last executing test programs:

1m39.956708033s ago: executing program 2 (id=795):
syz_mount_image$hfsplus(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x2000012, &(0x7f0000000400)=ANY=[], 0x4, 0x6f7, &(0x7f00000005c0)="$eJzs3c9vHGcZB/DvrNc/NlTBaRMaiSKsRCpIEYkTK4VwiUEI5VChqhx6thKnsbpJqsRFaUGQAoITEof+AQXJNw4IiXtQuHApt159rITUS4RQVAktmtnZ9a69jr2JYyfi84nGM+/MvO/77DPvzHjWWW2A/1uXTqV5L0UunXr9TlleX1tor68tTNeb20nK5UbS7M5S3EiK+8liub0YmDIw3+KjlQtvfvpg/bNuqVlP1f4T/Xozuwp5RB936ylzdXtzI2tO7qr9bltVeHkhyeV6Pmxqu7qbNwyVy6SdrOdw4Dpb3B2n+rbnO/Dsq+5OP/1qMlvdN7eYTQ7Vd+bqd4L66tDY1yCfgrGucgAAAPCc+uTmQUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz58i1ff/F/XUqOeZS9H7/v+p3rp6+Rm0uOs97z3VOAAAAAAAAABgf3z9YR7mTg73yp2i+pv/iapwNF90ki/lvdzOcm7ldO5kKatZza2cTTI70NDUnaXV1Vtn06xrlkbXPDey5rn9esUAAAAAAAAA8PxrbV31y7Q2/v4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgiKZ6M6q6Wjyn3Ke2TSa2diWu8k/k0wddLxjKDaV/9vpOqBwAAAA4PHMPEadLz/Mw9zJ4d7zcacon/nzlao8k/dyI6tZyWraWc6V+hm6fOpvrK8ttNfXFq6XU1kejuN7n48VxlTdwkRVGtXz8WqPVq5mpXpoP53LVTBX0uj2fTI53otnIK4BH36+EebFi7uMrFmntezs9yPeRdg794ZKjUfs2doILikzUuVovo6trHmkm4GieqMm2ZyJHY9Oc6g0W7U62e/pbBr9d36O7pzzFBdrO/Tac6iel6/nN0815+PqZ6KRKhPneqOvPGcenYnkG3/901vX2jfeuXb19qln5yXtYGKb9ZvHxMJAJl5+rjPRHHP/+SoTx/rlS/lhfpxTmcsbuZWV/CRLWc1yem80LtXjufw5++hMLSaZ7pfe2CmSqfq4dI/ZjjFNL2cuP6iiW8qJqu7hrKTIzVzJcl6r/p3L2Xw753M+FwaO8LFt465eW3XWNzaf9b0j/beRwZ/8Zr1QXt1+u3GVW3zUK95udO6V7rW/zOuRgbx2R/2D/l5HBs6D+YEsvdjLzuTIxse7Nm56q73s41c73Cf212ydifIE6t0letG91M1Es7oXbR3nf+iU9dK+0elcW3p3m/bvbiq/Ws/LYbX2tZ327hl9KPZWeahezEx9JRkeHeW2l/pXmYFtnY2x3N02fMct6x2rthVF70z9UW5WA2DrmTpV/w63qaV+Fy+P7GWhqnd8YFurv+10Ludm2rmyD/kD4HH8463+4mwOTbX+1fqk9XHr161rrddnvj/9nelXpjL598nvNucnXm28UvwlH+fn1fM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwhG6//8E7S+328q3RC43tNw0ttLJ5zXYtT49up6i/0GcXfT0XCzNJhtZU33O0J100x2intTmM7sJEknpN5xfJvuen951Wo/f5XbnQ3DKiRi0sDq3589YGPxwzwmJ358VTXGhkfzstx8KoTQd4UQL2xZnV6++euf3+B99aub709vLbyzcmz5+/MH/h/GsLZ66utJfnuz8POkrgadi46R90JAAAAAAAAAAAAMBujfpgwIkXRn5oZNzPePifhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCeuHQqzXspcnb+9HxZXl9baJdTb3ljz2aSRiMpfpYU95PFdKfMDjRX5I/30xnRz0crF9789MH6ZxttNbv7p7VzkMVOO9ytp8wlmajnT2CovctP3F7x795rKBP2RafTWXyy+GBv/C8AAP//+Bb8Cw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x101042, 0x1d)
unlinkat(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x0)
pwrite64(r0, &(0x7f0000000d80)='2', 0xfdef, 0xe7c)

1m39.527482553s ago: executing program 2 (id=799):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/threaded\x00', 0x2, 0x0)
write$P9_RREADDIR(r0, &(0x7f0000000140)={0x30, 0x29, 0x1, {0x9}}, 0xb)

1m39.361467497s ago: executing program 2 (id=801):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x32)

1m36.975529345s ago: executing program 2 (id=832):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3)

1m36.422674368s ago: executing program 2 (id=838):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r1, 0x5, 0x0, 0x1fffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}}, 0x0)

1m35.93187998s ago: executing program 2 (id=839):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/4116, 0x1005}, {&(0x7f00000025c0)=""/6, 0x6}, {&(0x7f0000002600)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)

1m35.596682988s ago: executing program 32 (id=839):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4078, 0xfee}, {&(0x7f00000014c0)=""/141, 0x8d}, {&(0x7f0000001580)=""/4116, 0x1005}, {&(0x7f00000025c0)=""/6, 0x6}, {&(0x7f0000002600)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0)

15.716921232s ago: executing program 3 (id=1707):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='./work\x00', 0x800006, &(0x7f0000000600)=ANY=[], 0x8, 0xba, &(0x7f0000000480)="$eJzs17FJBUEQBuD/3Xt6HIIN2IM9mF5uBRcaGimCVmIHtmIJ14HBpSYjq3dgZCCICt/HsjM7w8IEm+zz69NZTpO6T6qqjjNmyEd+fXN7dTm2fd8necwhLTZb5J/rUv2nQ1t5uUj/sJZac17upnmXaV7aqzipqrV59CsjAwAA39TlfM12W+n9PzB8demQZN/99GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf8JbAAAA//+BnSFD")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./lower1\x00', 0x40, 0x0)

15.394346669s ago: executing program 3 (id=1709):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000000c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
unshare(0x24020400)
pselect6(0x40, &(0x7f0000001140)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0)

15.184168124s ago: executing program 3 (id=1714):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

14.96639962s ago: executing program 3 (id=1718):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x80)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x4080)

14.750626485s ago: executing program 3 (id=1723):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x3, 0x2}})

14.56457311s ago: executing program 3 (id=1726):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000180)={[{@usrquota}, {@min_batch_time}, {@nombcache}]}, 0x1, 0x4c0, &(0x7f0000000ac0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0)=ANY=[], 0x1015, 0x0)
sync()
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000)

6.888739024s ago: executing program 1 (id=1809):
unshare(0x68040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x1c786000)
socket(0x10, 0x3, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

6.320798538s ago: executing program 1 (id=1812):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x3a0, 0x148, 0xffffffff, 0x0, 0x260, 0x4b8, 0x4b8, 0xffffffff, 0x4b8, 0x4b8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4=@remote, @port=0x4e23, @icmp_id=0x68}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xff, 0xff000000, 0xff, 0xff000000], [0x0, 0xff000000], 'ipvlan1\x00', 'dvmrp0\x00', {0xff}, {}, 0x2b, 0x9, 0x6, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x5, @ipv6=@private0, @ipv4=@empty, @gre_key=0x1, @gre_key=0xa0c}}}, {{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xffff00, 0xffffffff], 'dvmrp0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x33, 0x8, 0x1, 0xf}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@remote, @gre_key, @icmp_id=0x67}}}, {{@ipv6={@local, @mcast2, [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], [0x0, 0xff, 0xffffff00], 'macsec0\x00', 'geneve1\x00', {0xff}, {0xff}, 0x73, 0xa1, 0xa, 0x3b}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@private2, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}, @icmp_id=0x68, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

3.219105543s ago: executing program 1 (id=1834):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890)

3.131266615s ago: executing program 1 (id=1837):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

