.806507][T11360] overlay: Unknown parameter '\'
[  193.944553][T11366] IPv4: Oversized IP packet from 127.202.26.0
[  194.231494][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  194.235325][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  194.319703][T11399] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  195.636813][T11430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.642545][T11430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.059374][   T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  196.236517][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.248694][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.257223][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.263756][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  196.270209][   T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  196.275040][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.278166][   T10] usb 3-1: Product: syz
[  196.280636][   T10] usb 3-1: Manufacturer: syz
[  196.282520][   T10] usb 3-1: SerialNumber: syz
[  196.340852][T11458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.524744][T11462] loop0: detected capacity change from 0 to 32768
[  196.532804][T11462] ea_get: invalid extended attribute
[  196.536163][T11462] ffff8881af298318: 04 00 00 00                                      ....
[  196.708717][   T10] usb 3-1: cannot create comm data receiver.
[  196.723466][   T10] snd-usb-6fire 3-1:1.0: probe with driver snd-usb-6fire failed with error -90
[  196.724889][T11478] Bluetooth: (null): Too short H5 packet
[  196.906885][ T5675] usb 3-1: USB disconnect, device number 23
[  197.365325][T11482] loop0: detected capacity change from 0 to 40427
[  197.368805][T11482] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[  197.414956][T11488] IPv6: NLM_F_CREATE should be specified when creating new route
[  197.695309][T11496] loop2: detected capacity change from 0 to 256
[  197.698954][T11496] exfat: Deprecated parameter 'namecase'
[  197.707498][T11496] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  197.714981][T11496] exFAT-fs (loop2): Invalid exboot-signature(sector = 1): 0xaa000000
[  197.718244][T11496] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1219aba6)
[  197.722940][T11496] exFAT-fs (loop2): invalid boot region
[  197.728286][T11496] exFAT-fs (loop2): failed to recognize exfat type
[  198.338475][T11524] loop2: detected capacity change from 0 to 128
[  198.350110][T11524] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.354382][T11524] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  198.377747][ T9011] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.667201][T11542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.673231][T11542] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.781913][T11551] loop2: detected capacity change from 0 to 512
[  198.805813][T11551] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2415: inode has both inline data and extents flags
[  198.810098][T11551] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  198.810314][T11551] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2415: couldn't read orphan inode 15 (err -117)
[  198.816811][T11551] loop2: lost filesystem error report for type 5 error -117
[  198.818013][T11551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.837035][ T9011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.948664][T11562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2419'.
[  199.209360][ T5675] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  199.282566][T11584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.288698][T11584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.306557][T11586] sch_tbf: burst 0 is lower than device veth0 mtu (1514) !
[  199.348373][T11590] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2433'.
[  199.366560][ T5675] usb 3-1: Using ep0 maxpacket: 16
[  199.370678][ T5675] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  199.374497][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  199.377741][ T5675] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[  199.381081][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  199.384162][ T5675] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  199.391085][ T5675] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  199.393837][ T5675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.396376][ T5675] usb 3-1: Product: syz
[  199.397832][ T5675] usb 3-1: Manufacturer: syz
[  199.399620][ T5675] usb 3-1: SerialNumber: syz
[  199.402865][ T5675] usb 3-1: config 0 descriptor??
[  199.406093][ T5675] port100 3-1:0.0: NFC: Could not get supported command types
[  199.614053][ T5675] usb 3-1: USB disconnect, device number 24
[  199.666445][   T53] Bluetooth: hci2: unexpected subevent 0x05 length: 30 > 12
[  200.054822][T11622] loop0: detected capacity change from 0 to 64
[  200.064136][T11622] MINIX-fs: mounting file system with errors, running fsck is recommended
[  200.231366][  T986] Process accounting resumed
[  200.294707][T11633] loop0: detected capacity change from 0 to 1024
[  200.298152][T11633] EXT4-fs: Ignoring removed i_version option
[  200.318840][T11633] EXT4-fs (loop0): Test dummy encryption mode enabled
[  200.346056][T11633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.380407][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2458'.
[  200.383743][T11646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2458'.
[  200.429868][ T5675] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  200.579602][ T5675] usb 3-1: Using ep0 maxpacket: 32
[  200.583276][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.587718][ T5675] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.591695][ T5675] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  200.595721][ T5675] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.601637][ T5675] usb 3-1: config 0 descriptor??
