last executing test programs:

3m44.186112412s ago: executing program 0 (id=596):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x100078c, &(0x7f0000000500), 0x3, 0x485, &(0x7f0000001040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x81009431, 0x0)

3m43.800085509s ago: executing program 0 (id=601):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fc7fffff000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x64}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
syz_open_dev$usbmon(&(0x7f0000000080), 0x101, 0x4000)

3m43.648759024s ago: executing program 0 (id=603):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0)

3m43.463338526s ago: executing program 0 (id=605):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {@nojournal_checksum}, {@sysvgroups}, {@nobarrier}, {@data_ordered}, {@test_dummy_encryption}, {@nogrpid}, {@debug}]}, 0xd, 0x607, &(0x7f0000000b00)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/cgroup\x00')
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

3m43.214245295s ago: executing program 0 (id=609):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
setreuid(0x0, 0xee00)
utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1ff, 0x6})

3m42.817599224s ago: executing program 0 (id=613):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x23a, &(0x7f0000000480)={0x0, 0xa101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000002280)=0xfffffffc, 0x0, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, 0x7}, 0x0, 0x0, 0x2})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)

3m42.490062239s ago: executing program 32 (id=613):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x23a, &(0x7f0000000480)={0x0, 0xa101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000002280)=0xfffffffc, 0x0, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, 0x7}, 0x0, 0x0, 0x2})
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2m14.341572321s ago: executing program 3 (id=1568):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38)

2m14.34130213s ago: executing program 3 (id=1569):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0)

2m14.184547526s ago: executing program 3 (id=1571):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'xfrm0\x00', @local})

2m14.016288172s ago: executing program 3 (id=1577):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f00000008c0)={[{@shortname_mixed}, {@utf8no}, {@uni_xlate}, {@shortname_winnt}, {@fat=@sys_immutable}, {@utf8no}, {@utf8}, {@fat=@showexec}, {@utf8}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@numtail}]}, 0x0, 0x29f, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

2m13.884516752s ago: executing program 3 (id=1579):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0)

2m13.639374797s ago: executing program 3 (id=1580):
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd)

2m13.467439871s ago: executing program 33 (id=1580):
madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xd)

2.266887672s ago: executing program 2 (id=3020):
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1)

2.223227412s ago: executing program 2 (id=3021):
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x4a4}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x80, 0x8}}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="040f"]})

1.22867512s ago: executing program 1 (id=3027):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
recvmmsg(r0, 0x0, 0x0, 0x40000041, 0x0)

1.228451122s ago: executing program 1 (id=3028):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)={0x2c, r1, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)

1.228327021s ago: executing program 1 (id=3029):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001900010000000000000000001d01090050000f80490700000000000000c18424783f3bb6a3d7a36227948e622b761acd509d61b4512bb4e36cdf07c9bc8e0d78b418a01238b454c5a4b856dfec1aae4c0b07fbb38f8040d0fa916a0826"], 0x64}}, 0x0)

1.147135931s ago: executing program 1 (id=3030):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110)

1.14688063s ago: executing program 1 (id=3031):
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)

1.029585503s ago: executing program 4 (id=3033):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x30}}, 0x0)

905.843409ms ago: executing program 4 (id=3034):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c00008008000340000a"], 0xe0}}, 0x0)

635.707365ms ago: executing program 2 (id=3035):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000a0000000870000000000000018000000000000000000000000000000950000060000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x13}, 0x94)

539.802055ms ago: executing program 2 (id=3036):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x80, 0x1, 0xc8, 0xa, 0x2})

539.439576ms ago: executing program 4 (id=3037):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d50000000050000200012800c0001006d6163766c616e00100002800b0004"], 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

539.315549ms ago: executing program 2 (id=3038):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000002c0)={0xd, @capture={0x1000, 0x1, {0x7, 0x8}, 0x81, 0x6}})

419.941233ms ago: executing program 4 (id=3039):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x1000})

419.615681ms ago: executing program 2 (id=3040):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x8c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x9535257d72065881)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4c083)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000140)=0x6, 0x4)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r2, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x71d8e07a}], 0x1, 0x12020, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000400)={0x1b, "5660359c3245d1c42317afad7d48ed510000000000000100", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000340)={"0c137b43cc00d731ff00070000007dab00"})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

86.222876ms ago: executing program 4 (id=3041):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x20, 0x0, 0x20, 0xfffff012}]}, 0x10)

85.933857ms ago: executing program 1 (id=3042):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fcntl$notify(0xffffffffffffffff, 0x402, 0xe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)

0s ago: executing program 4 (id=3043):
syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES8], 0x40, 0x2f6, &(0x7f0000000e40)="$eJzs3M9r02AYwPGnXbd2HVt7EEFF9qIXvYSt3oUiG4gFZa7iDxCyNdXS2JamTCri6smr/4Zjx11koPMP2MWbJy/iZRfBy0BnpU3q0i3dus4tG/1+YLzP8r5Pm+R9W54Uko37b5/ls5aW1SsSjCgJitRkSyTeiBzzoyISkIA0myF7Y8RuanJ15OeXi0pEkqnU1IxS08nZawml1Nj4h+cvly+tVUburYythmU9/njjR+Lb+tn1cxt/Zp/mLJWzVKFYUbqaK36t6HOmoTI5K68pdcc0dMtQuYJllO3+YsV5WymVqkovZEajpbJhWUovVFXeqKpKUVXKVaU/0XMFpWmaGo1K/9gcbzalg+all2Zm9GSPbzrfYx7+u7U9e8vl1ofnU729J710dPsEAABOqlb9H3bX/5vt9X/AaYPu+t9Rk1qj/r/74OGtLur/1aEO9X9xV/3vXF9IW3/WLFL/9yqye1N6aaD3+h+nRHlYwrIs25/o14+WJ5oB9T8AAAAAAAAAAAAAAAAAAAAAAKfBZr0eq9frsUYbFDtu/IWdG0Za//u9nzga7vm35zrUmHXmv0+4btyLiJhvFtILabu1+5NZyYkphkxITH4314PDjqdvpqYCqikuH81FJ39xIT3Qnj8pMYl750/a+ao9f1Ci7vyExOSMd37CM39Irlx25WsSk8/zUhRTMs11vZ3/alKpG7dTO/KHJeNxxxwAAAAAAKeRpv7xvH7XtE79dn43vw9MeF6fh+R8yN9jBwAAAACgX1jVF3ndNI3yvsE7J2Pfwd+dgV2/8mGDwQMcRbfB+2YQ6PTKkQOduiMIWs9k3nPwsDOorcv5eWbxcLsx6Mexj/tywkONRe/aEu04eGzA64TvFYSdpzI3tmzVd4y5vnLhl39r7Fi/hgAAAAAcg+2i3+89AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACgfx3H48T8PkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpPgbAAD//zi/FSY=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fstatfs(r0, 0x0)

kernel console output (not intermixed with test programs):