3.028521427s ago: executing program 1 (id=1838):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x676, &(0x7f0000000800)="$eJzs3c1vHGcdB/DvbNZONpTUbZM2RZUSNRIgIhI7Vgrm0oAQyqFCVTlwthInsbJJi+0it0LUvF97yB9QDr5xQEjcI8qFC9x69bESgksvmNOimZ1db/y6bhOvHT6favw8M888z/ye387s7EujDfB/6/rFNB+myPWLbyyX62ur0+211el7vXqS40kaSbNbpPhPp9P5OLmW7pKXy431cMVOx3kwP/PWJ5+tfdpda9ZLtX9jt37DWamXnE9yrC4f13g39hrvxF7DFf0Zlgm70EscjNpYkk7lXw+6W37yt2f6LQNa2/Xe88wHjoCie9/cYiI5WV/o5euA7l2xe88+0lZGHQAAAAAcgGfXs57lnBp1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU1L//X9RLo1c/n6L3+//j9bbU9cPl3P52f/ik4gAAAAAAAACAA3RuPetZzqneeqeovvN/tVo5Xf39Ut7NYuaykEtZzmyWspSFTCWZGBhofHl2aWlhqt+z938GbO15ZdueV/YI9Hhdth7HrAEAAAAAAADgqfPLXN/4/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6DIjnWLarldK8+kUYzyYkk4+V+K8k/evWj7OGoAwAAAIAvoDPkfs+uZz3LOdXvV1Tv+V+s3vefyLu5n6XMZyntzOVm9VlA911/Y211ur22On2vXLaO+91/7yvcasR0P3vY/shnqz1auZX5asul3MjbKYqbaVQ9S2d78Wwf1y/KmIrXu8aGjOxmXZYz/7Aut/hgX5PdyT4/TJmoMjLWz8hkHVuZjed2z8Q+H53NR5pKox/s6U1H2jSJR3L++pDHO1mX5Xx+u1POR2JzJq4MnH0v7p7z5Gt//sOP77Tv371za/Hi4ZnScI7VZfd5pbU1E9MDmXjpac7EFpNVJs7016/nB/lRLuZ83sxC5vPTzGYpczmf71e12fp8LgYu+R0yde2RtTf3imS8PkO7D9ajMWWPmF6t+p7KfH6Yt3Mzc3mt+u9KpvKtXM3VzAw8wmeGeKZt7HDVd768bfAXvl5XWkl+V5eV2829Jv6ElXl9biCvg8+5E1Xb4JaNLD2/j/tRL0t/3D2U5lfqSnmMX9Xl4bA5E1MDmXhh90z8vnpaWWzfv7twZ/ad4Q73/Id1pbyOfnOo7hLl+fJ8+WBVa4+eHWXbC3XbWLVs5Gu8/sal26+xpe1Mv617pa7seKWO16/hto50pWp7adu26art7EDb5tdb7f7roafhyx+Ap9bJb5wcb/2z9ffWR61ft+603jjxvePfPv7KeMb+Ovad5uSxrzZeKf6Uj/Lzjff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA57f43vt3Z9vtuYVNlU6n88EOTUe50vs5swM86MvPJKOa8niSw5H5/3Y6nXpLcRji2b3SKR1P53N2/0uS4XZuJtmu6dzokzDiJybgibu8dO+dy4vvvf/N+Xuzt+duz92fuXp1ZnLm6mvTl2/Nt+cmu39HHSXwJGzc9EcdCQAAAAAAAAAAADCsg/jnBDsf/cRBThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4oq5fTPNhikxNXpos19dWp9vl0qtv7NlM0khS/CwpPk6upbtkYmC4YqfjPJifeeuTz9Y+3Rir2du/sVu/4azUS84nOVaXj2u8G194vKI/wzJhF3qJg1H7XwAAAP//DJEGHw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc6081, 0xcc)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x82200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe89)

2.723160244s ago: executing program 1 (id=1846):
r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffffa5}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0)

1.746631738s ago: executing program 4 (id=1854):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r1 = socket(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c)

1.68388782s ago: executing program 4 (id=1855):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x4)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x40, 0x7000, 0x4, r2, 0x6})

1.515528844s ago: executing program 4 (id=1857):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nodiscard}, {@barrier}]}, 0xfe, 0x559a, &(0x7f00000144c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x7fffe, 0x5)

1.155861912s ago: executing program 0 (id=1858):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000080ffff0300000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r2, r1, 0x25, 0x0, @void}, 0x10)

1.054211115s ago: executing program 0 (id=1859):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x6, 0xfffffffe, 0x149, 0x9b, 0x2}, &(0x7f0000000140)=0x98)

894.497049ms ago: executing program 0 (id=1860):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40100, 0x8)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x641, 0x800002e, r0, 0x0)

780.911212ms ago: executing program 4 (id=1861):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}, {@force}, {@nls={'nls', 0x3d, 'macromanian'}}]}, 0x1, 0x5df, &(0x7f0000000cc0)="$eJzs3UFrHOcZB/D/rGRZcsFREjtJ3UJECsXExNauTNpCoWoxRYdgAr3kKup1LLx2grQpmxyKWvxB0oN6yqGXEig95OBzD/kCgh4LhR5FLy4zO7vaWLIs1ZJ2lfx++N15R+/MM888nnnRzgo2wHfWygc5t5kiK9fe65Xr21tLne2tpQeDfpLzSRrVv0yX3X8mU4+ShfRbvp+kqMMVzzrOl60vrnx9u3e1v9aoW7X91EH7Hc5m3bJcJ7l8jPEev3C8YniGZdBbg+CT4Mnz/ecEDz91grE5guIZ/xfzyYUks/U8MLhwG6eb3fGbmBsQAAAATtBLO9lJLxfHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJfX3/xd1awz6CykG3/8/U/8sdf9M+2rcCQAAAAAAAADAMXhzJzvp5eJg/UlRfeb/VrVyqXr9Xj7JRtpZz/X0sppuullPM8n8SKCZ3mq3u948xJ6tffdsnc75AgAAAAAAAMC31B+zsvv5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATIIimeovqnZp0J9PYzrJbJKZcrvN5O+D/ln21bgTAAAAgFPw0k520svFwfqTonrP/1r1vn82n+RhullLN520c6d6FtB/19/Y3lrqbG8tPSjb3ri//PeR0qgipv/sYf8jL1ZbXB7usZJf5ze5loW8n/Ws5XdZTTftLORW1VtNkfn66cX8IM/9813+xtr7z8v1jSqTudzNWpXb9fw2H6WTO2lU51Btc/AR/1BWp/hF7ZA1ulMvi6T4QX1mk2G+qsi5YUUW69qX1Xj54Eoc8Tp5+kjNNIbPoC6dQM0v1Muy5rOTUvMykT2VaI1cfa8dXInkne5f37zXeXj/3t2NaxNxSi/i6UosjVTi9e9UJWbqavRn0aPNlm9V+17MWm7no9xJOz/Ju2lVbalajtb18iHutcbR7rUfXa07ryTFXH85Icq6vjxS19GZbr4aG/3JbpVeOf4ZafpK3ZlKiulhTpPg6Uo0Ryrx6sGV+NOT8nWj8/D++r3Vjw95vB/Xy3JuPj8pc3Nlpr56p6u1b14d5dir+441q7FLw7HGnrHLw7Hn3akz9e9weyO1qrHX9x3r7/fGyNh+v+UAMPEuvH1hZu5fc/+Y+3zu0dy9ufdmf3X+p+d/OJNzj6f/NvWXxp8bPy/ezuf5/e77fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P+38eln91c7nfb6cXdSfzPP8UfW0TlEZ3Yy0jiznXHPTJyGG90HH9/Y+PSzd9YerH7Y/rD98OZiq/nuzebPbt64u9ZpL/Zfx50lJ2X3ph93JgAAAAAAAAAAABzFafw56bjPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLNj5YOc20yR5uL1xXJ9e2upU7ZBf3fLRpLpcvnfZOpRspB+y/xIuOJZx/my9cWVr2/3ru7Gagy2nzpov8PZrFuW6ySXjzHe4xeOVwzPsAx6axAcxu1/AQAA//+/ZBqC")
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = open(&(0x7f0000000140)='.\x00', 0x149080, 0x112)
getdents(r0, &(0x7f0000000400)=""/208, 0xd0)

760.945802ms ago: executing program 0 (id=1862):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)

594.197036ms ago: executing program 0 (id=1863):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x2000, 0x8000})

202.367165ms ago: executing program 4 (id=1864):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

72.723248ms ago: executing program 4 (id=1865):
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x48, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xffff}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38)

0s ago: executing program 0 (id=1866):
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/83}, 0x5b, 0x1, 0x0)
msgsnd(0x0, &(0x7f0000000080)={0x1}, 0x8, 0x0)
msgrcv(0x0, &(0x7f0000000200)={0x0, ""/168}, 0xb0, 0x2, 0x2000)
msgsnd(0x0, &(0x7f0000000300)={0x3, "6d2b2057ec4c0081704948600b124644371c205199e26d74fc1e90024a566a2307fa79c8717528bcaa4cd4e496b311fd395db3e021292af31398b259b3baaf1416baf9fe487961b5d4c40d6a25d8eeb191139a88551e77b0581056d962d1774a36a5551fa806bad62339f85c0f7357a569216afa6ad6efbab2993ff5653619fccf"}, 0x89, 0x0)

kernel console output (not intermixed with test programs):

 failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  175.882407][ T8271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.926641][ T8271] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.940004][ T8271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.004835][ T8271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.138524][ T8271] hsr_slave_0: entered promiscuous mode
[  176.148216][ T8271] hsr_slave_1: entered promiscuous mode
[  176.164872][ T8271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  176.172689][ T8271] Cannot create hsr debugfs directory
[  176.383232][   T42] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  176.437643][ T8387] ima: policy update failed
[  176.451988][   T27] audit: type=1802 audit(1791820358.460:15): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.879" res=0 errno=0
[  176.583587][   T42] usb 4-1: Using ep0 maxpacket: 8
[  176.611728][   T42] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  176.639795][   T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  176.654845][ T8271] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  176.662587][ T8394] loop0: detected capacity change from 0 to 128
[  176.667004][   T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  176.685761][ T8271] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  176.693763][   T42] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  176.711049][   T42] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  176.719671][ T8394] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  176.725177][ T8395] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  176.743541][ T8271] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  176.766904][ T8271] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  176.773796][   T42] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  176.806415][ T8394] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.820377][   T42] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  176.831668][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.048742][ T8271] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.086974][   T42] usb 4-1: GET_CAPABILITIES returned 0
[  177.099349][ T8271] 8021q: adding VLAN 0 to HW filter on device team0
[  177.110337][   T42] usbtmc 4-1:16.0: can't read capabilities
[  177.134658][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.141848][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.209727][ T2953] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.216960][ T2953] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.370093][ T5777] usb 4-1: USB disconnect, device number 6
[  177.629447][ T8424] net_ratelimit: 3259 callbacks suppressed
[  177.629465][ T8424] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  177.760344][ T8271] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.813410][ T5780] Bluetooth: hci2: command tx timeout
[  177.824453][ T8429] loop1: detected capacity change from 0 to 2048
[  177.892132][ T8429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.944184][ T8429] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.080324][ T8429] fs-verity: sha512 using implementation "sha512-avx2"
[  178.132479][ T8429] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.890: bg 0: block 345: padding at end of block bitmap is not set
[  178.173956][ T8429] fs-verity (loop1, inode 13): Error -28 writing Merkle tree block 0
[  178.235036][ T8429] fs-verity (loop1, inode 13): Error -28 building Merkle tree
[  178.360261][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.391970][ T8271] veth0_vlan: entered promiscuous mode
[  178.433681][ T8271] veth1_vlan: entered promiscuous mode
[  178.540884][ T8271] veth0_macvtap: entered promiscuous mode
[  178.571190][ T8271] veth1_macvtap: entered promiscuous mode
[  178.626530][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.653561][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.680936][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.705884][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.726004][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.747442][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.772052][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.817622][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.823866][ T8433] loop0: detected capacity change from 0 to 40427
[  178.864603][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.866621][ T8433] F2FS-fs (loop0): invalid crc value
[  178.911566][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.915370][ T8433] F2FS-fs (loop0): Found nat_bits in checkpoint
[  178.960220][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.010724][ T8271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.051831][ T8271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.059240][ T8433] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  179.104425][ T8271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.149414][ T8271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.202958][ T8271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.211976][ T8271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.254929][ T8271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.322028][ T5771] syz-executor: attempt to access beyond end of device
[  179.322028][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  179.405532][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  179.413049][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  179.501069][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.529444][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.612299][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.615726][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  179.639959][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.663289][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  179.687644][    T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  179.697082][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.722274][    T9] usb 4-1: Product: syz
[  179.739931][    T9] usb 4-1: Manufacturer: syz
[  179.763153][    T9] usb 4-1: SerialNumber: syz
[  179.808401][    T9] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  179.823541][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'.
[  179.863545][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'.
[  179.867591][    T9] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  179.867591][    T9]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  179.898216][ T8478] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.907422][ T8478] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.917768][ T8478] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.927040][ T8478] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.945214][ T5780] Bluetooth: hci2: command tx timeout
[  180.029538][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'.
[  180.072840][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'.
[  180.256877][    T9] ums-sddr09: probe of 4-1:1.0 failed with error -5
[  180.287864][    T9] usb 4-1: USB disconnect, device number 7
[  180.313848][ T8491] netlink: 72 bytes leftover after parsing attributes in process `syz.4.895'.
[  180.522311][ T8498] input: syz1 as /devices/virtual/input/input13
[  180.588010][ T8479] loop1: detected capacity change from 0 to 32768
[  180.662989][    T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  180.767921][ T8503] loop4: detected capacity change from 0 to 256
[  180.788495][ T8503] exfat: Deprecated parameter 'utf8'
[  180.815484][ T8503] exfat: Deprecated parameter 'utf8'
[  180.849440][ T8503] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  180.905976][    T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  180.939320][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.973474][    T8] usb 1-1: config 0 descriptor??
[  181.371199][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'.
[  181.384786][ T8513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.903'.
[  181.542725][    T8] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  181.581214][    T8] [drm] Initialized udl on minor 2
[  181.669310][ T8528] netlink: 72 bytes leftover after parsing attributes in process `syz.3.906'.
[  181.669602][    T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  181.753207][ T8530] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  181.772647][    T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  181.881750][ T8534] loop3: detected capacity change from 0 to 512
[  182.060073][ T5777] usb 1-1: USB disconnect, device number 6
[  182.064336][ T6148] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  182.078559][ T8534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.113173][ T8534] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.134990][ T6148] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  182.281130][ T6081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.601813][ T8564] netlink: 76 bytes leftover after parsing attributes in process `syz.4.918'.
[  182.641412][ T8564] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  182.827369][ T8577] netlink: 'syz.1.922': attribute type 30 has an invalid length.
[  182.831543][ T8572] loop0: detected capacity change from 0 to 512
[  182.933261][ T8572] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  183.006351][ T8577] bond1: option arp_missed_max: invalid value (0)
[  183.046562][ T8577] bond1: option arp_missed_max: allowed values 1 - 255
[  183.069782][ T8572] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.920: bg 0: block 4: invalid block bitmap
[  183.145712][ T8572] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  183.159459][ T8577] bond1 (unregistering): Released all slaves
[  183.166840][ T8572] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.920: invalid indirect mapped block 1 (level 1)
[  183.215181][ T8572] EXT4-fs (loop0): 1 truncate cleaned up
[  183.228272][ T8572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.398193][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.751552][ T8604] autofs4:pid:8604:autofs_fill_super: pipe file descriptor does not contain proper ops
[  184.339126][ T8628] loop4: detected capacity change from 0 to 512
[  184.491462][ T8628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.590029][ T8628] EXT4-fs error (device loop4): ext4_get_first_dir_block:3586: inode #12: comm syz.4.938: Directory block failed checksum
[  184.718578][ T8649] loop3: detected capacity change from 0 to 1024
[  184.735216][ T8649] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  184.771534][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.866658][ T8649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.984731][   T23] kernel write not supported for file bpf-prog (pid: 23 comm: kworker/1:0)
[  185.026186][ T6081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.052983][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.946'.
[  185.063164][ T8656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.946'.
[  185.326066][ T8666] netlink: 'syz.1.950': attribute type 12 has an invalid length.
[  185.335142][ T8666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.950'.
[  185.521611][ T8675] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  185.584767][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'.
[  185.751243][ T8690] ip_tables: iptables: counters copy to user failed while replacing table
[  185.811329][ T8694] netlink: 48 bytes leftover after parsing attributes in process `syz.0.962'.
[  185.828892][ T8696] loop3: detected capacity change from 0 to 256
[  185.832155][ T8694] lo: Caught tx_queue_len zero misconfig
[  185.923994][ T8696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.963'.
[  186.016263][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.050696][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.095520][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.142992][ T8700] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.618905][ T8725] netlink: 52 bytes leftover after parsing attributes in process `syz.4.975'.
[  186.889730][ T8740] loop4: detected capacity change from 0 to 2048
[  186.918107][ T8740] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.090978][ T8746] ima: policy update completed
