last executing test programs:

1m18.82922009s ago: executing program 0 (id=1607):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x20, 0x1391ccd1beaa942e}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80)

1m18.561327536s ago: executing program 0 (id=1610):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x40004}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0x7, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x2}, 0x94)

1m18.40736677s ago: executing program 0 (id=1613):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x3, 0x10000, 0x4, 0xc, 0xcc6, 0x10, 0x7, 0x400000a, 0xfffffff8, 0x3, 0x0, 0x0, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x200003, 0x0, 0x7, 0x9, 0xfffffffe, 0x5, 0xb, 0x1000e63, 0x4bc, 0x8, 0x6, 0x2000000, 0xfffffff4]})

1m17.876112433s ago: executing program 0 (id=1618):
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x1a031, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)

1m17.682968558s ago: executing program 0 (id=1621):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
fstat(r0, &(0x7f0000000100))

1m17.445395163s ago: executing program 0 (id=1623):
r0 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20)

1m2.407212027s ago: executing program 32 (id=1623):
r0 = io_uring_setup(0x344c, &(0x7f0000000080)={0x0, 0xbf6e, 0x0, 0x7})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20)

38.047075958s ago: executing program 1 (id=2019):
r0 = syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00')
lseek(r0, 0x3, 0x1)
getdents(r0, 0x0, 0x51)

37.848791173s ago: executing program 1 (id=2021):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e20, @multicast1}})

37.422205013s ago: executing program 1 (id=2025):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0}, 0xc)

37.130925151s ago: executing program 1 (id=2028):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]})

36.389603888s ago: executing program 1 (id=2033):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
write(r0, &(0x7f0000000000)="1546b2000000000001008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f20800b179aa901b5d500d63", 0x58)

34.969245363s ago: executing program 1 (id=2044):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x19)

34.631745851s ago: executing program 33 (id=2044):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x19)

4.464777782s ago: executing program 5 (id=2314):
r0 = socket(0x1e, 0x805, 0x0)
connect$tipc(r0, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x4}}, 0x10)

4.172757759s ago: executing program 5 (id=2318):
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
copy_file_range(r1, &(0x7f0000000080), r0, &(0x7f0000000100), 0xfffffffffffffff8, 0x0)

3.957569984s ago: executing program 5 (id=2320):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000300)={0x0, 0xb, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.753037524s ago: executing program 6 (id=2332):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@noinit_itable}, {@nombcache}, {@dioread_lock}, {@errors_remount}, {@nodiscard}, {@block_validity}]}, 0x5, 0x4bf, &(0x7f0000000a00)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0)
quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

2.713391685s ago: executing program 4 (id=2333):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x79e, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80241, 0x48)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x11063, 0x0)

2.608001827s ago: executing program 3 (id=2334):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xd6a3}], 0x4}, 0x0)

2.319628414s ago: executing program 3 (id=2335):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000a80), 0xf, 0xa02, &(0x7f0000001ec0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0)

2.238843526s ago: executing program 4 (id=2336):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1ff, 0x1, 0x2, 0x10, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000780))

2.130479768s ago: executing program 6 (id=2337):
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f00000002c0)=0x7, 0x4)

1.864670535s ago: executing program 4 (id=2339):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2d2, &(0x7f0000000680)="$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")
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff)

1.864078765s ago: executing program 3 (id=2340):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r0, 0x4)
sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="200018"], 0x20, 0x4014}, 0x2804ccd0)

1.819479026s ago: executing program 5 (id=2341):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x2008c040}, 0x0)

1.63741108s ago: executing program 6 (id=2343):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000240)="6200bd750a5c010000", 0x9}, {&(0x7f0000000080)="98ceabdfb7d0", 0x6}], 0x2)

1.604954691s ago: executing program 5 (id=2344):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x7fff}]}, 0x44}}, 0x8004042)

1.584664872s ago: executing program 4 (id=2345):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x26802, 0x0)

1.583213332s ago: executing program 2 (id=2346):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x84, 0x0, &(0x7f0000000180))

1.412664806s ago: executing program 5 (id=2347):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f00000004c0)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodatacow}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000780)={0x2, 0x7, {0x3ff, @struct={0xe, 0x402}, 0x0, 0x1, 0x9, 0x9, 0x5, 0x6bd, 0x21, @usage=0x80000001, 0x6400, 0xb83c, [0xfffffffffffffd6e, 0x20008b08, 0x2, 0x80, 0x6, 0x40]}, {0x7fff, @struct={0x1, 0x10000001}, 0x0, 0x3, 0xffffffff, 0xcc, 0x8, 0x0, 0x20, @usage=0x4, 0x9, 0x372f2380, [0x4, 0xb25, 0xd, 0x1d52b6d3, 0x81, 0x5]}, {0x3, @struct={0x100, 0x4}, 0x0, 0x62c, 0x7, 0x0, 0x8, 0x1000000000000, 0x300, @usage, 0xb31, 0x3, [0xffffffffffffffd1, 0x6, 0x1000000000000006, 0xe9, 0x9, 0xffffffffffffffff]}, {0x2, 0x745, 0x9}})

1.412571046s ago: executing program 3 (id=2348):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000027c0)=""/4096, &(0x7f0000000100)=0x1000)

1.297769339s ago: executing program 6 (id=2349):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cc, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)

1.284331679s ago: executing program 4 (id=2350):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.141388833s ago: executing program 3 (id=2351):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffe}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@broadcast, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x8}, {}, {0x8}, 0x20000, 0x0, 0xa, 0x0, 0x2}}}, 0xf8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)

1.083372344s ago: executing program 6 (id=2352):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
ppoll(&(0x7f0000000240)=[{r0, 0x2280}], 0x1, 0x0, 0x0, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000580)={0x21e, 0x2, 0x0, {{0x500, 0xdd, 0x0, 0x4, {}, 0x3810000, 0x0, 0x0, 0x0, 0x1b, '\x04nod\xff\x01{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, '\xc6GtZ\xc8YR\xbf\xe0\xb0pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4', 0x2, '\b\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0x0, 0xee01}}, 0x21e)

1.035945515s ago: executing program 2 (id=2353):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd412d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x40010)

967.714896ms ago: executing program 3 (id=2354):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f000000d680)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000180)={&(0x7f00000000c0)='blkio.bfq.empty_time\x00', &(0x7f0000000140)='workdir', 0x8})

917.886048ms ago: executing program 4 (id=2355):
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000027c0)=[{0x7, 0x8000, 0x0, 0x0}, {0x401, 0x2000, 0x5c, &(0x7f0000000140)="dabf79d3e2106a742e367abd4f09baa3cacc9a2a62a395db5327627770d1d170c47f76525481f8e3faf6b558cb524fb519da5fdaff65d29932801dd1bdd07b95e73848dbd61ddd44845e3b72325d2e7349fd0d2454b51f535858d064"}], 0x2})

816.529801ms ago: executing program 2 (id=2356):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1}, 0x40}, {{0x0, 0x0, 0x0}, 0xfffff7fb}], 0x2, 0x0, 0x0)

559.638677ms ago: executing program 2 (id=2357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000002, 0x25dfdbfe, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000}}, 0x1c}}, 0x20000050)

351.820462ms ago: executing program 2 (id=2358):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setlease(r0, 0x400, 0x2)

468.1µs ago: executing program 6 (id=2359):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000003400)={0x2020}, 0x2020)
preadv(r0, &(0x7f0000001e80)=[{&(0x7f00000023c0)=""/4107, 0x100b}], 0x1, 0x33, 0x0)

0s ago: executing program 2 (id=2360):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x4044)

kernel console output (not intermixed with test programs):