[  229.633017][ T5889] apple 0003:05AC:0262.000B: probe with driver apple failed with error -22
[  229.645300][T10030] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  229.650617][T10030] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  229.766186][T10030] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.766554][   T24] usb 3-1: USB disconnect, device number 26
[  229.785566][T10030] 8021q: adding VLAN 0 to HW filter on device team0
[  229.791636][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.794260][ T8763] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.806881][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.809576][ T8763] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.941195][T10030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.099573][T10030] veth0_vlan: entered promiscuous mode
[  230.116230][T10030] veth1_vlan: entered promiscuous mode
[  230.146940][T10030] veth0_macvtap: entered promiscuous mode
[  230.151908][T10030] veth1_macvtap: entered promiscuous mode
[  230.167518][T10030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.176504][T10030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.189492][ T5865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.194419][ T5865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.204204][ T5865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.213815][ T5865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.358405][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.360993][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.394985][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.398193][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.652251][ T5237] Bluetooth: hci2: command tx timeout
[  231.035883][T10233] loop2: detected capacity change from 0 to 40427
[  231.041014][T10233] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  231.058233][T10233] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  231.061454][T10233] F2FS-fs (loop2): Image doesn't support compression
[  231.075648][T10233] F2FS-fs (loop2): build fault injection rate: 690
[  231.078430][T10233] F2FS-fs (loop2): build fault injection type: 0x35f7
[  231.091695][T10233] F2FS-fs (loop2): invalid crc value
[  231.190572][T10233] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  231.197053][T10233] F2FS-fs (loop2): Start checkpoint disabled!
[  231.205369][T10233] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  231.208167][T10233] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  231.228302][T10233] syz.2.1644: attempt to access beyond end of device
[  231.228302][T10233] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  231.256743][ T1091] kworker/u10:6: attempt to access beyond end of device
[  231.256743][ T1091] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  231.262435][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u10:6 Not tainted syzkaller #0 PREEMPT(full) 
[  231.262453][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.262461][ T1091] Workqueue: writeback wb_workfn (flush-7:2)
[  231.262483][ T1091] Call Trace:
[  231.262489][ T1091]  <TASK>
[  231.262495][ T1091]  dump_stack_lvl+0x189/0x250
[  231.262514][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.262527][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[  231.262538][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  231.262557][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  231.262580][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[  231.262605][ T1091]  f2fs_write_end_io+0x886/0xb60
[  231.262633][ T1091]  __submit_merged_bio+0x27a/0x6a0
[  231.262657][ T1091]  __submit_merged_write_cond+0x255/0x530
[  231.262690][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[  231.262724][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  231.262743][ T1091]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  231.262776][ T1091]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  231.262805][ T1091]  ? trace_f2fs_writepages+0x7f/0x200
[  231.262823][ T1091]  ? f2fs_write_node_pages+0x478/0x6e0
[  231.262845][ T1091]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  231.262874][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  231.262887][ T1091]  do_writepages+0x32e/0x550
[  231.262908][ T1091]  ? reacquire_held_locks+0x127/0x1d0
[  231.262920][ T1091]  ? writeback_sb_inodes+0x384/0x1010
[  231.262941][ T1091]  __writeback_single_inode+0x145/0xff0
[  231.262955][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[  231.263003][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[  231.263030][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  231.263068][ T1091]  ? rcu_is_watching+0x15/0xb0
[  231.263086][ T1091]  wb_writeback+0x43b/0xaf0
[  231.263104][ T1091]  ? queue_io+0x341/0x590
[  231.263123][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[  231.263145][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  231.263169][ T1091]  wb_workfn+0x409/0xef0
[  231.263194][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[  231.263211][ T1091]  ? __lock_acquire+0xab9/0xd20
[  231.263237][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  231.263254][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  231.263271][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  231.263283][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  231.263297][ T1091]  process_scheduled_works+0xae1/0x17b0
[  231.263335][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[  231.263361][ T1091]  worker_thread+0x8a0/0xda0
[  231.263400][ T1091]  kthread+0x711/0x8a0
[  231.263417][ T1091]  ? __pfx_worker_thread+0x10/0x10
[  231.263428][ T1091]  ? __pfx_kthread+0x10/0x10
[  231.263445][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  231.263463][ T1091]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.263478][ T1091]  ? __pfx_kthread+0x10/0x10
[  231.263495][ T1091]  ret_from_fork+0x439/0x7d0
[  231.263512][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[  231.263529][ T1091]  ? __switch_to_asm+0x39/0x70
[  231.263544][ T1091]  ? __switch_to_asm+0x33/0x70
[  231.263555][ T1091]  ? __pfx_kthread+0x10/0x10
[  231.263572][ T1091]  ret_from_fork_asm+0x1a/0x30
[  231.263600][ T1091]  </TASK>
[  231.263607][ T1091] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  231.453328][T10235] loop4: detected capacity change from 0 to 40427
[  231.490433][T10235] F2FS-fs (loop4): build fault injection rate: 771
[  231.496892][T10235] F2FS-fs (loop4): invalid crc value
[  231.584285][T10235] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  231.603800][T10235] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  231.652129][T10030] syz-executor: attempt to access beyond end of device
[  231.652129][T10030] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  231.657277][T10030] CPU: 1 UID: 0 PID: 10030 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  231.657290][T10030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.657296][T10030] Call Trace:
[  231.657300][T10030]  <TASK>
[  231.657304][T10030]  dump_stack_lvl+0x189/0x250
[  231.657320][T10030]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.657329][T10030]  ? __pfx_queue_work_on+0x10/0x10
[  231.657337][T10030]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  231.657349][T10030]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  231.657366][T10030]  f2fs_handle_critical_error+0x37c/0x540
[  231.657382][T10030]  f2fs_write_end_io+0x886/0xb60
[  231.657398][T10030]  __submit_merged_bio+0x27a/0x6a0
[  231.657412][T10030]  __submit_merged_write_cond+0x255/0x530
[  231.657426][T10030]  f2fs_write_data_pages+0x261d/0x3000
[  231.657448][T10030]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  231.657474][T10030]  ? __mod_zone_page_state+0xd7/0x140
[  231.657490][T10030]  ? folios_put_refs+0x560/0x640
[  231.657506][T10030]  ? __lock_acquire+0xab9/0xd20
[  231.657521][T10030]  ? do_raw_spin_lock+0x121/0x290
[  231.657535][T10030]  ? do_raw_spin_unlock+0x4d/0x240
[  231.657544][T10030]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  231.657552][T10030]  do_writepages+0x32e/0x550
[  231.657567][T10030]  ? do_raw_spin_unlock+0x4d/0x240
[  231.657578][T10030]  filemap_fdatawrite+0x199/0x240
[  231.657589][T10030]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  231.657619][T10030]  ? do_raw_spin_unlock+0x4d/0x240
[  231.657630][T10030]  f2fs_sync_dirty_inodes+0x31f/0x830
[  231.657645][T10030]  f2fs_write_checkpoint+0x95a/0x1df0
[  231.657670][T10030]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  231.657695][T10030]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  231.657703][T10030]  ? kfree+0x18e/0x440
[  231.657715][T10030]  ? kill_f2fs_super+0x298/0x6c0
[  231.657726][T10030]  kill_f2fs_super+0x2c3/0x6c0
[  231.657737][T10030]  ? __pfx_kill_f2fs_super+0x10/0x10
[  231.657743][T10030]  ? radix_tree_delete_item+0x2b6/0x400
[  231.657760][T10030]  ? shrinker_free+0x2ce/0x3e0
[  231.657772][T10030]  deactivate_locked_super+0xbc/0x130
[  231.657783][T10030]  cleanup_mnt+0x425/0x4c0
[  231.657793][T10030]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.657802][T10030]  task_work_run+0x1d4/0x260
[  231.657813][T10030]  ? __pfx_task_work_run+0x10/0x10
[  231.657822][T10030]  ? __x64_sys_umount+0x122/0x160
[  231.657835][T10030]  ? exit_to_user_mode_loop+0x40/0x110
[  231.657851][T10030]  exit_to_user_mode_loop+0xec/0x110
[  231.657861][T10030]  do_syscall_64+0x2bd/0x3b0
[  231.657870][T10030]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.657877][T10030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.657884][T10030]  ? exc_page_fault+0x9f/0xf0
[  231.657893][T10030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.657900][T10030] RIP: 0033:0x7efe5198fed7
[  231.657908][T10030] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  231.657915][T10030] RSP: 002b:00007ffc11dc0128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  231.657953][T10030] RAX: 0000000000000000 RBX: 00007efe51a11c05 RCX: 00007efe5198fed7
[  231.657960][T10030] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc11dc01e0
[  231.657966][T10030] RBP: 00007ffc11dc01e0 R08: 0000000000000000 R09: 0000000000000000
[  231.657972][T10030] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc11dc1270
[  231.657978][T10030] R13: 00007efe51a11c05 R14: 0000000000038851 R15: 00007ffc11dc12b0
[  231.657995][T10030]  </TASK>
[  231.658000][T10030] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  232.312730][T10262] loop2: detected capacity change from 0 to 32768
[  232.336703][T10262] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  232.348151][T10262] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  232.401197][ T5854] ocfs2: Unmounting device (7,2) on (node local)
[  232.520889][T10267] loop4: detected capacity change from 0 to 1024
[  232.539523][T10267] EXT4-fs: Ignoring removed nomblk_io_submit option
[  232.590493][T10267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.735851][T10279] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  233.134617][ T5237] Bluetooth: hci2: command tx timeout
[  233.158104][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.279239][T10279] loop2: detected capacity change from 0 to 32768
[  233.322296][T10279] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  233.405483][T10293] 8021q: adding VLAN 0 to HW filter on device batadv1
[  233.409636][T10293] team0: Port device batadv1 added
[  233.414649][T10279] XFS (loop2): Ending clean mount
[  234.228110][ T5854] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  234.761751][T10330] sctp: [Deprecated]: syz.4.1674 (pid 10330) Use of int in max_burst socket option deprecated.
[  234.761751][T10330] Use struct sctp_assoc_value instead
[  234.904902][T10343] loop2: detected capacity change from 0 to 256
[  234.947238][T10343] FAT-fs (loop2): Directory bread(block 64) failed
[  234.949283][T10343] FAT-fs (loop2): Directory bread(block 65) failed
[  234.951287][T10343] FAT-fs (loop2): Directory bread(block 66) failed
[  234.960962][T10343] FAT-fs (loop2): Directory bread(block 67) failed
[  234.964809][T10343] FAT-fs (loop2): Directory bread(block 68) failed
[  234.967500][T10343] FAT-fs (loop2): Directory bread(block 69) failed
[  234.969585][T10343] FAT-fs (loop2): Directory bread(block 70) failed
[  234.971734][T10343] FAT-fs (loop2): Directory bread(block 71) failed
[  234.975082][T10343] FAT-fs (loop2): Directory bread(block 72) failed
[  234.977334][T10343] FAT-fs (loop2): Directory bread(block 73) failed
[  235.094008][T10338] loop4: detected capacity change from 0 to 32768
[  235.129653][T10338] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  235.161107][T10338] XFS (loop4): Ending clean mount
[  235.280157][T10030] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  235.651343][T10378] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1693'.
[  235.656129][T10378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  235.807766][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  235.807780][   T33] audit: type=1326 audit(1758173740.353:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.2.1694" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7fc00000
[  235.977039][T10385] netlink: 'syz.1.1695': attribute type 14 has an invalid length.
[  236.490743][T10400] netlink: 'syz.4.1702': attribute type 4 has an invalid length.
[  236.496200][T10400] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1702'.
[  236.533676][   T33] audit: type=1326 audit(1758173741.083:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10381 comm="syz.2.1694" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa74098eba9 code=0x7fc00000
[  236.570416][T10403] loop4: detected capacity change from 0 to 512
[  236.578090][T10403] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  236.595895][T10403] EXT4-fs (loop4): 1 truncate cleaned up
[  236.600085][T10403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.658619][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.944311][T10423] 9pnet_fd: Insufficient options for proto=fd
[  237.129646][T10441] gre1: entered promiscuous mode
[  237.198935][T10444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  237.201776][T10444] IPv6: NLM_F_CREATE should be set when creating new route
[  237.204738][T10444] IPv6: NLM_F_CREATE should be set when creating new route
[  237.207617][T10444] IPv6: NLM_F_CREATE should be set when creating new route
[  238.585769][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'.
[  238.595043][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'.
[  240.339251][T10492] loop4: detected capacity change from 0 to 8192
[  240.376155][T10492] FAT-fs (loop4): bogus sectors per cluster 0
[  240.378687][T10492] FAT-fs (loop4): Can't find a valid FAT filesystem
[  240.410959][ T5889] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  240.562298][ T5889] usb 3-1: Using ep0 maxpacket: 8
[  240.569236][ T5889] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d
[  240.576312][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.579252][ T5889] usb 3-1: Product: syz
[  240.580994][ T5889] usb 3-1: Manufacturer: syz
[  240.583572][ T5889] usb 3-1: SerialNumber: syz
[  240.588471][ T5889] usb 3-1: config 0 descriptor??
[  240.762950][    T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  240.800806][ T5889] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  240.807581][ T5889] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  240.814707][ T5889] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  240.817110][ T5889] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  240.827096][ T5889] usb 3-1: USB disconnect, device number 27
[  240.914857][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  240.918471][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  240.924150][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  240.930259][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  240.933955][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.937141][    T9] usb 5-1: Product: syz
[  240.938591][    T9] usb 5-1: Manufacturer: syz
[  240.940281][    T9] usb 5-1: SerialNumber: syz
[  241.167928][    T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  241.173909][    T9] usb 5-1: unit 2 not found!
[  241.204667][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  241.211032][    T9] usb 5-1: USB disconnect, device number 2
[  241.609796][T10533] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0
[  242.154348][T10564] syz.1.1765(10564): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  243.830956][T10585] loop2: detected capacity change from 0 to 40427
[  243.842455][T10585] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  243.845883][T10585] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  243.872246][T10585] F2FS-fs (loop2): invalid crc value
[  244.118853][T10585] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  244.139578][T10585] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  244.144487][T10585] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  244.282586][   T33] audit: type=1800 audit(1758173748.793:162): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1772" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=11 res=0 errno=0
[  244.944227][T10619] loop4: detected capacity change from 0 to 256
[  244.947064][T10619] exfat: Deprecated parameter 'namecase'
[  244.961571][T10619] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  246.369188][T10644] Bluetooth: MGMT ver 1.23
[  246.581330][T10655] loop2: detected capacity change from 0 to 256
[  247.003289][T10663] loop2: detected capacity change from 0 to 40427
[  247.014559][T10663] F2FS-fs (loop2): invalid crc value
[  247.073192][T10663] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  247.077644][T10663] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  247.098215][   T33] audit: type=1800 audit(1758173751.643:163): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1803" name="file1" dev="loop2" ino=10 res=0 errno=0
[  247.123788][   T33] audit: type=1800 audit(1758173751.653:164): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1803" name="file1" dev="loop2" ino=10 res=0 errno=0
[  247.154186][T10663] syz.2.1803: attempt to access beyond end of device
[  247.154186][T10663] loop2: rw=2049, sector=77824, nr_sectors = 2568 limit=40427