[  187.094046][   T27] audit: type=1807 audit(1791820370.091:16): action=measure uid>1 res=1
[  187.112680][   T27] audit: type=1802 audit(1791820370.111:17): pid=8746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.986" res=1 errno=0
[  187.414650][ T8763] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  187.426160][ T8763] CPU: 0 PID: 8763 Comm: syz.4.993 Not tainted syzkaller #0
[  187.433527][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  187.443628][ T8763] Call Trace:
[  187.446947][ T8763]  <TASK>
[  187.449941][ T8763]  dump_stack_lvl+0x18c/0x250
[  187.454657][ T8763]  ? show_regs_print_info+0x20/0x20
[  187.459889][ T8763]  ? load_image+0x420/0x420
[  187.464448][ T8763]  sysfs_create_dir_ns+0x26e/0x2a0
[  187.469601][ T8763]  ? __lock_acquire+0x7eb0/0x7eb0
[  187.474664][ T8763]  ? sysfs_warn_dup+0xa0/0xa0
[  187.479373][ T8763]  ? rcu_is_watching+0x15/0xb0
[  187.484178][ T8763]  ? do_raw_spin_unlock+0x121/0x230
[  187.489417][ T8763]  kobject_add_internal+0x617/0xc90
[  187.494664][ T8763]  kobject_add+0x164/0x240
[  187.499123][ T8763]  ? kobject_init+0x1d0/0x1d0
[  187.503834][ T8763]  ? get_device_parent+0x366/0x390
[  187.508988][ T8763]  device_add+0x3fa/0xc40
[  187.513361][ T8763]  tty_register_device_attr+0x428/0x990
[  187.518960][ T8763]  ? tty_register_device+0x30/0x30
[  187.524124][ T8763]  ? tty_port_init+0x132/0x1a0
[  187.528928][ T8763]  ? gsm_dlci_alloc+0x32a/0x630
[  187.533819][ T8763]  ? __might_fault+0xaa/0x120
[  187.538542][ T8763]  gsm_activate_mux+0x110/0x2a0
[  187.543517][ T8763]  gsmld_ioctl+0x12ca/0x1900
[  187.548125][ T8763]  ? gsmld_write+0x120/0x120
[  187.552742][ T8763]  ? __init_ldsem+0x150/0x150
[  187.557425][ T8763]  ? __fget_files+0x28/0x460
[  187.562034][ T8763]  ? gsmld_write+0x120/0x120
[  187.566623][ T8763]  tty_ioctl+0x9b5/0xdc0
[  187.570867][ T8763]  ? tty_get_icount+0xb0/0xb0
[  187.575542][ T8763]  __se_sys_ioctl+0xfd/0x170
[  187.580135][ T8763]  do_syscall_64+0x55/0xb0
[  187.584551][ T8763]  ? clear_bhb_loop+0x40/0x90
[  187.589235][ T8763]  ? clear_bhb_loop+0x40/0x90
[  187.593915][ T8763]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  187.599831][ T8763] RIP: 0033:0x7fa27fd9e1d9
[  187.604256][ T8763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.623862][ T8763] RSP: 002b:00007fa280c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  187.632275][ T8763] RAX: ffffffffffffffda RBX: 00007fa280026090 RCX: 00007fa27fd9e1d9
[  187.640245][ T8763] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003
[  187.648210][ T8763] RBP: 00007fa27fe35888 R08: 0000000000000000 R09: 0000000000000000
[  187.656174][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.664162][ T8763] R13: 00007fa280026128 R14: 00007fa280026090 R15: 00007ffecfb04d28
[  187.672142][ T8763]  </TASK>
[  187.684380][ T8763] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  187.754725][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  187.949663][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  187.961973][    T9] usb 4-1: config 0 has no interface number 0
[  187.974373][    T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  187.983847][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.992081][    T9] usb 4-1: Product: syz
[  187.997648][    T9] usb 4-1: Manufacturer: syz
[  188.002287][    T9] usb 4-1: SerialNumber: syz
[  188.011429][    T9] usb 4-1: config 0 descriptor??
[  188.188235][ T8768] binder: Binderfs stats mode cannot be changed during a remount
[  188.232132][    T9] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  188.248436][    T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  188.259954][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  188.268440][    T9] usb 4-1: media controller created
[  188.299516][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  189.160465][ T8783] loop4: detected capacity change from 0 to 128
[  189.411754][    T9] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  189.508125][    T9] usb 4-1: USB disconnect, device number 8
[  189.699921][ T8795] loop9: detected capacity change from 0 to 7
[  189.730931][ T8799] loop4: detected capacity change from 0 to 1024
[  189.733187][ T8795] Dev loop9: unable to read RDB block 7
[  189.750240][ T8795]  loop9: unable to read partition table
[  189.750632][ T8799] EXT4-fs: Ignoring removed oldalloc option
[  189.756643][ T8795] loop9: partition table beyond EOD, truncated
[  189.769036][ T8799] EXT4-fs: Ignoring removed orlov option
[  189.779042][ T8795] loop_reread_partitions: partition scan of loop9 (��) failed (rc=-5)
[  189.835967][ T8799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  189.852259][ T8799] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.907631][ T8799] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1007: Freeing blocks not in datazone - block = 0, count = 16
[  189.968753][ T1098] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm kworker/u4:5: bg 0: block 112: padding at end of block bitmap is not set
[  189.989078][ T1098] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  190.005200][ T1098] EXT4-fs (loop4): This should not happen!! Data will be lost
[  190.005200][ T1098] 
[  190.020153][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  190.305971][ T8820] program syz.4.1013 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  190.675332][ T8835] loop4: detected capacity change from 0 to 4096
[  190.728256][ T8835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.773626][ T8839] loop3: detected capacity change from 0 to 4096
[  190.901193][ T8847] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.961005][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.507153][ T8871] loop3: detected capacity change from 0 to 64
[  191.565038][ T8874] kAFS: Invalid Command on /proc/fs/afs/cells file
[  191.565503][ T8875] ������: renamed from vlan0 (while UP)
[  191.951501][ T8887] loop3: detected capacity change from 0 to 1024
[  191.988263][ T8887] hfsplus: part requires an argument
[  192.032741][ T8887] hfsplus: unable to parse mount options
[  192.429858][ T8906] loop0: detected capacity change from 0 to 1024
[  192.448386][ T8906] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  192.502011][ T8906] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.1050: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  192.531513][ T8906] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1050: couldn't read orphan inode 11 (err -117)
[  192.607972][ T8906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.737007][ T8906] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 2: comm syz.0.1050: lblock 2 mapped to illegal pblock 2 (length 1)
[  192.795993][ T8906] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  192.839024][ T8906] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #3: block 48: comm syz.0.1050: lblock 0 mapped to illegal pblock 48 (length 1)
[  192.878747][ T8906] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  192.900233][ T8906] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1050: Failed to acquire dquot type 0
[  193.027580][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'.
[  193.038603][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.071096][ T5771] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm syz-executor: Invalid inode table block 1 in block_group 0
[  193.104091][ T5771] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  193.128567][ T8930] input: syz0 as /devices/virtual/input/input14
[  193.143800][ T5771] EXT4-fs error (device loop0): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error
[  193.641298][ T8954] loop0: detected capacity change from 0 to 64
[  193.677033][ T8954] BFS-fs: bfs_readdir(): Bad f_pos=0000031f for loop0:00000002
[  193.932366][ T8965] loop1: detected capacity change from 0 to 256
[  193.998817][ T8965] FAT-fs (loop1): Directory bread(block 64) failed
[  194.005906][ T8965] FAT-fs (loop1): Directory bread(block 65) failed
[  194.012725][ T8965] FAT-fs (loop1): Directory bread(block 66) failed
[  194.019551][ T8965] FAT-fs (loop1): Directory bread(block 67) failed
[  194.028137][ T8965] FAT-fs (loop1): Directory bread(block 68) failed
[  194.039994][ T8965] FAT-fs (loop1): Directory bread(block 69) failed
[  194.048316][ T8965] FAT-fs (loop1): Directory bread(block 70) failed
[  194.055331][ T8965] FAT-fs (loop1): Directory bread(block 71) failed
[  194.062287][ T8965] FAT-fs (loop1): Directory bread(block 72) failed
[  194.069133][ T8965] FAT-fs (loop1): Directory bread(block 73) failed
[  194.212508][ T8972] loop1: detected capacity change from 0 to 16
[  194.224912][ T8972] erofs: (device loop1): mounted with root inode @ nid 36.
[  194.292993][ T6148] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  194.368941][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.376634][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.482993][ T6148] usb 4-1: Using ep0 maxpacket: 8
[  194.508590][ T6148] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  194.545285][ T6148] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  194.581567][ T6148] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  194.603304][ T6148] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  194.633017][ T6148] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  194.643261][ T6148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.884851][ T6148] usb 4-1: GET_CAPABILITIES returned 0
[  194.890426][ T6148] usbtmc 4-1:16.0: can't read capabilities
[  194.932962][    T8] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  195.091563][ T6148] usb 4-1: USB disconnect, device number 9
[  195.156464][    T8] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  195.175093][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.196865][    T8] usb 1-1: config 0 descriptor??
[  195.217863][    T8] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  195.343535][ T9001] loop1: detected capacity change from 0 to 256
[  195.414146][    T8] gp8psk: usb in 128 operation failed.
[  195.631358][    T8] gp8psk: FW Version = 0.00.0 (0x0)  Build 2000/00/00
[  195.829748][    T8] gp8psk: usb in 149 operation failed.
[  195.849965][    T8] gp8psk: failed to get FPGA version
[  195.880449][    T8] gp8psk: usb in 138 operation failed.
[  195.886634][    T8] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  195.907960][    T8] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  195.943016][    T8] usb 1-1: USB disconnect, device number 7
[  196.267855][ T9042] loop4: detected capacity change from 0 to 4096
[  196.278808][ T9042] EXT4-fs: Ignoring removed mblk_io_submit option
[  196.307484][ T9042] EXT4-fs: Ignoring removed orlov option
[  196.327416][ T9042] EXT4-fs (loop4): Test dummy encryption mode enabled
[  196.359705][ T9042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.492668][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.574794][ T9056] overlayfs: upper fs does not support tmpfile.
[  196.724227][ T9062] loop0: detected capacity change from 0 to 1024
[  196.776031][ T9062] EXT4-fs: Ignoring removed oldalloc option
[  196.797221][ T9062] EXT4-fs: Ignoring removed orlov option
[  196.876258][ T9062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  196.903212][ T9062] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.059364][ T9062] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.1099: Freeing blocks not in datazone - block = 0, count = 16
[  197.080308][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1103'.
[  197.111371][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1103'.
[  197.252445][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  198.026871][ T9116] jffs2: notice: (9116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  198.880341][ T9152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'.
[  198.912284][ T9152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'.
[  198.945249][ T9149] loop1: detected capacity change from 0 to 4096
[  198.971085][ T9149] EXT4-fs: Ignoring removed mblk_io_submit option
[  198.993302][ T9149] EXT4-fs: Ignoring removed orlov option
[  199.007528][ T9149] EXT4-fs (loop1): Test dummy encryption mode enabled