urnal size
[  208.783415][ T7988] (syz.3.1467,7988,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  208.805451][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'.
[  208.845286][ T7988] (syz.3.1467,7988,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  208.859453][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'.
[  208.870209][ T8016] EXT4-fs (loop0): filesystem is read-only
[  208.876085][ T8016] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  209.037183][ T7988] JBD2: Ignoring recovery information on journal
[  209.138416][ T7988] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  209.176154][ T4275] EXT4-fs (loop0): unmounting filesystem.
[  209.332508][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  209.540671][ T8038] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1480'.
[  210.093148][   T27] audit: type=1400 audit(1785437449.785:98): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8056 comm="syz.3.1486"
[  210.337479][ T8043] XFS (loop0): Mounting V5 Filesystem
[  210.468988][ T8043] XFS (loop0): Ending clean mount
[  210.591253][ T4275] XFS (loop0): Unmounting Filesystem
[  210.752152][ T8082] set_capacity_and_notify: 2 callbacks suppressed
[  210.752168][ T8082] loop2: detected capacity change from 0 to 512
[  210.847682][ T8082] EXT4-fs: Ignoring removed nobh option
[  210.892376][ T8082] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  210.937440][ T8082] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1495: invalid indirect mapped block 256 (level 1)
[  211.006752][ T8082] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1495: invalid indirect mapped block 2683928664 (level 1)
[  211.118401][ T8082] EXT4-fs (loop2): 1 truncate cleaned up
[  211.124119][ T8082] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  211.189050][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1499'.
[  211.333607][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  211.557059][ T8085] loop1: detected capacity change from 0 to 32768
[  211.688504][ T8085] XFS (loop1): Mounting V5 Filesystem
[  211.817945][ T8085] XFS (loop1): Ending clean mount
[  212.011343][ T8126] bond0: option ad_select: unable to set because the bond device is up
[  212.070472][ T4273] XFS (loop1): Unmounting Filesystem
[  212.303589][ T8110] loop4: detected capacity change from 0 to 32768
[  212.333452][ T8110] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1505 (8110)
[  212.373382][ T8110] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.482641][ T8110] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  212.504644][ T8110] BTRFS info (device loop4): enabling auto defrag
[  212.516608][ T8110] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  212.529994][ T8110] BTRFS info (device loop4): use zstd compression, level 3
[  212.587706][ T8110] BTRFS info (device loop4): turning on async discard
[  212.595060][ T8110] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  212.645029][ T8110] BTRFS info (device loop4): trying to use backup root at mount time
[  212.734782][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1521'.
[  212.746365][ T8110] BTRFS info (device loop4): enabling ssd optimizations
[  212.748210][ T8147] loop1: detected capacity change from 0 to 128
[  212.769103][ T8110] BTRFS info (device loop4): using spread ssd allocation scheme
[  212.772191][ T8146] bond0: option arp_validate: invalid value (8585219)
[  212.782544][ T8110] BTRFS info (device loop4): setting nodatacow, compression disabled
[  212.837958][ T8110] BTRFS info (device loop4): using free space tree
[  213.000496][ T2898] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  213.097514][ T8110] BTRFS error (device loop4): failed to load root extent
[  213.104762][ T8110] BTRFS warning (device loop4): try to load backup roots slot 1
[  213.169597][ T2898] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  213.198051][ T8110] BTRFS warning (device loop4): couldn't read tree root
[  213.216490][ T8110] BTRFS warning (device loop4): try to load backup roots slot 2
[  213.248456][ T8110] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  213.276214][ T8110] BTRFS warning (device loop4): couldn't read tree root
[  213.293524][ T8110] BTRFS warning (device loop4): try to load backup roots slot 3
[  213.396027][ T8110] BTRFS info (device loop4): rebuilding free space tree
[  213.521816][ T8110] BTRFS info (device loop4): checking UUID tree
[  213.689938][ T8024] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  213.821337][ T8187] loop0: detected capacity change from 0 to 8192
[  213.896715][ T4283] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.898644][ T8024] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  213.907774][ T8187] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  213.926118][ T8176] loop2: detected capacity change from 0 to 32768
[  213.946407][ T8024] usb 4-1: config 0 has no interface number 0
[  213.956564][ T8024] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  213.988838][ T8024] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  214.002520][ T8176] JBD2: Ignoring recovery information on journal
[  214.006767][ T8024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.027061][ T8024] usb 4-1: Product: syz
[  214.032827][ T8024] usb 4-1: Manufacturer: syz
[  214.040694][ T8024] usb 4-1: SerialNumber: syz
[  214.041181][ T8187] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  214.062637][ T8024] usb 4-1: config 0 descriptor??
[  214.146182][ T8024] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  214.148449][ T8187] REISERFS (device loop0): using ordered data mode
[  214.176987][ T8187] reiserfs: using flush barriers
[  214.191929][ T8187] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  214.211131][ T8187] REISERFS (device loop0): checking transaction log (loop0)
[  214.239033][ T8176] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  214.446479][ T8023] usb 4-1: USB disconnect, device number 13
[  214.509545][ T4274] ocfs2: Unmounting device (7,2) on (node local)
[  214.523342][ T8023] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  214.613544][ T8187] REISERFS (device loop0): Using tea hash to sort names
[  214.637733][ T8187] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  214.667099][ T8187] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  215.095634][ T8216] loop0: detected capacity change from 0 to 8
[  215.146887][ T8023] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  215.170073][ T8216] SQUASHFS error: Failed to read block 0x2d7: -5
[  215.186374][ T8216] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  215.218846][ T8218] loop3: detected capacity change from 0 to 2048
[  215.240890][ T8218] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  215.306987][ T4328] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  215.319925][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  215.347133][ T8023] usb 3-1: Using ep0 maxpacket: 32
[  215.360560][ T8023] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  215.385350][ T8023] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.396978][ T8023] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.408979][ T8023] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  215.436977][ T8023] usb 3-1: config 0 interface 0 has no altsetting 0
[  215.443649][ T8023] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  215.466974][ T8023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.477288][ T8023] usb 3-1: config 0 descriptor??
[  215.513792][ T4328] usb 5-1: too many endpoints for config 0 interface 0 altsetting 251: 255, using maximum allowed: 30
[  215.533558][ T8229] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  215.548002][ T4328] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  215.586588][ T4328] usb 5-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  215.630596][ T4328] usb 5-1: config 0 interface 0 has no altsetting 0
[  215.650905][ T4328] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  215.681548][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.722699][ T4328] usb 5-1: config 0 descriptor??
[  215.747837][ T8211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  215.904198][ T8023] wacom 0003:056A:00C5.0014: ignoring exceeding usage max
[  215.939546][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  215.946487][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  215.960228][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  215.973475][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  215.980870][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  215.988405][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  215.995457][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  216.004785][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  216.026805][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  216.033740][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  216.061495][ T8023] wacom 0003:056A:00C5.0014: unknown main item tag 0x0
[  216.090833][ T8023] wacom 0003:056A:00C5.0014: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.2-1/input0
[  216.143103][ T8023] usb 3-1: USB disconnect, device number 11
[  216.154896][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1552'.
[  216.179247][ T4328] acrux 0003:1A34:0802.0015: unknown main item tag 0x0
[  216.183889][ T8227] loop3: detected capacity change from 0 to 40427
[  216.196539][ T4328] acrux 0003:1A34:0802.0015: unexpected long global item
[  216.214852][ T4328] acrux 0003:1A34:0802.0015: parse failed
[  216.229803][ T4328] acrux: probe of 0003:1A34:0802.0015 failed with error -22
[  216.247149][ T8227] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  216.254966][ T8227] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  216.354897][ T8227] F2FS-fs (loop3): Found nat_bits in checkpoint
[  216.399024][ T8241] fido_id[8241]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  216.403815][ T4328] usb 5-1: USB disconnect, device number 13
[  216.511813][ T8227] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  216.529634][ T8227] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  216.804932][ T8259] binder: BINDER_SET_CONTEXT_MGR already set
[  216.829611][ T8259] binder: 8256:8259 ioctl 40046207 0 returned -16
[  217.130321][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'.
[  217.462860][ T8252] loop0: detected capacity change from 0 to 40427
[  217.544825][ T8277] loop2: detected capacity change from 0 to 2048
[  217.575376][ T8252] F2FS-fs (loop0): Found nat_bits in checkpoint
[  217.591638][ T8277] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.678054][ T8252] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  217.772792][ T8252] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0
[  217.818051][ T8252] CPU: 1 PID: 8252 Comm: syz.0.1556 Not tainted syzkaller #0
[  217.825492][ T8252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  217.835578][ T8252] Call Trace:
[  217.838876][ T8252]  <TASK>
[  217.841823][ T8252]  dump_stack_lvl+0x188/0x24e
[  217.846534][ T8252]  ? show_regs_print_info+0x12/0x12
[  217.851770][ T8252]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  217.857625][ T8252]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  217.863046][ T8252]  f2fs_get_read_data_page+0x40f/0x640
[  217.868554][ T8252]  ? f2fs_reserve_block+0x240/0x240
[  217.873808][ T8252]  f2fs_find_data_page+0x9b/0x3b0
[  217.878874][ T8252]  f2fs_readdir+0x4ba/0xa00
[  217.883455][ T8252]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  217.888690][ T8252]  ? lockdep_hardirqs_on+0x94/0x140
[  217.893904][ T8252]  ? mutex_lock_nested+0x10/0x10
[  217.898848][ T8252]  ? end_current_label_crit_section+0x14b/0x170
[  217.905368][ T8252]  ? iterate_dir+0x10d/0x550
[  217.909968][ T8252]  ? down_read_killable+0x1cc/0x340
[  217.915160][ T8252]  ? fsnotify_perm+0x248/0x550
[  217.919919][ T8252]  iterate_dir+0x213/0x550
[  217.924332][ T8252]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  217.929534][ T8252]  __se_sys_getdents64+0xf2/0x270
[  217.934570][ T8252]  ? __x64_sys_getdents64+0x80/0x80
[  217.939769][ T8252]  ? filldir+0x6f0/0x6f0
[  217.944187][ T8252]  ? lockdep_hardirqs_on+0x94/0x140
[  217.949384][ T8252]  do_syscall_64+0x4c/0xa0
[  217.953800][ T8252]  ? clear_bhb_loop+0x60/0xb0
[  217.958475][ T8252]  ? clear_bhb_loop+0x60/0xb0
[  217.963240][ T8252]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  217.969149][ T8252] RIP: 0033:0x7f9b45f9e019
[  217.973655][ T8252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.993283][ T8252] RSP: 002b:00007f9b46eb9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  218.001707][ T8252] RAX: ffffffffffffffda RBX: 00007f9b46225fa0 RCX: 00007f9b45f9e019
[  218.009721][ T8252] RDX: 0000000000000043 RSI: 0000000000000000 RDI: 0000000000000004
[  218.017692][ T8252] RBP: 00007f9b4603500c R08: 0000000000000000 R09: 0000000000000000
[  218.025659][ T8252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.033623][ T8252] R13: 00007f9b46226038 R14: 00007f9b46225fa0 R15: 00007ffefaa50af8
[  218.041607][ T8252]  </TASK>
[  218.349895][ T8292] loop4: detected capacity change from 0 to 8192
[  218.432732][ T8298] loop2: detected capacity change from 0 to 8
[  219.184873][ T8317] loop2: detected capacity change from 0 to 1764
[  219.335882][ T8319] loop4: detected capacity change from 0 to 2048
[  219.405191][ T8319] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  219.457850][ T8319] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  219.508536][ T8319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  219.724559][ T8335] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  219.976980][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'.
[  220.006494][ T8346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1599'.
[  220.025885][ T8340] loop4: detected capacity change from 0 to 8192
[  220.079042][ T8340] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  220.106752][ T8340] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  220.116097][ T8340] REISERFS (device loop4): using ordered data mode
[  220.128164][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'.
[  220.207030][ T8340] reiserfs: using flush barriers
[  220.242369][ T8340] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  220.261922][ T8354] loop0: detected capacity change from 0 to 2048
[  220.276566][ T8340] REISERFS (device loop4): checking transaction log (loop4)
[  220.285665][ T8354] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  220.319806][ T8340] REISERFS (device loop4): Using r5 hash to sort names
[  220.362140][ T8354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  220.816592][   T27] audit: type=1326 audit(1785437460.505:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8367 comm="syz.1.1609" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa437f9e019 code=0x0
[  220.972355][ T8375] loop4: detected capacity change from 0 to 16
[  220.987393][ T8342] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  220.996153][ T8342] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  221.046321][ T8375] erofs: (device loop4): mounted with root inode @ nid 36.
[  221.074158][ T8377] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  221.094957][ T8342] F2FS-fs (loop3): invalid crc value
[  221.114691][ T8375] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36
[  221.119217][ T8377] comedi comedi3: 8255: I/O port conflict (0x10000,4)
[  221.136265][ T8377] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  221.141912][ T8375] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36
[  221.147116][ T8377] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  221.159983][ T8375] syz.4.1612: attempt to access beyond end of device
[  221.159983][ T8375] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16
[  221.168219][ T8342] F2FS-fs (loop3): Found nat_bits in checkpoint
[  221.174332][ T8375] syz.4.1612: attempt to access beyond end of device
[  221.174332][ T8375] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  221.197082][ T8377] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  221.258270][ T8377] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  221.271424][ T8377] comedi comedi3: 8255: I/O port conflict (0x400000a,4)
[  221.296867][ T8377] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4)
[  221.320437][ T8377] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  221.323566][ T8342] F2FS-fs (loop3): recover fsync data on readonly fs
[  221.395098][ T8342] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[  221.402617][ T8342] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  221.440397][ T8384] set_capacity_and_notify: 1 callbacks suppressed
[  221.440412][ T8384] loop4: detected capacity change from 0 to 512
[  221.540495][ T8384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  221.578642][ T8384] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  221.662591][ T8384] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.1616: corrupted inode contents