[  247.186902][T10684] syz.2.1803: attempt to access beyond end of device
[  247.186902][T10684] loop2: rw=34817, sector=80392, nr_sectors = 8 limit=40427
[  247.490175][ T5854] syz-executor: attempt to access beyond end of device
[  247.490175][ T5854] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  247.495629][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  247.495644][ T5854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.495651][ T5854] Call Trace:
[  247.495656][ T5854]  <TASK>
[  247.495660][ T5854]  dump_stack_lvl+0x189/0x250
[  247.495679][ T5854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.495689][ T5854]  ? __pfx_queue_work_on+0x10/0x10
[  247.495698][ T5854]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  247.495711][ T5854]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  247.495728][ T5854]  f2fs_handle_critical_error+0x37c/0x540
[  247.495746][ T5854]  f2fs_write_end_io+0x886/0xb60
[  247.495764][ T5854]  __submit_merged_bio+0x27a/0x6a0
[  247.495779][ T5854]  __submit_merged_write_cond+0x255/0x530
[  247.495794][ T5854]  f2fs_write_data_pages+0x261d/0x3000
[  247.495820][ T5854]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  247.495857][ T5854]  ? folios_put_refs+0x559/0x640
[  247.495872][ T5854]  ? __pfx_folios_put_refs+0x10/0x10
[  247.495880][ T5854]  ? rcu_is_watching+0x15/0xb0
[  247.495893][ T5854]  ? __lock_acquire+0xab9/0xd20
[  247.495915][ T5854]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  247.495923][ T5854]  do_writepages+0x32e/0x550
[  247.495940][ T5854]  ? do_raw_spin_unlock+0x4d/0x240
[  247.495952][ T5854]  filemap_fdatawrite+0x199/0x240
[  247.495964][ T5854]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  247.495999][ T5854]  ? do_raw_spin_unlock+0x4d/0x240
[  247.496011][ T5854]  f2fs_sync_dirty_inodes+0x31f/0x830
[  247.496028][ T5854]  f2fs_write_checkpoint+0x95a/0x1df0
[  247.496049][ T5854]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  247.496081][ T5854]  ? kill_f2fs_super+0x298/0x6c0
[  247.496092][ T5854]  kill_f2fs_super+0x2c3/0x6c0
[  247.496103][ T5854]  ? __pfx_kill_f2fs_super+0x10/0x10
[  247.496110][ T5854]  ? radix_tree_delete_item+0x2b6/0x400
[  247.496126][ T5854]  ? shrinker_free+0x2ce/0x3e0
[  247.496137][ T5854]  deactivate_locked_super+0xbc/0x130
[  247.496148][ T5854]  cleanup_mnt+0x425/0x4c0
[  247.496158][ T5854]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.496167][ T5854]  task_work_run+0x1d4/0x260
[  247.496179][ T5854]  ? __pfx_task_work_run+0x10/0x10
[  247.496188][ T5854]  ? __x64_sys_umount+0x122/0x160
[  247.496201][ T5854]  ? exit_to_user_mode_loop+0x40/0x110
[  247.496216][ T5854]  exit_to_user_mode_loop+0xec/0x110
[  247.496226][ T5854]  do_syscall_64+0x2bd/0x3b0
[  247.496235][ T5854]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.496242][ T5854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.496250][ T5854]  ? exc_page_fault+0x9f/0xf0
[  247.496264][ T5854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.496272][ T5854] RIP: 0033:0x7fa74098fed7
[  247.496282][ T5854] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  247.496289][ T5854] RSP: 002b:00007ffca9a042b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  247.496300][ T5854] RAX: 0000000000000000 RBX: 00007fa740a11c05 RCX: 00007fa74098fed7
[  247.496305][ T5854] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca9a04370
[  247.496310][ T5854] RBP: 00007ffca9a04370 R08: 0000000000000000 R09: 0000000000000000
[  247.496315][ T5854] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca9a05400
[  247.496320][ T5854] R13: 00007fa740a11c05 R14: 000000000003c53e R15: 00007ffca9a05440
[  247.496334][ T5854]  </TASK>
[  247.496338][ T5854] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  247.871126][T10702] loop2: detected capacity change from 0 to 128
[  247.963323][   T33] audit: type=1326 audit(1758173752.513:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10705 comm="syz.2.1822" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  247.983000][   T33] audit: type=1326 audit(1758173752.523:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10705 comm="syz.2.1822" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  247.996156][   T33] audit: type=1326 audit(1758173752.523:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10705 comm="syz.2.1822" exe="/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  248.012091][   T33] audit: type=1326 audit(1758173752.523:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10705 comm="syz.2.1822" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  248.030394][   T33] audit: type=1326 audit(1758173752.523:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10705 comm="syz.2.1822" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  248.295521][T10710] loop2: detected capacity change from 0 to 32768
[  248.720323][T10729] loop4: detected capacity change from 0 to 4096
[  248.731031][T10729] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  248.740441][T10729] ntfs3(loop4): ino=3, mi_enum_attr
[  248.742460][T10729] ntfs3(loop4): Failed to load $Volume (-22).
[  249.009688][T10748] netlink: 'syz.1.1843': attribute type 21 has an invalid length.
[  249.013449][T10748] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1843'.
[  249.016738][T10748] netlink: 'syz.1.1843': attribute type 5 has an invalid length.
[  249.019440][T10748] netlink: 'syz.1.1843': attribute type 6 has an invalid length.
[  249.023381][T10748] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1843'.
[  249.065662][T10750] 8021q: adding VLAN 0 to HW filter on device batadv1
[  249.073995][T10750] overlayfs: failed to clone upperpath
[  249.082993][ T9060] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  249.180527][T10756] loop2: detected capacity change from 0 to 7
[  249.188497][ T5982]  loop2: [POWERTEC] p1 p2 p3 p4 p5 p6
[  249.191197][ T5982] loop2: p1 start 1664054885 is beyond EOD, truncated
[  249.195557][ T5982] loop2: p2 size 1668284416 extends beyond EOD, truncated
[  249.200822][ T5982] loop2: p3 size 294912 extends beyond EOD, truncated
[  249.206022][ T5982] loop2: p4 start 3488808960 is beyond EOD, truncated
[  249.209069][ T5982] loop2: p5 size 509280256 extends beyond EOD, truncated
[  249.214001][ T5982] loop2: p6 size 4294705152 extends beyond EOD, truncated
[  249.234926][T10756]  loop2: [POWERTEC] p1 p2 p3 p4 p5 p6
[  249.237896][T10756] loop2: p1 start 1664054885 is beyond EOD, truncated
[  249.240800][T10756] loop2: p2 size 1668284416 extends beyond EOD, truncated
[  249.243970][ T9060] usb 5-1: Using ep0 maxpacket: 32
[  249.254633][T10756] loop2: p3 size 294912 extends beyond EOD, truncated
[  249.257723][ T9060] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  249.261450][ T9060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.267706][T10756] loop2: p4 start 3488808960 is beyond EOD, truncated
[  249.270443][T10756] loop2: p5 size 509280256 extends beyond EOD, truncated
[  249.273866][ T9060] usb 5-1: Product: syz
[  249.275628][ T9060] usb 5-1: Manufacturer: syz
[  249.277659][ T9060] usb 5-1: SerialNumber: syz
[  249.282757][T10756] loop2: p6 size 4294705152 extends beyond EOD, truncated
[  249.376187][ T6052] udevd[6052]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  249.376571][ T5855] Bluetooth: hci2: command tx timeout
[  249.382936][ T5982] udevd[5982]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  249.397124][ T6108] udevd[6108]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  249.413154][ T6107] udevd[6107]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  249.434476][ T6052] udevd[6052]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  249.436831][ T6108] udevd[6108]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  249.444786][ T5982] udevd[5982]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  249.448058][ T6107] udevd[6107]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  249.493894][ T9060] usb 5-1: palm_os_4_probe - error -71 getting connection info
[  249.497142][ T9060] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  249.518375][ T9060] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  249.534122][ T9060] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  249.547527][ T9060] usb 5-1: USB disconnect, device number 3
[  249.557362][ T9060] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  249.565108][ T9060] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  249.571010][ T9060] visor 5-1:1.0: device disconnected
[  250.806070][T10785] loop4: detected capacity change from 0 to 256
[  250.811737][T10785] exfat: Deprecated parameter 'namecase'
[  250.820675][T10785] exfat: Deprecated parameter 'utf8'
[  250.825466][T10785] exfat: Deprecated parameter 'utf8'
[  250.827231][T10785] exfat: Deprecated parameter 'namecase'
[  250.844917][T10785] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d)
[  250.950360][T10790] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.970704][T10789] loop4: detected capacity change from 0 to 128
[  251.017205][T10789] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  251.061981][T10789] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  251.278554][T10030] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  251.506277][T10807] loop4: detected capacity change from 0 to 256
[  251.945674][T10826] loop4: detected capacity change from 0 to 256
[  251.949090][T10826] exfat: Deprecated parameter 'utf8'
[  251.961667][T10826] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d)
[  252.356927][T10832] loop4: detected capacity change from 0 to 32768
[  252.382995][T10832] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.447724][T10832] XFS (loop4): Ending clean mount
[  252.458423][T10832] XFS (loop4): Quotacheck needed: Please wait.
[  252.497894][T10832] XFS (loop4): Quotacheck: Done.
[  252.556540][T10030] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.587766][T10848] io-wq is not configured for unbound workers
[  252.897268][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1892'.
[  253.076101][T10878] loop4: detected capacity change from 0 to 256
[  253.531358][ T5889] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[  253.748719][ T5889] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  253.759723][ T5889] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  253.775303][ T5889] usb 3-1: config 0 has no interface number 0
[  253.812665][ T5889] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  253.823697][ T5889] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  253.827696][ T5889] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  253.838264][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.850949][ T5889] usb 3-1: config 0 descriptor??
[  254.471407][ T5889] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input8
[  254.477888][T10906] mkiss: ax0: crc mode is auto.
[  254.517781][ T5889] input: failed to attach handler kbd to device input8, error: -5
[  254.669166][   T24] usb 3-1: USB disconnect, device number 28
[  254.903512][T10919] loop4: detected capacity change from 0 to 4096
[  255.042837][T10921] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.057612][T10919] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  255.134320][T10919] NILFS (loop4): mounting fs with errors
[  255.517292][T10935] loop4: detected capacity change from 0 to 512
[  255.521882][T10935] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0)
[  255.639418][   T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  255.693220][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.695986][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.790053][T10943] netlink: 'syz.1.1927': attribute type 10 has an invalid length.
[  255.799363][   T24] usb 3-1: Using ep0 maxpacket: 16
[  255.803635][   T24] usb 3-1: config 254 has an invalid interface number: 235 but max is 0
[  255.809595][   T24] usb 3-1: config 254 has no interface number 0
[  255.812418][   T24] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7
[  255.817074][   T24] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024
[  255.821815][   T24] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  255.825110][   T24] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  255.828346][   T24] usb 3-1: config 254 interface 235 has no altsetting 0
[  255.835523][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  255.838399][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.843222][   T24] usb 3-1: Product: syz
[  255.844546][   T24] usb 3-1: Manufacturer: syz
[  255.845966][   T24] usb 3-1: SerialNumber: syz
[  255.847754][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1928'.
[  256.065003][   T24] usbtest 3-1:254.235: Linux gadget zero
[  256.066997][   T24] usbtest 3-1:254.235: high-speed {control in/out bulk-in iso-out} tests (+alt)
[  256.265992][ T5889] usb 3-1: USB disconnect, device number 29
[  256.505613][T10961] loop4: detected capacity change from 0 to 8
[  256.524593][T10961] SQUASHFS error: zlib decompression failed, data probably corrupt
[  256.527666][T10961] SQUASHFS error: Failed to read block 0x9b: -5
[  256.533216][T10961] SQUASHFS error: Unable to read metadata cache entry [99]
[  256.535472][T10961] SQUASHFS error: Unable to read inode 0x127
[  256.844777][T10969] loop4: detected capacity change from 0 to 32768
[  256.865246][T10969] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  256.873480][T10969] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  256.891899][T10969] grow_buffers: requested out-of-range block 432345564227567648 for device loop4
[  256.895488][T10969] (syz.4.1938,10969,0):ocfs2_read_blocks:239 ERROR: status = -12
[  256.898071][T10969] (syz.4.1938,10969,0):ocfs2_search_chain:1817 ERROR: status = -12
[  256.901246][T10969] (syz.4.1938,10969,0):ocfs2_search_chain:1940 ERROR: status = -12
[  256.904235][T10969] (syz.4.1938,10969,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12
[  256.906931][T10969] (syz.4.1938,10969,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12
[  256.910830][T10969] (syz.4.1938,10969,0):__ocfs2_claim_clusters:2438 ERROR: status = -12
[  256.913755][T10969] (syz.4.1938,10969,0):__ocfs2_claim_clusters:2446 ERROR: status = -12
[  256.916549][T10969] (syz.4.1938,10969,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -12
[  256.919375][T10969] (syz.4.1938,10969,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -12
[  256.922029][T10969] (syz.4.1938,10969,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12
[  256.925286][T10969] (syz.4.1938,10969,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12
[  256.929935][T10969] (syz.4.1938,10969,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12
[  256.932977][T10969] (syz.4.1938,10969,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12
[  256.936412][T10969] (syz.4.1938,10969,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12
[  256.939769][T10969] (syz.4.1938,10969,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12
[  256.943350][T10969] (syz.4.1938,10969,0):ocfs2_symlink:1926 ERROR: status = -12
[  256.946422][T10969] (syz.4.1938,10969,0):ocfs2_symlink:2080 ERROR: status = -12
[  256.986331][T10976] grow_buffers: requested out-of-range block 432345564227567648 for device loop4
[  257.016832][T10976] (syz.4.1938,10976,1):ocfs2_read_blocks:239 ERROR: status = -12
[  257.021463][T10976] (syz.4.1938,10976,1):ocfs2_search_chain:1817 ERROR: status = -12
[  257.025085][T10976] (syz.4.1938,10976,1):ocfs2_search_chain:1940 ERROR: status = -12
[  257.042037][T10976] (syz.4.1938,10976,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12
[  257.045420][T10976] (syz.4.1938,10976,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12
[  257.051616][T10976] (syz.4.1938,10976,0):__ocfs2_claim_clusters:2438 ERROR: status = -12
[  257.056987][T10976] (syz.4.1938,10976,0):__ocfs2_claim_clusters:2446 ERROR: status = -12
[  257.062178][T10976] (syz.4.1938,10976,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -12
[  257.067929][T10976] (syz.4.1938,10976,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -12
[  257.076360][T10976] (syz.4.1938,10976,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12
[  257.083194][T10976] (syz.4.1938,10976,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12
[  257.093343][T10976] (syz.4.1938,10976,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12
[  257.096676][T10976] (syz.4.1938,10976,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12
[  257.104714][T10976] (syz.4.1938,10976,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12
[  257.113630][T10976] (syz.4.1938,10976,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12
[  257.118230][T10976] (syz.4.1938,10976,1):ocfs2_mknod:360 ERROR: status = -12
[  257.124514][T10976] (syz.4.1938,10976,1):ocfs2_mknod:505 ERROR: status = -12
[  257.131635][T10976] (syz.4.1938,10976,1):ocfs2_mkdir:661 ERROR: status = -12
[  257.184018][T10030] ocfs2: Unmounting device (7,4) on (node local)
[  257.223615][T10985] loop2: detected capacity change from 0 to 2048
[  257.349663][T10985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.362904][   T33] audit: type=1800 audit(1758174017.911:170): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1944" name="file1" dev="loop2" ino=15 res=0 errno=0
[  257.375337][T10984] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  257.386133][   T33] audit: type=1800 audit(1758174017.921:171): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1944" name="file1" dev="loop2" ino=15 res=0 errno=0
[  257.396122][T10984] EXT4-fs (loop2): Remounting filesystem read-only
[  257.403182][T10984] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[  257.431793][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.529922][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  257.779690][ T5889] usb 5-1: config 0 has no interfaces?
[  257.803271][ T5889] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  257.811660][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.820362][ T5889] usb 5-1: Product: syz
[  257.824534][ T5889] usb 5-1: Manufacturer: syz
[  257.827399][ T5889] usb 5-1: SerialNumber: syz
[  257.835075][ T5889] usb 5-1: config 0 descriptor??
[  257.837668][T10996] loop2: detected capacity change from 0 to 8