[  199.048373][ T9149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.082293][ T9158] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  199.198703][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.247180][ T9161] loop0: detected capacity change from 0 to 256
[  199.896255][ T9192] loop1: detected capacity change from 0 to 256
[  200.206025][ T9206] RDS: rds_bind could not find a transport for ::1200:0, load rds_tcp or rds_rdma?
[  200.380256][ T9215] serio: Serial port ttyS3
[  200.470831][ T9218] loop3: detected capacity change from 0 to 512
[  200.516141][ T9218] EXT4-fs (loop3): 1 truncate cleaned up
[  200.527112][ T9218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.707515][ T6081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.079030][ T5783] Bluetooth: to_multiplier 8192 > 3200
[  201.383096][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  201.409243][ T1060] block nbd0: Possible stuck request ffff8880227b8000: control (read@0,1024B). Runtime 30 seconds
[  201.423471][ T1060] block nbd0: Possible stuck request ffff8880227b8200: control (read@1024,1024B). Runtime 30 seconds
[  201.434601][ T1060] block nbd0: Possible stuck request ffff8880227b8400: control (read@2048,1024B). Runtime 30 seconds
[  201.445684][ T1060] block nbd0: Possible stuck request ffff8880227b8600: control (read@3072,1024B). Runtime 30 seconds
[  201.569862][ T5783] Bluetooth: hci0: command 0x0406 tx timeout
[  201.573118][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  201.584743][    T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.613215][    T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  201.666145][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  201.689759][    T9] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[  201.728306][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.764630][    T9] usb 1-1: config 0 descriptor??
[  201.902617][ T9282] loop3: detected capacity change from 0 to 2048
[  202.013795][ T9282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-00ff07000000 r/w without journal. Quota mode: none.
[  202.071210][ T9282] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.197093][ T6081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-00ff07000000.
[  202.294852][    T9] input: HID 12ba:0100 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:12BA:0100.0009/input/input15
[  202.344624][   T27] audit: type=1400 audit(1791820385.341:18): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=9295 comm="syz.1.1164" name="p" offset=48
[  202.477425][    T9] sony 0003:12BA:0100.0009: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.0-1/input0
[  202.547450][    T9] usb 1-1: USB disconnect, device number 8
[  202.715876][ T9303] fido_id[9303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  203.163011][ T5778] Bluetooth: hci2: command tx timeout
[  203.204706][ T9319] loop4: detected capacity change from 0 to 1024
[  203.307880][ T9319] gfs2: path_lookup on c::: returned error -2
[  203.617575][ T9328] loop0: detected capacity change from 0 to 4096
[  203.673906][ T9311] comedi comedi1: reset error (fatal)
[  203.683732][ T9329] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.859023][ T9326] loop4: detected capacity change from 0 to 32768
[  203.869774][ T9326] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1175 (9326)
[  203.908659][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1177'.
[  203.919259][ T9326] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.939756][ T9326] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  203.956775][ T9326] BTRFS info (device loop4): setting nodatacow, compression disabled
[  203.982978][ T9326] BTRFS info (device loop4): disabling tree log
[  203.996408][ T9326] BTRFS info (device loop4): turning on async discard
[  204.012252][ T9326] BTRFS info (device loop4): max_inline at 0
[  204.018726][ T9326] BTRFS info (device loop4): using free space tree
[  204.264550][ T9326] BTRFS info (device loop4): balance: start -sconvert=raid0,usage=0..1342177280
[  204.293577][ T9326] BTRFS info (device loop4): left=0, need=98304, flags=10
[  204.313028][ T9326] BTRFS info (device loop4): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  204.323748][ T9326] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  204.337480][ T9326] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792
[  204.347119][ T9326] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0
[  204.354865][ T9326] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0
[  204.362529][ T9326] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0
[  204.370550][ T9326] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0
[  204.407061][ T9352] loop3: detected capacity change from 0 to 256
[  204.453451][ T9326] BTRFS info (device loop4): relocating block group 1048576 flags system
[  204.676185][ T9336] loop0: detected capacity change from 0 to 32768
[  204.703352][ T9326] BTRFS info (device loop4): balance: ended with status: 0
[  204.712527][ T9336] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1178 (9336)
[  204.757935][ T9336] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.777713][ T9336] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  204.790944][ T9336] BTRFS info (device loop0): setting nodatasum
[  204.799574][ T9336] BTRFS info (device loop0): using free space tree
[  204.883428][ T9336] BTRFS info (device loop0): enabling ssd optimizations
[  204.892681][ T9336] BTRFS info (device loop0): auto enabling async discard
[  205.215876][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.341978][ T9380] Bluetooth: MGMT ver 1.22
[  205.379192][ T8271] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.249533][ T9408] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  206.493107][   T42] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  206.699782][   T42] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.711205][   T42] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  206.727583][   T42] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.734459][   T42] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[  206.746030][   T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.759962][   T42] usb 5-1: config 0 descriptor??
[  206.883212][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  206.932226][ T9443] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1216'.
[  207.073169][    T9] usb 4-1: Using ep0 maxpacket: 16
[  207.089300][    T9] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.098215][ T9447] loop0: detected capacity change from 0 to 512
[  207.106833][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  207.113567][    T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  207.126392][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.138398][ T9447] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002]
[  207.139262][    T9] usb 4-1: config 0 descriptor??
[  207.148479][ T9447] System zones: 1-12
[  207.168523][ T9447] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1218: error while reading EA inode 32 err=-116
[  207.194436][ T9447] EXT4-fs (loop0): Remounting filesystem read-only
[  207.201049][   T42] input: HID 12ba:0100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:12BA:0100.000A/input/input16
[  207.235753][ T9447] EXT4-fs (loop0): 1 orphan inode deleted
[  207.268550][ T9447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.318267][   T42] sony 0003:12BA:0100.000A: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.4-1/input0
[  207.388000][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  207.410363][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.423806][    T9] usbhid: probe of 4-1:0.0 failed with error -71
[  207.465358][    T9] usb 4-1: USB disconnect, device number 10
[  207.558932][   T27] audit: type=1400 audit(1791820390.561:19): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=9453 comm="syz.0.1219" name="p" offset=48
[  207.587898][ T6148] usb 5-1: USB disconnect, device number 2
[  207.769943][   T27] audit: type=1400 audit(1791820390.771:20): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=9461 comm="syz.0.1223" name="//o" offset=35
[  208.154304][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'.
[  208.420115][ T9490] loop4: detected capacity change from 0 to 512
[  208.454318][ T9490] EXT4-fs (loop4): Test dummy encryption mode enabled
[  208.469138][ T9490] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  208.499518][ T9490] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.1236: bad orphan inode 131083
[  208.525915][ T9490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.675651][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.051931][ T9508] kvm: kvm [9507]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2
[  209.694582][ T9534] loop0: detected capacity change from 0 to 256
[  209.721843][ T9534] exfat: Deprecated parameter 'utf8'
[  209.742602][ T9534] exfat: Deprecated parameter 'utf8'
[  209.751304][ T9534] exfat: Deprecated parameter 'namecase'
[  209.758872][ T9534] exfat: Deprecated parameter 'namecase'
[  209.839518][ T9534] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf6e788d, utbl_chksum : 0xe619d30d)
[  210.197699][ T9527] loop4: detected capacity change from 0 to 32768
[  210.223487][   T10] device offline error, dev sda, sector 721238 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  210.236820][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90154)
[  210.249347][   T10] Buffer I/O error on device sda1, logical block 90116
[  210.258018][   T10] Buffer I/O error on device sda1, logical block 90117
[  210.265220][   T10] Buffer I/O error on device sda1, logical block 90118
[  210.272130][   T10] Buffer I/O error on device sda1, logical block 90119
[  210.279616][   T10] device offline error, dev sda, sector 721278 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  210.287359][ T9527] UFO tlock:0xffffc90002849048
[  210.290256][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90159)
[  210.307062][   T10] Buffer I/O error on device sda1, logical block 90121
[  210.314076][   T10] Buffer I/O error on device sda1, logical block 90122
[  210.320966][   T10] Buffer I/O error on device sda1, logical block 90123
[  210.328256][   T10] device offline error, dev sda, sector 721318 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  210.338845][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90164)
[  210.339098][ T9543] MetaData crosses page boundary!!
[  210.350395][   T10] Buffer I/O error on device sda1, logical block 90126
[  210.350508][   T10] Buffer I/O error on device sda1, logical block 90127
[  210.350567][   T10] device offline error, dev sda, sector 721342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  210.381491][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90167)
[  210.393064][   T10] Buffer I/O error on device sda1, logical block 90129
[  210.402374][   T10] device offline error, dev sda, sector 721422 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  210.412998][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90177)
[  210.417560][ T9543] lblock = 610061, size  = 269537280
[  210.424754][   T10] device offline error, dev sda, sector 721446 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2
[  210.424791][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90180)
[  210.424883][   T10] device offline error, dev sda, sector 721494 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  210.424909][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90186)
[  210.425012][   T10] device offline error, dev sda, sector 721550 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  210.425036][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90193)
[  210.425695][   T10] device offline error, dev sda, sector 721566 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  210.468600][ T9543] CPU: 1 PID: 9543 Comm: syz.4.1252 Not tainted syzkaller #0
[  210.474973][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90195)
[  210.485264][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  210.485279][ T9543] Call Trace:
[  210.485289][ T9543]  <TASK>
[  210.485298][ T9543]  dump_stack_lvl+0x18c/0x250
[  210.485326][ T9543]  ? show_regs_print_info+0x20/0x20
[  210.485346][ T9543]  ? load_image+0x420/0x420
