last executing test programs:

45.45523041s ago: executing program 2 (id=44):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x414, &(0x7f0000000100)={[{@errors_continue}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@dioread_lock}, {@errors_remount}, {@noquota}]}, 0x1, 0x438, &(0x7f0000000380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9})

45.168981249s ago: executing program 2 (id=49):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

45.119144574s ago: executing program 2 (id=50):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)

45.042605026s ago: executing program 2 (id=52):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xb, 0xc4})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900eccb000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[], 0x0)

44.321939892s ago: executing program 2 (id=66):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\a'], 0x10)

44.013144005s ago: executing program 2 (id=69):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040)=0x60000000, 0x4)

43.974154843s ago: executing program 32 (id=69):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000040)=0x60000000, 0x4)

709.467363ms ago: executing program 3 (id=571):
userfaultfd(0x80001)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))

709.22783ms ago: executing program 0 (id=572):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0)

621.772322ms ago: executing program 3 (id=573):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000080)={0x7fff, 0xa883})

621.654989ms ago: executing program 3 (id=574):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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")
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.metadata\x00', 0x0, 0x0)

621.572919ms ago: executing program 0 (id=575):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

535.559302ms ago: executing program 0 (id=576):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x6, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0xb926, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x0, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x100, 0x242, 0x3, 0xc, 0x9, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x1, 0x4, 0x8, 0x9, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xfc, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fef, 0x6, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x7, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x9, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x83, 0x1, 0x80a2ed, 0x4004, 0x8], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x3, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0x0, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0x80000000, 0x8, 0x7, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

430.666322ms ago: executing program 3 (id=578):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='96::\x00', 0x0)

361.852248ms ago: executing program 1 (id=579):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
r1 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

312.611862ms ago: executing program 1 (id=580):
r0 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@auto_da_alloc}, {@quota}, {@nobh}]}, 0x0, 0x511, &(0x7f0000000ac0)="$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")
quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0)

312.354979ms ago: executing program 3 (id=581):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000080)={'veth0_vlan\x00', 0x6})

232.987ms ago: executing program 3 (id=582):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

232.828942ms ago: executing program 1 (id=583):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r2 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet_mtu(r2, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4)

152.224898ms ago: executing program 1 (id=584):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000400000100c2800008000500", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x40084}, 0x4000)

150.831575ms ago: executing program 1 (id=585):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x14d1, &(0x7f0000002fc0)=ANY=[], 0x0)

150.198944ms ago: executing program 0 (id=586):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

70.765782ms ago: executing program 1 (id=587):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)

113.953µs ago: executing program 0 (id=588):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0)
utimensat(r0, 0x0, &(0x7f0000000300)={{}, {0x0, 0xffffffffffffffff}}, 0x0)