[  257.863379][T10996] SQUASHFS error: xz decompression failed, data probably corrupt
[  257.870143][T10996] SQUASHFS error: Failed to read block 0x108: -5
[  257.872743][T10996] SQUASHFS error: Unable to read metadata cache entry [106]
[  257.875595][T10996] SQUASHFS error: Unable to read inode 0x11f
[  258.126512][ T5889] usb 5-1: USB disconnect, device number 4
[  259.440015][T11017] loop2: detected capacity change from 0 to 32768
[  259.446530][T11017] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  259.453657][T11017] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  259.488065][ T5854] ocfs2: Unmounting device (7,2) on (node local)
[  259.753717][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1956'.
[  259.760754][T11025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1956'.
[  260.380882][T11041] loop4: detected capacity change from 0 to 8
[  260.398430][T11041] SQUASHFS error: Failed to read block 0x33c: -5
[  260.401919][T11041] SQUASHFS error: Unable to read metadata cache entry [33a]
[  260.405136][T11041] SQUASHFS error: Unable to read inode 0xa7
[  260.836966][T11058] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1973'.
[  261.303077][T11068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1978'.
[  261.735355][T11073] loop4: detected capacity change from 0 to 2048
[  261.826538][T11073] hpfs: filesystem error: invalid size in superblock: ffffffff; already mounted read-only
[  262.053426][T11088] loop4: detected capacity change from 0 to 128
[  262.071489][T11088] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  262.087849][T11088] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  262.129924][T10030] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  263.035144][T11110] loop2: detected capacity change from 0 to 32768
[  263.081092][T11110] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  263.831654][ T5854] ocfs2: Unmounting device (7,2) on (node local)
[  264.083538][T11166] loop2: detected capacity change from 0 to 256
[  264.086923][T11166] exfat: Deprecated parameter 'namecase'
[  264.089121][T11166] exfat: Deprecated parameter 'namecase'
[  264.092057][T11166] exfat: Deprecated parameter 'namecase'
[  264.099872][T11166] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  264.117182][T11166] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  264.242960][T11160] loop4: detected capacity change from 0 to 32768
[  264.290111][T11160] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  264.324591][T10030] ocfs2: Unmounting device (7,4) on (node local)
[  264.387767][T11168] loop2: detected capacity change from 0 to 32768
[  264.401677][T11168] (syz.2.2012,11168,0):ocfs2_verify_heartbeat:830 ERROR: Mismatching o2cb heartbeat modes
[  264.440754][T11168] (syz.2.2012,11168,0):ocfs2_fill_super:1177 ERROR: status = -22
[  264.704908][T11181] loop4: detected capacity change from 0 to 64
[  264.712196][T11181] minix: Unknown parameter ''
[  264.857613][T11180] loop2: detected capacity change from 0 to 1024
[  264.866982][T11180] EXT4-fs: Ignoring removed nobh option
[  264.868950][T11180] EXT4-fs: inline encryption not supported
[  264.879805][T11165] orangefs_mount: mount request failed with -4
[  264.882923][T11180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.930020][T11186] 9pnet_fd: Insufficient options for proto=fd
[  264.949759][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.002105][T11190] loop2: detected capacity change from 0 to 256
[  265.017370][   T33] audit: type=1800 audit(1758174025.574:172): pid=11190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2018" name="file1" dev="loop2" ino=1048659 res=0 errno=0
[  265.041528][T11190] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  265.047043][T11190] FAT-fs (loop2): Filesystem has been set read-only
[  265.472176][T11199] binder: 11198:11199 ioctl c0306201 2000000005c0 returned -14
[  265.855798][   T33] audit: type=1326 audit(1758174026.395:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.2025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7fc00000
[  266.180129][T11211] loop4: detected capacity change from 0 to 32768
[  266.192128][T11211] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2028 (11211)
[  266.207396][T11211] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  266.211179][T11211] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  266.328811][T11211] BTRFS info (device loop4): enabling ssd optimizations
[  266.331583][T11211] BTRFS info (device loop4): enabling free space tree
[  266.332692][T11232] loop2: detected capacity change from 0 to 256
[  266.392782][T10030] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  266.503775][   T33] audit: type=1326 audit(1758174027.055:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.2025" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f70aaf8eba9 code=0x7fc00000
[  266.534609][   T33] audit: type=1326 audit(1758174027.055:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.2025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7fc00000
[  266.541834][   T33] audit: type=1326 audit(1758174027.055:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.2025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7fc00000
[  266.577209][   T33] audit: type=1326 audit(1758174027.055:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.2025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7fc00000
[  266.601480][   T33] audit: type=1326 audit(1758174027.055:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.2025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7fc00000
[  266.611669][   T33] audit: type=1326 audit(1758174027.055:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.2025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7fc00000
[  266.620641][   T33] audit: type=1326 audit(1758174027.055:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.2025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7fc00000
[  266.643943][   T33] audit: type=1326 audit(1758174027.055:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.1.2025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7fc00000
[  266.715784][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'.
[  266.719413][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2032'.
[  266.812815][T11248] loop4: detected capacity change from 0 to 512
[  266.832805][T11248] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2036: corrupted in-inode xattr: invalid ea_ino
[  266.839820][T11248] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2036: couldn't read orphan inode 15 (err -117)
[  266.850144][T11248] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.898391][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.056890][T11255] loop8: detected capacity change from 0 to 7
[  267.065507][ T5982] Dev loop8: unable to read RDB block 7
[  267.068281][ T5982]  loop8: unable to read partition table
[  267.071199][ T5982] loop8: partition table beyond EOD, truncated
[  267.078361][T11255] Dev loop8: unable to read RDB block 7
[  267.080801][T11255]  loop8: unable to read partition table
[  267.085077][T11255] loop8: partition table beyond EOD, truncated
[  267.097607][T11255] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  267.251853][T11259] loop4: detected capacity change from 0 to 1024
[  267.281227][T11259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.326442][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.502918][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2049'.
[  268.824796][T11305] loop4: detected capacity change from 0 to 32768
[  268.910059][T11305] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  268.979787][T11305] XFS (loop4): Ending clean mount
[  269.087638][T10030] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  269.556394][T11335] loop4: detected capacity change from 0 to 4096
[  269.575557][T11335] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  269.645354][T11335] ntfs3(loop4): ino=1a, mi_enum_attr
[  269.647566][T11335] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  269.653477][T11335] ntfs3(loop4): ino=1a, mi_enum_attr
[  269.655586][T11335] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  269.683932][T11342] loop2: detected capacity change from 0 to 164
[  269.702495][T11342] iso9660: Corrupted directory entry in block 2 of inode 1920
[  270.173889][T11351] loop2: detected capacity change from 0 to 32768
[  270.190466][T11351] OCFS2: ERROR (device loop2): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 75 has an invalid extent (next_free_rec 32, count 19)
[  270.199731][T11351] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  270.210334][T11351] OCFS2: File system is now read-only.
[  270.213761][T11351] (syz.2.2080,11351,1):ocfs2_get_clusters:634 ERROR: status = -30
[  270.217449][T11351] (syz.2.2080,11351,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  270.220715][T11351] (syz.2.2080,11351,1):ocfs2_bmap:469 ERROR: get_blocks() failed, block = 0
[  270.224367][T11351] (syz.2.2080,11351,0):ocfs2_bmap:470 ERROR: status = -30
[  270.226990][T11351] jbd2_journal_init_inode: Cannot locate journal superblock
[  270.230087][T11351] (syz.2.2080,11351,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  270.234801][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  270.239888][T11351] (syz.2.2080,11351,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  270.243558][T11351] (syz.2.2080,11351,0):ocfs2_check_volume:2432 ERROR: status = -22
[  270.245952][T11351] (syz.2.2080,11351,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  270.254478][T11351] (syz.2.2080,11351,0):ocfs2_fill_super:1177 ERROR: status = -22
[  270.388161][   T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  270.391523][   T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  270.396548][   T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  270.401260][   T10] usb 5-1: config 220 has no interface number 2
[  270.410294][   T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  270.420383][   T10] usb 5-1: config 220 interface 0 has no altsetting 0
[  270.423476][   T10] usb 5-1: config 220 interface 76 has no altsetting 0
[  270.430076][   T10] usb 5-1: config 220 interface 1 has no altsetting 0
[  270.442699][   T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  270.450466][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.457845][   T10] usb 5-1: Product: syz
[  270.459849][   T10] usb 5-1: Manufacturer: syz
[  270.462280][   T10] usb 5-1: SerialNumber: syz
[  270.675356][   T10] usb 5-1: selecting invalid altsetting 0
[  270.691808][   T10] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  270.695804][   T10] usb 5-1: No valid video chain found.
[  270.705959][   T10] usb 5-1: selecting invalid altsetting 0
[  270.708409][   T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  270.714597][   T10] usb 5-1: USB disconnect, device number 5
[  270.791743][  T975] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  270.953774][  T975] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  270.958635][  T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  270.963467][  T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  270.970031][  T975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  270.976422][  T975] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  270.980284][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.988270][  T975] usb 3-1: config 0 descriptor??
[  271.307837][T11384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2094'.
[  271.339602][T11386] netlink: 'syz.4.2095': attribute type 1 has an invalid length.
[  271.344892][T11386] nbd: couldn't find a device at index 393224
[  271.410408][  T975] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max
[  271.442086][  T975] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  271.509192][   T33] kauditd_printk_skb: 59 callbacks suppressed
[  271.509211][   T33] audit: type=1326 audit(1758174032.058:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.1.2098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  271.527593][   T33] audit: type=1326 audit(1758174032.058:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.1.2098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  271.552408][   T33] audit: type=1326 audit(1758174032.078:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.1.2098" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  271.575901][   T33] audit: type=1326 audit(1758174032.078:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.1.2098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  271.596302][   T33] audit: type=1326 audit(1758174032.078:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.1.2098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  271.611953][   T33] audit: type=1326 audit(1758174032.088:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.1.2098" exe="/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  271.631578][   T33] audit: type=1326 audit(1758174032.088:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.1.2098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  271.640325][   T33] audit: type=1326 audit(1758174032.088:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.1.2098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  272.014812][T11417] loop4: detected capacity change from 0 to 4096
[  272.588838][T11435] loop4: detected capacity change from 0 to 16
[  272.604181][T11435] erofs (device loop4): mounted with root inode @ nid 36.
[  272.627908][T11435] erofs (device loop4): readahead error at folio 12 @ nid 36
[  272.650223][T11435] erofs (device loop4): readahead error at folio 9 @ nid 36
[  272.656452][T11435] erofs (device loop4): readahead error at folio 6 @ nid 36
[  272.664491][T11435] erofs (device loop4): readahead error at folio 4 @ nid 36
[  272.668949][T11435] syz.4.2118: attempt to access beyond end of device
[  272.668949][T11435] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  272.679510][T11435] syz.4.2118: attempt to access beyond end of device
[  272.679510][T11435] loop4: rw=524288, sector=376, nr_sectors = 16 limit=16
[  272.686386][T11435] syz.4.2118: attempt to access beyond end of device
[  272.686386][T11435] loop4: rw=524288, sector=0, nr_sectors = 24 limit=16
[  272.693755][T11435] syz.4.2118: attempt to access beyond end of device
[  272.693755][T11435] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16
[  272.699367][T11435] syz.4.2118: attempt to access beyond end of device
[  272.699367][T11435] loop4: rw=524288, sector=525144, nr_sectors = 16 limit=16
[  272.709893][T11435] erofs (device loop4): failed to decompress -32 in[46, 4050] out[4096]
[  272.716508][T11435] erofs (device loop4): read error -117 @ 8200 of nid 36
[  272.858465][T11441] program syz.4.2121 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  272.866168][T11439] 9pnet_fd: Insufficient options for proto=fd
[  273.170505][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  273.215378][T11460] loop2: detected capacity change from 0 to 2048
[  273.222044][T11460] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  273.249830][T11460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  273.331500][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  273.336809][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.351051][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.363408][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  273.369688][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.374351][   T24] usb 5-1: Product: syz
[  273.376069][   T24] usb 5-1: Manufacturer: syz
[  273.377648][   T24] usb 5-1: SerialNumber: syz
[  273.384414][   T24] usb 5-1: bad CDC descriptors
[  273.453419][ T5889] usb 3-1: USB disconnect, device number 30
[  273.587025][    T9] usb 5-1: USB disconnect, device number 6
[  274.132728][T11474] netlink: 'syz.4.2136': attribute type 1 has an invalid length.
[  274.285342][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2138'.
[  274.301663][T11478] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) !
[  274.387348][T11484] IPv6: NLM_F_CREATE should be specified when creating new route
[  275.466785][T11494] loop4: detected capacity change from 0 to 256
[  275.471321][T11494] exfat: Deprecated parameter 'utf8'
[  275.473487][T11494] exfat: Deprecated parameter 'namecase'
[  275.476041][T11494] exfat: Deprecated parameter 'utf8'
[  275.485406][T11494] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  276.044125][T11508] loop2: detected capacity change from 0 to 32768
[  276.075214][T11508] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  276.156771][ T5854] (syz-executor,5854,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  276.168393][ T5854] ocfs2: Unmounting device (7,2) on (node local)
[  276.254738][T11531] loop4: detected capacity change from 0 to 4096
[  276.262755][T11531] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  276.293255][T11531] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  276.486890][T11533] loop2: detected capacity change from 0 to 4096
[  276.498454][T11533] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  276.572749][T11533] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  277.687497][T11560] sctp: [Deprecated]: syz.4.2173 (pid 11560) Use of int in maxseg socket option.
[  277.687497][T11560] Use struct sctp_assoc_value instead
[  278.652708][T11583] program syz.4.2183 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  279.266481][T11605] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  280.219250][T11617] loop4: detected capacity change from 0 to 40427
[  280.237061][T11617] F2FS-fs (loop4): invalid crc value
[  280.293019][T11617] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  280.300408][T11617] F2FS-fs (loop4): Start checkpoint disabled!
[  280.312000][T11617] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  280.365501][ T1089] kworker/u10:4: attempt to access beyond end of device
[  280.365501][ T1089] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  280.385634][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  280.385656][ T1089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.385665][ T1089] Workqueue: writeback wb_workfn (flush-7:4)
[  280.385688][ T1089] Call Trace:
[  280.385694][ T1089]  <TASK>
[  280.385700][ T1089]  dump_stack_lvl+0x189/0x250