[  221.710131][ T8384] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.1616: mark_inode_dirty error
[  221.751141][ T8384] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.1616: corrupted inode contents
[  221.790251][ T8396] loop3: detected capacity change from 0 to 512
[  221.793909][ T8394] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.1616: corrupted inode contents
[  221.818683][ T8396] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  221.841971][ T8394] EXT4-fs error (device loop4): ext4_dirty_inode:6156: inode #2: comm syz.4.1616: mark_inode_dirty error
[  221.887369][ T8396] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #17: comm syz.3.1620: inode has both inline data and extents flags
[  221.912102][ T8394] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #2: comm syz.4.1616: corrupted inode contents
[  221.932126][ T8396] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1620: couldn't read orphan inode 17 (err -117)
[  221.980152][ T8396] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  222.128031][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  222.159918][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  222.331978][ T8408] loop3: detected capacity change from 0 to 1024
[  222.494680][ T8393] loop2: detected capacity change from 0 to 32768
[  222.549628][ T8393] 
[  222.549628][ T8393]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  222.549628][ T8393] 
[  222.609364][ T8393] find_entry called with index = 0
[  222.659251][ T8393] read_mapping_page failed!
[  222.673261][ T8417] 
[  222.673261][ T8417]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  222.673261][ T8417] 
[  222.712326][ T8393] ERROR: (device loop2): txCommit: 
[  222.712326][ T8393] 
[  222.781924][ T8417] 
[  222.781924][ T8417]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  222.781924][ T8417] 
[  222.815870][ T8393] ERROR: (device loop2): remounting filesystem as read-only
[  222.848047][ T8421] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1632'.
[  222.850233][ T8393] 
[  222.850233][ T8393]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  222.850233][ T8393] 
[  222.870883][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1632'.
[  223.113711][ T8427] loop4: detected capacity change from 0 to 256
[  223.153188][ T8427] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  223.391766][ T8429] loop3: detected capacity change from 0 to 4096
[  223.493560][ T8429] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  223.528981][ T8429] ntfs3: loop3: Failed to load $Extend.
[  223.861130][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'.
[  224.628290][ T8445] loop1: detected capacity change from 0 to 32768
[  224.665959][ T8472] loop3: detected capacity change from 0 to 256
[  224.726019][ T8472] exfat: Deprecated parameter 'utf8'
[  224.797238][ T8472] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  225.276944][ T6986] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  225.446182][ T8491] loop4: detected capacity change from 0 to 2048
[  225.489262][ T6986] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  225.501911][ T6986] usb 2-1: config 0 has no interface number 0
[  225.524600][ T8494] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.536792][ T6986] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  225.572985][ T6986] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  225.595257][ T6986] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  225.615485][ T6986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.663202][ T6986] usb 2-1: config 0 descriptor??
[  225.691222][ T8479] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  225.730081][ T6986] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  225.991723][ T4290] Bluetooth: hci0: Received unexpected HCI Event 0x00
[  225.993279][ T8030] usb 2-1: USB disconnect, device number 10
[  226.186385][ T8513] IPVS: Error connecting to the multicast addr
[  226.203893][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1676'.
[  226.525878][ T8524] loop3: detected capacity change from 0 to 256
[  226.538365][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1680'.
[  226.886823][ T8532] device dummy0 entered promiscuous mode
[  227.884678][ T8574] netlink: 'syz.1.1705': attribute type 27 has an invalid length.
[  227.902260][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1703'.
[  227.923463][ T8572] device bridge0 entered promiscuous mode
[  227.955536][ T8572] bridge0: port 3(macvlan2) entered blocking state
[  227.982822][ T8572] bridge0: port 3(macvlan2) entered disabled state
[  228.040313][ T8572] device bridge0 left promiscuous mode
[  228.142914][ T8030] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  228.341386][ T8030] usb 4-1: Using ep0 maxpacket: 32
[  228.359038][ T8030] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  228.400766][ T8030] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  228.431580][ T8030] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  228.467894][ T8030] usb 4-1: Product: syz
[  228.486328][ T8030] usb 4-1: Manufacturer: syz
[  228.501458][ T8030] usb 4-1: SerialNumber: syz
[  228.523804][ T8030] usb 4-1: config 0 descriptor??
[  228.538399][ T8573] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  228.548293][ T8030] hub 4-1:0.0: bad descriptor, ignoring hub
[  228.554245][ T8030] hub: probe of 4-1:0.0 failed with error -5
[  228.668155][ T8596] loop4: detected capacity change from 0 to 512
[  228.696823][ T4328] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  228.748929][ T8596] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 49)
[  228.877765][ T8030] usb 4-1: USB disconnect, device number 14
[  228.892039][ T4328] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.916712][ T4328] usb 2-1: config 0 interface 0 has no altsetting 0
[  228.923377][ T4328] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  228.943141][ T4328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.977731][ T4328] usb 2-1: config 0 descriptor??
[  229.046893][ T6982] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  229.258321][ T6982] usb 3-1: Using ep0 maxpacket: 32
[  229.268538][ T6982] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  229.295318][ T6982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.309147][ T6982] usb 3-1: Product: syz
[  229.313392][ T6982] usb 3-1: Manufacturer: syz
[  229.326775][ T6982] usb 3-1: SerialNumber: syz
[  229.342343][ T6982] usb 3-1: config 0 descriptor??
[  229.364207][ T6982] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  229.409530][ T4328] wacom 0003:056A:0333.0016: unknown main item tag 0x0
[  229.416634][ T4328] wacom 0003:056A:0333.0016: unknown main item tag 0x0
[  229.438646][ T4328] wacom 0003:056A:0333.0016: unknown main item tag 0x0
[  229.447984][ T4328] wacom 0003:056A:0333.0016: unknown main item tag 0x0
[  229.463113][ T4328] wacom 0003:056A:0333.0016: unknown main item tag 0x0
[  229.473664][ T8610] loop4: detected capacity change from 0 to 256
[  229.481352][ T4328] wacom 0003:056A:0333.0016: unknown main item tag 0x0
[  229.489226][ T4328] wacom 0003:056A:0333.0016: unknown main item tag 0x0
[  229.498001][ T8610] exfat: Deprecated parameter 'utf8'
[  229.507131][ T4328] wacom 0003:056A:0333.0016: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.1-1/input0
[  229.544583][ T8610] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  229.661527][ T8030] usb 2-1: USB disconnect, device number 11
[  229.788555][ T8615] loop3: detected capacity change from 0 to 136
[  229.826515][ T8613] fido_id[8613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  229.996967][ T6982] gspca_ov534_9: reg_w failed -71
[  230.140986][ T8623] loop3: detected capacity change from 0 to 256
[  230.195340][ T8623] FAT-fs (loop3): Directory bread(block 64) failed
[  230.211443][ T8623] FAT-fs (loop3): Directory bread(block 65) failed
[  230.219472][ T8625] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1729'.
[  230.227061][ T8623] FAT-fs (loop3): Directory bread(block 66) failed
[  230.243283][ T8623] FAT-fs (loop3): Directory bread(block 67) failed
[  230.250637][ T8623] FAT-fs (loop3): Directory bread(block 68) failed
[  230.267350][ T8623] FAT-fs (loop3): Directory bread(block 69) failed
[  230.297375][ T8623] FAT-fs (loop3): Directory bread(block 70) failed
[  230.308983][ T8623] FAT-fs (loop3): Directory bread(block 71) failed
[  230.327404][ T8623] FAT-fs (loop3): Directory bread(block 72) failed
[  230.333992][ T8623] FAT-fs (loop3): Directory bread(block 73) failed
[  230.416869][ T6982] gspca_ov534_9: Unknown sensor 0000
[  230.416939][ T6982] ov534_9: probe of 3-1:0.0 failed with error -22
[  230.458976][ T6982] usb 3-1: USB disconnect, device number 12
[  231.336491][ T8655] loop2: detected capacity change from 0 to 512
[  231.404862][ T8657] loop1: detected capacity change from 0 to 512
[  231.433639][ T8657] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  231.443857][ T8655] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  231.455755][ T8635] loop3: detected capacity change from 0 to 32768
[  231.472015][ T8662] loop4: detected capacity change from 0 to 128
[  231.493925][ T8655] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  231.516563][ T8655] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.1745: corrupted inode contents
[  231.535412][ T8655] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz.2.1745: mark_inode_dirty error
[  231.569156][ T8662] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  231.589138][ T8657] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  231.604566][ T8655] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.1745: corrupted inode contents
[  231.620646][ T8662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  231.679793][ T8657] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  231.749524][ T8665] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.1745: corrupted inode contents
[  231.861711][ T8665] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #2: comm syz.2.1745: mark_inode_dirty error
[  231.900805][ T8665] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #2: comm syz.2.1745: corrupted inode contents
[  231.945573][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  232.068455][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  232.193534][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1751'.
[  232.302340][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1753'.
[  232.453457][ T8682] loop3: detected capacity change from 0 to 16
[  232.493033][ T8682] erofs: (device loop3): mounted with root inode @ nid 36.
[  232.638818][ T8688] loop2: detected capacity change from 0 to 164
[  232.681634][ T8688] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  232.739135][ T8688] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  232.781877][ T8688] Symlink component flag not implemented
[  232.833082][ T8688] Symlink component flag not implemented (7)
[  232.881569][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1761'.
[  233.481100][ T8716] loop4: detected capacity change from 0 to 4096
[  233.537388][ T8719] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.790158][ T8725] loop2: detected capacity change from 0 to 256
[  233.849944][ T8725] exfat: Deprecated parameter 'namecase'
[  233.904130][ T8725] exfat: Deprecated parameter 'namecase'
[  233.949394][ T8729] nftables ruleset with unbound chain
[  233.967956][ T8725] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  234.072482][ T8731] loop1: detected capacity change from 0 to 128
[  234.136864][ T4328] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  234.149191][ T8731] VFS: Found a Xenix FS (block size = 512) on device loop1
[  234.184502][ T8731] sysv_free_block: trying to free block not in datazone
[  234.226313][ T8731] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  234.244906][ T8734] loop4: detected capacity change from 0 to 2048
[  234.306164][ T8734] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  234.359037][ T4328] usb 4-1: config 0 interface 0 has no altsetting 0
[  234.366748][ T4328] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  234.375818][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.443644][ T4328] usb 4-1: config 0 descriptor??
[  234.867405][ T4328] holtek 0003:1241:5015.0017: unknown main item tag 0x0
[  234.874439][ T4328] holtek 0003:1241:5015.0017: unknown main item tag 0x6
[  234.907026][ T4328] holtek 0003:1241:5015.0017: unknown main item tag 0x1
[  234.914067][ T4328] holtek 0003:1241:5015.0017: unexpected long global item
[  234.932689][ T4328] holtek 0003:1241:5015.0017: parse failed
[  234.956072][ T4328] holtek: probe of 0003:1241:5015.0017 failed with error -22
[  235.084815][ T4328] usb 4-1: USB disconnect, device number 15
[  235.358149][ T8758] loop4: detected capacity change from 0 to 256
[  235.403849][ T8742] loop2: detected capacity change from 0 to 40427
[  235.436910][ T8742] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  235.469137][ T8742] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  235.511637][ T8742] F2FS-fs (loop2): invalid crc value
[  235.543400][ T8742] F2FS-fs (loop2): Found nat_bits in checkpoint
[  235.746068][ T8764] loop4: detected capacity change from 0 to 1024
[  235.756287][ T8742] F2FS-fs (loop2): recover fsync data on readonly fs
[  235.782902][ T8742] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[  235.791389][ T8742] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  235.797041][ T8767] loop3: detected capacity change from 0 to 512
[  235.955267][ T8767] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  235.976801][ T8024] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  236.071802][ T8767] EXT4-fs (loop3): Remounting filesystem read-only
[  236.172700][ T8767] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1795: attempt to clear invalid blocks 1024 len 1
[  236.221789][ T8767] EXT4-fs (loop3): Remounting filesystem read-only
[  236.235222][ T8024] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.238248][ T8772] syz.4.1797: attempt to access beyond end of device
[  236.238248][ T8772] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  236.257381][ T8024] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  236.274023][ T8767] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1795: invalid indirect mapped block 1819239214 (level 0)
[  236.306185][ T8024] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  236.324515][ T8767] EXT4-fs (loop3): Remounting filesystem read-only
[  236.350723][ T8024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.367621][ T8767] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1795: invalid indirect mapped block 33554432 (level 2)
[  236.418453][ T8024] usb 2-1: config 0 descriptor??
[  236.435012][ T8024] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  236.454078][ T8767] EXT4-fs (loop3): Remounting filesystem read-only
[  236.467059][ T8024] dvb-usb: bulk message failed: -22 (3/0)
[  236.477584][ T8767] EXT4-fs (loop3): 1 truncate cleaned up
[  236.483279][ T8767] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  236.508897][ T8024] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  236.538329][ T8024] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  236.545803][ T8024] usb 2-1: media controller created
[  236.608835][ T8024] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  236.634723][ T8765] dvb-usb: bulk message failed: -22 (4/0)
[  236.694215][ T8024] dvb-usb: bulk message failed: -22 (6/0)
[  236.726136][ T8024] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  236.746451][ T8024] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28
[  236.779124][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  236.805678][ T8024] dvb-usb: schedule remote query interval to 150 msecs.
[  236.845929][ T8024] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  236.909372][ T8024] usb 2-1: USB disconnect, device number 12
[  237.043333][ T8024] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  237.175494][ T8792] futex_wake_op: syz.3.1806 tries to shift op by 32; fix this program
[  237.529054][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1810'.
[  237.828303][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  237.840564][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  237.849250][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  237.851369][ T8809] ptrace attach of ""[8811] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8809]
[  237.859129][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  237.872168][ T8788] set_capacity_and_notify: 1 callbacks suppressed
[  237.872182][ T8788] loop2: detected capacity change from 0 to 32768
[  237.898840][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  237.906189][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  238.017853][ T8788] 