0s ago: executing program 0 (id=589):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000e40)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x6}, {0x20, 0x6}}, 0x24, 0x3)
syz_mount_image$fuse(0x0, 0x0, 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:39522' (ED25519) to the list of known hosts.
syzkaller login: [   48.561640][ T5587] cgroup: Unknown subsys name 'net'
[   48.613903][ T5587] cgroup: Unknown subsys name 'cpuset'
[   48.617484][ T5587] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.110557][ T5587] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.732498][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.737914][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.743466][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.747720][ T5601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.751687][ T5601] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.756225][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.759780][ T5601] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.763082][ T5601] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.770907][ T5601] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.778221][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.783120][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.788604][ T4986] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.792122][ T4986] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.795214][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.801538][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.601423][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.605026][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.607972][ T5596] bridge_slave_0: entered allmulticast mode
[   55.611869][ T5596] bridge_slave_0: entered promiscuous mode
[   55.635318][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.638945][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.641951][ T5596] bridge_slave_1: entered allmulticast mode
[   55.645631][ T5596] bridge_slave_1: entered promiscuous mode
[   55.655974][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.659009][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.661768][ T5604] bridge_slave_0: entered allmulticast mode
[   55.665609][ T5604] bridge_slave_0: entered promiscuous mode
[   55.671085][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.674001][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.676902][ T5604] bridge_slave_1: entered allmulticast mode
[   55.680797][ T5604] bridge_slave_1: entered promiscuous mode
[   55.722191][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.746738][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.774002][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.788174][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.792170][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.795175][ T5600] bridge_slave_0: entered allmulticast mode
[   55.799305][ T5600] bridge_slave_0: entered promiscuous mode
[   55.805417][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.832941][ T5596] team0: Port device team_slave_0 added
[   55.838040][ T5596] team0: Port device team_slave_1 added
[   55.841555][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.844552][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.847433][ T5600] bridge_slave_1: entered allmulticast mode
[   55.851239][ T5600] bridge_slave_1: entered promiscuous mode
[   55.856326][ T5604] team0: Port device team_slave_0 added
[   55.881456][ T5604] team0: Port device team_slave_1 added
[   55.916032][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.919070][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.929336][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.936762][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.953225][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.956054][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.966706][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.973439][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.976834][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.987392][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.994573][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.999061][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.001971][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.013891][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.063444][ T5600] team0: Port device team_slave_0 added
[   56.083246][ T5600] team0: Port device team_slave_1 added
[   56.099757][ T5596] hsr_slave_0: entered promiscuous mode
[   56.102942][ T5596] hsr_slave_1: entered promiscuous mode
[   56.118567][ T5604] hsr_slave_0: entered promiscuous mode
[   56.121639][ T5604] hsr_slave_1: entered promiscuous mode
[   56.124486][ T5604] debugfs: 'hsr0' already exists in 'hsr'
[   56.126978][ T5604] Cannot create hsr debugfs directory
[   56.143198][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.145733][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.154649][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.168677][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.171600][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.182571][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.290926][ T5600] hsr_slave_0: entered promiscuous mode
[   56.293620][ T5600] hsr_slave_1: entered promiscuous mode
[   56.296103][ T5600] debugfs: 'hsr0' already exists in 'hsr'
[   56.298108][ T5600] Cannot create hsr debugfs directory
[   56.531938][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.542673][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.545797][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.550569][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.554297][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.563752][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.577411][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.582321][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.642539][ T5604] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.649645][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.655401][ T5604] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.663765][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.670644][ T5604] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.678078][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.682447][ T5604] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.687629][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.762150][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.767794][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.771869][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.777843][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.785427][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.792009][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.796049][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.799405][   T55] Bluetooth: hci0: command tx timeout
[   56.804479][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.822361][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.860354][ T5596] 8021q: adding VLAN 0 to HW filter on device team0
[   56.874842][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.878091][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.881148][   T55] Bluetooth: hci2: command tx timeout
[   56.889095][   T55] Bluetooth: hci1: command tx timeout
[   56.893140][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.895329][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.950028][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.994098][ T5604] 8021q: adding VLAN 0 to HW filter on device team0
[   57.006165][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.009119][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.020503][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.030739][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.033370][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.056101][ T5600] 8021q: adding VLAN 0 to HW filter on device team0
[   57.072012][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.074932][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.089740][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.092751][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.340015][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.416720][ T5596] veth0_vlan: entered promiscuous mode
[   57.428015][ T5596] veth1_vlan: entered promiscuous mode
[   57.459874][ T5596] veth0_macvtap: entered promiscuous mode
[   57.465188][ T5596] veth1_macvtap: entered promiscuous mode
[   57.476587][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.484824][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.540528][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.563504][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.575856][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.580684][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.581346][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.588833][ T5490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.622428][ T5600] veth0_vlan: entered promiscuous mode
[   57.626337][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.631842][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.645318][ T5604] veth0_vlan: entered promiscuous mode
[   57.654881][ T5600] veth1_vlan: entered promiscuous mode
[   57.671732][ T5604] veth1_vlan: entered promiscuous mode
[   57.694299][ T5596] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.743911][ T5604] veth0_macvtap: entered promiscuous mode
[   57.753644][ T5600] veth0_macvtap: entered promiscuous mode
[   57.768880][ T5490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.773519][ T5604] veth1_macvtap: entered promiscuous mode
[   57.780712][ T5490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.785044][ T5600] veth1_macvtap: entered promiscuous mode
[   57.806347][ T5711] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary
[   57.826255][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.850972][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.866617][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.884063][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.895915][ T5717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   57.932081][ T5719] capability: warning: `syz.2.8' uses deprecated v2 capabilities in a way that may be insecure
[   57.953052][ T5490] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.026357][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.032671][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.047440][ T1359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.052173][ T1359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.079242][ T5655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.088343][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.094949][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.109480][ T1359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.114154][ T1359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.119947][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.138819][ T5726] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.144159][ T5726] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.146913][ T5726] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.150858][ T5726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.153587][ T5726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.280502][ T5735] x_tables: duplicate underflow at hook 3
[   58.314756][ T5739] loop0: detected capacity change from 0 to 256
[   58.324161][ T5739] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   58.338383][   T34] audit: type=1804 audit(1786755477.155:2): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.15" name="/newroot/3/file0/bus" dev="loop0" ino=1048595 res=1 errno=0
[   58.445207][ T5749] loop0: detected capacity change from 0 to 2048
[   58.478206][ T5749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.502457][   T34] audit: type=1326 audit(1786755477.325:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.19" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6679e0d9 code=0x7ffc0000
[   58.528823][   T34] audit: type=1326 audit(1786755477.325:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.19" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6679e0d9 code=0x7ffc0000
[   58.541192][   T34] audit: type=1326 audit(1786755477.325:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.19" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6679e0d9 code=0x7ffc0000
[   58.562592][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.566855][   T34] audit: type=1326 audit(1786755477.325:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.19" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fdd6679e0d9 code=0x7ffc0000