[  280.385721][ T1089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.385735][ T1089]  ? __pfx_queue_work_on+0x10/0x10
[  280.385746][ T1089]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  280.385765][ T1089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  280.385789][ T1089]  f2fs_handle_critical_error+0x37c/0x540
[  280.385814][ T1089]  f2fs_write_end_io+0x886/0xb60
[  280.385840][ T1089]  __submit_merged_bio+0x27a/0x6a0
[  280.385859][ T1089]  __submit_merged_write_cond+0x255/0x530
[  280.385881][ T1089]  f2fs_write_data_pages+0x261d/0x3000
[  280.385908][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  280.385923][ T1089]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  280.385949][ T1089]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  280.385961][ T1089]  ? look_up_lock_class+0x74/0x170
[  280.385977][ T1089]  ? trace_f2fs_writepages+0x7f/0x200
[  280.385989][ T1089]  ? f2fs_write_node_pages+0x478/0x6e0
[  280.386007][ T1089]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  280.386034][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  280.386047][ T1089]  do_writepages+0x32e/0x550
[  280.386068][ T1089]  ? reacquire_held_locks+0x127/0x1d0
[  280.386082][ T1089]  ? writeback_sb_inodes+0x384/0x1010
[  280.386104][ T1089]  __writeback_single_inode+0x145/0xff0
[  280.386121][ T1089]  ? do_raw_spin_unlock+0x4d/0x240
[  280.386138][ T1089]  writeback_sb_inodes+0x6c7/0x1010
[  280.386172][ T1089]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  280.386221][ T1089]  ? rcu_is_watching+0x15/0xb0
[  280.386243][ T1089]  wb_writeback+0x43b/0xaf0
[  280.386300][ T1089]  ? queue_io+0x341/0x590
[  280.386319][ T1089]  ? __pfx_wb_writeback+0x10/0x10
[  280.386344][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  280.386367][ T1089]  wb_workfn+0x409/0xef0
[  280.386395][ T1089]  ? __pfx_wb_workfn+0x10/0x10
[  280.386415][ T1089]  ? __lock_acquire+0xab9/0xd20
[  280.386440][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  280.386457][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  280.386473][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  280.386483][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  280.386497][ T1089]  process_scheduled_works+0xae1/0x17b0
[  280.386531][ T1089]  ? __pfx_process_scheduled_works+0x10/0x10
[  280.386556][ T1089]  worker_thread+0x8a0/0xda0
[  280.386592][ T1089]  kthread+0x711/0x8a0
[  280.386608][ T1089]  ? __pfx_worker_thread+0x10/0x10
[  280.386618][ T1089]  ? __pfx_kthread+0x10/0x10
[  280.386633][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  280.386648][ T1089]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.386660][ T1089]  ? __pfx_kthread+0x10/0x10
[  280.386674][ T1089]  ret_from_fork+0x439/0x7d0
[  280.386689][ T1089]  ? __pfx_ret_from_fork+0x10/0x10
[  280.386729][ T1089]  ? __switch_to_asm+0x39/0x70
[  280.386746][ T1089]  ? __switch_to_asm+0x33/0x70
[  280.386761][ T1089]  ? __pfx_kthread+0x10/0x10
[  280.386776][ T1089]  ret_from_fork_asm+0x1a/0x30
[  280.386804][ T1089]  </TASK>
[  280.540301][ T1089] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  280.579485][T11630] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.703168][T11635] netlink: 'syz.2.2205': attribute type 1 has an invalid length.
[  281.378979][T11648] loop2: detected capacity change from 0 to 32768
[  282.240166][T11660] loop4: detected capacity change from 0 to 32768
[  282.280841][T11660] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  282.321855][T11660] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list
[  282.336470][T11660] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  282.340474][T11660] OCFS2: Returning error to the calling process.
[  282.342788][T11660] (syz.4.2213,11660,1):ocfs2_find_leaf:1948 ERROR: status = -30
[  282.360278][T11660] (syz.4.2213,11660,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  282.371916][T11660] (syz.4.2213,11660,1):ocfs2_get_clusters:634 ERROR: status = -30
[  282.388264][T11660] (syz.4.2213,11660,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  282.392556][T11660] (syz.4.2213,11660,1):ocfs2_read_virt_blocks:1005 ERROR: status = -30
[  282.396320][T11660] (syz.4.2213,11660,1):ocfs2_read_dir_block:511 ERROR: status = -30
[  282.399543][T11660] (syz.4.2213,11660,1):ocfs2_find_dir_space_el:3511 ERROR: status = -5
[  282.403557][T11660] (syz.4.2213,11660,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -5
[  282.415556][T11660] (syz.4.2213,11660,1):ocfs2_symlink:1879 ERROR: status = -5
[  282.418939][T11660] (syz.4.2213,11660,1):ocfs2_symlink:2080 ERROR: status = -5
[  282.453182][T10030] ocfs2: Unmounting device (7,4) on (node local)
[  282.543462][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2218'.
[  282.958453][T11685] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  284.156369][T11715] loop2: detected capacity change from 0 to 2048
[  284.175240][T11715] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  284.183196][ T5982] udevd[5982]: incorrect nilfs2 checksum on /dev/loop2
[  284.203874][T11718] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  285.301481][T11733] loop2: detected capacity change from 0 to 32768
[  285.309267][T11738] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2245'.
[  285.463872][T11733] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  285.463890][T11733]   allowing incompatible features above 0.0: (unknown version)
[  285.463896][T11733]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  285.492410][T11733] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  285.497699][T11733] bcachefs (loop2): initializing new filesystem
[  285.632119][T11733] bcachefs (loop2): going read-write
[  285.833702][T11733] bcachefs (loop2): marking superblocks
[  285.879653][T11733] bcachefs (loop2): initializing freespace
[  285.897070][T11733] bcachefs (loop2): done initializing freespace
[  285.905574][T11733] bcachefs (loop2): reading snapshots table
[  285.907999][T11733] bcachefs (loop2): reading snapshots done
[  285.938219][T11733] bcachefs (loop2): done starting filesystem
[  286.000655][ T5854] bcachefs (loop2): shutting down
[  286.002748][ T5854] bcachefs (loop2): going read-only
[  286.005819][ T5854] bcachefs (loop2): finished waiting for writes to stop
[  286.010883][ T5854] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  286.050369][ T5854] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  286.056043][ T5854] bcachefs (loop2): clean shutdown complete, journal seq 4
[  286.059626][ T5854] bcachefs (loop2): marking filesystem clean
[  286.083407][ T5854] bcachefs (loop2): shutdown complete
[  287.796512][T11782] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2259'.
[  288.510551][T11796] atomic_op ffff888031212198 conn xmit_atomic 0000000000000000
[  289.367550][T11825] loop2: detected capacity change from 0 to 1024
[  289.371875][T11825] EXT4-fs: Ignoring removed nobh option
[  289.374367][T11825] EXT4-fs: Ignoring removed bh option
[  289.398925][T11825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.454513][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.472097][T11832] overlayfs: failed to clone upperpath
[  291.317394][T11862] loop2: detected capacity change from 0 to 256
[  292.050751][T11888] xt_l2tp: missing protocol rule (udp|l2tpip)
[  292.074320][ T9060] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  292.143685][T11892] loop2: detected capacity change from 0 to 1024
[  292.147630][T11892] EXT4-fs: Ignoring removed bh option
[  292.149850][T11892] EXT4-fs: inline encryption not supported
[  292.158578][T11892] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  292.164716][T11892] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  292.176983][T11892] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2306: lblock 2 mapped to illegal pblock 2 (length 1)
[  292.182875][T11892] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  292.186781][T11892] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2306: lblock 0 mapped to illegal pblock 48 (length 1)
[  292.196938][T11892] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  292.203955][T11892] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2306: Failed to acquire dquot type 0
[  292.208780][T11892] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  292.213792][T11892] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2306: mark_inode_dirty error
[  292.218903][T11892] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  292.223173][T11892] EXT4-fs (loop2): 1 orphan inode deleted
[  292.226816][T11892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.241519][ T8769] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm kworker/u9:12: lblock 2 mapped to illegal pblock 2 (length 1)
[  292.244328][ T9060] usb 5-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b
[  292.253865][ T9060] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.263457][ T8769] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  292.266790][ T8769] EXT4-fs error (device loop2): ext4_write_dquot:6917: comm kworker/u9:12: Failed to commit dquot type 0
[  292.279590][ T8769] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync!
[  292.292670][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.296999][ T5854] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  292.303926][ T5854] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  292.308005][ T5854] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  292.436452][T11901] loop2: detected capacity change from 0 to 2048
[  292.457614][T11901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.473633][ T9060] pegasus 5-1:254.0: probe with driver pegasus failed with error -71
[  292.484847][ T9060] usb 5-1: USB disconnect, device number 7
[  293.990162][ T9060] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  294.096615][T11937] loop2: detected capacity change from 0 to 64
[  294.112180][T11937] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  294.122208][T11937] BFS-fs: bfs_iget(): Bad inode number loop2:00000002
[  294.173233][ T9060] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  294.176178][ T9060] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  294.185704][ T9060] usb 5-1: config 0 has no interface number 0
[  294.191324][ T9060] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  294.194581][ T9060] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3
[  294.197766][ T9060] usb 5-1: Product: syz
[  294.199274][ T9060] usb 5-1: Manufacturer: syz
[  294.206152][ T9060] usb 5-1: SerialNumber: syz
[  294.210346][ T9060] usb 5-1: config 0 descriptor??
[  294.214692][ T9060] usb 5-1: Found UVC 0.00 device syz (046c:14e8)
[  294.216831][ T9060] uvcvideo 5-1:0.105: Entity type for entity Output 1 was not initialized!
[  294.233850][ T9060] usb 5-1: Failed to create links for entity 1
[  294.236079][ T9060] usb 5-1: Failed to register entities (-22).
[  294.427312][ T9060] usb 5-1: USB disconnect, device number 8
[  294.845219][T11940] loop2: detected capacity change from 0 to 131072
[  294.850570][T11940] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  294.853950][T11940] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  294.858545][T11940] F2FS-fs (loop2): invalid crc value
[  294.899135][T11940] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  294.904990][T11940] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  294.907623][T11940] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  295.846435][T11976] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2340'.
[  295.889076][ T9060] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  296.044145][ T9060] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.049043][ T9060] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  296.052970][ T9060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.059943][ T9060] usb 3-1: config 0 descriptor??
[  296.479317][ T9060] pyra 0003:1E7D:2CF6.000D: item fetching failed at offset 0/3
[  296.483122][ T9060] pyra 0003:1E7D:2CF6.000D: parse failed
[  296.486313][ T9060] pyra 0003:1E7D:2CF6.000D: probe with driver pyra failed with error -22
[  296.679144][  T975] usb 3-1: USB disconnect, device number 31
[  296.697716][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  296.850319][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  296.853935][    T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  296.856989][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.869438][    T9] usb 5-1: config 0 descriptor??
[  297.234889][   T33] audit: type=1326 audit(1758174057.800:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.2.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  297.248740][   T33] audit: type=1326 audit(1758174057.800:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.2.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  297.256177][   T33] audit: type=1326 audit(1758174057.810:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.2.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  297.267170][T11999] loop2: detected capacity change from 0 to 2048
[  297.269930][   T33] audit: type=1326 audit(1758174057.810:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.2.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa74098ebe3 code=0x7ffc0000
[  297.270024][   T33] audit: type=1326 audit(1758174057.810:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.2.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa74098d65f code=0x7ffc0000
[  297.270053][   T33] audit: type=1326 audit(1758174057.830:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.2.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa74098ec37 code=0x7ffc0000
[  297.270079][   T33] audit: type=1326 audit(1758174057.830:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.2.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa74098d510 code=0x7ffc0000
[  297.270105][   T33] audit: type=1326 audit(1758174057.830:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.2.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa74098e7ab code=0x7ffc0000
[  297.290443][    T9] uclogic 0003:5543:0522.000E: unbalanced delimiter at end of report description
[  297.321676][   T33] audit: type=1326 audit(1758174057.870:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.2.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa74098d80a code=0x7ffc0000
[  297.347743][   T33] audit: type=1326 audit(1758174057.870:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11998 comm="syz.2.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa74098d80a code=0x7ffc0000
[  297.349995][T11999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.363930][    T9] uclogic 0003:5543:0522.000E: parse failed
[  297.366555][    T9] uclogic 0003:5543:0522.000E: probe with driver uclogic failed with error -22
[  297.408019][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.515072][    T9] usb 5-1: USB disconnect, device number 9
[  297.595477][T12016] netlink: 'syz.2.2358': attribute type 1 has an invalid length.
[  298.007326][T12040] 9pnet_fd: Insufficient options for proto=fd
[  298.388405][T12048] loop4: detected capacity change from 0 to 32768
[  298.413111][T12048] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  298.456716][T10030] ocfs2: Unmounting device (7,4) on (node local)
[  298.723635][T12058] loop2: detected capacity change from 0 to 64
[  299.180928][T12070] loop2: detected capacity change from 0 to 512
[  299.190577][T12070] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  299.199178][T12070] EXT4-fs (loop2): mount failed
[  299.315713][T12075] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2382'.
[  299.354490][T12077] program syz.2.2383 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  299.697344][    T9] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  299.851601][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  299.854750][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  299.861488][    T9] usb 3-1: config 251 has an invalid interface number: 156 but max is 0
[  299.864594][    T9] usb 3-1: config 251 has no interface number 0
[  299.866800][    T9] usb 3-1: config 251 interface 156 has no altsetting 0
[  299.873147][    T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8
[  299.877086][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.880127][    T9] usb 3-1: Product: syz
[  299.881785][    T9] usb 3-1: Manufacturer: syz
[  299.883749][    T9] usb 3-1: SerialNumber: syz
[  299.974014][T12094] loop4: detected capacity change from 0 to 32768
[  299.987163][T12094] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2391 (12094)
[  300.002217][T12094] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  300.008682][T12094] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  300.084212][T12094] BTRFS info (device loop4): enabling ssd optimizations
[  300.093254][T12094] BTRFS info (device loop4): enabling free space tree
[  300.111767][    T9] usb 3-1: unknown interface protocol 0x2c, assuming v1
[  300.119613][    T9] usb 3-1: cannot find UAC_HEADER
[  300.140186][    T9] snd-usb-audio 3-1:251.156: probe with driver snd-usb-audio failed with error -22
[  300.150056][    T9] usb 3-1: USB disconnect, device number 32
[  300.172819][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  300.296407][T10030] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  301.120383][T12125] trusted_key: encrypted_key: keyword 'neW' not recognized
[  301.232053][T12127] tmpfs: Bad value for 'mpol'
[  301.343803][T12136] loop4: detected capacity change from 0 to 128
[  302.440424][T12158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2410'.
[  302.444380][T12158] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2410'.
[  302.462783][T12158] loop4: detected capacity change from 0 to 1024
[  302.468593][T12158] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  302.480178][T12158] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.2410: lblock 1 mapped to illegal pblock 1 (length 1)
[  302.487915][T12158] __quota_error: 17 callbacks suppressed
[  302.487924][T12158] Quota error (device loop4): write_blk: dquota write failed
[  302.492592][T12158] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  302.497178][T12158] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.2410: Failed to acquire dquot type 0