[  210.496912][   T10] device offline error, dev sda, sector 721590 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  210.507183][ T9543]  ? folio_unlock+0x118/0x2f0
[  210.507215][ T9543]  __get_metapage+0xaac/0xfa0
[  210.514668][   T10] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 17 writing to inode 2022 starting block 90198)
[  210.526117][ T9543]  dtSearch+0x58d/0x21a0
[  210.526159][ T9543]  ? rcu_is_watching+0x15/0xb0
[  210.597297][ T9543]  jfs_lookup+0x1b1/0x420
[  210.601674][ T9543]  ? jfs_get_parent+0xb0/0xb0
[  210.606476][ T9543]  ? __lock_acquire+0x7eb0/0x7eb0
[  210.611520][ T9543]  ? __rwlock_init+0x150/0x150
[  210.616309][ T9543]  ? d_set_d_op+0x25f/0x370
[  210.620928][ T9543]  ? do_raw_spin_unlock+0x121/0x230
[  210.626168][ T9543]  ? _raw_spin_unlock+0x28/0x40
[  210.631050][ T9543]  ? d_alloc+0x1eb/0x250
[  210.635326][ T9543]  lookup_one_qstr_excl+0x112/0x250
[  210.640552][ T9543]  filename_create+0x246/0x450
[  210.645347][ T9543]  ? kern_path_create+0x50/0x50
[  210.650214][ T9543]  ? __virt_addr_valid+0x10c/0x380
[  210.655371][ T9543]  ? __virt_addr_valid+0x10c/0x380
[  210.660514][ T9543]  do_mkdirat+0xa9/0x450
[  210.664783][ T9543]  ? vfs_mkdir+0x470/0x470
[  210.669219][ T9543]  ? getname_flags+0x20a/0x500
[  210.674002][ T9543]  __x64_sys_mkdir+0x6e/0x80
[  210.678621][ T9543]  do_syscall_64+0x55/0xb0
[  210.683055][ T9543]  ? clear_bhb_loop+0x40/0x90
[  210.687751][ T9543]  ? clear_bhb_loop+0x40/0x90
[  210.692453][ T9543]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  210.698606][ T9543] RIP: 0033:0x7fa27fd9e1d9
[  210.703773][ T9543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.724541][ T9543] RSP: 002b:00007fa280c13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  210.733092][ T9543] RAX: ffffffffffffffda RBX: 00007fa280026090 RCX: 00007fa27fd9e1d9
[  210.741631][ T9543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[  210.749920][ T9543] RBP: 00007fa27fe35888 R08: 0000000000000000 R09: 0000000000000000
[  210.757931][ T9543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.765941][ T9543] R13: 00007fa280026128 R14: 00007fa280026090 R15: 00007ffecfb04d28
[  210.774060][ T9543]  </TASK>
[  210.777212][    C1] vkms_vblank_simulate: vblank timer overrun
[  210.823479][ T1098] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss!  (inode 2032, error -5)
[  210.850440][ T9543] bread failed!
[  210.854223][ T9543] jfs_lookup: dtSearch returned -5
[  210.860578][ T5104] Aborting journal on device sda1-8.
[  210.872126][   T10] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[  210.881751][ T5104] JBD2: I/O error when updating journal superblock for sda1-8.
[  210.882138][ T9539] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.3.1259: Detected aborted journal
[  210.902425][ T5758] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal
[  210.924848][   T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  210.933205][ T5758] EXT4-fs (sda1): I/O error while writing superblock
[  210.941762][ T5758] EXT4-fs (sda1): Remounting filesystem read-only
[  210.950464][   T10] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[  210.961121][ T9539] EXT4-fs (sda1): I/O error while writing superblock
[  210.967922][ T9539] EXT4-fs (sda1): Remounting filesystem read-only
[  211.216326][ T9546] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.321519][ T9540] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  211.390161][ T9546] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.515720][ T9546] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.677717][ T9546] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.988288][ T9546] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.029112][ T9546] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.063732][ T9546] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.103513][ T9546] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.264935][ T9574] loop4: detected capacity change from 0 to 1024
[  212.305304][ T9574] EXT4-fs: Ignoring removed nomblk_io_submit option
[  212.331110][ T9574] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  212.404402][ T9574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.612432][ T9587] loop0: detected capacity change from 0 to 256
[  212.627978][ T9587] exFAT-fs (loop0): error, The cluster chain has a loop
[  212.636526][ T9587] exFAT-fs (loop0): Filesystem has been set read-only
[  212.663019][ T9587] exFAT-fs (loop0): failed to count the number of clusters in root
[  212.682367][ T9587] exFAT-fs (loop0): failed to recognize exfat type
[  212.774777][ T9564] loop3: detected capacity change from 0 to 32768
[  212.807249][ T9589] loop1: detected capacity change from 0 to 512
[  212.837252][ T9589] EXT4-fs (loop1): Test dummy encryption mode enabled
[  212.859253][ T9589] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  212.915875][ T9589] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1281: bad orphan inode 131083
[  212.927723][ T9564] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  212.984863][ T9589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.046961][ T9564] XFS (loop3): Ending clean mount
[  213.143706][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.385167][ T6081] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  213.461322][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.493737][ T6148] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  213.548753][ T9609] kvm: kvm [9608]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x2
[  213.635455][ T9612] loop4: detected capacity change from 0 to 4096
[  213.692646][ T9613] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.744917][ T6148] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00
[  213.784920][ T6148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  213.837208][ T6148] usb 1-1: Product: syz
[  213.853041][ T6148] usb 1-1: Manufacturer: syz
[  213.896042][ T9619] netlink: 'syz.3.1291': attribute type 12 has an invalid length.
[  213.905000][ T9619] netlink: 'syz.3.1291': attribute type 29 has an invalid length.
[  213.913000][ T6148] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input18
[  213.953074][ T9619] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1291'.
[  213.993819][ T9619] netlink: 'syz.3.1291': attribute type 1 has an invalid length.
[  214.013900][ T9619] netlink: 'syz.3.1291': attribute type 2 has an invalid length.
[  214.183393][   T23] usb 1-1: USB disconnect, device number 9
[  214.372260][ T9634] loop3: detected capacity change from 0 to 512
[  214.381692][ T9634] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  214.410472][ T9634] EXT4-fs (loop3): orphan cleanup on readonly fs
[  214.431952][ T9634] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.1297: bad orphan inode 15
[  214.466182][ T9634] ext4_test_bit(bit=14, block=18) = 1
[  214.471760][ T9634] is_bad_inode(inode)=0
[  214.505159][ T9634] NEXT_ORPHAN(inode)=1023
[  214.512004][ T9634] max_ino=32
[  214.517227][ T9634] i_nlink=0
[  214.553050][ T9634] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2974: inode #15: comm syz.3.1297: corrupted xattr block 19: e_value size too large
[  214.569728][ T9629] loop4: detected capacity change from 0 to 32768
[  214.576791][ T9634] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  214.586632][ T9629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1295 (9629)
[  214.609030][ T9629] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  214.611671][ T9634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  214.619796][ T9629] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  214.645954][ T9629] BTRFS info (device loop4): setting nodatasum
[  214.652437][ T9629] BTRFS info (device loop4): force zlib compression, level 3
[  214.660389][ T9629] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  214.674557][ T9629] BTRFS info (device loop4): use lzo compression, level 0
[  214.682083][ T9629] BTRFS info (device loop4): turning on flush-on-commit
[  214.690727][ T9629] BTRFS info (device loop4): enabling auto defrag
[  214.699691][ T9629] BTRFS info (device loop4): max_inline at 4096
[  214.706584][ T9629] BTRFS info (device loop4): metadata ratio 1
[  214.713045][ T9629] BTRFS info (device loop4): using free space tree
[  214.799745][ T9649] udevd[9649]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  214.835085][ T9629] BTRFS info (device loop4): enabling ssd optimizations
[  214.847445][ T9629] BTRFS info (device loop4): auto enabling async discard
[  214.895578][ T6081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.109900][ T9659] udevd[9659]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  215.119029][ T8271] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.588571][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1306'.
[  215.862913][   T42] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  216.078140][   T42] usb 5-1: config 0 has no interfaces?
[  216.092472][   T42] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00
[  216.111986][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.127443][   T42] usb 5-1: Product: syz
[  216.133395][   T42] usb 5-1: Manufacturer: syz
[  216.138056][   T42] usb 5-1: SerialNumber: syz
[  216.163772][   T42] r8152-cfgselector 5-1: config 0 descriptor??
[  216.331581][ T9700] loop0: detected capacity change from 0 to 512
[  216.363493][ T9700] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  216.385049][ T9700] EXT4-fs (loop0): orphan cleanup on readonly fs
[  216.391926][ T9700] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1318: Block bitmap for bg 0 marked uninitialized
[  216.417498][ T9700] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  216.444945][ T9700] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1318: Block bitmap for bg 0 marked uninitialized
[  216.450756][   T42] r8152-cfgselector 5-1: Unknown version 0x0000
[  216.477085][ T9700] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  216.491339][ T9700] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1318: Block bitmap for bg 0 marked uninitialized
[  216.507613][ T9700] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  216.530365][ T9700] EXT4-fs (loop0): 1 orphan inode deleted
[  216.540032][   T42] r8152-cfgselector 5-1: USB disconnect, device number 3
[  216.580136][ T9700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  216.632660][ T9700] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  216.648698][ T9700] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  216.675659][ T9700] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1318: Block bitmap for bg 0 marked uninitialized
[  216.703834][ T9700] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1318: Block bitmap for bg 0 marked uninitialized
[  216.727815][ T9700] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1318: Block bitmap for bg 0 marked uninitialized
[  216.743691][ T9700] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:512: comm syz.0.1318: Block bitmap for bg 0 marked uninitialized
[  216.810983][ T9698] loop3: detected capacity change from 0 to 32768
[  216.823327][ T9698] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1317 (9698)
[  216.864473][ T9711] loop1: detected capacity change from 0 to 128
[  216.872108][ T9711] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  216.886734][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.897783][ T9711] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  216.925514][ T9698] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  216.966596][ T9698] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  217.011634][ T9698] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  217.040154][ T9698] BTRFS info (device loop3): use zstd compression, level 3
[  217.084396][ T9698] BTRFS info (device loop3): using free space tree
[  217.120430][ T9714] udevd[9714]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  217.301458][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'.
[  217.308327][ T9732] loop0: detected capacity change from 0 to 256
[  217.325219][ T9698] BTRFS info (device loop3): enabling ssd optimizations
[  217.339987][ T9698] BTRFS info (device loop3): auto enabling async discard