[  200.606166][ T5675] hub 3-1:0.0: USB hub found
[  200.808578][ T5675] hub 3-1:0.0: 1 port detected
[  201.010892][ T5675] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  201.016172][ T5675] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  201.023479][ T5675] usbhid 3-1:0.0: can't add hid device: -71
[  201.026710][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.029753][ T5675] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  201.079219][ T5675] usb 3-1: USB disconnect, device number 25
[  201.237347][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2471'.
[  201.586733][T11680] loop2: detected capacity change from 0 to 256
[  201.597264][T11680] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  201.703688][T11688] netlink: 'syz.2.2479': attribute type 21 has an invalid length.
[  201.706283][T11688] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2479'.
[  201.709051][T11688] netlink: 'syz.2.2479': attribute type 4 has an invalid length.
[  201.714399][T11688] netlink: 'syz.2.2479': attribute type 5 has an invalid length.
[  201.720948][T11688] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2479'.
[  201.759516][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  202.073820][T11713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2491'.
[  202.091586][T11713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2491'.
[  202.248740][T11705] loop2: detected capacity change from 0 to 40427
[  202.256330][T11705] F2FS-fs (loop2): build fault injection rate: 174
[  202.260955][T11705] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  202.268920][T11705] F2FS-fs (loop2): invalid crc value
[  202.384141][T11705] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  202.398379][T11705] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  202.498164][ T9011] syz-executor: attempt to access beyond end of device
[  202.498164][ T9011] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  202.520152][ T9011] CPU: 1 UID: 0 PID: 9011 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  202.520170][ T9011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.520177][ T9011] Call Trace:
[  202.520181][ T9011]  <TASK>
[  202.520186][ T9011]  dump_stack_lvl+0xe8/0x150
[  202.520206][ T9011]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  202.520226][ T9011]  f2fs_write_end_io+0x124b/0x1710
[  202.520250][ T9011]  __submit_merged_bio+0x258/0x6a0
[  202.520264][ T9011]  ? rcu_is_watching+0x15/0xb0
[  202.520284][ T9011]  __submit_merged_write_cond+0x3c9/0x4e0
[  202.520304][ T9011]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  202.520338][ T9011]  f2fs_write_data_pages+0x2a27/0x36f0
[  202.520374][ T9011]  ? __lock_acquire+0x6df/0x2e50
[  202.520408][ T9011]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  202.520423][ T9011]  ? is_bpf_text_address+0x26/0x2b0
[  202.520445][ T9011]  ? arch_stack_walk+0xfb/0x150
[  202.520478][ T9011]  ? add_lock_to_list+0xc7/0x100
[  202.520495][ T9011]  ? lockdep_unlock+0x5d/0xd0
[  202.520505][ T9011]  ? __lock_acquire+0x14b9/0x2e50
[  202.520534][ T9011]  ? do_raw_spin_lock+0x12b/0x2f0
[  202.520576][ T9011]  ? do_raw_spin_unlock+0x4d/0x210
[  202.520587][ T9011]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  202.520605][ T9011]  do_writepages+0x338/0x560
[  202.520631][ T9011]  ? do_raw_spin_unlock+0x4d/0x210
[  202.520645][ T9011]  filemap_fdatawrite+0x1e9/0x2f0
[  202.520663][ T9011]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  202.520703][ T9011]  ? do_raw_spin_unlock+0x4d/0x210
[  202.520717][ T9011]  f2fs_sync_dirty_inodes+0x30e/0x830
[  202.520739][ T9011]  f2fs_write_checkpoint+0xa3d/0x2710
[  202.520749][ T9011]  ? __lock_acquire+0x6df/0x2e50
[  202.520782][ T9011]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  202.520826][ T9011]  kill_f2fs_super+0x2f6/0x700
[  202.520841][ T9011]  ? __pfx_kill_f2fs_super+0x10/0x10
[  202.520861][ T9011]  ? call_rcu+0x64b/0x8b0
[  202.520873][ T9011]  ? lockdep_hardirqs_on+0x7a/0x110
[  202.520897][ T9011]  deactivate_locked_super+0xbc/0x130
[  202.520912][ T9011]  cleanup_mnt+0x3d3/0x460
[  202.520928][ T9011]  task_work_run+0x1d9/0x270
[  202.520946][ T9011]  ? __pfx_task_work_run+0x10/0x10
[  202.520968][ T9011]  exit_to_user_mode_loop+0x1fa/0x730
[  202.520981][ T9011]  ? rcu_is_watching+0x15/0xb0
[  202.520996][ T9011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.521009][ T9011]  do_syscall_64+0x353/0x580
[  202.521020][ T9011]  ? trace_irq_disable+0x3b/0x140
[  202.521038][ T9011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.521048][ T9011] RIP: 0033:0x7f768fd9f317
[  202.521060][ T9011] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  202.521070][ T9011] RSP: 002b:00007ffcbe9fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  202.521081][ T9011] RAX: 0000000000000000 RBX: 00007f768fe34474 RCX: 00007f768fd9f317
[  202.521089][ T9011] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcbe9fa0e0
[  202.521096][ T9011] RBP: 00007ffcbe9fa0e0 R08: 00007ffcbe9fb0e0 R09: 00000000ffffffff
[  202.521103][ T9011] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcbe9fb170
[  202.521109][ T9011] R13: 00007f768fe34474 R14: 0000000000031666 R15: 00007ffcbe9fb1b0
[  202.521128][ T9011]  </TASK>
[  202.523032][ T9011] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  202.700632][T11737] loop0: detected capacity change from 0 to 32768
[  202.709068][T11737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2501 (11737)
[  202.721186][T11737] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.725228][T11737] BTRFS info (device loop0): using sha256 checksum algorithm
[  202.795774][T11737] BTRFS info (device loop0): enabling ssd optimizations