[  302.501469][T12158] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.2410: Freeing blocks not in datazone - block = 0, count = 4096
[  302.514065][T12158] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2410: Invalid inode bitmap blk 0 in block_group 0
[  302.519699][ T1189] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  302.532999][ T1189] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  302.533009][T12158] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  302.537079][ T1189] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u10:9: Failed to release dquot type 0
[  302.541888][T12158] EXT4-fs (loop4): 1 orphan inode deleted
[  302.554003][T12158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.562584][   T33] audit: type=1326 audit(1758174063.133:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.4.2410" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  302.574067][   T33] audit: type=1326 audit(1758174063.133:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.4.2410" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  302.583591][   T33] audit: type=1326 audit(1758174063.133:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.4.2410" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  302.585588][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.592898][   T33] audit: type=1326 audit(1758174063.133:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.4.2410" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  302.605535][   T33] audit: type=1326 audit(1758174063.133:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.4.2410" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  302.615221][   T33] audit: type=1326 audit(1758174063.133:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.4.2410" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  302.624361][   T33] audit: type=1326 audit(1758174063.143:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.4.2410" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  303.277951][T12170] Invalid ELF header magic: != ELF
[  304.999874][T12204] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.030674][T12204] batman_adv: batadv0: Interface deactivated: dummy0
[  305.455708][T12204] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.467198][T12204] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.512035][T12204] batman_adv: batadv0: Interface deactivated: vlan1
[  305.584586][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  305.597995][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.601436][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.608912][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  305.620218][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.490828][T12221] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  306.640587][T12251] netlink: 'syz.4.2448': attribute type 12 has an invalid length.
[  307.799795][T12273] loop4: detected capacity change from 0 to 40427
[  307.805602][T12273] F2FS-fs (loop4): Image doesn't support compression
[  307.808224][T12273] F2FS-fs (loop4): build fault injection rate: 690
[  307.810608][T12273] F2FS-fs (loop4): build fault injection type: 0x35f7
[  307.825529][T12273] F2FS-fs (loop4): invalid crc value
[  307.899571][T12273] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  307.904677][T12273] F2FS-fs (loop4): Start checkpoint disabled!
[  307.909051][T12273] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  307.921800][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  307.921813][   T33] audit: type=1800 audit(1758174068.496:284): pid=12273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2452" name="file1" dev="loop4" ino=10 res=0 errno=0
[  307.947261][   T40] kworker/u10:2: attempt to access beyond end of device
[  307.947261][   T40] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  307.959250][   T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) 
[  307.959270][   T40] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.959280][   T40] Workqueue: writeback wb_workfn (flush-7:4)
[  307.959303][   T40] Call Trace:
[  307.959308][   T40]  <TASK>
[  307.959315][   T40]  dump_stack_lvl+0x189/0x250
[  307.959340][   T40]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.959356][   T40]  ? __pfx_queue_work_on+0x10/0x10
[  307.959369][   T40]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  307.959388][   T40]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  307.959424][   T40]  f2fs_handle_critical_error+0x37c/0x540
[  307.959451][   T40]  f2fs_write_end_io+0x886/0xb60
[  307.959479][   T40]  __submit_merged_bio+0x27a/0x6a0
[  307.959505][   T40]  __submit_merged_write_cond+0x255/0x530
[  307.959529][   T40]  f2fs_write_data_pages+0x261d/0x3000
[  307.959566][   T40]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  307.959593][   T40]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  307.959664][   T40]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  307.959695][   T40]  ? trace_f2fs_writepages+0x7f/0x200
[  307.959715][   T40]  ? f2fs_write_node_pages+0x478/0x6e0
[  307.959756][   T40]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  307.959770][   T40]  do_writepages+0x32e/0x550
[  307.959794][   T40]  ? reacquire_held_locks+0x127/0x1d0
[  307.959807][   T40]  ? writeback_sb_inodes+0x384/0x1010
[  307.959830][   T40]  __writeback_single_inode+0x145/0xff0
[  307.959865][   T40]  ? do_raw_spin_unlock+0x4d/0x240
[  307.959885][   T40]  writeback_sb_inodes+0x6c7/0x1010
[  307.959899][   T40]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.959937][   T40]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  307.960005][   T40]  ? rcu_is_watching+0x15/0xb0
[  307.960031][   T40]  wb_writeback+0x43b/0xaf0
[  307.960054][   T40]  ? queue_io+0x341/0x590
[  307.960073][   T40]  ? __pfx_wb_writeback+0x10/0x10
[  307.960093][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.960115][   T40]  wb_workfn+0x409/0xef0
[  307.960142][   T40]  ? __pfx_wb_workfn+0x10/0x10
[  307.960161][   T40]  ? __lock_acquire+0xab9/0xd20
[  307.960188][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[  307.960207][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.960225][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[  307.960236][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[  307.960250][   T40]  process_scheduled_works+0xae1/0x17b0
[  307.960289][   T40]  ? __pfx_process_scheduled_works+0x10/0x10
[  307.960317][   T40]  worker_thread+0x8a0/0xda0
[  307.960354][   T40]  kthread+0x711/0x8a0
[  307.960375][   T40]  ? __pfx_worker_thread+0x10/0x10
[  307.960387][   T40]  ? __pfx_kthread+0x10/0x10
[  307.960409][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.960427][   T40]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.960438][   T40]  ? __pfx_kthread+0x10/0x10
[  307.960455][   T40]  ret_from_fork+0x439/0x7d0
[  307.960471][   T40]  ? __pfx_ret_from_fork+0x10/0x10
[  307.960490][   T40]  ? __switch_to_asm+0x39/0x70
[  307.960505][   T40]  ? __switch_to_asm+0x33/0x70
[  307.960519][   T40]  ? __pfx_kthread+0x10/0x10
[  307.960536][   T40]  ret_from_fork_asm+0x1a/0x30
[  307.960564][   T40]  </TASK>
[  307.961875][   T40] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  308.405152][T12281] loop4: detected capacity change from 0 to 16
[  308.412229][T12281] erofs (device loop4): mounted with root inode @ nid 36.
[  308.639173][T12287] loop4: detected capacity change from 0 to 512
[  308.648622][T12287] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  308.669400][T12287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  308.672454][T12287] System zones: 1-12
[  308.678246][T12287] EXT4-fs (loop4): orphan cleanup on readonly fs
[  308.680749][T12287] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2459: invalid indirect mapped block 12 (level 1)
[  308.696917][T12287] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2459: invalid indirect mapped block 2 (level 2)
[  308.701893][T12287] EXT4-fs (loop4): 1 truncate cleaned up
[  308.707074][T12287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  308.729051][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  311.317039][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2484'.
[  311.469392][T12363] loop4: detected capacity change from 0 to 128
[  311.532390][T12363] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  311.543542][T12363] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  311.600945][T10030] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  311.901603][ T9060] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  312.058135][ T9060] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  312.062484][ T9060] usb 3-1: config 0 has no interface number 0
[  312.066510][ T9060] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  312.076078][ T9060] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  312.079858][ T9060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.087766][ T9060] usb 3-1: Product: syz
[  312.089596][ T9060] usb 3-1: Manufacturer: syz
[  312.092765][ T9060] usb 3-1: SerialNumber: syz
[  312.297464][ T9060] usb 3-1: config 0 descriptor??
[  312.301720][ T9060] yurex 3-1:0.50: Could not find endpoints
[  312.506406][ T9060] usb 3-1: USB disconnect, device number 33
[  312.850791][T12401] loop4: detected capacity change from 0 to 512
[  312.856995][T12401] EXT4-fs: Ignoring removed orlov option
[  312.860008][T12401] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  312.876781][T12401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  312.879739][T12401] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2505: corrupted in-inode xattr: e_value size too large
[  312.889670][T12401] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2505: couldn't read orphan inode 15 (err -117)
[  312.896602][T12401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  312.966642][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.107814][T12407] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  313.160699][   T33] audit: type=1800 audit(1758174073.708:285): pid=12407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2508" name="/" dev="9p" ino=7885907883835289711 res=0 errno=0
[  313.590325][   T47] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  313.740389][   T47] usb 3-1: Using ep0 maxpacket: 16
[  313.747669][   T47] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  313.754867][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.763378][   T47] usb 3-1: Product: syz
[  313.767569][   T47] usb 3-1: Manufacturer: syz
[  313.772809][   T47] usb 3-1: SerialNumber: syz
[  313.841025][   T47] usb 3-1: config 0 descriptor??
[  313.856202][   T47] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  314.090630][   T47] usb 3-1: clie_3_5_startup: get config number bad return length: 0
[  314.093914][   T47] visor 3-1:0.0: probe with driver visor failed with error -5
[  314.293845][   T47] usb 3-1: USB disconnect, device number 34
[  315.578116][T12473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  315.581497][T12473] IPv6: NLM_F_CREATE should be set when creating new route
[  315.634156][T12475] loop4: detected capacity change from 0 to 512
[  315.656428][T12475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.662333][T12475] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.711168][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.265830][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.268820][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.505481][T12532] loop4: detected capacity change from 0 to 128
[  317.519643][T12532] EXT4-fs (loop4): Test dummy encryption mode enabled
[  317.526546][T12532] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  317.540150][T12532] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  317.557203][T12532] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  317.733483][T12532] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  317.803578][T10030] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  318.352400][T12562] loop4: detected capacity change from 0 to 256
[  318.376048][T12562] FAT-fs (loop4): Directory bread(block 64) failed
[  318.381970][T12562] FAT-fs (loop4): Directory bread(block 65) failed
[  318.384931][T12562] FAT-fs (loop4): Directory bread(block 66) failed
[  318.390754][T12562] FAT-fs (loop4): Directory bread(block 67) failed
[  318.395656][T12562] FAT-fs (loop4): Directory bread(block 68) failed
[  318.403731][T12562] FAT-fs (loop4): Directory bread(block 69) failed
[  318.406777][T12562] FAT-fs (loop4): Directory bread(block 70) failed
[  318.410679][T12562] FAT-fs (loop4): Directory bread(block 71) failed
[  318.413441][T12562] FAT-fs (loop4): Directory bread(block 72) failed
[  318.416076][T12562] FAT-fs (loop4): Directory bread(block 73) failed
[  318.443847][T12562] syz.4.2568: attempt to access beyond end of device
[  318.443847][T12562] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256
[  318.757783][   T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  318.907706][   T10] usb 3-1: Using ep0 maxpacket: 16
[  318.914495][   T10] usb 3-1: config 4 has an invalid interface number: 9 but max is 0
[  318.918295][   T10] usb 3-1: config 4 has no interface number 0
[  318.920837][   T10] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  318.924364][   T10] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 167
[  318.930457][   T10] usb 3-1: config 4 interface 9 has no altsetting 0
[  318.935039][   T10] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  318.940761][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.944089][   T10] usb 3-1: Product: syz
[  318.946333][   T10] usb 3-1: Manufacturer: syz
[  318.956500][   T10] usb 3-1: SerialNumber: syz
[  318.961286][T12564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  318.963738][T12564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  318.985811][   T10] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  319.214065][   T10] usb 3-1: USB disconnect, device number 35
[  319.218634][   T13] usb 3-1: Failed to submit usb control message: -71
[  319.222336][   T13] usb 3-1: unable to send the bmi data to the device: -71
[  319.225466][   T13] usb 3-1: unable to get target info from device
[  319.227944][   T13] usb 3-1: could not get target info (-71)
[  319.230739][   T13] usb 3-1: could not probe fw (-71)
[  320.164790][T12605] loop2: detected capacity change from 0 to 512
[  320.169186][T12605] EXT4-fs: Ignoring removed nomblk_io_submit option
[  320.178553][T12605] EXT4-fs: Mount option(s) incompatible with ext3
[  320.198130][T12605] gfs2: Unexpected value for 'barrier'
[  320.293401][T12612] loop2: detected capacity change from 0 to 2048
[  320.315864][T12612] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=18576, location=18576
[  320.339636][T12612] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  320.425697][T12618] cgroup: name respecified
[  320.470155][T12621] loop2: detected capacity change from 0 to 128
[  320.480240][T12621] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  320.585086][T12627] loop2: detected capacity change from 0 to 128
[  320.659934][T12631] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  320.687528][T12627] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  320.705349][T12627] ext4 filesystem being mounted at /695/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  320.891664][ T5854] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  321.359159][T12672] tipc: Started in network mode
[  321.360887][T12672] tipc: Node identity 6a9b294abe0a, cluster identity 4711
[  321.367719][T12672] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.376944][T12672] syzkaller0: entered promiscuous mode
[  321.379466][T12672] syzkaller0: entered allmulticast mode
[  321.390079][T12672] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  321.424652][T12672] tipc: Resetting bearer <eth:syzkaller0>
[  321.430714][T12670] tipc: Resetting bearer <eth:syzkaller0>
[  321.453041][T12670] tipc: Disabling bearer <eth:syzkaller0>
[  321.517753][   T47] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  321.676285][   T47] usb 3-1: Using ep0 maxpacket: 16
[  321.683557][   T47] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  321.690002][   T47] usb 3-1: config 0 has no interface number 0
[  321.702489][   T47] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  321.710727][   T47] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  321.715706][   T47] usb 3-1: config 0 interface 41 has no altsetting 0
[  321.733352][   T47] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  321.740779][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.744443][   T47] usb 3-1: Product: syz
[  321.747144][   T47] usb 3-1: Manufacturer: syz
[  321.749266][   T47] usb 3-1: SerialNumber: syz
[  322.032302][   T47] usb 3-1: config 0 descriptor??
[  322.047289][T12667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  322.051995][T12667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  322.168323][T12685] loop4: detected capacity change from 0 to 32768
[  322.263175][T12667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  322.267001][T12667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  322.368260][T12691] loop4: detected capacity change from 0 to 1024
[  322.412797][ T8769] hfsplus: b-tree write err: -5, ino 4
[  322.715336][T12704] loop4: detected capacity change from 0 to 16
[  322.734836][T12704] erofs (device loop4): mounted with root inode @ nid 36.
[  322.972346][T12717] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  323.081293][   T47] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[  323.090713][   T47] usb 3-1: USB disconnect, device number 36
[  323.295445][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  323.445405][   T10] usb 5-1: Using ep0 maxpacket: 8
[  323.451833][   T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  323.458573][   T10] usb 5-1: config 0 has no interface number 0
[  323.461549][   T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  323.466420][   T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  323.470807][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.477975][   T10] usb 5-1: config 0 descriptor??
[  323.489898][   T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  323.668586][T12725] loop2: detected capacity change from 0 to 64