[   58.580029][   T34] audit: type=1326 audit(1786755477.355:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.19" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6679e0d9 code=0x7ffc0000
[   58.597766][   T34] audit: type=1326 audit(1786755477.355:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.19" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6679e0d9 code=0x7ffc0000
[   58.617796][   T34] audit: type=1326 audit(1786755477.355:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.19" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd6679e0d9 code=0x7ffc0000
[   58.641764][   T34] audit: type=1326 audit(1786755477.355:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5748 comm="syz.0.19" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd6679e0d9 code=0x7ffc0000
[   58.743042][ T5751] loop1: detected capacity change from 0 to 32768
[   58.775291][ T5751] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   58.806954][ T5751] XFS (loop1): Ending clean mount
[   58.831057][ T5600] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   58.861929][ T5776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27'.
[   58.879766][   T55] Bluetooth: hci0: command tx timeout
[   58.958824][ T5605] Bluetooth: hci2: command tx timeout
[   58.961121][   T55] Bluetooth: hci1: command tx timeout
[   59.212808][ T5804] warning: `syz.2.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.261909][ T5808] loop0: detected capacity change from 0 to 128
[   59.264715][ T5808] EXT4-fs: Ignoring removed i_version option
[   59.291208][ T5808] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   59.304708][ T5808] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   59.331510][ T5812] loop2: detected capacity change from 0 to 2048
[   59.371433][ T5812]  loop2: p2 p3 < > p4 < p5 >
[   59.373236][ T5812] loop2: partition table partially beyond EOD, truncated
[   59.375668][ T5812] loop2: p2 start 53543428 is beyond EOD, truncated
[   59.377692][ T5812] loop2: p3 start 4284289 is beyond EOD, truncated
[   59.381378][ T5812] loop2: p5 start 53543428 is beyond EOD, truncated
[   59.412378][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   59.449906][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   59.450139][ T5604] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   59.461384][ T5817] loop2: detected capacity change from 0 to 512
[   59.482648][ T5817] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   59.486700][ T5817] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   59.510899][ T5817] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   59.516733][ T5817] EXT4-fs (loop2): 1 truncate cleaned up
[   59.525091][ T5817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.593836][ T5826] loop1: detected capacity change from 0 to 512
[   59.602243][ T5827] EXT4-fs error (device loop2): __ext4_iget:5533: inode #12: block 2: comm syz.2.44: invalid block
[   59.624459][ T5827] EXT4-fs (loop2): Remounting filesystem read-only
[   59.633801][ T5826] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.47: iget: bad i_size value: 38620345925642
[   59.653034][ T5826] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   59.654206][ T5826] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.47: couldn't read orphan inode 15 (err -117)
[   59.661296][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   59.661336][    C1] EXT4-fs (loop1): initial error at time 1786755478: ext4_orphan_get:1399: inode 15
[   59.661348][    C1] EXT4-fs (loop1): last error at time 1786755478: ext4_orphan_get:1399: inode 15
[   59.684634][ T5596] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.686282][ T5826] loop1: lost filesystem error report for type 5 error -117
[   59.715289][ T5826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.741970][ T5832] gretap0: entered promiscuous mode
[   59.754025][ T5832] Zero length message leads to an empty skb
[   59.795916][ T5834] netlink: 'syz.2.50': attribute type 1 has an invalid length.
[   59.808894][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.990374][ T5847] Cannot find add_set index 2 as target
[   60.310042][ T5863] loop1: detected capacity change from 0 to 8
[   60.613151][ T5867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.835473][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.915341][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.000526][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.015894][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.018988][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.021752][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.025543][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.029094][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.038786][ T5597] Bluetooth: hci1: command tx timeout
[   61.040734][ T5603] Bluetooth: hci2: command tx timeout
[   61.071689][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.156165][   T13] bridge_slave_1: left allmulticast mode
[   61.160433][   T13] bridge_slave_1: left promiscuous mode
[   61.163301][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.173693][   T13] bridge_slave_0: left allmulticast mode
[   61.175572][   T13] bridge_slave_0: left promiscuous mode
[   61.177512][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.347709][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.359376][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.363015][   T13] bond0 (unregistering): Released all slaves
[   61.370842][ T5343] 8021q: adding VLAN 0 to HW filter on device eth1
[   61.631934][ T5891] loop1: detected capacity change from 0 to 32768
[   61.637812][   T13] hsr_slave_0: left promiscuous mode
[   61.643439][   T13] hsr_slave_1: left promiscuous mode
[   61.649211][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.653876][ T5891] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   61.658096][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.668863][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.675748][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.687176][   T13] veth1_macvtap: left promiscuous mode
[   61.688899][ T5891] XFS (loop1): Ending clean mount
[   61.689458][   T13] veth0_macvtap: left promiscuous mode
[   61.696709][   T13] veth1_vlan: left promiscuous mode
[   61.699573][   T13] veth0_vlan: left promiscuous mode
[   61.701937][ T5891] XFS (loop1): User initiated shutdown received.
[   61.705066][ T5891] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[   61.711173][ T5891] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   61.735409][ T5600] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   61.944044][ T5918] loop0: detected capacity change from 0 to 1024
[   61.952055][ T5918] EXT4-fs: Mount option(s) incompatible with ext3
[   62.051828][   T13] team0 (unregistering): Port device team_slave_1 removed
[   62.065037][   T13] team0 (unregistering): Port device team_slave_0 removed
[   62.245520][ T5343] 8021q: adding VLAN 0 to HW filter on device eth2
[   62.403100][ T5934] syz.0.81 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   62.576619][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.586990][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.593329][ T5877] bridge_slave_0: entered allmulticast mode
[   62.596661][ T5877] bridge_slave_0: entered promiscuous mode
[   62.603239][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.605854][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.608239][ T5877] bridge_slave_1: entered allmulticast mode
[   62.612929][ T5877] bridge_slave_1: entered promiscuous mode
[   62.616948][ T5343] 8021q: adding VLAN 0 to HW filter on device eth3
[   62.661631][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.667583][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.692640][ T5877] team0: Port device team_slave_0 added
[   62.701940][ T5877] team0: Port device team_slave_1 added
[   62.716693][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.722124][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.731166][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.735354][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.737796][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.746526][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.824154][ T5877] hsr_slave_0: entered promiscuous mode
[   62.839787][ T5877] hsr_slave_1: entered promiscuous mode
[   62.917334][ T5343] 8021q: adding VLAN 0 to HW filter on device eth4
[   63.048847][   T55] Bluetooth: hci0: command tx timeout
[   63.091798][ T5971] Bluetooth: MGMT ver 1.23
[   63.119899][ T5603] Bluetooth: hci2: command tx timeout
[   63.121984][   T55] Bluetooth: hci1: command tx timeout
[   63.127748][ T5877] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.134600][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.137927][ T5877] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.150200][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.155308][ T5877] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.161957][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.164993][ T5877] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.169829][ T5877] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.190808][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.193465][ T5877] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.196175][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.198720][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.226606][ T5984] =======================================================
[   63.226606][ T5984] WARNING: The mand mount option has been deprecated and
[   63.226606][ T5984]          and is ignored by this kernel. Remove the mand
[   63.226606][ T5984]          option from the mount to silence this warning.
[   63.226606][ T5984] =======================================================
[   63.230897][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.245862][ T5984] erofs (device loop1): mounted with root inode @ nid 36.
[   63.249323][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.252577][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.261523][ T5877] 8021q: adding VLAN 0 to HW filter on device team0
[   63.266804][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.269597][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.281458][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.283774][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.454249][ T5949] overlayfs: statfs failed on './file0'
[   63.524465][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.581102][ T5877] veth0_vlan: entered promiscuous mode
[   63.583177][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'.
[   63.586077][ T5877] veth1_vlan: entered promiscuous mode
[   63.598367][ T5877] veth0_macvtap: entered promiscuous mode
[   63.607093][ T5877] veth1_macvtap: entered promiscuous mode
[   63.621717][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.629220][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.679639][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.699017][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.726446][ T6016] set_capacity_and_notify: 1 callbacks suppressed
[   63.726457][ T6016] loop0: detected capacity change from 0 to 1024
[   63.733571][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.736636][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.740969][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.744088][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.786871][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.794749][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.909644][ T6024] loop3: detected capacity change from 0 to 256
[   64.097819][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'.
[   64.290785][ T5321] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   64.499768][ T5321] usb 4-1: Using ep0 maxpacket: 16
[   64.554721][ T5321] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[   64.670414][ T5321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.678649][ T5321] usb 4-1: Product: syz
[   64.681899][ T5321] usb 4-1: Manufacturer: syz
[   64.683931][ T5321] usb 4-1: SerialNumber: syz
[   64.698180][ T5321] usb 4-1: config 0 descriptor??
[   64.710059][ T5321] visor 4-1:0.0: Sony Clie 3.5 converter detected
[   64.966305][ T6054] loop0: detected capacity change from 0 to 32768
[   64.972033][ T6054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.117 (6054)
[   64.990086][ T6054] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   64.993463][ T6054] BTRFS info (device loop0): using sha256 checksum algorithm
[   65.086049][ T6054] BTRFS info (device loop0): enabling ssd optimizations
[   65.088335][ T6054] BTRFS info (device loop0): turning on sync discard