[  202.804050][T11737] BTRFS info (device loop0): turning on async discard
[  202.814962][T11737] BTRFS info (device loop0): enabling free space tree
[  202.860504][ T5597] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.679607][ T5576] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  203.831364][ T5576] usb 3-1: Using ep0 maxpacket: 8
[  203.840363][ T5576] usb 3-1: unable to get BOS descriptor or descriptor too short
[  203.845231][ T5576] usb 3-1: config 4 has an invalid interface number: 133 but max is 0
[  203.848669][ T5576] usb 3-1: config 4 has no interface number 0
[  203.856354][ T5576] usb 3-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59
[  203.862990][ T5576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.869160][ T5576] usb 3-1: Product: syz
[  203.872599][ T5576] usb 3-1: Manufacturer: syz
[  203.875928][ T5576] usb 3-1: SerialNumber: syz
[  203.974165][T11794] UBIFS error (pid: 11794): cannot open "c:::", error -22
[  204.026942][T11798] loop0: detected capacity change from 0 to 64
[  204.101394][ T5576] huawei_cdc_ncm 3-1:4.133: CDC Union missing and no IAD found
[  204.112905][ T5576] huawei_cdc_ncm 3-1:4.133: bind() failure
[  204.124645][ T5576] usb 3-1: USB disconnect, device number 26
[  204.152609][T11802] dlm: plock device version mismatch: kernel (1.2.0), user (1.131072.0)
[  204.191407][T11804] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2521'.
[  204.334001][T11812] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2525'.
[  204.337088][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2525'.
[  204.428153][T11818] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2528'.
[  204.442010][T11818] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2528'.
[  204.821108][T11832] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  204.852136][T11832] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03
[  204.902958][T11840] loop0: detected capacity change from 0 to 256
[  204.911324][T11840] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  204.917167][T11840] FAT-fs (loop0): Filesystem has been set read-only
[  205.324025][T11849] loop0: detected capacity change from 0 to 40427
[  205.331387][T11849] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  205.338952][T11849] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  205.343031][T11849] F2FS-fs (loop0): invalid crc_offset: 33558524
[  205.394882][T11870] loop2: detected capacity change from 0 to 1024
[  205.400979][T11870] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  205.418437][T11849] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  205.421871][T11870] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.2552: lblock 1 mapped to illegal pblock 1 (length 1)
[  205.430984][T11870] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  205.431265][T11870] __quota_error: 10 callbacks suppressed
[  205.431272][T11870] Quota error (device loop2): write_blk: dquota write failed
[  205.440186][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  205.442260][    C0] EXT4-fs (loop2): initial error at time 1787678128: ext4_map_blocks:833: inode 3: block 1
[  205.445339][    C0] EXT4-fs (loop2): last error at time 1787678128: ext4_map_blocks:833: inode 3: block 1
[  205.452417][T11870] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  205.455647][T11849] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  205.458811][T11870] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.2552: Failed to acquire dquot type 0
[  205.463460][T11849] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  205.469954][T11870] loop2: lost filesystem error report for type 5 error -117
[  205.470260][T11870] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.2552: Freeing blocks not in datazone - block = 0, count = 4096
[  205.484565][T11870] loop2: lost filesystem error report for type 5 error -117
[  205.491939][T11870] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.2552: Invalid inode bitmap blk 0 in block_group 0
[  205.501101][ T1113] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u9:8: lblock 1 mapped to illegal pblock 1 (length 1)
[  205.513589][T11870] loop2: lost filesystem error report for type 5 error -117
[  205.513817][T11870] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  205.520035][ T1113] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  205.528926][ T1113] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  205.530351][T11870] loop2: lost filesystem error report for type 5 error -117
[  205.536674][T11870] EXT4-fs (loop2): 1 orphan inode deleted
[  205.544728][ T1113] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u9:8: Failed to release dquot type 0
[  205.545317][T11870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.577188][T11882] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  205.580903][T11882] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  205.583777][T11882] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  205.587236][T11882] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  205.591944][T11882] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  205.594563][T11882] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  205.596967][T11882] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  205.604460][T11882] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  205.606991][T11882] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  205.610090][T11882] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  205.627197][T11870] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  205.641261][T11886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2558'.