[  238.017853][ T8788]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  238.017853][ T8788] 
[  238.364700][   T11] ERROR: (device loop2): diWrite: ixpxd invalid
[  238.364700][   T11] 
[  238.414598][   T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.442990][   T11] ERROR: (device loop2): txCommit: 
[  238.442990][   T11] 
[  238.467329][   T11] jfs_write_inode: jfs_commit_inode failed!
[  238.473379][ T4274] 
[  238.473379][ T4274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  238.473379][ T4274] 
[  238.479704][ T8823] loop3: detected capacity change from 0 to 2048
[  238.497983][ T4274] 
[  238.497983][ T4274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  238.497983][ T4274] 
[  238.666376][   T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.708076][ T8831] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.913528][   T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.079838][    T9] tipc: Resetting bearer <ib:wg1>
[  239.295658][   T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.351304][ T8847] loop3: detected capacity change from 0 to 64
[  239.532332][ T8805] chnl_net:caif_netlink_parms(): no params data found
[  239.599969][ T8846] loop2: detected capacity change from 0 to 8192
[  239.655956][   T27] audit: type=1800 audit(1785437479.345:100): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1829" name="file2" dev="loop2" ino=1048699 res=0 errno=0
[  239.679963][ T8846] syz.2.1829: attempt to access beyond end of device
[  239.679963][ T8846] loop2: rw=2049, sector=57847, nr_sectors = 1 limit=8192
[  239.745877][ T8833] loop1: detected capacity change from 0 to 32768
[  239.756496][ T8843] loop4: detected capacity change from 0 to 32768
[  239.768187][ T8846] Buffer I/O error on dev loop2, logical block 57847, lost async page write
[  239.878956][ T8843] XFS (loop4): Mounting V5 Filesystem
[  239.901980][ T8833] JBD2: Ignoring recovery information on journal
[  239.947011][ T4290] Bluetooth: hci3: command 0x0409 tx timeout
[  240.005016][ T8833] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  240.109271][   T47] tipc: Disabling bearer <ib:wg1>
[  240.137417][   T27] audit: type=1800 audit(1785437479.835:101): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1823" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  240.150024][ T8843] XFS (loop4): Ending clean mount
[  240.181480][   T47] tipc: Left network mode
[  240.187879][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.195549][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.234902][ T8805] device bridge_slave_0 entered promiscuous mode
[  240.239901][ T8843] XFS (loop4): Quotacheck needed: Please wait.
[  240.289232][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.296365][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.388245][ T8805] device bridge_slave_1 entered promiscuous mode
[  240.442331][ T8843] XFS (loop4): Quotacheck: Done.
[  240.448652][ T4273] ocfs2: Unmounting device (7,1) on (node local)
[  240.808135][ T4283] XFS (loop4): Unmounting Filesystem
[  240.941410][ T8884] loop2: detected capacity change from 0 to 256
[  240.979088][ T8805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  240.994908][ T8884] exfat: Deprecated parameter 'utf8'
[  241.076079][ T8884] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a991031, utbl_chksum : 0xe619d30d)
[  241.246241][ T8805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.454067][ T8897] loop1: detected capacity change from 0 to 256
[  241.493001][ T8897] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  241.543427][ T8897] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  241.585711][ T8897] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  241.613067][ T8805] team0: Port device team_slave_0 added
[  241.671440][ T8805] team0: Port device team_slave_1 added
[  241.877005][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  241.915553][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.996805][ T8805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  242.026874][ T4290] Bluetooth: hci3: command 0x041b tx timeout
[  242.167758][ T8024] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  242.221227][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  242.236840][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  242.271227][ T8917] loop4: detected capacity change from 0 to 256
[  242.327250][ T8805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  242.334460][ T8917] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  242.388850][ T8024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.415817][ T8024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.452954][ T8024] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  242.483088][ T8024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.514674][ T8024] usb 4-1: config 0 descriptor??
[  242.531012][ T8917] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008)
[  242.580166][ T8917] exFAT-fs (loop4): Filesystem has been set read-only
[  242.614100][ T8917] exFAT-fs (loop4): error, failed to bmap (inode : ffff8880736dbbe0 iblock : 8, err : -5)
[  242.656478][ T8917] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008)
[  242.703334][ T8906] loop2: detected capacity change from 0 to 32768
[  242.800935][ T8906] XFS (loop2): Mounting V5 Filesystem
[  242.970720][ T8906] XFS (loop2): Ending clean mount
[  242.980443][ T8024] hid-led 0003:27B8:01ED.0018: unbalanced collection at end of report description
[  243.037293][ T8024] hid-led: probe of 0003:27B8:01ED.0018 failed with error -22
[  243.094920][ T8805] device hsr_slave_0 entered promiscuous mode
[  243.122605][ T8805] device hsr_slave_1 entered promiscuous mode
[  243.134619][ T8805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  243.163211][ T8805] Cannot create hsr debugfs directory
[  243.184485][ T8932] loop4: detected capacity change from 0 to 256
[  243.215536][ T4274] XFS (loop2): Unmounting Filesystem
[  243.224512][ T4324] usb 4-1: USB disconnect, device number 16
[  243.957763][ T8943] loop4: detected capacity change from 0 to 8192
[  243.998296][ T8943] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  244.017180][ T8943] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  244.106911][ T4290] Bluetooth: hci3: command 0x040f tx timeout
[  244.113329][ T8943] REISERFS (device loop4): using ordered data mode
[  244.158144][ T8943] reiserfs: using flush barriers
[  244.194828][ T8943] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  244.269303][ T8943] REISERFS (device loop4): checking transaction log (loop4)
[  244.299881][ T8943] REISERFS (device loop4): Using r5 hash to sort names
[  244.323000][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'.
[  244.339169][ T8943] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  244.365769][   T27] audit: type=1800 audit(1785437484.055:102): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1857" name="file1" dev="loop4" ino=2 res=0 errno=0
[  244.459465][   T47] device hsr_slave_0 left promiscuous mode
[  244.477031][ T8023] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  244.500860][   T47] device hsr_slave_1 left promiscuous mode
[  244.532957][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.553799][   T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.594567][   T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.613910][   T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.655094][   T47] device bridge_slave_1 left promiscuous mode
[  244.676516][ T8023] usb 2-1: unable to get BOS descriptor or descriptor too short
[  244.699885][ T8023] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  244.720999][   T47] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.778616][ T8023] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  244.803764][ T8023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.837259][ T8023] usb 2-1: Product: syz
[  244.841694][ T8023] usb 2-1: Manufacturer: syz
[  244.855139][ T8023] usb 2-1: SerialNumber: syz
[  244.886084][ T8960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  244.899724][   T47] device bridge_slave_0 left promiscuous mode
[  244.909536][   T47] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.948308][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1868'.
[  245.116614][   T47] device veth1_macvtap left promiscuous mode
[  245.124318][   T47] device veth0_macvtap left promiscuous mode
[  245.154867][   T47] device veth1_vlan left promiscuous mode
[  245.175231][   T47] device veth0_vlan left promiscuous mode
[  245.332391][ T8960] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  245.581836][ T8023] usb 2-1: USB disconnect, device number 13
[  245.690248][ T8975] loop2: detected capacity change from 0 to 32768
[  245.759369][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  245.816341][ T8975] XFS (loop2): Mounting V5 Filesystem
[  245.909930][ T8975] XFS (loop2): Ending clean mount
[  246.047649][ T4274] XFS (loop2): Unmounting Filesystem
[  246.200911][ T4290] Bluetooth: hci3: command 0x0419 tx timeout
[  246.703563][ T9022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1883'.
[  246.881249][   T47] team0 (unregistering): Port device team_slave_1 removed
[  246.962357][   T47] team0 (unregistering): Port device team_slave_0 removed
[  247.040031][   T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.162967][   T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.177622][ T9032] loop1: detected capacity change from 0 to 512
[  247.289456][ T9032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  247.300694][ T9032] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.407473][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  248.005258][   T47] bond0 (unregistering): Released all slaves
[  248.268080][ T8805] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  248.308753][ T8805] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  248.364861][ T8805] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  248.437320][ T8805] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  248.465975][ T9058] loop3: detected capacity change from 0 to 512
[  248.504468][ T9058] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  248.580104][ T9058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  248.657786][ T9058] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.1899: bad orphan inode 15
[  248.756475][ T9058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  248.798058][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.813538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  248.822788][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  248.919917][ T8805] 8021q: adding VLAN 0 to HW filter on device team0
[  248.927432][ T9058] EXT4-fs error (device loop3): ext4_lookup:1850: inode #2: comm syz.3.1899: bad inode number: 16
[  248.965190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  248.984546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  249.053007][ T9074] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.1899: reserved inode found cleared - inode=17
[  249.061752][ T9051] loop2: detected capacity change from 0 to 32768
[  249.068511][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.080084][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.159763][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  249.180286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  249.211235][ T9051] XFS (loop2): Mounting V5 Filesystem
[  249.218048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  249.253054][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.260285][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.322555][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  249.334807][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  249.362529][ T9051] XFS (loop2): Ending clean mount
[  249.378108][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  249.427703][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  249.460628][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  249.522872][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  249.558908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  249.611186][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  249.638803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  249.670796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  249.691277][ T8805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  249.727440][ T8805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  249.755592][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  249.781272][ T4274] XFS (loop2): Unmounting Filesystem
[  249.785066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  250.401764][ T9116] loop4: detected capacity change from 0 to 1024
[  250.571083][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  250.588268][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  250.602468][ T8805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.659433][ T9159] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  251.687929][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  251.697547][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  251.770730][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  251.790342][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  251.853874][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  251.890079][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  251.940960][ T8805] device veth0_vlan entered promiscuous mode
[  251.941501][ T9166] loop3: detected capacity change from 0 to 1024
[  251.955142][ T9167] tipc: Started in network mode
[  251.960243][ T9167] tipc: Node identity ac141441, cluster identity 4711
[  251.986819][ T9167] tipc: Enabled bearer <udp:syz2>, priority 10
[  252.031374][ T8805] device veth1_vlan entered promiscuous mode
[  252.073844][ T9166] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 2: comm syz.3.1928: lblock 2 mapped to illegal pblock 2 (length 1)
[  252.089342][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  252.153079][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  252.187779][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  252.195869][ T9166] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  252.221866][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  252.252285][ T9166] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 48: comm syz.3.1928: lblock 0 mapped to illegal pblock 48 (length 1)
[  252.272607][ T8805] device veth0_macvtap entered promiscuous mode
[  252.280219][ T9166] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  252.292926][ T9166] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.1928: Failed to acquire dquot type 0
[  252.315272][ T9177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'.
[  252.329373][ T9166] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  252.370515][ T9166] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #11: comm syz.3.1928: mark_inode_dirty error
[  252.383722][ T8805] device veth1_macvtap entered promiscuous mode
[  252.445050][ T9166] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  252.466915][ T9166] EXT4-fs (loop3): 1 orphan inode deleted
[  252.469124][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.473215][ T9166] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  252.507398][   T33] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  252.535547][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.550484][   T33] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  252.574956][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.613331][   T33] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:2: Failed to release dquot type 0
[  252.641169][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.676366][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.716928][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.764844][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.789177][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.811847][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.827315][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  252.853707][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  252.864912][   T11] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  252.885059][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  252.905484][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  252.914976][   T11] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  252.929909][   T11] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 0