[   65.090606][ T6054] BTRFS info (device loop0): enabling free space tree
[   65.092679][ T6054] BTRFS info (device loop0): use zlib compression, level 3
[   65.121529][ T5321] usb 4-1: clie_3_5_startup: get interface number bad return length: 0
[   65.126485][ T5321] visor 4-1:0.0: probe with driver visor failed with error -5
[   65.138825][   T55] Bluetooth: hci0: command tx timeout
[   65.270548][ T6073] loop1: detected capacity change from 0 to 64
[   65.511312][   T34] audit: type=1800 audit(1786755484.205:11): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.117" name="file1" dev="loop0" ino=260 res=0 errno=0
[   65.634337][ T5321] usb 4-1: USB disconnect, device number 2
[   65.699376][ T6076] x_tables: duplicate underflow at hook 1
[   65.767197][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.120'.
[   65.793054][ T5604] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   66.156707][ T6096] loop1: detected capacity change from 0 to 512
[   66.194712][ T6096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840c018, mo2=0082]
[   66.201023][ T6096] System zones: 2-12, 7-7
[   66.205832][ T6096] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #17: comm syz.1.129: iget: immutable or append flags not allowed on symlinks
[   66.211835][ T6096] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117
[   66.212043][ T6096] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.129: couldn't read orphan inode 17 (err -117)
[   66.218696][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   66.218710][    C1] EXT4-fs (loop1): initial error at time 1786755485: ext4_orphan_get:1399: inode 17
[   66.218723][    C1] EXT4-fs (loop1): last error at time 1786755485: ext4_orphan_get:1399: inode 17
[   66.230789][ T6096] loop1: lost filesystem error report for type 5 error -117
[   66.232829][ T6096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.257649][ T6104] loop3: detected capacity change from 0 to 256
[   66.270660][ T6104] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[   66.285162][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.424379][ T6106] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[   66.425512][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'.
[   66.434914][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'.
[   66.439316][ T6113] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22)
[   66.452965][ T6106] bond1 (unregistering): Released all slaves
[   66.806392][ T6119] loop1: detected capacity change from 0 to 32768
[   66.822922][ T6119] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   66.856307][ T6119] XFS (loop1): Ending clean mount
[   66.875793][   T34] audit: type=1800 audit(1786755485.695:12): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.139" name="file1" dev="loop1" ino=4422 res=0 errno=0
[   66.902636][ T6135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.143'.
[   66.907209][ T6135] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   66.912612][ T5600] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   67.198900][   T55] Bluetooth: hci0: command tx timeout
[   67.455741][ T6164] gre1: entered promiscuous mode
[   67.772285][ T6176] loop1: detected capacity change from 0 to 512
[   67.799743][ T6176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.806609][ T6176] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.830211][ T6176] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:107: comm syz.1.163: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[   67.838094][ T6176] EXT4-fs error (device loop1) in ext4_free_inode:363: Filesystem failed CRC
[   67.863163][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.926466][ T6182] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   68.059290][  T804] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   68.218598][  T804] usb 1-1: Using ep0 maxpacket: 8
[   68.228591][  T804] usb 1-1: unable to get BOS descriptor or descriptor too short
[   68.235803][  T804] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[   68.247724][  T804] usb 1-1: config 100 has an invalid interface number: 173 but max is 0
[   68.260249][  T804] usb 1-1: config 100 has no interface number 0
[   68.265608][  T804] usb 1-1: config 100 interface 173 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64
[   68.270795][ T6193] syz.3.169 uses obsolete (PF_INET,SOCK_PACKET)
[   68.277348][  T804] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   68.286395][  T804] usb 1-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0
[   68.293717][  T804] usb 1-1: config 100 interface 173 has no altsetting 0
[   68.294856][ T6195] netlink: 'syz.1.170': attribute type 10 has an invalid length.
[   68.299908][  T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.299940][  T804] usb 1-1: Product: syz
[   68.299949][  T804] usb 1-1: Manufacturer: syz
[   68.299958][  T804] usb 1-1: SerialNumber: syz
[   68.304496][ T6180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   68.311072][ T6195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.170'.
[   68.341213][ T6195] dummy0: entered promiscuous mode
[   68.344536][ T6195] bridge0: port 3(dummy0) entered blocking state
[   68.347396][ T6195] bridge0: port 3(dummy0) entered disabled state
[   68.350766][ T6195] dummy0: entered allmulticast mode
[   68.355812][ T6195] bridge0: port 3(dummy0) entered blocking state
[   68.358687][ T6195] bridge0: port 3(dummy0) entered forwarding state
[   68.534028][  T804] metro_usb 1-1:100.173: interrupt-out endpoint missing
[   68.547148][  T804] usb 1-1: USB disconnect, device number 2
[   68.719533][ T5720] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   68.868727][ T5720] usb 4-1: Using ep0 maxpacket: 32
[   68.877354][ T5720] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   68.888602][ T5720] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[   68.892001][ T5720] usb 4-1: config 0 has no interface number 0
[   68.894639][ T5720] usb 4-1: config 0 interface 184 has no altsetting 0
[   68.905781][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.909514][ T5720] usb 4-1: Product: syz
[   68.911406][ T5720] usb 4-1: Manufacturer: syz
[   68.913755][ T5720] usb 4-1: SerialNumber: syz
[   68.920899][ T5720] usb 4-1: config 0 descriptor??
[   69.285138][   T55] Bluetooth: hci0: command tx timeout
[   69.629696][ T6211] loop0: detected capacity change from 0 to 2048
[   69.723421][ T6211] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   69.742501][ T6211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   70.384679][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71
[   70.397723][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[   70.413203][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   70.425891][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   70.431309][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   70.435230][ T5720] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   70.447284][ T5720] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[   70.471284][ T5720] usb 4-1: USB disconnect, device number 3
[   70.493831][ T6235] loop1: detected capacity change from 0 to 128
[   70.510233][ T6233] loop0: detected capacity change from 0 to 4096
[   70.528740][ T6235] befs: (loop1): No write support. Marking filesystem read-only
[   70.544319][ T6235] befs: (loop1): invalid magic header
[   70.560020][ T6233] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   70.585393][ T6233] ntfs3(loop0): failed to convert "0080" to koi8-r
[   70.592840][ T6233] ntfs3(loop0): failed to convert name for inode 1e.
[   70.595878][ T6233] ntfs3(loop0): ino=1f, mi_enum_attr
[   70.773824][ T6235] loop1: detected capacity change from 0 to 32768
[   70.812935][ T6235] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   70.856600][ T6235] XFS (loop1): Ending clean mount
[   70.863330][ T6235] XFS (loop1): Quotacheck needed: Please wait.
[   70.904122][ T6235] XFS (loop1): Quotacheck: Done.
[   71.244565][   T34] audit: type=1800 audit(1786755490.045:13): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.187" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4430 res=0 errno=0
[   71.438073][ T5600] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.445285][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[   71.449337][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[   71.452698][ T5720] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[   71.591814][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'.
[   71.722418][ T5720] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[   71.833383][ T6292] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   71.842596][ T6292] CIFS: Attempting to mount //127.0.0.1/share
[   71.852771][ T6292] CIFS: VFS: Error connecting to socket. Aborting operation.
[   71.855882][ T6292] CIFS: VFS: cifs_mount failed w/return code = -111
[   71.953071][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'.
[   72.190065][ T6302] loop1: detected capacity change from 0 to 32768
[   72.197681][ T6302] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.212 (6302)
[   72.224737][ T6302] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   72.232765][  T804] libceph: mon0 (2)0.0.0.0:6789 socket error on write
[   72.235239][ T6302] BTRFS info (device loop1): using sha256 checksum algorithm
[   72.307806][ T6302] BTRFS info (device loop1): enabling ssd optimizations
[   72.311641][ T6302] BTRFS info (device loop1): turning on async discard
[   72.314836][ T6302] BTRFS info (device loop1): enabling free space tree
[   72.350172][ T5600] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   72.479959][ T6265] ceph: No mds server is up or the cluster is laggy
[   72.723513][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.221'.
[   73.404535][ T6355] loop1: detected capacity change from 0 to 1024
[   73.504754][ T6355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   73.528382][ T6355] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.561588][   T34] audit: type=1800 audit(1786755492.385:14): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.227" name="file1" dev="loop1" ino=15 res=0 errno=0
[   73.657528][ T6355] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm syz.1.227: lblock 8 mapped to illegal pblock 8 (length 8)
[   73.664282][ T6355] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[   73.699802][   T82] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u10:4: lblock 0 mapped to illegal pblock 0 (length 4)
[   73.721482][   T82] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117
[   73.727591][   T82] EXT4-fs (loop1): This should not happen!! Data will be lost
[   73.727591][   T82] 
[   73.741742][   T82] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u10:4: bg 0: block 112: padding at end of block bitmap is not set
[   73.749170][   T82] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117
[   73.754689][   T82] EXT4-fs (loop1): This should not happen!! Data will be lost
[   73.754689][   T82] 
[   73.760954][ T5600] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[   73.778924][ T5720] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   73.786207][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   73.930386][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short
[   73.934644][ T5720] usb 4-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=c4.d3
[   73.941868][ T5720] usb 4-1: config 137 has an invalid interface number: 9 but max is 0
[   73.943751][ T6385] loop1: detected capacity change from 0 to 2048
[   73.944972][ T5720] usb 4-1: config 137 has no interface number 0
[   73.958356][ T5720] usb 4-1: config 137 interface 9 has no altsetting 0
[   73.970724][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.975514][ T5720] usb 4-1: Product: syz
[   73.976976][ T5720] usb 4-1: Manufacturer: syz
[   73.984836][ T5720] usb 4-1: SerialNumber: syz
[   73.989813][ T6386] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.151696][ T6391] netlink: 'syz.1.242': attribute type 4 has an invalid length.
[   74.208710][ T5720] kl5kusb105 4-1:137.9: KL5KUSB105D / PalmConnect converter detected
[   74.221947][ T5720] usb 4-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[   74.232017][ T5720] usb 4-1: USB disconnect, device number 4
[   74.237376][ T5720] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[   74.241332][ T5720] kl5kusb105 4-1:137.9: device disconnected
[   74.246730][ T5612] udevd[5612]: setting owner of /dev/bus/usb/004/004 to uid=0, gid=0 failed: No such file or directory
[   74.355079][ T6401] syz_tun: entered allmulticast mode
[   74.391355][ T6401] dvmrp8: entered allmulticast mode
[   74.420094][ T6399] syz_tun: left allmulticast mode
[   74.569389][ T6418] loop1: detected capacity change from 0 to 8
[   74.584824][ T6418] SQUASHFS error: zlib decompression failed, data probably corrupt