[  205.659727][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'.
[  205.667855][ T9011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.990890][T11904] loop2: detected capacity change from 0 to 256
[  205.997698][T11904] exfat: Deprecated parameter 'utf8'
[  206.005170][T11904] exfat: Deprecated parameter 'namecase'
[  206.007009][T11904] exfat: Deprecated parameter 'namecase'
[  206.013751][T11904] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  206.097776][T11914] netlink: NAT attribute has 4 unknown bytes
[  206.102207][T11914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  206.287491][T11928] loop2: detected capacity change from 0 to 164
[  206.339668][T11931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2580'.
[  206.392245][T11935] ip6erspan0: entered promiscuous mode
[  206.558410][T11949] loop0: detected capacity change from 0 to 128
[  206.582436][T11949] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  206.594435][T11949] ext4 filesystem being mounted at /782/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.607205][   T33] audit: type=1326 audit(1787678130.005:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.1.2589" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x0
[  206.626531][T11949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.639942][T11949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.486782][T11978] usb usb8: usbfs: process 11978 (syz.2.2600) did not claim interface 0 before use
[  207.635394][T11988] futex_wake_op: syz.1.2604 tries to shift op by -1; fix this program
[  207.716916][T11994] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  207.811650][T11997] overlayfs: failed to resolve './file0': -2
[  207.874576][T12001] 9p: Bad value for 'rfdno'
[  208.424814][T11998] loop2: detected capacity change from 0 to 32768
[  208.437061][T11998] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2610 (11998)
[  208.503230][T11998] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  208.514081][T11998] BTRFS info (device loop2): using crc32c checksum algorithm
[  208.606605][T11998] BTRFS info (device loop2): enabling ssd optimizations
[  208.611884][T11998] BTRFS info (device loop2): turning on flush-on-commit
[  208.616607][T11998] BTRFS info (device loop2): enabling free space tree
[  208.619718][T11998] BTRFS info (device loop2): enabling auto defrag
[  208.622320][T11998] BTRFS info (device loop2): use lzo compression, level 1
[  208.625045][T11998] BTRFS info (device loop2): max_inline set to 4096
[  208.635634][T11998] btrfs: Unknown parameter '01777777777777777777777017777777777777777777770xffffffffffffffff18446744073709551615017777777777777777777770x0000000000000000-[[E~xidqc?fgr&ҳY?&!_.}Afx}7_Rq)a<F8h޳H&h*uI;++lZ޿'
[  208.682003][T12029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.761662][ T9011] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  209.022450][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2628'.
[  209.026132][T12049] netlink: 'syz.2.2628': attribute type 1 has an invalid length.
[  209.029136][T12049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2628'.
[  209.088045][T12053] bonding: mM% is being created...
[  209.101009][T12053] bonding: mM% creation failed
[  209.310127][T12071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.575232][ T5597] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  209.697564][T12081] loop0: detected capacity change from 0 to 4096
[  209.736847][T12081] overlayfs: missing 'lowerdir'
[  210.006521][T12083] loop0: detected capacity change from 0 to 512
[  210.023315][T12083] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent
[  210.097718][T12085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2644'.
[  210.447869][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2654'.