[  252.954894][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  252.980244][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.993712][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.008742][ T4272] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  253.028736][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.044289][ T4272] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  253.064382][ T4272] EXT4-fs error (device loop3): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  253.081788][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.093058][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.156728][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.173425][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.205418][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.245085][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.259466][ T4324] tipc: Node number set to 2886997057
[  253.276190][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  253.294513][ T9198] sock: sock_set_timeout: `syz.4.1942' (pid 9198) tries to set negative timeout
[  253.300720][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  253.340924][ T9194] IPVS: Error connecting to the multicast addr
[  253.363060][ T8805] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.380568][ T8805] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.392428][ T8805] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.405520][ T8805] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.568169][ T9186] loop1: detected capacity change from 0 to 32768
[  253.606385][ T9205] sctp: [Deprecated]: syz.2.1945 (pid 9205) Use of int in max_burst socket option.
[  253.606385][ T9205] Use struct sctp_assoc_value instead
[  253.664404][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.693950][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.726887][ T9186] XFS (loop1): Mounting V5 Filesystem
[  253.790756][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  253.791919][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.862863][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.912102][ T9186] XFS (loop1): Ending clean mount
[  253.939017][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  253.959517][ T9186] XFS (loop1): Quotacheck needed: Please wait.
[  254.110678][ T9186] XFS (loop1): Quotacheck: Done.
[  254.248992][ T8030] Process accounting resumed
[  254.297033][ T4273] XFS (loop1): Unmounting Filesystem
[  254.356236][ T9230] Process accounting resumed
[  254.941874][ T9260] loop4: detected capacity change from 0 to 512
[  255.004663][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1962'.
[  255.026485][ T9260] EXT4-fs (loop4): 1 truncate cleaned up
[  255.110473][ T9260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  255.237485][   T27] audit: type=1800 audit(1785437494.935:103): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1961" name="file1" dev="loop4" ino=15 res=0 errno=0
[  255.378660][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  255.708576][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  255.746820][ T4317] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  255.854708][ T9266] loop5: detected capacity change from 0 to 40427
[  255.870130][ T9265] loop1: detected capacity change from 0 to 32768
[  255.907622][ T9266] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff
[  255.922365][ T9266] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4
[  255.936980][ T4317] usb 3-1: Using ep0 maxpacket: 32
[  255.948130][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.982047][ T9266] F2FS-fs (loop5): invalid crc value
[  255.996989][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.025677][ T9266] F2FS-fs (loop5): Found nat_bits in checkpoint
[  256.064985][ T4317] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  256.119832][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.163966][ T4317] usb 3-1: config 0 descriptor??
[  256.222508][ T9266] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  256.364493][ T9266] syz.5.1963: attempt to access beyond end of device
[  256.364493][ T9266] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  256.475171][ T9278] loop4: detected capacity change from 0 to 32768
[  256.590400][ T9278] JBD2: Ignoring recovery information on journal
[  256.596540][ T4317] ft260 0003:0403:6030.0019: item fetching failed at offset 0/2
[  256.629790][ T4317] ft260 0003:0403:6030.0019: failed to parse HID
[  256.638560][ T4317] ft260: probe of 0003:0403:6030.0019 failed with error -22
[  256.816577][ T8030] usb 3-1: USB disconnect, device number 13
[  256.836539][ T9278] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  257.026450][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  257.142811][ T8024] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  257.348527][ T8024] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  257.406469][ T8024] usb 2-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64
[  257.468935][ T8024] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  257.517147][ T8024] usb 2-1: config 0 interface 0 has no altsetting 0
[  257.532950][ T8024] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  257.544166][ T9314] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1969'.
[  257.563157][ T8024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.618821][ T8024] usb 2-1: config 0 descriptor??
[  257.622113][ T9295] loop3: detected capacity change from 0 to 32768
[  257.624412][ T9301] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  257.684849][ T9295] JBD2: Ignoring recovery information on journal
[  257.779736][ T9295] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  257.963922][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  258.104977][ T8024] elecom 0003:056E:00FB.001A: unknown main item tag 0x6
[  258.132967][ T8024] elecom 0003:056E:00FB.001A: unknown global tag 0xc
[  258.163060][ T8024] elecom 0003:056E:00FB.001A: item 0 1 1 12 parsing failed
[  258.200998][ T8024] elecom: probe of 0003:056E:00FB.001A failed with error -22
[  258.342009][ T6982] usb 2-1: USB disconnect, device number 14
[  258.390581][ T4324] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  258.576910][ T4324] usb 6-1: Using ep0 maxpacket: 16
[  258.584247][ T4324] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  258.612952][ T4324] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  258.651721][ T4324] usb 6-1: config 0 interface 0 has no altsetting 0
[  258.669236][ T4324] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 2.eb
[  258.695334][ T4324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.715739][ T4324] usb 6-1: config 0 descriptor??
[  258.944829][ T4324] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input29
[  259.096766][ T8024] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  259.187173][ T4324] usb 6-1: USB disconnect, device number 2
[  259.300718][ T8024] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  259.327876][ T8024] usb 4-1: config 0 has no interface number 0
[  259.349315][ T8024] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  259.385699][ T8024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.402488][   T27] audit: type=1326 audit(1785437499.095:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.2.1997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc620b9e019 code=0x7ffc0000
[  259.414414][ T8024] usb 4-1: Product: syz
[  259.461529][ T8024] usb 4-1: Manufacturer: syz
[  259.466176][ T8024] usb 4-1: SerialNumber: syz
[  259.499088][   T27] audit: type=1326 audit(1785437499.095:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.2.1997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc620b9e019 code=0x7ffc0000
[  259.524804][ T8024] usb 4-1: config 0 descriptor??
[  259.546581][ T8024] usb 4-1: selecting invalid altsetting 1
[  259.571373][ T8024] dvb_ttusb_budget: ttusb_init_controller: error
[  259.591906][ T8024] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  259.608764][   T27] audit: type=1326 audit(1785437499.135:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.2.1997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fc620b9e019 code=0x7ffc0000
[  259.643751][   T27] audit: type=1326 audit(1785437499.135:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.2.1997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc620b9e019 code=0x7ffc0000
[  259.680875][   T27] audit: type=1326 audit(1785437499.135:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9373 comm="syz.2.1997" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc620b9e019 code=0x7ffc0000
[  259.715673][ T9384] loop2: detected capacity change from 0 to 128
[  259.862113][ T9384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  259.917806][ T9384] ext4 filesystem being mounted at /443/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  260.067253][ T8024] DVB: Unable to find symbol stv0299_attach()
[  260.143993][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  260.215487][ T9402] loop5: detected capacity change from 0 to 764
[  260.319965][ T8024] DVB: Unable to find symbol tda8083_attach()
[  260.327335][ T8024] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  260.392642][ T8024] usb 4-1: USB disconnect, device number 17
[  260.599827][ T9414] loop5: detected capacity change from 0 to 512
[  260.651844][ T9414] EXT4-fs: Ignoring removed orlov option
[  260.732814][ T9414] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  260.854771][ T9414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  260.983101][ T9414] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.2010: corrupted in-inode xattr
[  261.036156][ T9414] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2010: couldn't read orphan inode 15 (err -117)
[  261.078260][ T9414] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  261.343606][ T8805] EXT4-fs (loop5): unmounting filesystem.
[  261.421819][ T9418] loop2: detected capacity change from 0 to 40427
[  261.473195][ T9418] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64)
[  261.513879][ T9418] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  261.561482][ T9418] F2FS-fs (loop2): invalid crc value
[  261.606462][ T9418] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  261.742545][ T9416] loop4: detected capacity change from 0 to 32768
[  261.858470][ T9418] F2FS-fs (loop2): recover fsync data on readonly fs
[  261.887330][ T9452] tipc: Started in network mode
[  261.897000][ T9452] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  261.924399][ T9418] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30
[  261.955847][ T9452] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  261.967357][ T9418] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  262.012787][ T9452] tipc: Enabled bearer <udp:syz0>, priority 10
[  262.083427][ T9418] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix.
[  262.208142][ T9461] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=470000, run fsck to fix.
[  262.369380][ T9463] loop1: detected capacity change from 0 to 1024
[  262.511108][ T9463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  263.017442][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  263.075522][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  263.112785][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  263.131679][ T8024] tipc: Node number set to 1
[  263.165008][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  263.185798][ T9485] bond0: option min_links: invalid value (18446744073709539686)
[  263.194349][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  263.227147][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  263.239650][ T9460] loop5: detected capacity change from 0 to 32768
[  263.249235][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  263.254554][ T9485] bond0: option min_links: allowed values 0 - 2147483647
[  263.274281][ T9460] 
[  263.274281][ T9460]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  263.274281][ T9460] 
[  263.289757][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  263.311774][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  263.365614][ T4273] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  263.427552][   T33] ERROR: (device loop5): diWrite: ixpxd invalid
[  263.427552][   T33] 
[  263.458543][   T33] ERROR: (device loop5): txCommit: 
[  263.458543][   T33] 
[  263.523588][   T33] jfs_write_inode: jfs_commit_inode failed!
[  263.555560][   T27] audit: type=1326 audit(1785437503.245:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9490 comm="syz.3.2038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b8f9e019 code=0x7ffc0000
[  263.555645][ T8805] 
[  263.555645][ T8805]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  263.555645][ T8805] 
[  263.666795][   T27] audit: type=1326 audit(1785437503.305:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9490 comm="syz.3.2038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f63b8f9e019 code=0x7ffc0000
[  263.689281][ T8805] 
[  263.689281][ T8805]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  263.689281][ T8805] 
[  263.743805][   T27] audit: type=1326 audit(1785437503.305:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9490 comm="syz.3.2038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b8f9e019 code=0x7ffc0000
[  263.793876][   T27] audit: type=1326 audit(1785437503.305:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9490 comm="syz.3.2038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63b8f9e019 code=0x7ffc0000
[  263.866009][ T9475] loop4: detected capacity change from 0 to 32768
[  263.958491][   T27] audit: type=1326 audit(1785437503.305:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9490 comm="syz.3.2038" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f63b8f9e019 code=0x7ffc0000
[  264.002950][ T9500] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  264.009523][ T9500] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  264.039706][ T9475] JBD2: Ignoring recovery information on journal
[  264.076170][ T9475] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  264.084578][ T9500] vhci_hcd vhci_hcd.0: Device attached
[  264.119888][ T9475] JBD2: bad block at offset 32
[  264.127145][ T9507] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2037'.
[  264.162163][ T9475] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  264.227773][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  264.234707][ T9475] (syz.4.2031,9475,0):ocfs2_get_block:150 get_block on system inode 0xffff8880757996b8 (65)
[  264.272525][ T9475] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  264.294280][ T8024] vhci_hcd: vhci_device speed not set
[  264.328177][ T9475] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  264.346023][ T9475] OCFS2: File system is now read-only.
[  264.353790][ T9475] (syz.4.2031,9475,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  264.364639][ T9475] (syz.4.2031,9475,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  264.376612][ T4317] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  264.385748][ T9475] (syz.4.2031,9475,0):ocfs2_get_clusters:624 ERROR: status = -30
[  264.394355][ T8024] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  264.414000][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.426186][ T9475] (syz.4.2031,9475,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  264.465682][ T9475] (syz.4.2031,9475,0):ocfs2_get_block:162 ERROR: get_blocks() failed, inode: 0xffff8880757996b8, block: 0
[  264.490683][ T9475] (syz.4.2031,9475,0):ocfs2_get_block:150 get_block on system inode 0xffff8880757996b8 (65)
[  264.503789][ T9475] OCFS2: ERROR (device loop4): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  264.559429][ T9475] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  264.569917][ T9475] (syz.4.2031,9475,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  264.587223][ T4317] usb 3-1: Using ep0 maxpacket: 16
[  264.595858][ T4317] usb 3-1: unable to get BOS descriptor or descriptor too short
[  264.615404][ T9475] (syz.4.2031,9475,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  264.624512][ T9475] (syz.4.2031,9475,0):ocfs2_get_clusters:624 ERROR: status = -30
[  264.637601][ T4317] usb 3-1: config 9 has an invalid interface number: 57 but max is 0
[  264.645963][ T4317] usb 3-1: config 9 has no interface number 0
[  264.652578][ T9475] (syz.4.2031,9475,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  264.654104][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.661582][ T4317] usb 3-1: config 9 interface 57 has no altsetting 0
[  264.680154][ T9475] (syz.4.2031,9475,0):ocfs2_get_block:162 ERROR: get_blocks() failed, inode: 0xffff8880757996b8, block: 0
[  264.696389][ T4317] usb 3-1: string descriptor 0 read error: -22
[  264.712309][ T4317] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  264.736761][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.769796][ T9515] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  264.776069][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  264.806575][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.956967][ T4317]  (null): keene_cmd_main failed (-71)
[  264.974110][ T9501] vhci_hcd: connection reset by peer