[   74.608570][ T6418] SQUASHFS error: Failed to read block 0x9b: -5
[   74.610865][ T6418] SQUASHFS error: Unable to read metadata cache entry [99]
[   74.613206][ T6418] SQUASHFS error: Unable to read inode 0x127
[   75.229499][  T804] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   75.388514][  T804] usb 2-1: Using ep0 maxpacket: 8
[   75.394827][ T6449] bond1: entered promiscuous mode
[   75.396599][ T6449] bond1: entered allmulticast mode
[   75.398341][  T804] usb 2-1: unable to get BOS descriptor or descriptor too short
[   75.401346][ T6449] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.403499][  T804] usb 2-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=32.2c
[   75.409612][  T804] usb 2-1: config 15 has an invalid interface number: 14 but max is 0
[   75.414145][  T804] usb 2-1: config 15 has no interface number 0
[   75.418214][  T804] usb 2-1: config 15 interface 14 has no altsetting 0
[   75.427359][  T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.430667][  T804] usb 2-1: Product: syz
[   75.432058][  T804] usb 2-1: Manufacturer: syz
[   75.433851][  T804] usb 2-1: SerialNumber: syz
[   75.557114][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'.
[   75.569456][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'.
[   75.575123][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'.
[   75.653247][  T804] gspca_main: spca501-2.14.0 probing 1776:501c
[   75.657856][  T804] gspca_spca501: reg write: error -71
[   75.660708][  T804] spca501 2-1:15.14: Reg write failed for 0x02,0x07,0x05
[   75.662966][  T804] spca501 2-1:15.14: probe with driver spca501 failed with error -22
[   75.666449][  T804] usb 2-1: USB disconnect, device number 2
[   75.673556][ T5612] udevd[5612]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: No such file or directory
[   75.846645][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'.
[   75.850847][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'.
[   76.015363][ T6472] Bluetooth: MGMT ver 1.23
[   76.539898][  T804] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   76.718854][  T804] usb 2-1: Using ep0 maxpacket: 32
[   76.725292][  T804] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[   76.734403][  T804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.739359][  T804] usb 2-1: Product: syz
[   76.742689][  T804] usb 2-1: Manufacturer: syz
[   76.746482][  T804] usb 2-1: SerialNumber: syz
[   76.752937][  T804] usb 2-1: config 0 descriptor??
[   76.759409][  T804] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[   77.815664][ T6546] netlink: 68 bytes leftover after parsing attributes in process `syz.0.284'.
[   78.108525][ T5656] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   78.259425][ T5656] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   78.273746][ T5656] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   78.288139][ T5656] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[   78.300870][ T5656] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   78.317821][ T5656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.321793][ T5656] usb 1-1: Product: syz
[   78.323523][ T5656] usb 1-1: Manufacturer: syz
[   78.325444][ T5656] usb 1-1: SerialNumber: syz
[   78.335950][ T6548] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   78.348059][ T6556] loop3: detected capacity change from 0 to 16
[   78.356123][ T6556] erofs (device loop3): mounted with root inode @ nid 36.
[   78.365726][ T6556] syz.3.289: attempt to access beyond end of device
[   78.365726][ T6556] loop3: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16
[   78.374483][ T6556] syz.3.289: attempt to access beyond end of device
[   78.374483][ T6556] loop3: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16
[   78.385874][   T34] audit: type=1800 audit(1786755497.205:15): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.289" name="file1" dev="loop3" ino=86 res=0 errno=0
[   78.396042][ T6556] erofs (device loop3): bogus i_mode (4355) @ nid 46
[   78.403550][ T6556] erofs (device loop3): bogus dirent @ nid 36
[   78.552782][ T6548] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   78.574673][  T804] gspca_ov534_9: reg_r err -71
[   78.688531][ T5657] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   78.838487][ T5657] usb 4-1: Using ep0 maxpacket: 16
[   78.841216][ T5657] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   78.845805][ T5657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   78.848509][  T804] gspca_ov534_9: Unknown sensor 0000
[   78.849967][  T804] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22
[   78.851017][ T5657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   78.855108][  T804] usb 2-1: USB disconnect, device number 3
[   78.871914][ T5657] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   78.877664][ T5657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.888916][ T5657] usb 4-1: config 0 descriptor??
[   79.162618][ T6548] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   79.245011][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'.
[   79.335016][ T5657] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   79.348762][ T5657] microsoft 0003:045E:07DA.0001: no inputs found
[   79.351831][ T5657] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway
[   79.370235][ T5656] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[   79.379271][ T5656] cdc_ncm 1-1:1.0: setting rx_max = 16384
[   79.515988][ T5657] usb 4-1: USB disconnect, device number 5
[   79.584384][ T5656] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   79.596957][ T5656] usb 1-1: USB disconnect, device number 3
[   79.613595][ T5656] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[   79.633895][   T34] audit: type=1326 audit(1786755498.455:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.296" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddd9e0d9 code=0x7ffc0000
[   79.650991][ T6573] loop1: detected capacity change from 0 to 512
[   79.653711][   T34] audit: type=1326 audit(1786755498.475:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.296" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cddd9e0d9 code=0x7ffc0000
[   79.666026][   T34] audit: type=1326 audit(1786755498.475:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.296" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1cddd9e0d9 code=0x7ffc0000
[   79.682809][   T34] audit: type=1326 audit(1786755498.475:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.296" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1cddd9de42 code=0x7ffc0000
[   79.696236][ T6573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.705933][   T34] audit: type=1326 audit(1786755498.475:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.296" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1cddd5e90e code=0x7ffc0000
[   79.719509][   T34] audit: type=1326 audit(1786755498.475:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.296" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1cddd9df07 code=0x7ffc0000
[   79.738079][   T34] audit: type=1326 audit(1786755498.475:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.296" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cddd5e90e code=0x7ffc0000
[   79.749176][   T34] audit: type=1326 audit(1786755498.475:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.296" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1cddd9dd6b code=0x7ffc0000
[   79.757832][   T34] audit: type=1326 audit(1786755498.495:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.296" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1cddd5e90e code=0x7ffc0000
[   79.760970][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.857528][ T6579] bridge0: port 4(batadv1) entered blocking state
[   79.861734][ T6579] bridge0: port 4(batadv1) entered disabled state
[   79.864766][ T6579] batadv1: entered allmulticast mode
[   79.868866][ T6579] batadv1: entered promiscuous mode
[   80.031502][ T6587] The dccp option matching is deprecated and scheduled to be removed in 2027.
[   80.031502][ T6587] Please contact the netfilter-devel mailing list or update your nftables rules.
[   80.090042][ T6590] loop1: detected capacity change from 0 to 128
[   80.092724][ T6591] loop3: detected capacity change from 0 to 1024
[   80.102421][ T6591] hfsplus: invalid extent btree flag
[   80.111488][ T6590] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   80.112062][ T6591] hfsplus: failed to load extents file
[   80.137770][ T6590] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   80.176802][ T5600] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   80.318080][ T6605] process 'syz.1.310' launched '/dev/fd/3' with NULL argv: empty string added
[   80.358901][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   80.364350][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   80.382775][ T6609] kernel read not supported for file /file1 (pid: 6609 comm: syz.1.313)
[   80.605235][ T6626] loop0: detected capacity change from 0 to 256
[   80.609456][ T6626] vfat: Unknown parameter 'gi1/3'
[   80.833835][ T6640] loop4: detected capacity change from 0 to 7
[   80.844724][ T6640]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[   80.846643][ T6640] loop4: partition table partially beyond EOD, truncated
[   80.849989][ T6640] loop4: p1 size 2989602745 extends beyond EOD, truncated
[   80.892963][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   81.009292][ T6638] loop1: detected capacity change from 0 to 32768
[   81.047017][ T6638] (syz.1.324,6638,1):ocfs2_slot_map_physical_size:227 ERROR: Slot map file is too small!  (size 0, needed 8)
[   81.379643][ T6646] loop1: detected capacity change from 0 to 40427
[   81.400997][ T6646] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   81.404096][ T6646] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   81.409883][ T6646] F2FS-fs (loop1): invalid crc value
[   81.450024][ T6646] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   81.457898][ T6646] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   81.460481][ T6646] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   81.528761][  T804] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   81.665299][ T6661] loop1: detected capacity change from 0 to 256
[   81.669004][ T6661] exfat: Deprecated parameter 'namecase'
[   81.671479][ T6661] exfat: Deprecated parameter 'namecase'
[   81.685410][  T804] usb 4-1: Using ep0 maxpacket: 32
[   81.688805][  T804] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   81.697682][ T6661] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d)
[   81.703293][    T9] cfg80211: failed to load regulatory.db
[   81.709144][  T804] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   81.714286][  T804] usb 4-1: config 0 has no interface number 0
[   81.727354][  T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.730883][  T804] usb 4-1: Product: syz
[   81.732540][  T804] usb 4-1: Manufacturer: syz
[   81.734355][  T804] usb 4-1: SerialNumber: syz
[   81.738757][  T804] usb 4-1: config 0 descriptor??
[   81.915353][ T6671] loop1: detected capacity change from 0 to 1024
[   81.918382][ T6671] hfsplus: unable to find HFS+ superblock
[   82.166743][ T6677] batadv2: entered promiscuous mode
[   82.169706][ T6677] batadv2: entered allmulticast mode
[   82.224444][ T6681] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   82.231658][ T6681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   82.367475][  T804] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[   82.376529][  T804] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   82.382641][  T804] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   82.386644][  T804] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[   82.397374][  T804] usb 4-1: USB disconnect, device number 6
[   82.536121][ T6689] 9p: Bad value for 'port'
[   83.120363][ T6691] EXT4-fs (loop3): 1 truncate cleaned up
[   83.124291][ T6691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.138130][ T6691] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.346: invalid indirect mapped block 234881024 (level 0)
[   83.149515][ T6691] EXT4-fs (loop3): Remounting filesystem read-only
[   83.192035][ T5877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.328175][ T6700] netlink: 104 bytes leftover after parsing attributes in process `syz.1.349'.
[   83.386916][ T6702] set_capacity_and_notify: 3 callbacks suppressed
[   83.386932][ T6702] loop3: detected capacity change from 0 to 512
[   83.399292][ T6702] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.434812][ T6702] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[   83.449795][ T6702] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.350: corrupted in-inode xattr: e_value size too large
[   83.469890][ T6702] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   83.470193][ T6702] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.350: couldn't read orphan inode 15 (err -117)