[  217.348567][ T9736] udevd[9736]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  217.385751][   T27] audit: type=1400 audit(36846126.393:21): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9737 comm="syz.1.1327" name="unknown" offset=82
[  217.852077][ T6081] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  217.949486][ T9740] loop4: detected capacity change from 0 to 32768
[  217.968764][ T9740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1328 (9740)
[  218.028622][ T9740] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  218.039246][ T9740] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  218.053642][ T9740] BTRFS info (device loop4): setting nodatasum
[  218.074467][ T9740] BTRFS info (device loop4): using free space tree
[  218.160276][ T9760] udevd[9760]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  218.255413][ T9740] BTRFS info (device loop4): enabling ssd optimizations
[  218.262557][ T9740] BTRFS info (device loop4): auto enabling async discard
[  218.470370][ T8271] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  218.676341][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  218.867042][    T8] usb 4-1: Using ep0 maxpacket: 16
[  218.875091][    T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.896554][    T8] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.926316][    T8] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  218.955884][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  218.972992][    T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  218.982106][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.024963][    T8] usb 4-1: config 0 descriptor??
[  219.160683][ T9787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  219.167731][ T9777] loop1: detected capacity change from 0 to 32768
[  219.183293][ T9787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.193196][ T9777] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1335 (9777)
[  219.254941][ T9777] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.277153][ T9777] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  219.287106][ T9777] BTRFS info (device loop1): setting nodatacow, compression disabled
[  219.333068][ T9777] BTRFS info (device loop1): disabling tree log
[  219.344196][ T9777] BTRFS info (device loop1): turning on async discard
[  219.381047][ T9777] BTRFS info (device loop1): max_inline at 0
[  219.386014][ T9788] udevd[9788]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  219.411090][ T9777] BTRFS info (device loop1): using free space tree
[  219.427975][ T9787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  219.451793][    T8] hid (null): report_id 49134 is invalid
[  219.458787][ T9787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.471038][    T8] hid (null): unknown global tag 0xd
[  219.490514][    T8] hid (null): unknown global tag 0xc
[  219.518965][    T8] hid (null): unknown global tag 0xc
[  219.551659][    T8] hid (null): global environment stack overflow
[  219.587724][ T9787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  219.588366][ T9784] loop0: detected capacity change from 0 to 32768
[  219.633045][ T9787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.657824][ T9804] udevd[9804]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  219.769480][   T42] usb 4-1: USB disconnect, device number 11
[  219.793563][ T9777] BTRFS info (device loop1): balance: start -sconvert=raid0,usage=0..1342177280
[  219.818649][ T9787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  219.830153][ T9787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.832474][ T9777] BTRFS info (device loop1): left=0, need=98304, flags=10
[  219.863120][ T9777] BTRFS info (device loop1): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[  219.873043][ T9777] BTRFS info (device loop1): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  219.887058][ T9777] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1441792
[  219.896258][ T9777] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  219.904627][ T9777] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  219.912647][ T9777] BTRFS info (device loop1): delayed_block_rsv: size 0 reserved 0
[  219.920823][ T9777] BTRFS info (device loop1): delayed_refs_rsv: size 0 reserved 0
[  219.988779][ T9777] BTRFS info (device loop1): relocating block group 1048576 flags system
[  220.049939][ T9787] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  220.063370][ T9787] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.093377][ T9787] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  220.103151][ T9787] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.134779][ T9777] BTRFS info (device loop1): balance: ended with status: 0
[  220.141508][ T9787] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  220.156104][ T9787] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.182236][ T9787] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  220.196834][ T9787] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.233210][ T5777] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  220.415996][ T5777] usb 1-1: unable to get BOS descriptor or descriptor too short
[  220.425061][ T5777] usb 1-1: not running at top speed; connect to a high speed hub
[  220.435392][ T5777] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30
[  220.447069][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  220.460770][ T5777] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  220.479300][ T5777] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  220.489741][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.500905][ T5777] usb 1-1: config 0 descriptor??
[  220.698008][ T9824] jffs2: notice: (9824) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  220.738427][ T5770] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  221.123602][ T5777] usb 1-1: string descriptor 0 read error: -71
[  221.131744][ T5777] uclogic 0003:5543:004D.000C: failed retrieving string descriptor #200: -71
[  221.144862][ T5777] uclogic 0003:5543:004D.000C: failed retrieving pen parameters: -71
[  221.154146][ T5777] uclogic 0003:5543:004D.000C: failed probing pen v2 parameters: -71
[  221.165195][ T5777] uclogic 0003:5543:004D.000C: failed probing parameters: -71
[  221.175725][ T5777] uclogic: probe of 0003:5543:004D.000C failed with error -71
[  221.199100][ T5777] usb 1-1: USB disconnect, device number 10
[  221.339720][   T12] bond0: (slave bond_slave_0): interface is now down
[  221.361905][   T12] bond0: (slave bond_slave_1): interface is now down
[  221.385776][   T12] bond0: now running without any active interface!
[  221.550530][ T9849] loop3: detected capacity change from 0 to 1024
[  221.609335][ T9849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.636882][ T9849] EXT4-fs error (device loop3): ext4_read_inline_dir:1600: inode #12: block 7: comm syz.3.1359: path /296/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  221.737752][ T6081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.809461][ T9860] loop0: detected capacity change from 0 to 512
[  222.509129][ T9878] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  222.599734][ T9868] loop0: detected capacity change from 0 to 32768
[  222.625416][ T9868] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1375 (9868)
[  222.673695][ T9868] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  222.701929][ T9868] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  222.740048][ T9868] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  222.760173][ T9868] BTRFS info (device loop0): use zstd compression, level 3
[  222.780357][ T9868] BTRFS info (device loop0): using free space tree
[  222.806039][ T9882] loop1: detected capacity change from 0 to 1024
[  222.861115][ T9898] udevd[9898]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  222.900758][ T9868] BTRFS info (device loop0): enabling ssd optimizations
[  222.920644][ T9870] loop3: detected capacity change from 0 to 32768
[  222.938518][ T9868] BTRFS info (device loop0): auto enabling async discard
[  222.947211][ T9870] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1367 (9870)
[  222.991088][ T9870] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  223.013181][ T9870] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  223.042287][ T9870] BTRFS info (device loop3): setting nodatasum
[  223.055778][ T6148] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  223.056035][ T9870] BTRFS info (device loop3): using free space tree
[  223.122464][ T9903] udevd[9903]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  223.251193][ T9870] BTRFS info (device loop3): enabling ssd optimizations
[  223.255764][ T9920] udevd[9920]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  223.258626][ T9870] BTRFS info (device loop3): auto enabling async discard
[  223.287008][ T6148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  223.306921][ T6148] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  223.356534][ T6148] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  223.367894][ T6148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  223.384489][ T5771] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  223.386203][ T6148] usb 5-1: Product: syz
[  223.412400][ T6148] usb 5-1: Manufacturer: syz
[  223.456458][ T6148] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected
[  223.467290][ T6148] usb 5-1: iuu_phoenix converter now attached to ttyUSB0
[  223.629350][ T6081] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  223.760057][ T9902] loop1: detected capacity change from 0 to 32768
[  223.889194][ T9902] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  223.896852][ T9925] loop0: detected capacity change from 0 to 1024
[  223.935985][ T9925] EXT4-fs: Ignoring removed mblk_io_submit option
[  224.044063][ T9925] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  224.056851][ T9925] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  224.094731][ T9925] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #11: comm syz.0.1376: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  224.094908][ T9902] XFS (loop1): Ending clean mount
[  224.130733][ T9925] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1376: couldn't read orphan inode 11 (err -117)
[  224.174595][ T9925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.222779][ T9925] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.1376: Invalid block bitmap block 0 in block_group 0
[  224.261768][ T9925] Quota error (device loop0): write_blk: dquota write failed
[  224.272338][ T9925] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  224.283242][ T9925] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.1376: Failed to acquire dquot type 0
[  224.338506][ T9925] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1376: Invalid inode bitmap blk 137438953472 in block_group 0
[  224.411988][ T2953] EXT4-fs error (device loop0): __ext4_get_inode_loc:4509: comm kworker/u4:8: Invalid inode table block 8589934593 in block_group 0
[  224.459611][ T9938] loop3: detected capacity change from 0 to 1024
[  224.476374][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.484119][ T9938] EXT4-fs: Ignoring removed nomblk_io_submit option
[  224.511183][ T5770] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  224.568490][ T9938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.775932][ T9884] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90
[  224.777215][ T6081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.799537][   T42] usb 5-1: USB disconnect, device number 4
[  224.835115][   T42] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  224.873510][   T42] iuu_phoenix 5-1:1.0: device disconnected
[  225.230753][ T9956] loop1: detected capacity change from 0 to 512
[  225.249346][ T9956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.316772][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.768924][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.929303][ T9985] bond0: entered promiscuous mode
[  225.944807][ T9985] bond_slave_0: entered promiscuous mode
[  225.950719][ T9985] bond_slave_1: entered promiscuous mode
[  225.979859][ T9985] bond0: left promiscuous mode
[  225.990820][ T5778] Bluetooth: hci0: Zero size dump init pkt
[  225.992966][ T9985] bond_slave_0: left promiscuous mode