[  264.992555][   T76] vhci_hcd: stop threads
[  265.002894][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.012962][   T76] vhci_hcd: release socket
[  265.021208][ T4317] video4linux radio48: keene_cmd_main failed (-71)
[  265.032609][   T76] vhci_hcd: disconnect device
[  265.046792][ T4317] radio-keene 3-1:9.57: V4L2 device registered as radio48
[  265.067007][ T4317] usb 3-1: USB disconnect, device number 14
[  265.209217][ T9522] loop5: detected capacity change from 0 to 128
[  265.306027][ T9522] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  265.372736][ T9522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  265.482495][    T9] tipc: Disabling bearer <eth:batadv0>
[  265.489043][    T9] tipc: Left network mode
[  265.698310][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  265.702570][ T9535] loop5: detected capacity change from 0 to 16
[  265.709721][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  265.724001][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  265.772300][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  265.783912][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  265.791723][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  265.838307][ T4317] kernel write not supported for file /snd/seq (pid: 4317 comm: kworker/0:4)
[  265.854127][ T9535] erofs: (device loop5): erofs_read_inode: unsupported i_format 16 of nid 36
[  266.044399][ T9546] loop4: detected capacity change from 0 to 64
[  266.217479][ T9550] netlink: 'syz.2.2058': attribute type 9 has an invalid length.
[  266.225347][ T9550] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2058'.
[  266.278633][ T9552] loop5: detected capacity change from 0 to 256
[  266.957830][ T9572] netlink: 480 bytes leftover after parsing attributes in process `syz.5.2065'.
[  267.320011][ T9529] chnl_net:caif_netlink_parms(): no params data found
[  267.400885][ T9557] loop3: detected capacity change from 0 to 32768
[  267.795897][ T9571] loop2: detected capacity change from 0 to 32768
[  267.811064][ T9571] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2064 (9571)
[  267.867402][ T4284] Bluetooth: hci0: command 0x0409 tx timeout
[  268.085704][ T9571] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  268.123649][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.137121][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.156413][ T9571] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  268.173738][ T9529] device bridge_slave_0 entered promiscuous mode
[  268.191131][ T9571] BTRFS info (device loop2): using free space tree
[  268.216748][ T4328] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  268.428071][ T4328] usb 5-1: Using ep0 maxpacket: 32
[  268.434958][ T4328] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  268.443564][ T4328] usb 5-1: config 0 has no interface number 0
[  268.467101][ T4328] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  268.476189][ T4328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.491299][ T4328] usb 5-1: Product: syz
[  268.496476][ T4328] usb 5-1: Manufacturer: syz
[  268.506611][ T4328] usb 5-1: SerialNumber: syz
[  268.525876][ T4328] usb 5-1: config 0 descriptor??
[  268.574965][ T4328] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  268.590063][ T9571] BTRFS info (device loop2): enabling ssd optimizations
[  268.649492][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.654264][ T9600] loop3: detected capacity change from 0 to 32768
[  268.691171][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.717667][ T9529] device bridge_slave_1 entered promiscuous mode
[  268.736184][ T9600] JBD2: Ignoring recovery information on journal
[  268.779399][ T4328] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  268.854682][ T4328] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  268.944101][ T4274] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  268.986952][ T9600] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  269.032011][ T9529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.059866][ T9529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.251039][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  269.266793][ T4328] usb 5-1: USB disconnect, device number 14
[  269.280838][ T4328] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  269.376994][ T4328] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  269.435098][ T4328] quatech2 5-1:0.51: device disconnected
[  269.549448][ T8024] vhci_hcd: vhci_device speed not set
[  269.592431][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  269.828232][ T9529] team0: Port device team_slave_0 added
[  269.885528][ T9632] loop5: detected capacity change from 0 to 32768
[  269.903648][    T9] device hsr_slave_0 left promiscuous mode
[  269.957161][ T4284] Bluetooth: hci0: command 0x041b tx timeout
[  269.970918][ T9632] JBD2: Ignoring recovery information on journal
[  269.984858][    T9] device hsr_slave_1 left promiscuous mode
[  269.987437][ T9632] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75
[  269.999404][ T9632] JBD2: bad block at offset 32
[  270.039473][ T9632] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  270.076587][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.106228][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.133722][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.156889][ T9646] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  270.162658][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.182008][ T9632] (syz.5.2077,9632,1):ocfs2_get_block:150 get_block on system inode 0xffff8880508916b8 (65)
[  270.235307][ T9632] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  270.270033][    T9] bridge0: port 3(batadv0) entered disabled state
[  270.302846][    T9] device bridge_slave_1 left promiscuous mode
[  270.309237][ T9632] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  270.326911][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.347611][ T9646] usb 3-1: Using ep0 maxpacket: 32
[  270.354837][ T9632] OCFS2: File system is now read-only.
[  270.362156][ T9646] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  270.377137][ T9646] usb 3-1: config 0 has no interface number 0
[  270.382334][ T9632] (syz.5.2077,9632,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  270.389997][ T9646] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  270.410285][ T9646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.420073][ T9632] (syz.5.2077,9632,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  270.427131][ T9646] usb 3-1: Product: syz
[  270.436979][ T9646] usb 3-1: Manufacturer: syz
[  270.451568][ T9646] usb 3-1: SerialNumber: syz
[  270.456598][ T9664] loop3: detected capacity change from 0 to 8192
[  270.466356][ T9646] usb 3-1: config 0 descriptor??
[  270.478629][    T9] device bridge_slave_0 left promiscuous mode
[  270.484863][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.487236][ T9632] (syz.5.2077,9632,1):ocfs2_get_clusters:624 ERROR: status = -30
[  270.510216][ T9646] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  270.527030][ T9632] (syz.5.2077,9632,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  270.547005][ T4317] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  270.549064][ T9632] (syz.5.2077,9632,1):ocfs2_get_block:162 ERROR: get_blocks() failed, inode: 0xffff8880508916b8, block: 0
[  270.580423][ T9664]  loop3: p1 < > p2 < > p3 p4 < >
[  270.585557][ T9664] loop3: partition table partially beyond EOD, truncated
[  270.624252][    T9] device veth1_macvtap left promiscuous mode
[  270.630314][ T9632] (syz.5.2077,9632,1):ocfs2_get_block:150 get_block on system inode 0xffff8880508916b8 (65)
[  270.630369][ T9632] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  270.642940][ T9664] loop3: p1 start 67108864 is beyond EOD, 
[  270.668302][ T9632] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  270.684445][    T9] device veth0_macvtap left promiscuous mode
[  270.688181][ T9632] (syz.5.2077,9632,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  270.697152][    T9] device veth1_vlan left promiscuous mode
[  270.706442][ T9632] (syz.5.2077,9632,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  270.715196][ T9632] (syz.5.2077,9632,1):ocfs2_get_clusters:624 ERROR: status = -30
[  270.723650][ T9646] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  270.729713][ T9632] (syz.5.2077,9632,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  270.734725][    T9] device veth0_vlan left promiscuous mode
[  270.751648][ T9632] (syz.5.2077,9632,1):ocfs2_get_block:162 ERROR: get_blocks() failed, inode: 0xffff8880508916b8, block: 0
[  270.757031][ T9664] truncated
[  270.786940][ T4317] usb 5-1: Using ep0 maxpacket: 32
[  270.793957][ T4317] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  270.802338][ T9664] loop3: p3 start 100859904 is beyond EOD, truncated
[  270.813131][ T9646] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  270.835554][ T8805] ocfs2: Unmounting device (7,5) on (node local)
[  270.836060][ T4317] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  270.908902][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0
[  270.915610][ T4317] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  270.984855][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.048167][ T4317] usb 5-1: config 0 descriptor??
[  271.169244][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  271.182844][ T8024] usb 3-1: USB disconnect, device number 15
[  271.212701][ T8024] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  271.270414][ T8024] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  271.302718][ T8024] quatech2 3-1:0.51: device disconnected
[  271.420745][ T4430] udevd[4430]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  271.423313][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  271.489320][ T4317] redragon 0003:0C45:760B.001B: hidraw0: USB HID v10.01 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0
[  271.746288][ T8024] usb 5-1: USB disconnect, device number 15
[  271.873894][ T6982] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  272.036564][ T4284] Bluetooth: hci0: command 0x040f tx timeout
[  272.116175][ T6982] usb 6-1: Using ep0 maxpacket: 16
[  272.133860][ T6982] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10
[  272.159305][ T6982] usb 6-1: config 0 interface 0 has no altsetting 0
[  272.166067][ T6982] usb 6-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[  272.175346][ T6982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.185867][ T6982] usb 6-1: config 0 descriptor??
[  272.483612][    T9] team0 (unregistering): Port device team_slave_1 removed
[  272.566766][    T9] team0 (unregistering): Port device team_slave_0 removed
[  272.616975][ T6982] holtek_mouse 0003:04D9:A0C2.001C: hidraw0: USB HID v0.81 Device [HID 04d9:a0c2] on usb-dummy_hcd.5-1/input0
[  272.661788][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.782448][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  272.819503][ T6982] usb 6-1: USB disconnect, device number 3
[  273.481183][    T9] bond0 (unregistering): Released all slaves
[  273.748815][ T9529] team0: Port device team_slave_1 added
[  273.776921][ T9689] netlink: 'syz.2.2089': attribute type 10 has an invalid length.
[  273.887052][ T9689] team0: Port device netdevsim0 added
[  273.901082][ T9690] netlink: 'syz.2.2089': attribute type 10 has an invalid length.
[  273.943136][ T9690] team0: Port device netdevsim0 removed
[  273.953686][ T9690] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  274.035192][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.091188][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.118996][ T4284] Bluetooth: hci0: command 0x0419 tx timeout
[  274.260084][ T9529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.291324][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.306918][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.320902][ T9733] loop4: detected capacity change from 0 to 1024
[  274.440539][ T9529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.646175][ T9529] device hsr_slave_0 entered promiscuous mode
[  274.682579][ T9529] device hsr_slave_1 entered promiscuous mode
[  274.724981][ T9529] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  274.763784][ T9529] Cannot create hsr debugfs directory
[  274.964305][ T9745] loop5: detected capacity change from 0 to 4096
[  275.078360][ T9745] __ntfs_error: 2 callbacks suppressed
[  275.078377][ T9745] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  275.126781][ T9745] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  275.211157][ T9745] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  275.246100][ T9727] loop3: detected capacity change from 0 to 32768
[  275.263454][ T9745] ntfs: volume version 3.1.
[  275.458339][ T9727] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  275.478132][ T9756] loop4: detected capacity change from 0 to 1024
[  275.479611][ T9727] XFS (loop3): Mounting V5 Filesystem
[  275.496154][ T9756] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  275.664651][ T9727] XFS (loop3): Ending clean mount
[  275.757178][ T8805] ntfs: (device loop5): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  275.793663][ T9727] XFS (loop3): Quotacheck needed: Please wait.
[  275.815027][ T9529] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  275.943223][ T9727] XFS (loop3): Quotacheck: Done.
[  275.953608][ T9529] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  276.017657][ T9529] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  276.072584][ T9529] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  276.085058][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2120'.
[  276.183381][ T4272] XFS (loop3): Unmounting Filesystem
[  276.392405][ T9529] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.462879][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  276.475999][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  276.541598][ T9529] 8021q: adding VLAN 0 to HW filter on device team0
[  276.552892][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  276.562928][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  276.621889][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.629120][ T4355] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.677956][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  276.706057][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  276.745857][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  276.807366][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.814550][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.843128][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  276.857829][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  276.901909][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  276.934864][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  276.944716][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  276.971687][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  276.982895][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  277.000711][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  277.023918][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  277.064834][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  277.090347][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  277.115728][ T9529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  277.516012][ T9798] loop2: detected capacity change from 0 to 32768
[  277.579690][ T9802] loop4: detected capacity change from 0 to 32768
[  277.611384][ T9802] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2131 (9802)
[  277.630039][ T9802] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  277.640366][ T9802] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  277.649598][ T9802] BTRFS info (device loop4): using free space tree
[  277.659152][ T9798] XFS (loop2): Mounting V5 Filesystem
[  277.684287][ T9798] XFS (loop2): Ending clean mount
[  277.737762][ T4274] XFS (loop2): Unmounting Filesystem
[  278.022242][ T9802] BTRFS info (device loop4): enabling ssd optimizations
[  278.086446][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  278.100860][   T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  278.156244][ T9807] loop3: detected capacity change from 0 to 32768
[  278.193623][ T9529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.224158][ T9807] 
[  278.224158][ T9807]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.224158][ T9807] 
[  278.284230][ T4283] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.330299][ T9639] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  278.361440][ T9807] 
[  278.361440][ T9807]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.361440][ T9807] 
[  278.421601][ T9807] 
[  278.421601][ T9807]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.421601][ T9807] 
[  278.527145][ T9639] usb 6-1: Using ep0 maxpacket: 16