[  210.484250][T12105] vlan2: entered allmulticast mode
[  210.486301][T12105] bridge1: entered allmulticast mode
[  210.491614][T12105] bridge1: port 1(erspan0) entered blocking state
[  210.494371][T12105] bridge1: port 1(erspan0) entered disabled state
[  210.496807][T12105] erspan0: entered allmulticast mode
[  210.500691][T12105] erspan0: entered promiscuous mode
[  210.505689][T12105] bridge1: port 1(erspan0) entered blocking state
[  210.508212][T12105] bridge1: port 1(erspan0) entered forwarding state
[  210.846069][T12120] loop2: detected capacity change from 0 to 32768
[  210.890162][T12120] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.925795][T12120] XFS (loop2): Ending clean mount
[  210.963451][T12120] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  210.968178][T12120] XFS (loop2): Unmount and run xfs_repair
[  210.980269][T12120] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  210.982840][T12120] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  210.985540][T12120] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  210.988254][T12120] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  210.992607][T12120] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  210.995493][T12120] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  210.998282][T12120] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  211.002515][T12120] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  211.005660][T12120] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  211.008670][T12120] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74
[  211.024751][T12120] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  211.031314][T12120] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  211.058786][ T9011] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.592333][T12141] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2667'.
[  211.596760][T12141] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2667'.
[  211.601110][T12141] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[  211.733957][T12151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.736743][T12151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.775644][T12153] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2673'.
[  211.824231][T12155] xt_CT: You must specify a L4 protocol and not use inversions on it
[  212.875345][T12181] loop0: detected capacity change from 0 to 32768
[  212.881655][T12181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2686 (12181)
[  212.890038][T12181] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  212.893242][T12181] BTRFS info (device loop0): using sha256 checksum algorithm
[  213.030410][T12181] BTRFS info (device loop0): enabling ssd optimizations
[  213.032652][T12181] BTRFS info (device loop0): turning on sync discard
[  213.034704][T12181] BTRFS info (device loop0): enabling free space tree
[  213.036768][T12181] BTRFS info (device loop0): use zlib compression, level 3
[  213.046342][   T33] audit: type=1800 audit(1787678136.445:201): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2686" name="file1" dev="loop0" ino=260 res=0 errno=0
[  213.170980][   T33] audit: type=1326 audit(1787678136.575:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12211 comm="syz.1.2694" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f791c19e0d9 code=0x0
[  213.319698][  T986] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  213.483824][  T986] usb 3-1: config 128 has an invalid interface number: 96 but max is 0
[  213.488488][  T986] usb 3-1: config 128 has no interface number 0
[  213.500391][  T986] usb 3-1: config 128 interface 96 altsetting 4 endpoint 0x6 has an invalid bInterval 254, changing to 7
[  213.510293][  T986] usb 3-1: config 128 interface 96 has no altsetting 0
[  213.529228][  T986] usb 3-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=64.dc
[  213.533619][  T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.541206][  T986] usb 3-1: Product: syz
[  213.542520][  T986] usb 3-1: Manufacturer: syz
[  213.548883][  T986] usb 3-1: SerialNumber: syz
[  213.597851][ T5597] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  213.777408][  T986] usbtest 3-1:128.96: couldn't get endpoints, -71
[  213.787876][  T986] usbtest 3-1:128.96: probe with driver usbtest failed with error -71
[  213.793716][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'.
[  213.797263][  T986] usb 3-1: USB disconnect, device number 27
[  214.042333][T12255] Unknown vers= option specified: 3.0/
[  214.042333][T12255] 
[  214.044859][T12255] CIFS: VFS: Unknown vers= option specified: 3.0/
[  214.094200][T12257] 8021q: adding VLAN 0 to HW filter on device bond2
[  214.497937][T12266] netlink: Unknown nat attribute (0)
[  214.504063][T12266] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  214.914897][T12278] loop0: detected capacity change from 0 to 1024
[  214.919170][T12278] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  214.926866][T12278] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  214.935333][T12278] EXT4-fs (loop0): orphan cleanup on readonly fs
[  214.947829][T12278] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.2725: Invalid inode table block 0 in block_group 0
[  214.964268][T12278] loop0: lost filesystem error report for type 5 error -117
[  214.964518][T12278] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  214.970840][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  214.970856][    C0] EXT4-fs (loop0): initial error at time 1787678138: __ext4_get_inode_loc:4886
[  214.970871][    C0] EXT4-fs (loop0): last error at time 1787678138: __ext4_get_inode_loc:4886
[  215.000845][T12278] loop0: lost filesystem error report for type 5 error -117