[   83.479544][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   83.479558][    C0] EXT4-fs (loop3): initial error at time 1786755502: ext4_iget_extra_inode:5180: inode 15
[   83.479579][    C0] EXT4-fs (loop3): last error at time 1786755502: ext4_iget_extra_inode:5180: inode 15
[   83.527932][ T6702] loop3: lost filesystem error report for type 5 error -117
[   83.530534][ T6702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.582192][ T5877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.737101][ T6710] loop0: detected capacity change from 0 to 32768
[   83.743221][ T6714] loop1: detected capacity change from 0 to 32768
[   83.749131][ T6714] (syz.1.355,6714,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   83.756376][ T6714] (syz.1.355,6714,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   83.779852][ T6714] JBD2: Ignoring recovery information on journal
[   83.816591][ T6714] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   83.823469][ T6710] JBD2: Ignoring recovery information on journal
[   83.914115][   T34] kauditd_printk_skb: 14 callbacks suppressed
[   83.914126][   T34] audit: type=1800 audit(1786755502.735:39): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.355" name="file1" dev="loop1" ino=16978 res=0 errno=0
[   83.946311][ T6710] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   84.172731][ T5604] ocfs2: Unmounting device (7,0) on (node local)
[   84.288150][ T6714] (syz.1.355,6714,1):ocfs2_dio_end_io:2420 ERROR: Direct IO failed, bytes = -28
[   84.293501][ T6727] loop3: detected capacity change from 0 to 512
[   84.400723][ T6714] syz.1.355 (6714) used greatest stack depth: 18336 bytes left
[   84.567230][ T5600] ocfs2: Unmounting device (7,1) on (node local)
[   85.557435][ T6760] loop1: detected capacity change from 0 to 131072
[   85.560685][ T6760] F2FS-fs (loop1): invalid crc value
[   85.596291][ T6760] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   85.602618][ T6760] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   85.629321][   T34] audit: type=1804 audit(1786755504.445:40): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.374" name="/newroot/166/file1/file1" dev="loop1" ino=7 res=1 errno=0
[   85.988762][   T32] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   86.138533][   T32] usb 4-1: Using ep0 maxpacket: 16
[   86.143548][   T32] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   86.153405][   T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.163499][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   86.174203][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   86.182025][   T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   86.189889][   T32] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   86.202206][   T32] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   86.208908][   T32] usb 4-1: Manufacturer: syz
[   86.216085][   T32] usb 4-1: config 0 descriptor??
[   86.490509][   T32] rc_core: IR keymap rc-hauppauge not found
[   86.493909][   T32] Registered IR keymap rc-empty
[   86.496821][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.518589][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.543438][   T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[   86.553468][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6
[   86.579116][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.598626][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.618829][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.638816][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.658609][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.678809][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.698750][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.724355][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.748761][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.769120][   T32] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[   86.812915][   T32] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[   86.816342][   T32] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[   86.911625][    T9] usb 4-1: USB disconnect, device number 7
[   87.160182][ T6812] loop0: detected capacity change from 0 to 128
[   87.179049][ T6812] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   87.187526][ T6812] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   87.206060][ T6812] fscrypt (loop0, inode 12): Unsupported encryption flags (0x10)
[   87.239066][ T5604] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   87.390323][ T6822] loop0: detected capacity change from 0 to 40427
[   87.394404][ T6822] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   87.396756][ T6822] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   87.400770][ T6822] F2FS-fs (loop0): invalid crc value
[   87.428064][ T6822] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.434946][ T6822] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   87.437177][ T6822] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   87.472450][   T34] audit: type=1800 audit(1786755506.295:41): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.394" name="file1" dev="loop0" ino=10 res=0 errno=0
[   87.504860][ T6822] syz.0.394: attempt to access beyond end of device
[   87.504860][ T6822] loop0: rw=34817, sector=53248, nr_sectors = 2048 limit=40427
[   87.543362][ T6822] syz.0.394: attempt to access beyond end of device
[   87.543362][ T6822] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.549125][ T6822] CPU: 1 UID: 0 PID: 6822 Comm: syz.0.394 Not tainted syzkaller #0 PREEMPT(full) 
[   87.549138][ T6822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.549143][ T6822] Call Trace:
[   87.549147][ T6822]  <TASK>
[   87.549150][ T6822]  dump_stack_lvl+0xe8/0x150
[   87.549167][ T6822]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   87.549181][ T6822]  f2fs_write_end_io+0x124b/0x1710
[   87.549199][ T6822]  __submit_merged_bio+0x258/0x6a0
[   87.549207][ T6822]  ? rcu_is_watching+0x15/0xb0
[   87.549220][ T6822]  __submit_merged_write_cond+0x3c9/0x4e0
[   87.549232][ T6822]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   87.549278][ T6822]  f2fs_write_data_pages+0x2a27/0x36f0
[   87.549289][ T6822]  ? __lock_acquire+0x683/0x2cf0
[   87.549311][ T6822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.549336][ T6822]  ? __pfx_hlock_conflict+0x10/0x10
[   87.549345][ T6822]  ? __bfs+0x153/0x290
[   87.549352][ T6822]  ? __pfx_hlock_conflict+0x10/0x10
[   87.549368][ T6822]  ? lockdep_unlock+0x5d/0xd0
[   87.549375][ T6822]  ? __lock_acquire+0x13e8/0x2cf0
[   87.549394][ T6822]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.549403][ T6822]  do_writepages+0x338/0x560
[   87.549417][ T6822]  ? do_raw_spin_unlock+0x4d/0x210
[   87.549426][ T6822]  filemap_fdatawrite+0x1e9/0x2f0
[   87.549437][ T6822]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   87.549463][ T6822]  ? do_raw_spin_unlock+0x4d/0x210
[   87.549472][ T6822]  f2fs_sync_dirty_inodes+0x30e/0x830
[   87.549488][ T6822]  f2fs_write_checkpoint+0xa3d/0x2710
[   87.549509][ T6822]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   87.549538][ T6822]  f2fs_gc+0x1ee9/0x25b0
[   87.549559][ T6822]  ? __pfx_f2fs_gc+0x10/0x10
[   87.549579][ T6822]  ? __pfx_f2fs_submit_all_merged_ipu_writes+0x10/0x10
[   87.549588][ T6822]  ? rcu_is_watching+0x15/0xb0
[   87.549599][ T6822]  f2fs_balance_fs+0x67f/0x870
[   87.549610][ T6822]  ? __pfx_f2fs_balance_fs+0x10/0x10
[   87.549617][ T6822]  ? rcu_is_watching+0x15/0xb0
[   87.549626][ T6822]  ? __up_read+0x29c/0x930
[   87.549637][ T6822]  ? trace_lock_elapsed_time_end+0xf1/0xbc0
[   87.549644][ T6822]  ? restore_priority+0x1af/0x450
[   87.549655][ T6822]  f2fs_map_blocks+0x2a03/0x46d0
[   87.549662][ T6822]  ? kasan_save_stack+0x3e/0x60
[   87.549692][ T6822]  ? __pfx_f2fs_map_blocks+0x10/0x10
[   87.549703][ T6822]  ? call_rcu+0x64b/0x8b0
[   87.549712][ T6822]  ? lockdep_hardirqs_on+0x7a/0x110
[   87.549728][ T6822]  ? mempool_free+0xec/0x130
[   87.549736][ T6822]  ? kmem_cache_free+0x462/0x650
[   87.549744][ T6822]  ? __pfx_mempool_free_slab+0x10/0x10
[   87.549757][ T6822]  f2fs_iomap_begin+0x3b7/0x960
[   87.549768][ T6822]  ? __pfx_f2fs_iomap_begin+0x10/0x10
[   87.549777][ T6822]  ? __iomap_dio_bio_end_io+0x21b/0x7b0
[   87.549787][ T6822]  ? iomap_dio_bio_iter+0x152f/0x18f0
[   87.549802][ T6822]  ? __pfx_f2fs_iomap_begin+0x10/0x10
[   87.549810][ T6822]  iomap_iter+0x5f5/0xf80
[   87.549823][ T6822]  __iomap_dio_rw+0x132a/0x1de0
[   87.549838][ T6822]  ? __lock_acquire+0x13e8/0x2cf0
[   87.549848][ T6822]  ? __pfx___iomap_dio_rw+0x10/0x10
[   87.549864][ T6822]  ? f2fs_file_write_iter+0x1702/0x28e0
[   87.549879][ T6822]  ? down_read+0x2be/0x330
[   87.549891][ T6822]  f2fs_file_write_iter+0x18d6/0x28e0
[   87.549908][ T6822]  ? vfs_write+0x22b/0xba0
[   87.549919][ T6822]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[   87.549934][ T6822]  vfs_write+0x612/0xba0
[   87.549947][ T6822]  ? __pfx_vfs_write+0x10/0x10
[   87.549960][ T6822]  ? __fget_files+0x2a/0x420
[   87.549974][ T6822]  ksys_write+0x150/0x270
[   87.549984][ T6822]  ? __pfx_ksys_write+0x10/0x10
[   87.549997][ T6822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.550005][ T6822]  do_syscall_64+0x174/0x580
[   87.550014][ T6822]  ? trace_irq_disable+0x3b/0x140
[   87.550025][ T6822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.550031][ T6822] RIP: 0033:0x7fdd6679e0d9
[   87.550040][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.550046][ T6822] RSP: 002b:00007fdd675c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   87.550054][ T6822] RAX: ffffffffffffffda RBX: 00007fdd66a25fa0 RCX: 00007fdd6679e0d9
[   87.550059][ T6822] RDX: 00000000ffffffd7 RSI: 0000200000000000 RDI: 0000000000000005
[   87.550063][ T6822] RBP: 00007fdd66835024 R08: 0000000000000000 R09: 0000000000000000
[   87.550067][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.550071][ T6822] R13: 00007fdd66a26038 R14: 00007fdd66a25fa0 R15: 00007ffed45af508
[   87.550082][ T6822]  </TASK>
[   87.550086][ T6822] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   87.714700][   T34] audit: type=1800 audit(1786755506.305:42): pid=6822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.394" name="file1" dev="loop0" ino=10 res=0 errno=0
[   87.960496][ T6852] xt_CT: You must specify a L4 protocol and not use inversions on it
[   88.783926][ T6874] loop3: detected capacity change from 0 to 8192
[   89.783853][ T6874] Dev loop3: unable to read RDB block 8
[   89.794751][ T6874]  loop3: unable to read partition table
[   89.803738][ T6874] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[   90.909882][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   91.068555][    T9] usb 4-1: Using ep0 maxpacket: 32
[   91.074661][    T9] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   91.090445][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[   91.161636][ T6894] loop1: detected capacity change from 0 to 512
[   91.191287][ T6894] EXT4-fs: Mount option(s) incompatible with ext2
[   91.205868][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   91.221494][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   91.241531][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   91.256109][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.265199][    T9] usb 4-1: Product: syz
[   91.270581][    T9] usb 4-1: Manufacturer: syz
[   91.274092][    T9] usb 4-1: SerialNumber: syz
[   91.323432][    T9] usb 4-1: config 0 descriptor??
[   91.537971][    T9] usb 4-1: USB disconnect, device number 8
[   91.826640][ T6902] loop1: detected capacity change from 0 to 256
[   91.830101][ T6902] exfat: Deprecated parameter 'utf8'
[   91.843671][ T6902] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[   91.860285][ T6902] veth0_to_bond: mtu less than device minimum
[   91.863608][ T6902] netlink: 248 bytes leftover after parsing attributes in process `syz.1.427'.
[   91.871310][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'.
[   91.875610][ T6902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.427'.
[   92.138543][ T5726] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.944655][ T6995] loop0: detected capacity change from 0 to 1024
[   94.951338][ T6995] EXT4-fs: Ignoring removed oldalloc option
[   94.954002][ T6995] EXT4-fs: Ignoring removed orlov option
[   94.955974][ T6995] EXT4-fs: Ignoring removed nomblk_io_submit option
[   94.978366][ T6995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.030303][   T33] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   95.030563][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.229794][   T33] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[   95.233634][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.236938][   T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.240816][   T33] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   95.244741][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.250686][   T33] usb 4-1: config 0 descriptor??