[  278.530615][ T9639] usb 6-1: unable to get BOS descriptor or descriptor too short
[  278.531625][ T9639] usb 6-1: config 127 has an invalid interface number: 124 but max is 0
[  278.531647][ T9639] usb 6-1: config 127 has no interface number 0
[  278.531670][ T9639] usb 6-1: config 127 interface 124 has no altsetting 0
[  278.533655][ T9639] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  278.533679][ T9639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.533697][ T9639] usb 6-1: Product: syz
[  278.533711][ T9639] usb 6-1: Manufacturer: syz
[  278.533724][ T9639] usb 6-1: SerialNumber: syz
[  278.543561][ T9807] 
[  278.543561][ T9807]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.543561][ T9807] 
[  278.543648][ T9807] 
[  278.543648][ T9807]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.543648][ T9807] 
[  278.545623][  T108] 
[  278.545623][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.545623][  T108] 
[  278.547128][ T9854] jfs_create: dtInsert returned -EIO
[  278.547173][ T9854] ERROR: (device loop3): jfs_create: 
[  278.547173][ T9854] 
[  278.548311][ T9854] ERROR: (device loop3): remounting filesystem as read-only
[  279.352272][ T9869] loop4: detected capacity change from 0 to 2048
[  279.415409][ T9869] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  279.415519][ T9869] ext4 filesystem being mounted at /480/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  279.449847][ T9639] usb 6-1: reset high-speed USB device number 4 using dummy_hcd
[  279.610369][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  279.623746][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  279.624391][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  279.646967][ T9639] usb 6-1: unable to get BOS descriptor or descriptor too short
[  279.665842][ T9639] usb 6-1: device firmware changed
[  279.702524][ T9639] usb 6-1: USB disconnect, device number 4
[  279.744954][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  279.745722][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  279.746497][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  279.747083][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  279.747971][ T9529] device veth0_vlan entered promiscuous mode
[  279.763901][ T9529] device veth1_vlan entered promiscuous mode
[  279.841463][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  279.842197][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  279.842958][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  279.843624][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  279.863383][ T9529] device veth0_macvtap entered promiscuous mode
[  280.121079][ T9529] device veth1_macvtap entered promiscuous mode
[  280.144393][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.165138][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.204794][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.230979][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.271915][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.326972][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.347750][ T9905] loop2: detected capacity change from 0 to 1024
[  280.367538][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.406703][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.455423][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.500404][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  280.517103][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  280.566114][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  280.619565][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  280.655501][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.696711][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.720515][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.741736][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.772761][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.823373][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.833766][ T9529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.866964][ T9529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.890885][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.919025][ T9913] netlink: 'syz.5.2148': attribute type 10 has an invalid length.
[  280.991044][ T9913] team0: Port device netdevsim0 added
[  281.023496][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  281.041844][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  281.055546][ T9916] netlink: 'syz.5.2148': attribute type 10 has an invalid length.
[  281.189551][ T9916] team0: Port device netdevsim0 removed
[  281.214781][ T9916] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  281.269076][ T9529] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.294108][ T9529] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.330968][ T9529] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.365188][ T9529] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.688997][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.720868][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.774806][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  281.801886][ T9946] loop5: detected capacity change from 0 to 1024
[  281.877087][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.885211][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.940773][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  283.059448][ T9990] loop6: detected capacity change from 0 to 1764
[  283.588891][ T9974] loop5: detected capacity change from 0 to 32768
[  283.619950][T10012] loop2: detected capacity change from 0 to 256
[  283.682364][T10012] exfat: Deprecated parameter 'namecase'
[  283.738730][T10012] exfat: Deprecated parameter 'namecase'
[  283.826036][T10012] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  284.403408][T10039] loop5: detected capacity change from 0 to 4096
[  284.494056][T10044] loop4: detected capacity change from 0 to 1024
[  284.523172][T10044] EXT4-fs: inline encryption not supported
[  284.553154][T10047] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.603433][T10044] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  284.711140][T10044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  285.004296][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  285.200882][T10070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2207'.
[  285.224599][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2208'.
[  285.307264][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2208'.
[  285.316207][T10072] netlink: 'syz.6.2208': attribute type 15 has an invalid length.
[  285.367043][T10072] netlink: 'syz.6.2208': attribute type 18 has an invalid length.
[  285.409924][T10079] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  285.460625][T10084] loop4: detected capacity change from 0 to 256
[  285.841774][T10100] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2217'.
[  286.028459][T10103] loop6: detected capacity change from 0 to 512
[  286.081119][T10109] loop5: detected capacity change from 0 to 256
[  286.095890][   T27] audit: type=1326 audit(1785437525.785:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.4.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37dd9e019 code=0x7ffc0000
[  286.147625][T10109] exfat: Deprecated parameter 'namecase'
[  286.195299][   T27] audit: type=1326 audit(1785437525.785:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.4.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37dd9e019 code=0x7ffc0000
[  286.225823][T10103] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  286.278306][T10116] loop4: detected capacity change from 0 to 256
[  286.286271][T10116] exfat: Deprecated parameter 'namecase'
[  286.314676][T10109] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  286.325762][T10103] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  286.365850][T10116] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  286.415932][   T27] audit: type=1326 audit(1785437525.785:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.4.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37dd9e019 code=0x7ffc0000
[  286.573665][ T9529] EXT4-fs (loop6): unmounting filesystem.
[  286.576990][   T27] audit: type=1326 audit(1785437525.785:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.4.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb37dd9e019 code=0x7ffc0000
[  286.703590][   T27] audit: type=1326 audit(1785437525.785:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.4.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37dd9e019 code=0x7ffc0000
[  286.728051][    C1] vkms_vblank_simulate: vblank timer overrun
[  286.822202][T10090] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2215 (10090)
[  286.851253][T10125] program syz.6.2226 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  286.878887][T10090] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  286.910001][   T27] audit: type=1326 audit(1785437525.785:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.4.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37dd9e019 code=0x7ffc0000
[  286.937086][T10128] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  286.955836][T10090] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  287.006872][T10090] BTRFS info (device loop3): setting nodatacow, compression disabled
[  287.015033][T10090] BTRFS info (device loop3): setting datasum, datacow enabled
[  287.032834][   T27] audit: type=1326 audit(1785437525.785:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.4.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37dd9e019 code=0x7ffc0000
[  287.076769][T10090] BTRFS info (device loop3): force clearing of disk cache
[  287.104419][T10090] BTRFS info (device loop3): enabling ssd optimizations
[  287.148135][T10090] BTRFS info (device loop3): using spread ssd allocation scheme
[  287.166061][   T27] audit: type=1326 audit(1785437525.785:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.4.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb37dd9e019 code=0x7ffc0000
[  287.190888][    C1] vkms_vblank_simulate: vblank timer overrun
[  287.207376][T10090] BTRFS info (device loop3): turning on sync discard
[  287.224396][T10090] BTRFS info (device loop3): turning off barriers
[  287.256817][T10090] BTRFS info (device loop3): setting nodatacow, compression disabled
[  287.277618][T10090] BTRFS info (device loop3): not using ssd optimizations
[  287.284715][T10090] BTRFS info (device loop3): not using spread ssd allocation scheme
[  287.304980][   T27] audit: type=1326 audit(1785437525.785:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.4.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37dd9e019 code=0x7ffc0000
[  287.329195][    C1] vkms_vblank_simulate: vblank timer overrun
[  287.367559][T10090] BTRFS info (device loop3): using free space tree
[  287.576356][   T27] audit: type=1326 audit(1785437525.785:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10105 comm="syz.4.2222" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb37dd9e019 code=0x7ffc0000
[  287.649800][T10160] set_capacity_and_notify: 1 callbacks suppressed
[  287.649826][T10160] loop5: detected capacity change from 0 to 256
[  287.850304][T10090] BTRFS info (device loop3): rebuilding free space tree
[  288.336123][T10090] BTRFS info (device loop3): balance: start -sconvert=single,soft
[  288.361003][T10189] loop2: detected capacity change from 0 to 2048
[  288.382397][T10090] BTRFS info (device loop3): balance: ended with status: 0
[  288.447651][T10195] loop4: detected capacity change from 0 to 512
[  288.477611][T10197] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  288.598364][T10195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  288.806009][T10195] EXT4-fs error (device loop4): ext4_get_first_dir_block:3583: inode #12: comm syz.4.2247: Directory block failed checksum
[  288.904350][ T4272] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  289.167666][T10211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2251'.
[  289.187840][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  289.204606][T10179] loop6: detected capacity change from 0 to 32768
[  289.349318][T10179] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  289.510943][T10220] loop2: detected capacity change from 0 to 256
[  289.539948][T10220] exfat: Deprecated parameter 'namecase'
[  289.545720][T10220] exfat: Deprecated parameter 'namecase'
[  289.601589][T10220] exfat: Deprecated parameter 'utf8'
[  289.654621][ T9529] ocfs2: Unmounting device (7,6) on (node local)
[  289.674541][T10220] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  289.808204][T10224] loop4: detected capacity change from 0 to 256
[  289.841112][T10224] exfat: Deprecated parameter 'namecase'
[  289.913638][T10224] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  290.113065][ T8199] kernel write not supported for file [eventfd] (pid: 8199 comm: kworker/1:18)
[  290.192749][T10234] loop3: detected capacity change from 0 to 1024
[  290.283132][T10234] EXT4-fs error (device loop3): __ext4_fill_super:5465: comm syz.3.2250: inode #2: comm syz.3.2250: iget: illegal inode #
[  290.346589][T10234] EXT4-fs (loop3): get root inode failed
[  290.352651][T10234] EXT4-fs (loop3): mount failed
[  290.424530][T10244] loop2: detected capacity change from 0 to 512
[  290.461677][ T4430] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  290.517647][T10244] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  290.541895][T10244] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  290.566815][T10244] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2260: Corrupt directory, running e2fsck is recommended
[  290.695284][T10244] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  290.730182][T10244] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.2260: corrupted in-inode xattr
[  290.780622][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'.
[  290.789976][T10244] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2260: couldn't read orphan inode 15 (err -117)
[  290.835422][T10244] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  291.112181][T10244] EXT4-fs: Cannot specify journal on remount
[  291.242544][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  291.353834][T10274] loop3: detected capacity change from 0 to 512
[  291.428675][T10274] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  291.471129][T10274] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  291.480722][T10274] System zones: 0-1, 15-15, 18-18, 34-34
[  291.493948][T10274] EXT4-fs (loop3): orphan cleanup on readonly fs
[  291.493988][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  291.493997][   T27] audit: type=1326 audit(1785437531.185:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10275 comm="syz.2.2270" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc620b9e019 code=0x0
[  291.500489][T10274] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  291.526935][T10280] device bridge0 entered promiscuous mode
[  291.535902][T10274] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  291.562642][T10274] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  291.580646][T10274] EXT4-fs (loop3): 1 truncate cleaned up
[  291.596765][T10274] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  291.632090][T10280] bridge0: port 3(macvlan2) entered blocking state
[  291.672773][T10280] bridge0: port 3(macvlan2) entered disabled state
[  291.690726][T10274] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  291.703501][T10280] device bridge0 left promiscuous mode
[  291.736972][ T8024] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  291.807123][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  291.926716][ T8024] usb 6-1: Using ep0 maxpacket: 32
[  291.939469][ T8024] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  291.975145][ T8024] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  292.012318][ T8024] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  292.079639][ T8024] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  292.102640][T10296] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2277'.
[  292.128909][ T8024] usb 6-1: config 0 interface 0 has no altsetting 0
[  292.155465][ T8024] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  292.176285][ T8024] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  292.205850][ T8024] usb 6-1: Product: syz
[  292.208684][T10304] loop3: detected capacity change from 0 to 512
[  292.213925][ T8024] usb 6-1: Manufacturer: syz
[  292.222492][ T8024] usb 6-1: SerialNumber: syz
[  292.239026][ T8024] usb 6-1: config 0 descriptor??
[  292.252086][ T8024] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  292.316465][ T8024] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  292.325690][T10304] EXT4-fs: Ignoring removed bh option
[  292.409278][T10304] EXT4-fs (loop3): Test dummy encryption mode enabled