[  215.001124][T12278] EXT4-fs error (device loop0): ext4_quota_write:7430: inode #3: comm syz.0.2725: mark_inode_dirty error
[  215.015311][T12278] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  215.015499][T12278] Quota error (device loop0): write_blk: dquota write failed
[  215.033308][T12278] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  215.043422][T12278] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2725: Failed to acquire dquot type 0
[  215.054542][T12278] loop0: lost filesystem error report for type 5 error -117
[  215.054860][T12278] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.2725: Invalid inode table block 0 in block_group 0
[  215.066654][T12278] loop0: lost filesystem error report for type 5 error -117
[  215.070834][T12278] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  215.077492][T12278] loop0: lost filesystem error report for type 5 error -117
[  215.077696][T12278] EXT4-fs error (device loop0): ext4_ext_truncate:4557: inode #15: comm syz.0.2725: mark_inode_dirty error
[  215.084089][T12278] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  215.084262][T12278] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.2725: Invalid inode table block 0 in block_group 0
[  215.103281][T12278] loop0: lost filesystem error report for type 5 error -117
[  215.120146][T12278] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  215.125031][T12278] loop0: lost filesystem error report for type 5 error -117
[  215.136697][T12278] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  215.149233][T12278] loop0: lost filesystem error report for type 5 error -117
[  215.149871][T12278] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz.0.2725: Invalid inode table block 0 in block_group 0
[  215.178277][T12278] loop0: lost filesystem error report for type 5 error -117
[  215.178746][T12278] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem
[  215.187849][T12278] loop0: lost filesystem error report for type 5 error -117
[  215.188049][T12278] EXT4-fs error (device loop0): ext4_truncate:4691: inode #15: comm syz.0.2725: mark_inode_dirty error
[  215.200083][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  215.211630][T12278] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  215.211843][T12278] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  215.220249][T12278] EXT4-fs (loop0): 1 truncate cleaned up
[  215.224503][T12278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  215.258362][   T53] Bluetooth: hci2: unexpected event for opcode 0x202a
[  215.283684][ T5597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.430186][T12287] loop2: detected capacity change from 0 to 32768
[  215.435162][T12287] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2729 (12287)
[  215.458239][T12287] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.465101][T12287] BTRFS info (device loop2): using crc32c checksum algorithm
[  215.536476][T12287] BTRFS info (device loop2): enabling ssd optimizations
[  215.542825][T12287] BTRFS info (device loop2): turning on async discard
[  215.549404][T12287] BTRFS info (device loop2): enabling free space tree
[  215.583086][T12319] loop0: detected capacity change from 0 to 8192
[  215.624055][   T33] audit: type=1800 audit(1787678139.025:203): pid=12319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2737" name="file2" dev="loop0" ino=1048715 res=0 errno=0
[  215.637611][T12319] syz.0.2737: attempt to access beyond end of device
[  215.637611][T12319] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  215.717641][ T9011] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.924900][T12327] loop0: detected capacity change from 0 to 4096
[  215.944891][T12327] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  215.970258][T12327] ntfs3: Cannot use different iocharset when remounting!
[  216.004584][T12333] loop2: detected capacity change from 0 to 512
[  216.012401][T12333] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  216.034967][T12333] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2744: corrupted in-inode xattr: e_value size too large
[  216.046859][T12333] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  216.049313][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  216.054923][    C1] EXT4-fs (loop2): initial error at time 1787678139: ext4_iget_extra_inode:5180: inode 15
[  216.057978][    C1] EXT4-fs (loop2): last error at time 1787678139: ext4_iget_extra_inode:5180: inode 15
[  216.067550][T12333] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2744: couldn't read orphan inode 15 (err -117)
[  216.108359][T12333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.132312][T12345] loop0: detected capacity change from 0 to 128
[  216.165139][T12345] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  216.171123][T12345] hpfs: filesystem error: improperly stopped
[  216.173984][T12345] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  216.176449][T12345] hpfs: You really don't want any checks? You are crazy...
[  216.181247][T12345] hpfs: hpfs_map_sector(): read error
[  216.183775][T12345] hpfs: code page support is disabled
[  216.186691][T12345] hpfs: hpfs_map_4sectors(): unaligned read
[  216.189008][T12345] hpfs: hpfs_map_4sectors(): unaligned read
[  216.191105][T12345] hpfs: filesystem error: unable to find root dir
[  216.198874][T12345] hpfs: hpfs_map_4sectors(): unaligned read
[  216.201503][T12345] hpfs: hpfs_map_sector(): read error
[  216.271183][ T9011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.376096][T12359] netlink: 'syz.1.2756': attribute type 11 has an invalid length.
[  216.378845][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2756'.