[   95.712486][   T33] input: HID 041e:3100 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:3100.0002/input/input7
[   95.885084][   T33] creative-sb0540 0003:041E:3100.0002: input,hidraw0: USB HID v0.00 Joystick [HID 041e:3100] on usb-dummy_hcd.3-1/input0
[   95.902312][   T33] usb 4-1: USB disconnect, device number 9
[   95.980564][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   96.128472][    T9] usb 2-1: Using ep0 maxpacket: 8
[   96.132339][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   96.140292][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   96.143990][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.153019][    T9] usb 2-1: config 0 descriptor??
[   96.395029][    T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   97.671739][ T7022] UBIFS error (pid: 7022): cannot open "ubi0_0", error -19
[   97.689823][ T5657] usb 2-1: USB disconnect, device number 4
[   98.206171][ T7048] Illegal XDP return value 4294967199 on prog  (id 37) dev syz_tun, expect packet loss!
[   98.312714][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'.
[   98.322066][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'.
[   98.396931][ T7064] loop3: detected capacity change from 0 to 512
[   98.408036][ T7064] EXT4-fs: Ignoring removed nobh option
[   98.415991][ T7064] EXT4-fs: Ignoring removed oldalloc option
[   98.424846][ T7064] EXT4-fs: old and new quota format mixing
[   98.592778][ T7079] sctp: [Deprecated]: syz.3.503 (pid 7079) Use of struct sctp_assoc_value in delayed_ack socket option.
[   98.592778][ T7079] Use struct sctp_sack_info instead
[   98.976301][ T7088] ima: Unable to open file: /e (-2)
[   98.976513][ T7087] ima: policy update failed
[   98.983736][   T34] audit: type=1802 audit(1786755517.805:43): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.506" res=0 errno=0
[   99.308553][ T5657] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   99.459484][ T5657] usb 4-1: Using ep0 maxpacket: 8
[   99.463839][ T5657] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   99.470568][ T5657] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   99.471959][ T7098] loop0: detected capacity change from 0 to 512
[   99.474086][ T5657] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   99.483138][ T5657] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   99.487159][ T5657] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   99.491577][ T5657] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   99.496771][ T5657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.523321][ T7098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.534828][ T7098] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.711347][ T5657] usb 4-1: usb_control_msg returned -32
[   99.713344][ T5657] usbtmc 4-1:16.0: can't read capabilities
[   99.733115][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.897461][ T7108] loop0: detected capacity change from 0 to 4096
[   99.941588][ T7111] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.030759][    T9] usb 4-1: USB disconnect, device number 10
[  100.035930][ T7094] usbtmc 4-1:16.0: usb_control_msg returned -71
[  100.040066][ T7112] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19
[  100.087985][ T7116] jffs2: notice: (7116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  101.030850][ T7172] loop1: detected capacity change from 0 to 512
[  101.054123][ T7172] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  101.070315][ T7172] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.541: casefold flag without casefold feature
[  101.074205][ T7172] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  101.075872][ T7172] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.541: couldn't read orphan inode 15 (err -117)
[  101.078735][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  101.078744][    C1] EXT4-fs (loop1): initial error at time 1786755519: ext4_orphan_get:1399: inode 15
[  101.078756][    C1] EXT4-fs (loop1): last error at time 1786755519: ext4_orphan_get:1399: inode 15
[  101.093402][ T7172] loop1: lost filesystem error report for type 5 error -117
[  101.096732][ T7172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.143407][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.162402][ T7179] binder: 7178:7179 ioctl c0306201 0 returned -14
[  101.427939][ T7188] netlink: 240 bytes leftover after parsing attributes in process `syz.0.548'.
[  101.870025][ T7198] netlink: 'syz.0.553': attribute type 29 has an invalid length.
[  101.873028][ T7198] netlink: 'syz.0.553': attribute type 29 has an invalid length.
[  101.945057][ T7200] loop0: detected capacity change from 0 to 128
[  102.588848][   T33] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  102.749367][   T33] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  102.754584][   T33] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  102.759000][   T33] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  102.763315][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.781280][   T33] spcp8x5 1-1:1.0: SPCP8x5 converter detected
[  102.792101][   T33] usb 1-1: SPCP8x5 converter now attached to ttyUSB0
[  103.139992][ T7204] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  103.146332][ T7204] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  103.150729][ T7204] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  103.417279][ T7228] loop1: detected capacity change from 0 to 512
[  103.446083][ T7228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.451954][ T7228] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.486659][    T9] usb 1-1: USB disconnect, device number 4
[  103.508708][    T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  103.517373][    T9] spcp8x5 1-1:1.0: device disconnected
[  104.248996][ T7248] loop3: detected capacity change from 0 to 512
[  104.330359][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.333748][ T7248] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.574: bg 0: block 393: padding at end of block bitmap is not set
[  104.333787][ T7248] loop3: lost filesystem error report for type 5 error -117
[  104.337919][ T7248] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  104.339487][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  104.339497][    C1] EXT4-fs (loop3): initial error at time 1786755523: ext4_validate_block_bitmap:441
[  104.339508][    C1] EXT4-fs (loop3): last error at time 1786755523: ext4_validate_block_bitmap:441
[  104.361666][ T7248] loop3: lost filesystem error report for type 5 error -117
[  104.362524][ T7248] EXT4-fs (loop3): 2 truncates cleaned up
[  104.372686][ T7248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.406908][    T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  104.441962][ T5877] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.447602][    T9] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  104.533948][ T7261] libceph: resolve '96' (ret=-3): failed
[  104.571721][ T7263] loop1: detected capacity change from 0 to 512
[  104.582006][ T7263] EXT4-fs: Ignoring removed nobh option
[  104.594182][ T7265] : renamed from veth0_vlan (while UP)
[  104.609120][ T7263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.618773][ T7263] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  104.657088][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.717055][ T7273] erspan0: entered promiscuous mode
[  104.886058][ T7283] jffs2: notice: (7283) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  104.936181][ T5868] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  104.937614][ T5604] ------------[ cut here ]------------
[  104.943431][ T5604] kernel BUG at fs/jffs2/nodelist.c:462!
[  104.954370][ T5604] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  104.956928][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  104.960777][ T5604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  104.964527][ T5604] RIP: 0010:jffs2_del_ino_cache+0x2b9/0x2c0
[  104.966405][ T5604] Code: fe e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 f2 01 fd fe e9 42 fe ff ff e8 e8 65 8f fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  104.972400][ T5604] RSP: 0018:ffffc900049cfa38 EFLAGS: 00010293
[  104.974258][ T5604] RAX: ffffffff83379b78 RBX: ffff88810a98de80 RCX: ffff88810f335940
[  104.976717][ T5604] RDX: 0000000000000000 RSI: ffff88810a98de80 RDI: ffff888114a1e000
[  104.979381][ T5604] RBP: 0000000000000006 R08: ffff888114a1e363 R09: 1ffff11022943c6c
[  104.982596][ T5604] R10: dffffc0000000000 R11: ffffed1022943c6d R12: ffff88810a98de80
[  104.985701][ T5604] R13: dffffc0000000000 R14: ffff88810a98dea0 R15: ffff888114a1e000
[  104.988910][ T5604] FS:  0000555572753500(0000) GS:ffff88818d955000(0000) knlGS:0000000000000000
[  104.992402][ T5604] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.994913][ T5604] CR2: 000000110c2cb4ff CR3: 000000010fc98000 CR4: 00000000000006f0
[  104.997979][ T5604] Call Trace:
[  104.999377][ T5604]  <TASK>
[  105.000615][ T5604]  ? jffs2_do_clear_inode+0x314/0x390
[  105.002834][ T5604]  jffs2_do_clear_inode+0x31f/0x390
[  105.004979][ T5604]  ? __pfx_jffs2_evict_inode+0x10/0x10
[  105.007205][ T5604]  evict+0x624/0xb50
[  105.008837][ T5604]  ? __pfx_evict+0x10/0x10
[  105.010686][ T5604]  ? do_raw_spin_unlock+0x4d/0x210
[  105.012789][ T5604]  evict_inodes+0x7e3/0x870
[  105.014607][ T5604]  ? __pfx_cgroup_writeback_umount+0x10/0x10
[  105.017067][ T5604]  ? __pfx_evict_inodes+0x10/0x10
[  105.019137][ T5604]  ? jffs2_sync_fs+0x97/0xb0
[  105.021069][ T5604]  ? sync_filesystem+0x1f6/0x230
[  105.023119][ T5604]  generic_shutdown_super+0xaa/0x2d0
[  105.025293][ T5604]  kill_mtd_super+0x23/0x70
[  105.027128][ T5604]  jffs2_kill_sb+0x96/0xb0
[  105.028982][ T5604]  deactivate_locked_super+0xbc/0x130
[  105.031179][ T5604]  cleanup_mnt+0x3d3/0x460
[  105.033037][ T5604]  task_work_run+0x1d9/0x270
[  105.034984][ T5604]  ? __pfx_task_work_run+0x10/0x10
[  105.037103][ T5604]  exit_to_user_mode_loop+0x1fa/0x730
[  105.039342][ T5604]  ? rcu_is_watching+0x15/0xb0
[  105.041314][ T5604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.043815][ T5604]  do_syscall_64+0x353/0x580
[  105.045754][ T5604]  ? trace_irq_disable+0x3b/0x140
[  105.047812][ T5604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.050170][ T5604] RIP: 0033:0x7fdd6679f317
[  105.051992][ T5604] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  105.059748][ T5604] RSP: 002b:00007ffed45ae778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  105.063158][ T5604] RAX: 0000000000000000 RBX: 00007fdd66834474 RCX: 00007fdd6679f317
[  105.066406][ T5604] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed45ae830
[  105.069607][ T5604] RBP: 00007ffed45ae830 R08: 00007ffed45af830 R09: 00000000ffffffff
[  105.072863][ T5604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed45af8c0
[  105.076150][ T5604] R13: 00007fdd66834474 R14: 000000000001995d R15: 00007ffed45af900
[  105.079413][ T5604]  </TASK>
[  105.080673][ T5604] Modules linked in:
[  105.083321][ T5604] ---[ end trace 0000000000000000 ]---
[  105.091166][ T5604] RIP: 0010:jffs2_del_ino_cache+0x2b9/0x2c0
[  105.093712][ T5604] Code: fe e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 f2 01 fd fe e9 42 fe ff ff e8 e8 65 8f fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  105.098542][ T5868] usb 4-1: Using ep0 maxpacket: 32
[  105.101654][ T5604] RSP: 0018:ffffc900049cfa38 EFLAGS: 00010293
[  105.104475][ T5868] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  105.106026][ T5604] RAX: ffffffff83379b78 RBX: ffff88810a98de80 RCX: ffff88810f335940
[  105.111999][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.115703][ T5604] RDX: 0000000000000000 RSI: ffff88810a98de80 RDI: ffff888114a1e000
[  105.115749][ T5868] usb 4-1: Product: syz
[  105.118882][ T5604] RBP: 0000000000000006 R08: ffff888114a1e363 R09: 1ffff11022943c6c
[  105.118895][ T5604] R10: dffffc0000000000 R11: ffffed1022943c6d R12: ffff88810a98de80
[  105.118903][ T5604] R13: dffffc0000000000 R14: ffff88810a98dea0 R15: ffff888114a1e000
[  105.119262][ T5604] FS:  0000555572753500(0000) GS:ffff88818d955000(0000) knlGS:0000000000000000
[  105.120634][ T5868] usb 4-1: Manufacturer: syz
[  105.123565][ T5604] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  105.126074][ T5868] usb 4-1: SerialNumber: syz
[  105.139979][ T5604] CR2: 00007f1cdddeb7c0 CR3: 000000010fc98000 CR4: 00000000000006f0
[  105.140338][ T5868] usb 4-1: config 0 descriptor??
[  105.143664][ T5604] Kernel panic - not syncing: Fatal exception
[  105.145783][ T5604] Kernel Offset: disabled