[  292.440850][T10304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  292.533843][ T8024] usb 6-1: USB disconnect, device number 5
[  292.536046][T10304] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.2279: inode has both inline data and extents flags
[  292.556523][ T8024] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  292.626388][T10304] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2279: couldn't read orphan inode 15 (err -117)
[  292.659188][T10312] NILFS (loop2): invalid segment: Checksum error in segment payload
[  292.680690][T10304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  292.696979][T10312] NILFS (loop2): trying rollback from an earlier position
[  292.768244][T10312] NILFS (loop2): recovery complete
[  292.795355][T10322] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  292.938497][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  293.202771][T10334] set_capacity_and_notify: 1 callbacks suppressed
[  293.202786][T10334] loop2: detected capacity change from 0 to 128
[  293.723974][T10358] netlink: 'syz.4.2299': attribute type 62 has an invalid length.
[  293.736196][T10353] loop6: detected capacity change from 0 to 2048
[  294.064375][T10350] loop3: detected capacity change from 0 to 16384
[  294.204586][T10374] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  294.260630][T10377] loop2: detected capacity change from 0 to 256
[  294.344959][T10377] exFAT-fs (loop2): bogus data start sector
[  294.378457][T10377] exFAT-fs (loop2): failed to read boot sector
[  294.405328][T10377] exFAT-fs (loop2): failed to recognize exfat type
[  294.467266][T10382] Bluetooth: MGMT ver 1.22
[  294.736248][T10387] loop6: detected capacity change from 0 to 2048
[  294.841730][T10395] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  294.909357][   T27] audit: type=1800 audit(1785437534.605:131): pid=10387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2310" name="file1" dev="loop6" ino=15 res=0 errno=0
[  295.496093][T10379] loop4: detected capacity change from 0 to 32768
[  295.590744][T10379] JBD2: Ignoring recovery information on journal
[  295.605628][T10419] loop6: detected capacity change from 0 to 1024
[  295.624786][T10419] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  295.767123][ T8020] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  295.846884][T10379] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  295.976874][ T8020] usb 6-1: Using ep0 maxpacket: 32
[  295.983900][ T8020] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  296.016157][T10379] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  296.016456][T10379] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  296.029384][ T8020] usb 6-1: config 0 has no interface number 0
[  296.062091][T10432] loop2: detected capacity change from 0 to 1024
[  296.067552][T10379] OCFS2: Returning error to the calling process.
[  296.081387][T10379] (syz.4.2307,10379,0):ocfs2_setattr:1299 ERROR: status = -117
[  296.090641][ T8020] usb 6-1: config 0 interface 12 has no altsetting 0
[  296.105701][ T8020] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  296.126861][T10432] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  296.136248][ T8020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.166200][ T8020] usb 6-1: Product: syz
[  296.175257][ T8020] usb 6-1: Manufacturer: syz
[  296.186828][ T8020] usb 6-1: SerialNumber: syz
[  296.223661][ T8020] usb 6-1: config 0 descriptor??
[  296.256419][T10432] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  296.326571][ T4283] ocfs2: Unmounting device (7,4) on (node local)
[  296.489140][T10440] loop3: detected capacity change from 0 to 512
[  296.523694][T10440] EXT4-fs (loop3): unsupported inode size: 127
[  296.548520][T10440] EXT4-fs (loop3): blocksize: 4096
[  296.754141][T10452] loop6: detected capacity change from 0 to 512
[  296.871764][T10450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  296.881225][T10452] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  296.896365][ T8020] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 80 failed: -71
[  296.916829][T10452] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.927102][ T8020] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  296.934908][ T8020] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  296.995924][ T8020] f81534: probe of 6-1:0.12 failed with error -71
[  297.023676][T10452] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  297.056110][ T8020] usb 6-1: USB disconnect, device number 6
[  297.123241][ T4283] EXT4-fs (loop4): unmounting filesystem.
[  297.217918][T10466] NILFS (loop3): invalid segment: Magic number mismatch
[  297.235716][ T9529] EXT4-fs (loop6): unmounting filesystem.
[  297.256749][T10466] NILFS (loop3): trying rollback from an earlier position
[  297.332770][T10466] NILFS (loop3): recovery complete
[  297.367572][T10472] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  298.768007][ T1182] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  298.844474][T10501] set_capacity_and_notify: 3 callbacks suppressed
[  298.844489][T10501] loop5: detected capacity change from 0 to 32768
[  298.903157][T10501] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2347 (10501)
[  298.932425][T10516] loop3: detected capacity change from 0 to 32768
[  298.968605][ T1182] usb 5-1: Using ep0 maxpacket: 8
[  298.976247][ T1182] usb 5-1: unable to get BOS descriptor or descriptor too short
[  298.990270][ T1182] usb 5-1: config 4 interface 0 has no altsetting 0
[  299.003927][ T1182] usb 5-1: string descriptor 0 read error: -22
[  299.015650][ T1182] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  299.030228][ T1182] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  299.035563][T10501] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  299.049593][T10516] JBD2: Ignoring recovery information on journal
[  299.063254][ T1182] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  299.088353][ T1182] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  299.117127][ T1182] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  299.124776][ T1182] usb 5-1: media controller created
[  299.137059][T10501] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  299.150963][T10501] BTRFS info (device loop5): setting nodatacow, compression disabled
[  299.164431][ T1182] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  299.165504][T10516] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  299.175731][T10501] BTRFS info (device loop5): setting datasum, datacow enabled
[  299.203126][T10501] BTRFS info (device loop5): force clearing of disk cache
[  299.253740][T10501] BTRFS info (device loop5): enabling ssd optimizations
[  299.297097][T10501] BTRFS info (device loop5): using spread ssd allocation scheme
[  299.304834][T10501] BTRFS info (device loop5): turning on sync discard
[  299.354851][T10501] BTRFS info (device loop5): turning off barriers
[  299.383576][T10501] BTRFS info (device loop5): setting nodatacow, compression disabled
[  299.404560][T10516] 
[  299.406928][T10516] ======================================================
[  299.413954][T10516] WARNING: possible circular locking dependency detected
[  299.420899][T10501] BTRFS info (device loop5): not using ssd optimizations
[  299.420972][T10516] syzkaller #0 Not tainted
[  299.432444][T10516] ------------------------------------------------------
[  299.437303][T10501] BTRFS info (device loop5): not using spread ssd allocation scheme
[  299.439456][T10516] syz.3.2354/10516 is trying to acquire lock:
[  299.439468][T10516] ffff8880553dcda0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_reflink+0x4cb/0x920
[  299.464074][T10516] 
[  299.464074][T10516] but task is already holding lock:
[  299.471451][T10516] ffff8880553dce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_reflink+0x4bc/0x920
[  299.480682][T10516] 
[  299.480682][T10516] which lock already depends on the new lock.
[  299.480682][T10516] 
[  299.491074][T10516] 
[  299.491074][T10516] the existing dependency chain (in reverse order) is:
[  299.500072][T10516] 
[  299.500072][T10516] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  299.507878][T10516]        down_read+0x42/0x2d0
[  299.512547][T10516]        ocfs2_init_acl+0x307/0x770
[  299.517754][T10516]        ocfs2_mknod+0x18e0/0x2580
[  299.522867][T10516]        vfs_mknod+0x430/0x4c0
[  299.527627][T10516]        do_mknodat+0x356/0x4d0
[  299.532479][T10516]        __x64_sys_mknodat+0xa5/0xc0
[  299.537757][T10516]        do_syscall_64+0x4c/0xa0
[  299.542686][T10516]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  299.549095][T10516] 
[  299.549095][T10516] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  299.557608][T10516]        down_read+0x42/0x2d0
[  299.562285][T10516]        ocfs2_start_trans+0x3a4/0x6f0
[  299.567736][T10516]        ocfs2_shutdown_local_alloc+0x1f3/0xac0
[  299.573962][T10516]        ocfs2_dismount_volume+0x1ff/0x940
[  299.579757][T10516]        generic_shutdown_super+0x130/0x340
[  299.585643][T10516]        kill_block_super+0x7c/0xe0
[  299.590835][T10516]        deactivate_locked_super+0x93/0xf0
[  299.596630][T10516]        cleanup_mnt+0x471/0x4f0
[  299.601560][T10516]        task_work_run+0x1d0/0x260
[  299.606661][T10516]        exit_to_user_mode_loop+0xe6/0x110
[  299.612459][T10516]        exit_to_user_mode_prepare+0xee/0x180
[  299.618515][T10516]        syscall_exit_to_user_mode+0x16/0x40
[  299.624482][T10516]        do_syscall_64+0x58/0xa0
[  299.629412][T10516]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  299.635818][T10516] 
[  299.635818][T10516] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  299.643284][T10516]        ocfs2_start_trans+0x2a5/0x6f0
[  299.648738][T10516]        ocfs2_setattr+0xdb2/0x1d90
[  299.653928][T10516]        notify_change+0xca0/0xf90
[  299.659033][T10516]        chown_common+0x489/0x640
[  299.664048][T10516]        ksys_fchown+0xe2/0x150
[  299.668927][T10516]        __x64_sys_fchown+0x76/0x80
[  299.674121][T10516]        do_syscall_64+0x4c/0xa0
[  299.679060][T10516]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  299.685474][T10516] 
[  299.685474][T10516] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  299.694236][T10516]        __lock_acquire+0x2d18/0x7c40
[  299.699601][T10516]        lock_acquire+0x1bb/0x4a0
[  299.704622][T10516]        down_write+0x36/0x60
[  299.709290][T10516]        ocfs2_reflink+0x4cb/0x920
[  299.714394][T10516]        ocfs2_vfs_reflink+0x333/0x450
[  299.719840][T10516]        ocfs2_reflink_ioctl+0x39c/0x440
[  299.725482][T10516]        ocfs2_ioctl+0x584/0x7c0
[  299.730413][T10516]        __se_sys_ioctl+0xfa/0x170
[  299.735515][T10516]        do_syscall_64+0x4c/0xa0
[  299.740445][T10516]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  299.746850][T10516] 
[  299.746850][T10516] other info that might help us debug this:
[  299.746850][T10516] 
[  299.757068][T10516] Chain exists of:
[  299.757068][T10516]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  299.757068][T10516] 
[  299.772266][T10516]  Possible unsafe locking scenario:
[  299.772266][T10516] 
[  299.779708][T10516]        CPU0                    CPU1
[  299.785061][T10516]        ----                    ----
[  299.790425][T10516]   lock(&oi->ip_xattr_sem);
[  299.795005][T10516]                                lock(&journal->j_trans_barrier);
[  299.802796][T10516]                                lock(&oi->ip_xattr_sem);
[  299.809907][T10516]   lock(&ocfs2_file_ip_alloc_sem_key);
[  299.815460][T10516] 
[  299.815460][T10516]  *** DEADLOCK ***
[  299.815460][T10516] 
[  299.823695][T10516] 4 locks held by syz.3.2354/10516:
[  299.828892][T10516]  #0: ffff888057942460 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  299.838175][T10516]  #1: ffff88805087d108 (&type->i_mutex_dir_key#21/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  299.848900][T10516]  #2: ffff8880553dd108 (&sb->s_type->i_mutex_key#35){+.+.}-{3:3}, at: ocfs2_vfs_reflink+0x2f3/0x450
[  299.859783][T10516]  #3: ffff8880553dce38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_reflink+0x4bc/0x920
[  299.869454][T10516] 
[  299.869454][T10516] stack backtrace:
[  299.875329][T10516] CPU: 1 PID: 10516 Comm: syz.3.2354 Not tainted syzkaller #0
[  299.882774][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  299.892821][T10516] Call Trace:
[  299.896091][T10516]  <TASK>
[  299.899016][T10516]  dump_stack_lvl+0x188/0x24e
[  299.903702][T10516]  ? load_image+0x410/0x410
[  299.908459][T10516]  ? show_regs_print_info+0x12/0x12
[  299.913668][T10516]  ? print_circular_bug+0x12b/0x1a0
[  299.918869][T10516]  check_noncircular+0x296/0x330
[  299.923814][T10516]  ? add_chain_block+0x9b0/0x9b0
[  299.928745][T10516]  ? lockdep_lock+0xf1/0x1f0
[  299.933371][T10516]  ? lockdep_unlock+0x142/0x2e0
[  299.938215][T10516]  ? _find_first_zero_bit+0xd2/0x100
[  299.943493][T10516]  __lock_acquire+0x2d18/0x7c40
[  299.948363][T10516]  ? ocfs2_file_lock+0x740/0xca0
[  299.953291][T10516]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  299.959264][T10516]  ? verify_lock_unused+0x140/0x140
[  299.964457][T10516]  ? ocfs2_inode_lock_full_nested+0xaaa/0x1b10
[  299.970617][T10516]  ? lockdep_hardirqs_on+0x94/0x140
[  299.975812][T10516]  lock_acquire+0x1bb/0x4a0
[  299.980360][T10516]  ? ocfs2_reflink+0x4cb/0x920
[  299.985119][T10516]  ? __might_sleep+0xd0/0xd0
[  299.989700][T10516]  ? read_lock_is_recursive+0x10/0x10
[  299.995063][T10516]  ? rwsem_write_trylock+0x135/0x1c0
[  300.000342][T10516]  ? clear_nonspinnable+0x60/0x60
[  300.005361][T10516]  ? ocfs2_create_new_inode_locks+0x690/0x690
[  300.011436][T10516]  down_write+0x36/0x60
[  300.015586][T10516]  ? ocfs2_reflink+0x4cb/0x920
[  300.020346][T10516]  ocfs2_reflink+0x4cb/0x920
[  300.024930][T10516]  ? ocfs2_clear_ext_refcount+0x7a0/0x7a0
[  300.030658][T10516]  ? memset+0x1e/0x40
[  300.034654][T10516]  ? __dquot_initialize+0x21b/0xd00
[  300.039864][T10516]  ? kasan_quarantine_put+0xd4/0x210
[  300.045152][T10516]  ? rwsem_write_trylock+0x135/0x1c0
[  300.050436][T10516]  ? dquot_initialize+0x20/0x20
[  300.055285][T10516]  ? slab_free_freelist_hook+0x133/0x1b0
[  300.060927][T10516]  ? HAS_UNMAPPED_ID+0x1c5/0x220
[  300.065861][T10516]  ocfs2_vfs_reflink+0x333/0x450
[  300.070803][T10516]  ocfs2_reflink_ioctl+0x39c/0x440
[  300.075902][T10516]  ? ocfs2_add_refcount_flag+0xf10/0xf10
[  300.081526][T10516]  ? __lock_acquire+0x7c40/0x7c40
[  300.086541][T10516]  ? tomoyo_path_number_perm+0x5a4/0x650
[  300.092165][T10516]  ? tomoyo_path_number_perm+0x205/0x650
[  300.097787][T10516]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  300.103245][T10516]  ? __might_fault+0xa6/0x120
[  300.107911][T10516]  ? __might_fault+0xc2/0x120
[  300.112839][T10516]  ? __might_fault+0xa6/0x120
[  300.117505][T10516]  ocfs2_ioctl+0x584/0x7c0
[  300.121921][T10516]  ? ocfs2_fileattr_set+0x800/0x800
[  300.127156][T10516]  ? __fget_files+0x28/0x460
[  300.131749][T10516]  ? bpf_lsm_file_ioctl+0x5/0x10
[  300.136681][T10516]  ? security_file_ioctl+0x7c/0xa0
[  300.141785][T10516]  ? ocfs2_fileattr_set+0x800/0x800
[  300.146977][T10516]  __se_sys_ioctl+0xfa/0x170
[  300.151556][T10516]  do_syscall_64+0x4c/0xa0
[  300.155969][T10516]  ? clear_bhb_loop+0x60/0xb0
[  300.160639][T10516]  ? clear_bhb_loop+0x60/0xb0
[  300.165307][T10516]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  300.171193][T10516] RIP: 0033:0x7f63b8f9e019
[  300.175602][T10516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  300.195204][T10516] RSP: 002b:00007f63b9e43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  300.203643][T10516] RAX: ffffffffffffffda RBX: 00007f63b9225fa0 RCX: 00007f63b8f9e019
[  300.211604][T10516] RDX: 0000200000000180 RSI: 0000000040186f04 RDI: 0000000000000004
[  300.219567][T10516] RBP: 00007f63b903500c R08: 0000000000000000 R09: 0000000000000000
[  300.227530][T10516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.235489][T10516] R13: 00007f63b9226038 R14: 00007f63b9225fa0 R15: 00007ffcf0bed008
[  300.243452][T10516]  </TASK>
[  300.246550][    C1] vkms_vblank_simulate: vblank timer overrun
[  300.257080][T10501] BTRFS info (device loop5): using free space tree
[  300.268378][ T1182] zl10353_read_register: readreg error (reg=127, ret==0)
[  300.275670][T10518] usb 5-1: dvb_usb_au6610: wlen=0, aborting
[  300.323949][ T1182] usb 5-1: USB disconnect, device number 16
[  300.448873][T10501] BTRFS info (device loop5): rebuilding free space tree
[  300.538372][   T27] audit: type=1800 audit(1785437540.235:132): pid=10501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2347" name="file1" dev="loop5" ino=260 res=0 errno=0
[  300.571236][T10501] BTRFS info (device loop5): balance: start -sconvert=single,soft
[  300.580839][T10501] BTRFS info (device loop5): balance: ended with status: 0
[  300.595311][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  300.624028][ T8805] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d