[  323.729091][    T9] usb 5-1: USB disconnect, device number 10
[  324.045083][   T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  324.215117][   T10] usb 3-1: Using ep0 maxpacket: 16
[  324.220102][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  324.224717][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  324.230138][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  324.241815][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  324.245977][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.249520][   T10] usb 3-1: Product: syz
[  324.251366][   T10] usb 3-1: Manufacturer: syz
[  324.253284][   T10] usb 3-1: SerialNumber: syz
[  324.307391][T12747] overlayfs: failed to clone upperpath
[  324.671423][   T10] usb 3-1: 0:2 : does not exist
[  325.099582][   T10] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1)
[  325.152892][   T10] usb 3-1: USB disconnect, device number 37
[  325.190787][ T5982] udevd[5982]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  326.108701][T12804] loop4: detected capacity change from 0 to 1024
[  326.111978][T12804] EXT4-fs: Ignoring removed nomblk_io_submit option
[  326.156034][T12804] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  326.158694][T12804] System zones: 0-1, 3-36
[  326.172806][T12804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.203471][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.284367][T12808] loop4: detected capacity change from 0 to 512
[  326.327937][T12808] EXT4-fs (loop4): 1 orphan inode deleted
[  326.331735][T12808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.339523][T12808] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.372434][T10030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.439566][T12826] delete_channel: no stack
[  327.627353][T12824] loop2: detected capacity change from 0 to 32768
[  327.632399][T12824] XFS: attr2 mount option is deprecated.
[  327.690565][T12824] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  327.697817][T12824] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  327.771451][T12824] XFS (loop2): Ending clean mount
[  327.782205][T12824] XFS (loop2): Quotacheck needed: Please wait.
[  327.862136][T12824] XFS (loop2): Quotacheck: Done.
[  327.919854][ T5854] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  328.598144][T12869] loop2: detected capacity change from 0 to 4096
[  328.608460][T12869] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  328.625365][T12869] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  328.642243][T12869] ntfs3(loop2): volume is dirty and "force" flag is not set!
[  328.927035][T12879] loop2: detected capacity change from 0 to 512
[  328.955567][T12879] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (340!=2687)
[  328.965001][T12879] EXT4-fs (loop2): group descriptors corrupted!
[  329.220074][T12890] input: syz0 as /devices/virtual/input/input9
[  329.937486][   T33] audit: type=1326 audit(1758174090.517:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.1.2715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  329.950341][   T33] audit: type=1326 audit(1758174090.527:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.1.2715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  329.966075][   T33] audit: type=1326 audit(1758174090.527:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.1.2715" exe="/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  329.980760][   T33] audit: type=1326 audit(1758174090.527:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.1.2715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  329.994153][   T33] audit: type=1326 audit(1758174090.527:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.1.2715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  330.237733][T12926] loop4: detected capacity change from 0 to 4096
[  330.325714][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2726'.
[  330.456569][T12940] netlink: 512 bytes leftover after parsing attributes in process `syz.1.2729'.
[  330.572834][T12951] overlayfs: failed to clone upperpath
[  332.586830][T13011] loop2: detected capacity change from 0 to 512
[  332.680130][T13011] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  332.989832][T13027] loop2: detected capacity change from 0 to 16
[  333.005722][T13027] erofs (device loop2): mounted with root inode @ nid 36.
[  333.041668][T13027] overlay: filesystem on ./file1 is read-only
[  333.845496][T13041] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  333.963021][   T33] audit: type=1326 audit(1758174094.549:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13044 comm="syz.4.2773" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  333.985595][   T33] audit: type=1326 audit(1758174094.559:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13044 comm="syz.4.2773" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  334.001998][   T33] audit: type=1326 audit(1758174094.559:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13044 comm="syz.4.2773" exe="/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  334.018903][   T33] audit: type=1326 audit(1758174094.559:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13044 comm="syz.4.2773" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  334.028615][   T33] audit: type=1326 audit(1758174094.559:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13044 comm="syz.4.2773" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  335.354862][T13078] loop4: detected capacity change from 0 to 512
[  335.366950][T13078] EXT4-fs (loop4): external journal device major/minor numbers have changed
[  335.379895][T13078] EXT4-fs (loop4): external journal has bad superblock
[  336.054367][T13102] loop2: detected capacity change from 0 to 2048
[  336.057647][T13102] udf: Bad value for 'umask'
[  336.568950][T13123] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  336.575738][T13123] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  336.644353][   T33] audit: type=1326 audit(1758174097.230:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  336.669154][   T33] audit: type=1326 audit(1758174097.230:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  336.685266][   T33] audit: type=1326 audit(1758174097.240:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  336.706522][   T33] audit: type=1326 audit(1758174097.240:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa74098ebe3 code=0x7ffc0000
[  336.717641][   T33] audit: type=1326 audit(1758174097.240:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa74098ebe3 code=0x7ffc0000
[  336.737898][   T33] audit: type=1326 audit(1758174097.240:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  336.753483][   T33] audit: type=1326 audit(1758174097.240:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.2.2809" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x7ffc0000
[  337.323335][T13137] loop4: detected capacity change from 0 to 32768
[  337.390181][T13137] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  337.396135][T13137] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  337.428977][T13137] XFS (loop4): Ending clean mount
[  337.436587][T13137] XFS (loop4): Quotacheck needed: Please wait.
[  337.550148][T13137] XFS (loop4): Quotacheck: Done.
[  337.557811][T13137] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  338.126478][   T33] audit: type=1800 audit(1758174098.711:303): pid=13155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2816" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=28120 res=0 errno=0
[  338.245392][ T5889] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4
[  338.249048][ T5889] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2
[  338.259435][ T5889] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x3
[  338.274497][ T5889] hid-generic 0000:3000000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [sy] on syz0
[  338.399903][T13165] netlink: 'syz.4.2821': attribute type 10 has an invalid length.
[  338.415091][T13167] loop2: detected capacity change from 0 to 512
[  338.418563][T13167] EXT4-fs: Ignoring removed i_version option
[  338.421649][T13167] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: comm syz.2.2822: inode #196608: comm syz.2.2822: iget: illegal inode #
[  338.427281][T13167] EXT4-fs (loop2): no journal found
[  338.429917][T13167] EXT4-fs (loop2): can't get journal size
[  338.433071][T13167] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  338.444883][T13167] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  338.449854][T13167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.474253][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.615259][T13174] netlink: 'syz.2.2824': attribute type 1 has an invalid length.
[  338.844956][T13178] loop2: detected capacity change from 0 to 128
[  338.872815][T13178] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  338.895122][T13178] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  340.281567][T13202] loop4: detected capacity change from 0 to 32768
[  340.286577][T13202] XFS: ikeep mount option is deprecated.
[  340.290385][T13202] XFS: noikeep mount option is deprecated.
[  340.299915][T13202] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  340.312993][T13202] XFS (loop4): Ending clean mount
[  340.321295][T13202] XFS (loop4): Quotacheck needed: Please wait.
[  340.381757][T13202] XFS (loop4): Quotacheck: Done.
[  340.420604][T10030] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  340.886826][T13227] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2846'.
[  340.987809][T13232] loop4: detected capacity change from 0 to 512
[  340.999369][T13232] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal
[  341.271889][T13241] vlan3: entered allmulticast mode
[  341.274079][T13241] macvtap0: entered allmulticast mode
[  341.278017][T13241] veth0_macvtap: entered allmulticast mode
[  342.006101][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  342.156031][    T9] usb 5-1: Using ep0 maxpacket: 16
[  342.162393][    T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  342.166751][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.169697][    T9] usb 5-1: Product: syz
[  342.171600][    T9] usb 5-1: Manufacturer: syz
[  342.173567][    T9] usb 5-1: SerialNumber: syz
[  342.180780][    T9] r8152-cfgselector 5-1: Unknown version 0x0000
[  342.183773][    T9] r8152-cfgselector 5-1: config 0 descriptor??
[  342.400884][    T9] r8152-cfgselector 5-1: Needed 2 retries to read version
[  342.416853][   T33] audit: type=1326 audit(1758174103.003:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13268 comm="syz.2.2865" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa74098eba9 code=0x0
[  342.603668][T13275] loop2: detected capacity change from 0 to 4096
[  342.608230][T13275] EXT4-fs: Ignoring removed oldalloc option
[  342.610915][T13275] ext4: Unknown parameter 'nouser_xattr'
[  343.536262][  T975] r8152-cfgselector 5-1: USB disconnect, device number 11
[  344.108486][T13286] loop2: detected capacity change from 0 to 32768
[  344.143268][T13286] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  344.169820][T13286] XFS (loop2): Ending clean mount
[  344.186749][T13286] XFS (loop2): Quotacheck needed: Please wait.
[  344.249584][T13286] XFS (loop2): Quotacheck: Done.
[  344.326057][ T5854] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  345.262062][  T975] kernel read not supported for file /audio1 (pid: 975 comm: kworker/1:2)
[  346.020561][T13341] loop4: detected capacity change from 0 to 32768
[  348.242428][T13385] loop4: detected capacity change from 0 to 2048
[  348.508541][T13385] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.2910: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[  348.540690][T13385] EXT4-fs (loop4): get root inode failed
[  348.544253][T13385] EXT4-fs (loop4): mount failed
[  348.640220][ T5855] Bluetooth: hci2: unexpected event for opcode 0x2062
[  349.180507][T13406] tipc: Enabled bearer <udp:syz0>, priority 10
[  349.439669][T13426] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2928'.
[  349.612044][T13438] loop2: detected capacity change from 0 to 1024
[  350.336787][T13457] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  350.465691][ T1089] Bluetooth: hci3: Frame reassembly failed (-84)
[  350.824998][T13465] overlayfs: failed to clone upperpath
[  350.989014][T13463] loop4: detected capacity change from 0 to 32768
[  351.005863][T13463] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  351.034418][T13463] XFS (loop4): Ending clean mount
[  351.039320][T13463] XFS (loop4): Quotacheck needed: Please wait.
[  351.124151][T13463] XFS (loop4): Quotacheck: Done.
[  351.170365][T10030] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  351.583483][    T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  351.735833][T13484] 9pnet_fd: Insufficient options for proto=fd
[  351.743809][    T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  351.747187][    T9] usb 5-1: config 179 has no interface number 0
[  351.749759][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  351.757981][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  351.764222][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  351.768363][T13486] netlink: del zone limit has 4 unknown bytes
[  351.769235][    T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64
[  351.779233][    T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  351.787295][    T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  351.794742][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.811703][T13482] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  351.820017][T13482] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  352.049282][   T24] usb 5-1: USB disconnect, device number 12
[  352.049301][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  352.054589][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  352.360942][ T5237] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  352.528807][T13511] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2962'.
[  352.693389][ T5237] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  352.700968][ T5237] Bluetooth: hci2: Injecting HCI hardware error event
[  352.707451][ T5855] Bluetooth: hci2: hardware error 0x00
[  352.740039][T13521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2966'.
[  353.010664][    T9] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  353.162474][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  353.168852][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  353.175679][    T9] usb 3-1: config 8 has an invalid interface number: 250 but max is 0
[  353.179322][    T9] usb 3-1: config 8 has no interface number 0
[  353.182177][    T9] usb 3-1: config 8 interface 250 has no altsetting 0
[  353.189200][    T9] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b9.7d
[  353.192555][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.195385][    T9] usb 3-1: Product: syz
[  353.196798][    T9] usb 3-1: Manufacturer: syz
[  353.198462][    T9] usb 3-1: SerialNumber: syz
[  353.419868][    T9] gspca_main: sn9c2028-2.14.0 probing 0458:7005
[  353.424712][    T9] gspca_sn9c2028: read1 error -71
[  353.426796][    T9] gspca_sn9c2028: read1 error -71
[  353.429031][    T9] gspca_sn9c2028: read1 error -71
[  353.431643][    T9] sn9c2028 3-1:8.250: probe with driver sn9c2028 failed with error -71
[  353.436180][    T9] usb 3-1: USB disconnect, device number 38
[  353.539888][T13547] loop4: detected capacity change from 0 to 256
[  353.558063][T13547] FAT-fs (loop4): Directory bread(block 64) failed
[  353.560767][T13547] FAT-fs (loop4): Directory bread(block 65) failed
[  353.562949][T13547] FAT-fs (loop4): Directory bread(block 66) failed
[  353.568019][T13547] FAT-fs (loop4): Directory bread(block 67) failed
[  353.572046][T13547] FAT-fs (loop4): Directory bread(block 68) failed
[  353.574808][T13547] FAT-fs (loop4): Directory bread(block 69) failed
[  353.577343][T13547] FAT-fs (loop4): Directory bread(block 70) failed
[  353.579880][T13547] FAT-fs (loop4): Directory bread(block 71) failed
[  353.585360][T13547] FAT-fs (loop4): Directory bread(block 72) failed
[  353.588127][T13547] FAT-fs (loop4): Directory bread(block 73) failed
[  353.696169][T13557] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[  353.740034][T13562] nftables ruleset with unbound chain
[  354.001187][   T33] audit: type=1326 audit(1758174114.599:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.2998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  354.021358][   T33] audit: type=1326 audit(1758174114.609:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.2998" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  354.059276][   T33] audit: type=1326 audit(1758174114.609:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.2998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  354.066985][T13588] program syz.2.2999 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  354.076031][   T33] audit: type=1326 audit(1758174114.609:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.2998" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  354.085102][   T33] audit: type=1326 audit(1758174114.609:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.2998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  354.093986][   T33] audit: type=1326 audit(1758174114.609:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.2998" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  354.102758][   T33] audit: type=1326 audit(1758174114.609:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.2998" exe="/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[  354.120619][   T33] audit: type=1326 audit(1758174114.609:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.2998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5198eba9 code=0x7ffc0000
[  354.222883][T13594] loop4: detected capacity change from 0 to 2048
[  354.238820][T13594] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  354.809749][ T5855] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  355.303177][T13631] dlm: no locking on control device
[  355.689372][ T5889] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  355.849258][ T5889] usb 3-1: Using ep0 maxpacket: 8