VM DIAGNOSIS:
00:58:43  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffffffff82109c19 RCX=ffffffff82109c19 RDX=0000000000001c19
RSI=ffffffff82109c19 RDI=0000000000000008 RBP=0000000000000000 RSP=00007ffe1d0e5870
R8 =00007f1cde010000 R9 =00007f1cde012000 R10=0000000082109c1d R11=0000000000000008
R12=00007f1cde026038 R13=000000000001f161 R14=ffffffff82109c19 R15=00007f1cdeb55720
RIP=00007f1cddc72630 RFL=00000293 [--S-A-C] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555571bac500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2cb4ff CR3=00000001023f1000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007f1cdeb5d560
XMM02=00007f1cddff25e8 00007f1cddff2618 XMM03=00007f1cddff2600 00007f1cddff25e0
XMM04=00007f1cdeb5d020 00007f1cddff25c0 XMM05=00007f1cddff25d0 00007f1cddff2610
XMM06=00007f1cddff25f8 00007f1cddff25c8 XMM07=00007f1cddff2600 00007f1cddff25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000000fb RBX=00000000000000fb RCX=0000000000000830 RDX=0000000000000000
RSI=00000000000000fb RDI=0000000000000000 RBP=ffffc9000441f860 RSP=ffffc9000441f6d8
R8 =ffffffff90574737 R9 =1ffffffff20ae8e6 R10=dffffc0000000000 R11=ffffffff8174f150
R12=dffffc0000000000 R13=ffff88823c63c440 R14=ffff8881210201d8 R15=ffffffff8e4f67d0
RIP=ffffffff8175fed3 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8f55000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1cdec6fff8 CR3=000000000e946000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