[  216.597941][T12374] ------------[ cut here ]------------
[  216.599913][T12374] RTNL: assertion failed at ./include/net/netdev_lock.h (72)
[  216.602377][T12374] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x483/0x500, CPU#1: syz.0.2763/12374
[  216.607276][T12374] Modules linked in:
[  216.609880][T12374] CPU: 1 UID: 0 PID: 12374 Comm: syz.0.2763 Not tainted syzkaller #0 PREEMPT(full) 
[  216.612693][T12374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.615712][T12374] RIP: 0010:netdev_queue_get_dma_dev+0x48f/0x500
[  216.617621][T12374] Code: 75 d7 eb dd e8 42 9f 0f f8 90 0f 0b 90 e9 e0 fc ff ff e8 34 9f 0f f8 48 8d 3d 0d 8b af 06 48 c7 c6 2a a0 28 8e ba 48 00 00 00 <67> 48 0f b9 3a e9 be fc ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 9b fb
[  216.623314][T12374] RSP: 0018:ffffc900017579e0 EFLAGS: 00010287
[  216.625367][T12374] RAX: ffffffff89b74c2c RBX: ffff8881063f0000 RCX: 0000000000080000
[  216.628453][T12374] RDX: 0000000000000048 RSI: ffffffff8e28a02a RDI: ffffffff9066d740
[  216.632011][T12374] RBP: 0000000000000000 R08: ffffffff90027aa7 R09: 1ffffffff2004f54
[  216.635499][T12374] R10: dffffc0000000000 R11: fffffbfff2004f55 R12: 0000000000000000
[  216.638550][T12374] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  216.641768][T12374] FS:  00007fe86146b6c0(0000) GS:ffff8882a8f56000(0000) knlGS:0000000000000000
[  216.645098][T12374] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  216.647680][T12374] CR2: 0000200000002010 CR3: 0000000171ffe000 CR4: 00000000000006f0
[  216.650666][T12374] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  216.653157][T12374] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  216.655572][T12374] Call Trace:
[  216.656629][T12374]  <TASK>
[  216.657572][T12374]  zcrx_register_netdev+0x213/0x520
[  216.659223][T12374]  ? io_region_pin_pages+0xbe/0x190
[  216.661203][T12374]  ? __pfx_zcrx_register_netdev+0x10/0x10
[  216.663046][T12374]  ? __asan_memset+0x22/0x50
[  216.664584][T12374]  ? io_allocate_rbuf_ring+0x19c/0x230
[  216.666298][T12374]  io_register_zcrx+0x953/0xc00
[  216.667842][T12374]  ? __pfx_io_register_zcrx+0x10/0x10
[  216.669575][T12374]  ? __mutex_lock+0x30d/0x1550
[  216.671079][T12374]  ? __pfx___mutex_lock+0x10/0x10
[  216.672652][T12374]  ? __fget_files+0x3a2/0x420
[  216.674048][T12374]  ? __fget_files+0x2a/0x420
[  216.675461][T12374]  __se_sys_io_uring_register+0xc23/0x1ab0
[  216.677410][T12374]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  216.679587][T12374]  ? rcu_is_watching+0x15/0xb0
[  216.681451][T12374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.683549][T12374]  do_syscall_64+0x174/0x580
[  216.685300][T12374]  ? trace_irq_disable+0x3b/0x140
[  216.687364][T12374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.689506][T12374] RIP: 0033:0x7fe86059e0d9
[  216.691145][T12374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.697713][T12374] RSP: 002b:00007fe86146b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  216.698730][T12365] loop2: detected capacity change from 0 to 32768
[  216.701177][T12374] RAX: ffffffffffffffda RBX: 00007fe860825fa0 RCX: 00007fe86059e0d9
[  216.708856][T12374] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003
[  216.712189][T12374] RBP: 00007fe860635024 R08: 0000000000000000 R09: 0000000000000000
[  216.715332][T12374] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  216.718476][T12374] R13: 00007fe860826038 R14: 00007fe860825fa0 R15: 00007ffd0a6f3ca8
[  216.721590][T12374]  </TASK>
[  216.722869][T12374] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  216.725692][T12374] CPU: 1 UID: 0 PID: 12374 Comm: syz.0.2763 Not tainted syzkaller #0 PREEMPT(full) 
[  216.728879][T12374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.732111][T12374] Call Trace:
[  216.733210][T12374]  <TASK>
[  216.734409][T12374]  vpanic+0x56c/0xa60
[  216.736062][T12374]  ? __pfx__printk+0x10/0x10
[  216.737978][T12374]  ? __pfx_vpanic+0x10/0x10
[  216.739785][T12374]  ? is_bpf_text_address+0x292/0x2b0
[  216.741954][T12374]  ? is_bpf_text_address+0x26/0x2b0
[  216.744029][T12374]  panic+0xc5/0xd0
[  216.745521][T12374]  ? __pfx_panic+0x10/0x10
[  216.747287][T12374]  __warn+0x315/0x4c0
[  216.748884][T12374]  ? netdev_queue_get_dma_dev+0x483/0x500
[  216.751165][T12374]  ? netdev_queue_get_dma_dev+0x483/0x500
[  216.753474][T12374]  __report_bug+0x276/0x570
[  216.755287][T12374]  ? netdev_queue_get_dma_dev+0x483/0x500
[  216.757499][T12374]  ? __pfx___report_bug+0x10/0x10
[  216.759370][T12374]  report_bug_entry+0x19a/0x290
[  216.761358][T12374]  ? netdev_queue_get_dma_dev+0x48f/0x500
[  216.763600][T12374]  ? netdev_queue_get_dma_dev+0x494/0x500
[  216.765850][T12374]  handle_bug+0xce/0x200
[  216.767619][T12374]  exc_invalid_op+0x1a/0x50
[  216.769525][T12374]  asm_exc_invalid_op+0x1a/0x20
[  216.771498][T12374] RIP: 0010:netdev_queue_get_dma_dev+0x48f/0x500
[  216.773873][T12374] Code: 75 d7 eb dd e8 42 9f 0f f8 90 0f 0b 90 e9 e0 fc ff ff e8 34 9f 0f f8 48 8d 3d 0d 8b af 06 48 c7 c6 2a a0 28 8e ba 48 00 00 00 <67> 48 0f b9 3a e9 be fc ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 9b fb
[  216.781301][T12374] RSP: 0018:ffffc900017579e0 EFLAGS: 00010287
[  216.783711][T12374] RAX: ffffffff89b74c2c RBX: ffff8881063f0000 RCX: 0000000000080000
[  216.786766][T12374] RDX: 0000000000000048 RSI: ffffffff8e28a02a RDI: ffffffff9066d740
[  216.789928][T12374] RBP: 0000000000000000 R08: ffffffff90027aa7 R09: 1ffffffff2004f54
[  216.793152][T12374] R10: dffffc0000000000 R11: fffffbfff2004f55 R12: 0000000000000000
[  216.796342][T12374] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  216.799504][T12374]  ? netdev_queue_get_dma_dev+0x47c/0x500
[  216.801761][T12374]  zcrx_register_netdev+0x213/0x520
[  216.803883][T12374]  ? io_region_pin_pages+0xbe/0x190
[  216.805660][T12374]  ? __pfx_zcrx_register_netdev+0x10/0x10
[  216.807636][T12374]  ? __asan_memset+0x22/0x50
[  216.809101][T12374]  ? io_allocate_rbuf_ring+0x19c/0x230
[  216.810831][T12374]  io_register_zcrx+0x953/0xc00
[  216.812310][T12374]  ? __pfx_io_register_zcrx+0x10/0x10
[  216.814183][T12374]  ? __mutex_lock+0x30d/0x1550
[  216.815959][T12374]  ? __pfx___mutex_lock+0x10/0x10
[  216.817670][T12374]  ? __fget_files+0x3a2/0x420
[  216.819158][T12374]  ? __fget_files+0x2a/0x420
[  216.820788][T12374]  __se_sys_io_uring_register+0xc23/0x1ab0
[  216.822659][T12374]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  216.824907][T12374]  ? rcu_is_watching+0x15/0xb0
[  216.826443][T12374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.828789][T12374]  do_syscall_64+0x174/0x580
[  216.830610][T12374]  ? trace_irq_disable+0x3b/0x140
[  216.832591][T12374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.834908][T12374] RIP: 0033:0x7fe86059e0d9
[  216.836674][T12374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.844073][T12374] RSP: 002b:00007fe86146b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  216.846712][T12374] RAX: ffffffffffffffda RBX: 00007fe860825fa0 RCX: 00007fe86059e0d9
[  216.849180][T12374] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003
[  216.851876][T12374] RBP: 00007fe860635024 R08: 0000000000000000 R09: 0000000000000000
[  216.854326][T12374] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  216.856756][T12374] R13: 00007fe860826038 R14: 00007fe860825fa0 R15: 00007ffd0a6f3ca8
[  216.859145][T12374]  </TASK>
[  216.860875][T12374] Kernel Offset: disabled
[  216.862233][T12374] Rebooting in 86400 seconds..