[  355.852808][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short
[  355.857408][ T5889] usb 3-1: config 1 interface 0 has no altsetting 0
[  355.863112][ T5889] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40
[  355.866717][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.869938][ T5889] usb 3-1: Product: syz
[  355.871767][ T5889] usb 3-1: Manufacturer: syz
[  355.873712][ T5889] usb 3-1: SerialNumber: syz
[  356.112273][ T5889] usbhid 3-1:1.0: can't add hid device: -71
[  356.114827][ T5889] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  356.129175][ T5889] usb 3-1: USB disconnect, device number 39
[  356.267857][   T33] audit: type=1326 audit(1758174116.860:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.1.3025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  356.280218][   T33] audit: type=1326 audit(1758174116.860:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13646 comm="syz.1.3025" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aaf8eba9 code=0x7ffc0000
[  357.002481][T13667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3034'.
[  357.011505][T13667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3034'.
[  357.607429][T13684] loop4: detected capacity change from 0 to 128
[  357.613840][T13684] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  357.630325][T13686] ==================================================================
[  357.632960][T13686] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  357.635461][T13686] Read of size 1 at addr ffff88811fe38330 by task syz.1.3042/13686
[  357.639210][T13686] 
[  357.640520][T13686] CPU: 1 UID: 0 PID: 13686 Comm: syz.1.3042 Not tainted syzkaller #0 PREEMPT(full) 
[  357.640531][T13686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  357.640537][T13686] Call Trace:
[  357.640542][T13686]  <TASK>
[  357.640546][T13686]  dump_stack_lvl+0x189/0x250
[  357.640559][T13686]  ? __kasan_check_byte+0x12/0x40
[  357.640573][T13686]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.640582][T13686]  ? lock_release+0x4b/0x3e0
[  357.640597][T13686]  ? __virt_addr_valid+0x4a5/0x5c0
[  357.640608][T13686]  print_report+0xca/0x240
[  357.640616][T13686]  ? xfrm_state_find+0x2cf2/0x5400
[  357.640624][T13686]  kasan_report+0x118/0x150
[  357.640635][T13686]  ? xfrm_state_find+0x2cf2/0x5400
[  357.640645][T13686]  xfrm_state_find+0x2cf2/0x5400
[  357.640661][T13686]  ? xfrm_state_find+0x1da/0x5400
[  357.640670][T13686]  ? __pfx_xfrm_state_find+0x10/0x10
[  357.640681][T13686]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  357.640697][T13686]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  357.640709][T13686]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  357.640720][T13686]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  357.640731][T13686]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  357.640747][T13686]  ? xfrm_expand_policies+0x41f/0x6a0
[  357.640758][T13686]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  357.640770][T13686]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  357.640780][T13686]  ? ip6_dst_lookup_flow+0x9a/0xe0
[  357.640792][T13686]  xfrm_lookup_route+0x3c/0x1c0
[  357.640801][T13686]  ? sctp_v6_get_dst+0x57e/0x1bc0
[  357.640810][T13686]  sctp_v6_get_dst+0x7cc/0x1bc0
[  357.640817][T13686]  ? crng_make_state+0x13a/0x700
[  357.640828][T13686]  ? __pfx_crng_make_state+0x10/0x10
[  357.640839][T13686]  ? __pfx_sctp_v6_get_dst+0x10/0x10
[  357.640876][T13686]  ? __asan_memset+0x22/0x50
[  357.640902][T13686]  ? dst_release+0x72/0x1b0
[  357.640918][T13686]  sctp_transport_route+0x118/0x2f0
[  357.640932][T13686]  sctp_assoc_add_peer+0x657/0x13b0
[  357.640944][T13686]  sctp_connect_new_asoc+0x30a/0x690
[  357.640956][T13686]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  357.640964][T13686]  ? __local_bh_enable_ip+0x12d/0x1c0
[  357.640974][T13686]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  357.640984][T13686]  ? security_sctp_bind_connect+0x7e/0x2e0
[  357.640995][T13686]  sctp_sendmsg+0x155c/0x2810
[  357.641005][T13686]  ? __pfx_sctp_sendmsg+0x10/0x10
[  357.641013][T13686]  ? rcu_is_watching+0x15/0xb0
[  357.641022][T13686]  ? aa_sk_perm+0x81e/0x950
[  357.641035][T13686]  ? __pfx_aa_sk_perm+0x10/0x10
[  357.641046][T13686]  ? sock_rps_record_flow+0x19/0x410
[  357.641057][T13686]  ? inet_sendmsg+0x2f4/0x370
[  357.641068][T13686]  __sock_sendmsg+0x19c/0x270
[  357.641080][T13686]  ____sys_sendmsg+0x52d/0x830
[  357.641090][T13686]  ? __pfx_____sys_sendmsg+0x10/0x10
[  357.641100][T13686]  ? import_iovec+0x74/0xa0
[  357.641110][T13686]  ___sys_sendmsg+0x21f/0x2a0
[  357.641119][T13686]  ? __pfx____sys_sendmsg+0x10/0x10
[  357.641134][T13686]  ? __fget_files+0x2a/0x420
[  357.641141][T13686]  ? __fget_files+0x3a0/0x420
[  357.641149][T13686]  __sys_sendmmsg+0x227/0x430
[  357.641159][T13686]  ? __pfx___sys_sendmmsg+0x10/0x10
[  357.641167][T13686]  ? do_futex+0x333/0x420
[  357.641178][T13686]  ? fput+0xa0/0xd0
[  357.641189][T13686]  ? rcu_is_watching+0x15/0xb0
[  357.641197][T13686]  __x64_sys_sendmmsg+0xa0/0xc0
[  357.641206][T13686]  do_syscall_64+0xfa/0x3b0
[  357.641216][T13686]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.641223][T13686]  ? asm_sysvec_call_function_single+0x1a/0x20
[  357.641232][T13686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.641240][T13686] RIP: 0033:0x7f70aaf8eba9
[  357.641250][T13686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  357.641258][T13686] RSP: 002b:00007f70abd31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  357.641268][T13686] RAX: ffffffffffffffda RBX: 00007f70ab1d5fa0 RCX: 00007f70aaf8eba9
[  357.641274][T13686] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003
[  357.641279][T13686] RBP: 00007f70ab011e19 R08: 0000000000000000 R09: 0000000000000000
[  357.641284][T13686] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000000
[  357.641289][T13686] R13: 00007f70ab1d6038 R14: 00007f70ab1d5fa0 R15: 00007ffeb26a9b28
[  357.641298][T13686]  </TASK>
[  357.641301][T13686] 
[  357.648797][T13684] FAT-fs (loop4): FAT read failed (blocknr 128)
[  357.649653][T13686] Allocated by task 11693:
[  357.649661][T13686]  kasan_save_track+0x3e/0x80
[  357.649675][T13686]  __kasan_slab_alloc+0x6c/0x80
[  357.649685][T13686]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  357.789486][T13686]  xfrm_state_alloc+0x24/0x2f0
[  357.791056][T13686]  __find_acq_core+0x8a7/0x1c00
[  357.792603][T13686]  xfrm_find_acq+0x78/0xa0
[  357.794055][T13686]  xfrm_alloc_userspi+0x6b3/0xc90
[  357.795678][T13686]  xfrm_user_rcv_msg+0x7a3/0xab0
[  357.797388][T13686]  netlink_rcv_skb+0x208/0x470
[  357.799788][T13686]  xfrm_netlink_rcv+0x79/0x90
[  357.801774][T13686]  netlink_unicast+0x82f/0x9e0
[  357.803745][T13686]  netlink_sendmsg+0x805/0xb30
[  357.805718][T13686]  __sock_sendmsg+0x21c/0x270
[  357.807666][T13686]  ____sys_sendmsg+0x505/0x830
[  357.809603][T13686]  ___sys_sendmsg+0x21f/0x2a0
[  357.811533][T13686]  __x64_sys_sendmsg+0x19b/0x260
[  357.813447][T13686]  do_syscall_64+0xfa/0x3b0
[  357.815115][T13686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.817615][T13686] 
[  357.818631][T13686] Freed by task 5889:
[  357.820324][T13686]  kasan_save_track+0x3e/0x80
[  357.822002][T13686]  kasan_save_free_info+0x46/0x50
[  357.824003][T13686]  __kasan_slab_free+0x5b/0x80
[  357.825934][T13686]  kmem_cache_free+0x18f/0x400
[  357.827879][T13686]  xfrm_state_gc_task+0x52d/0x6b0
[  357.829959][T13686]  process_scheduled_works+0xae1/0x17b0
[  357.832172][T13686]  worker_thread+0x8a0/0xda0
[  357.834072][T13686]  kthread+0x711/0x8a0
[  357.835719][T13686]  ret_from_fork+0x439/0x7d0
[  357.837618][T13686]  ret_from_fork_asm+0x1a/0x30
[  357.839433][T13686] 
[  357.840244][T13686] The buggy address belongs to the object at ffff88811fe38000
[  357.840244][T13686]  which belongs to the cache xfrm_state of size 928
[  357.845187][T13686] The buggy address is located 816 bytes inside of
[  357.845187][T13686]  freed 928-byte region [ffff88811fe38000, ffff88811fe383a0)
[  357.850562][T13686] 
[  357.851541][T13686] The buggy address belongs to the physical page:
[  357.854094][T13686] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11fe38
[  357.857652][T13686] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  357.861085][T13686] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  357.864261][T13686] page_type: f5(slab)
[  357.865892][T13686] raw: 057ff00000000040 ffff88801af18640 0000000000000000 0000000000000001
[  357.869352][T13686] raw: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  357.872805][T13686] head: 057ff00000000040 ffff88801af18640 0000000000000000 0000000000000001
[  357.876317][T13686] head: 0000000000000000 00000000800e000e 00000000f5000000 0000000000000000
[  357.879874][T13686] head: 057ff00000000002 ffffea00047f8e01 00000000ffffffff 00000000ffffffff
[  357.883423][T13686] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  357.886957][T13686] page dumped because: kasan: bad access detected
[  357.889531][T13686] page_owner tracks the page as allocated
[  357.891803][T13686] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8676, tgid 8671 (syz.3.1080), ts 180236639899, free_ts 67284868935
[  357.899378][T13686]  post_alloc_hook+0x240/0x2a0
[  357.901349][T13686]  get_page_from_freelist+0x21e4/0x22c0
[  357.903580][T13686]  __alloc_frozen_pages_noprof+0x181/0x370
[  357.905976][T13686]  alloc_pages_mpol+0x232/0x4a0
[  357.907980][T13686]  allocate_slab+0x8a/0x370
[  357.909873][T13686]  ___slab_alloc+0xbeb/0x1420
[  357.911844][T13686]  kmem_cache_alloc_noprof+0x283/0x3c0
[  357.914034][T13686]  xfrm_state_alloc+0x24/0x2f0
[  357.915980][T13686]  xfrm_state_find+0x37d4/0x5400
[  357.917951][T13686]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  357.920461][T13686]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  357.922739][T13686]  xfrm_lookup_route+0x3c/0x1c0
[  357.924756][T13686]  udp_sendmsg+0x142e/0x2170
[  357.926674][T13686]  __sock_sendmsg+0x19c/0x270
[  357.928554][T13686]  ____sys_sendmsg+0x52d/0x830
[  357.930466][T13686]  ___sys_sendmsg+0x21f/0x2a0
[  357.932399][T13686] page last free pid 5905 tgid 5905 stack trace:
[  357.934869][T13686]  __free_frozen_pages+0xbc4/0xd30
[  357.936965][T13686]  __slab_free+0x303/0x3c0
[  357.938698][T13686]  qlist_free_all+0x97/0x140
[  357.940523][T13686]  kasan_quarantine_reduce+0x148/0x160
[  357.942672][T13686]  __kasan_slab_alloc+0x22/0x80
[  357.944571][T13686]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  357.946704][T13686]  getname_flags+0xb8/0x540
[  357.948509][T13686]  do_sys_openat2+0xbc/0x1c0
[  357.950373][T13686]  __x64_sys_openat+0x138/0x170
[  357.952377][T13686]  do_syscall_64+0xfa/0x3b0
[  357.954259][T13686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.956647][T13686] 
[  357.957625][T13686] Memory state around the buggy address:
[  357.959897][T13686]  ffff88811fe38200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.963177][T13686]  ffff88811fe38280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.966305][T13686] >ffff88811fe38300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  357.969415][T13686]                                      ^
[  357.971690][T13686]  ffff88811fe38380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  357.974854][T13686]  ffff88811fe38400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  357.978032][T13686] ==================================================================
[  357.982230][T13686] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  357.985162][T13686] CPU: 1 UID: 0 PID: 13686 Comm: syz.1.3042 Not tainted syzkaller #0 PREEMPT(full) 
[  357.988872][T13686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  357.992903][T13686] Call Trace:
[  357.994271][T13686]  <TASK>
[  357.995439][T13686]  dump_stack_lvl+0x99/0x250
[  357.997285][T13686]  ? __asan_memcpy+0x40/0x70
[  357.999151][T13686]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.001253][T13686]  ? __pfx__printk+0x10/0x10
[  358.003145][T13686]  vpanic+0x281/0x750
[  358.004520][T13686]  ? preempt_schedule+0xae/0xc0
[  358.006331][T13686]  ? __pfx_vpanic+0x10/0x10
[  358.007797][T13686]  ? preempt_schedule_common+0x83/0xd0
[  358.009541][T13686]  ? preempt_schedule+0xae/0xc0
[  358.011108][T13686]  ? __pfx_preempt_schedule+0x10/0x10
[  358.013168][T13686]  panic+0xb9/0xc0
[  358.014568][T13686]  ? __pfx_panic+0x10/0x10
[  358.016035][T13686]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  358.018221][T13686]  ? xfrm_state_find+0x2cf2/0x5400
[  358.020130][T13686]  check_panic_on_warn+0x89/0xb0
[  358.021719][T13686]  ? xfrm_state_find+0x2cf2/0x5400
[  358.023746][T13686]  end_report+0x78/0x160
[  358.025360][T13686]  kasan_report+0x129/0x150
[  358.026868][T13686]  ? xfrm_state_find+0x2cf2/0x5400
[  358.028890][T13686]  xfrm_state_find+0x2cf2/0x5400
[  358.030862][T13686]  ? xfrm_state_find+0x1da/0x5400
[  358.032868][T13686]  ? __pfx_xfrm_state_find+0x10/0x10
[  358.034946][T13686]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  358.037357][T13686]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  358.039756][T13686]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  358.042337][T13686]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  358.044705][T13686]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  358.047084][T13686]  ? xfrm_expand_policies+0x41f/0x6a0
[  358.049189][T13686]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  358.051383][T13686]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  358.053747][T13686]  ? ip6_dst_lookup_flow+0x9a/0xe0
[  358.055842][T13686]  xfrm_lookup_route+0x3c/0x1c0
[  358.057784][T13686]  ? sctp_v6_get_dst+0x57e/0x1bc0
[  358.059870][T13686]  sctp_v6_get_dst+0x7cc/0x1bc0
[  358.061843][T13686]  ? crng_make_state+0x13a/0x700
[  358.063797][T13686]  ? __pfx_crng_make_state+0x10/0x10
[  358.065862][T13686]  ? __pfx_sctp_v6_get_dst+0x10/0x10
[  358.067883][T13686]  ? __asan_memset+0x22/0x50
[  358.069743][T13686]  ? dst_release+0x72/0x1b0
[  358.071338][T13686]  sctp_transport_route+0x118/0x2f0
[  358.073316][T13686]  sctp_assoc_add_peer+0x657/0x13b0
[  358.075372][T13686]  sctp_connect_new_asoc+0x30a/0x690
[  358.077492][T13686]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  358.079491][T13686]  ? __local_bh_enable_ip+0x12d/0x1c0
[  358.081467][T13686]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  358.083710][T13686]  ? security_sctp_bind_connect+0x7e/0x2e0
[  358.085968][T13686]  sctp_sendmsg+0x155c/0x2810
[  358.087888][T13686]  ? __pfx_sctp_sendmsg+0x10/0x10
[  358.089758][T13686]  ? rcu_is_watching+0x15/0xb0
[  358.091660][T13686]  ? aa_sk_perm+0x81e/0x950
[  358.093419][T13686]  ? __pfx_aa_sk_perm+0x10/0x10
[  358.095339][T13686]  ? sock_rps_record_flow+0x19/0x410
[  358.097513][T13686]  ? inet_sendmsg+0x2f4/0x370
[  358.099409][T13686]  __sock_sendmsg+0x19c/0x270
[  358.101343][T13686]  ____sys_sendmsg+0x52d/0x830
[  358.103242][T13686]  ? __pfx_____sys_sendmsg+0x10/0x10
[  358.105370][T13686]  ? import_iovec+0x74/0xa0
[  358.107209][T13686]  ___sys_sendmsg+0x21f/0x2a0
[  358.109037][T13686]  ? __pfx____sys_sendmsg+0x10/0x10
[  358.111168][T13686]  ? __fget_files+0x2a/0x420
[  358.112914][T13686]  ? __fget_files+0x3a0/0x420
[  358.114777][T13686]  __sys_sendmmsg+0x227/0x430
[  358.116666][T13686]  ? __pfx___sys_sendmmsg+0x10/0x10
[  358.118674][T13686]  ? do_futex+0x333/0x420
[  358.120388][T13686]  ? fput+0xa0/0xd0
[  358.121946][T13686]  ? rcu_is_watching+0x15/0xb0
[  358.123926][T13686]  __x64_sys_sendmmsg+0xa0/0xc0
[  358.125682][T13686]  do_syscall_64+0xfa/0x3b0
[  358.127151][T13686]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.129408][T13686]  ? asm_sysvec_call_function_single+0x1a/0x20
[  358.131359][T13686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.133249][T13686] RIP: 0033:0x7f70aaf8eba9
[  358.134691][T13686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.141308][T13686] RSP: 002b:00007f70abd31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  358.143981][T13686] RAX: ffffffffffffffda RBX: 00007f70ab1d5fa0 RCX: 00007f70aaf8eba9
[  358.146443][T13686] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003
[  358.149071][T13686] RBP: 00007f70ab011e19 R08: 0000000000000000 R09: 0000000000000000
[  358.151577][T13686] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000000
[  358.154402][T13686] R13: 00007f70ab1d6038 R14: 00007f70ab1d5fa0 R15: 00007ffeb26a9b28
[  358.157229][T13686]  </TASK>
[  358.158883][T13686] Kernel Offset: disabled
[  358.160234][T13686] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:37:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000000003dd RCX=0000000000000008 RDX=0000000000000008
RSI=00000000000003dd RDI=ffff88801eb1d640 RBP=ffffffff93553ab0 RSP=ffffc9000767e938
R8 =ffffc9000767e900 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819dded0
R12=ffffffff96551408 R13=ffffffff96551b08 R14=ffff88801eb1e1a8 R15=00000000000002da
RIP=ffffffff819dc2cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efe528096c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2fd23ffc CR3=00000000347cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007efe51ba7498 00007efe51ba7470 XMM03=00007efe51ba74a8 00007efe51ba74a0
XMM04=00007efe5270d100 00007efe51ba7460 XMM05=00007efe51ba7478 00007efe51ba74c0
XMM06=00007efe51ba74b8 00007efe51ba74b0 XMM07=00007efe51ba74a8 00007efe51ba74a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007efe51a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000214b RDI=000000000000214c RBP=00000000000003f8 RSP=ffffc900079164f0
R8 =ffff888108c10237 R9 =1ffff11021182046 R10=dffffc0000000000 R11=ffffffff854fa930
R12=dffffc0000000000 R13=ffffffff99b008cf R14=ffffffff99df5440 R15=0000000000000000
RIP=ffffffff854fa9ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f70abd316c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2868d2 CR3=000000011fe94000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffff000000000000 0000000000000000 XMM01=2323232323232323 2323232323232323
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000000000 XMM05=00007f70ab1a7478 00007f70ab1a74c0
XMM06=00007f70ab1a74b8 00007f70ab1a74b0 XMM07=00007f70ab1a74a8 00007f70ab1a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f70ab012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