[  226.032190][ T9985] bond_slave_1: left promiscuous mode
[  226.093390][ T9971] loop4: detected capacity change from 0 to 32768
[  226.120892][ T9971] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1391 (9971)
[  226.152814][ T9971] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  226.175111][ T9971] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  226.194093][ T9971] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  226.223128][ T9971] BTRFS info (device loop4): use zstd compression, level 3
[  226.243200][ T9971] BTRFS info (device loop4): using free space tree
[  226.307039][ T9998] udevd[9998]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  226.406447][ T9971] BTRFS info (device loop4): enabling ssd optimizations
[  226.431113][ T9971] BTRFS info (device loop4): auto enabling async discard
[  226.595832][T10021] udevd[10021]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  226.700458][T10027] pim6reg1: tun_chr_ioctl cmd 1074025681
[  226.791885][ T8271] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  227.151102][    T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:1)
[  227.251479][T10045] loop4: detected capacity change from 0 to 1024
[  227.603450][ T6148] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  227.793002][ T6148] usb 1-1: Using ep0 maxpacket: 32
[  227.800768][ T6148] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  227.813368][ T6148] usb 1-1: config 0 has no interface number 0
[  227.819498][ T6148] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  227.842990][ T6148] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  227.854431][ T6148] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  227.864929][ T6148] usb 1-1: config 0 interface 196 has no altsetting 0
[  227.875936][ T6148] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  227.893073][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  227.901466][ T6148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.909989][ T6148] usb 1-1: Product: syz
[  227.914357][ T6148] usb 1-1: Manufacturer: syz
[  227.918970][ T6148] usb 1-1: SerialNumber: syz
[  227.926112][ T6148] usb 1-1: config 0 descriptor??
[  227.932390][T10049] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  228.090327][    T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  228.108166][T10072] loop7: detected capacity change from 0 to 7
[  228.108356][    T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  228.127252][    C0] blk_print_req_error: 112 callbacks suppressed
[  228.127269][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.142886][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  228.153021][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.162214][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  228.178966][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  228.182282][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.189823][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.197284][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  228.229035][T10058] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  228.237123][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.246386][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  228.254561][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.263763][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  228.272518][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.279657][    T9] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  228.281781][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  228.297376][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.306612][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  228.314629][T10072] ldm_validate_partition_table(): Disk read failed.
[  228.321758][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.331007][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  228.344180][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.353456][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  228.361947][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  228.371142][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  228.385140][T10072] Dev loop7: unable to read RDB block 0
[  228.393923][T10072]  loop7: unable to read partition table
[  228.399993][T10072] loop7: partition table beyond EOD, truncated
[  228.440774][T10072] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  228.581055][ T6148] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -71
[  228.631505][ T6148] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached
[  228.661647][ T6148] usb 1-1: USB disconnect, device number 11
[  228.754906][ T6148] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected
[  228.938133][ T5831] usb 5-1: USB disconnect, device number 5
[  229.312630][T10106] loop1: detected capacity change from 0 to 256
[  229.687996][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1453'.
[  229.699711][T10122] loop3: detected capacity change from 0 to 128
[  229.767674][T10123] loop1: detected capacity change from 0 to 2048
[  229.846513][T10123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.019576][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.316589][T10138] loop1: detected capacity change from 0 to 4096
[  230.339522][T10138] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  230.394912][T10144] loop0: detected capacity change from 0 to 512
[  230.437977][T10138] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  230.472901][T10138] ntfs3: loop1: Failed to load $Extend (-22).
[  230.486032][T10144] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  230.493078][T10138] ntfs3: loop1: Failed to initialize $Extend.
[  230.539991][T10144] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  230.567419][T10138] ntfs3: loop1: ino=0, attr_set_size
[  230.604524][T10138] ntfs3: loop1: ino=0, attr_set_size
[  230.614424][T10138] ntfs3: loop1: ino=0, attr_set_size
[  230.691543][ T2973] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  230.963308][T10140] loop4: detected capacity change from 0 to 32768
[  231.033127][T10140] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1461 (10140)
[  231.058342][T10140] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.077854][T10140] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  231.096978][T10140] BTRFS info (device loop4): setting nodatasum
[  231.114058][T10140] BTRFS info (device loop4): force zlib compression, level 3
[  231.135266][T10140] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  231.156087][T10140] BTRFS info (device loop4): use lzo compression, level 0
[  231.179641][T10154] md: invalid raid superblock magic on ram1
[  231.188317][T10140] BTRFS info (device loop4): turning on flush-on-commit
[  231.196763][T10155] udevd[10155]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  231.220848][T10140] BTRFS info (device loop4): enabling auto defrag
[  231.223459][T10154] md: ram1 does not have a valid v0.90 superblock, not importing!
[  231.243126][T10140] BTRFS info (device loop4): max_inline at 4096
[  231.249467][T10140] BTRFS info (device loop4): using free space tree
[  231.367501][T10140] BTRFS info (device loop4): enabling ssd optimizations
[  231.502460][ T1060] block nbd0: Possible stuck request ffff8880227b8000: control (read@0,1024B). Runtime 60 seconds
[  231.506980][T10174] udevd[10174]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  231.513280][ T1060] block nbd0: Possible stuck request ffff8880227b8200: control (read@1024,1024B). Runtime 60 seconds
[  231.538415][ T1060] block nbd0: Possible stuck request ffff8880227b8400: control (read@2048,1024B). Runtime 60 seconds
[  231.549411][ T1060] block nbd0: Possible stuck request ffff8880227b8600: control (read@3072,1024B). Runtime 60 seconds
[  231.688433][ T8271] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.702246][T10148] loop0: detected capacity change from 0 to 40427
[  231.718351][T10148] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  231.728942][T10148] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  231.760430][T10148] F2FS-fs (loop0): invalid crc value
[  231.829643][T10183] loop1: detected capacity change from 0 to 128
[  231.865203][T10183] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  231.973824][T10183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.101388][T10148] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  232.143125][T10148] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  232.272776][ T5771] syz-executor: attempt to access beyond end of device
[  232.272776][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  232.296838][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  232.399194][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1475'.
[  232.938296][T10192] loop4: detected capacity change from 0 to 32768
[  232.983944][T10192] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  233.165362][T10192] XFS (loop4): Ending clean mount
[  233.198926][T10192] XFS (loop4): Quotacheck needed: Please wait.
[  233.283220][T10192] XFS (loop4): Quotacheck: Done.
[  233.479493][T10233] 9p: Unknown access argument 18446744073709551615: -34
[  233.661361][ T8271] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  233.894349][T10247] binder: 10245:10247 ioctl c018620c 200000000240 returned -1
[  234.005712][T10252] loop0: detected capacity change from 0 to 128
[  234.065114][T10252] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  234.285111][ T1130] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  234.353155][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  234.372487][T10259] ima: policy update failed
[  234.372720][   T27] audit: type=1807 audit(36846143.373:22): func=FILE_CHECK res=0
[  234.412963][   T27] audit: type=1802 audit(36846143.373:23): pid=10260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1500" res=0 errno=0
[  234.434527][   T27] audit: type=1802 audit(36846143.393:24): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1500" res=0 errno=0
[  234.450016][T10250] loop1: detected capacity change from 0 to 32768
[  234.484401][T10250] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1496 (10250)
[  234.516987][T10250] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  234.529976][T10250] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  234.541181][T10250] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  234.551970][T10250] BTRFS info (device loop1): use zstd compression, level 3
[  234.559988][T10250] BTRFS info (device loop1): using free space tree
[  234.581410][    T9] usb 5-1: Using ep0 maxpacket: 32
[  234.592624][    T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.613373][    T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.640205][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  234.657840][T10272] udevd[10272]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  234.671309][    T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  234.680358][    T9] usb 5-1: Product: syz
[  234.685178][    T9] usb 5-1: Manufacturer: syz
[  234.707379][    T9] hub 5-1:4.0: USB hub found
[  234.726242][T10284] loop3: detected capacity change from 0 to 256
[  234.752529][T10250] BTRFS info (device loop1): enabling ssd optimizations
[  234.785582][T10250] BTRFS info (device loop1): auto enabling async discard
[  234.808932][T10284] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  234.827023][T10284] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00)
[  234.853029][T10284] FAT-fs (loop3): Filesystem has been set read-only
[  234.897833][T10289] udevd[10289]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  234.923086][    T9] hub 5-1:4.0: 2 ports detected
[  234.961399][ T6081] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00)
[  235.084178][    T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  235.115080][ T5770] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  235.285804][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.306845][    T8] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  235.325089][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  235.342994][    T9] hub 5-1:4.0: set hub depth failed
[  235.358494][    T8] usb 1-1: Product: syz
[  235.370122][    T9] usb 5-1: USB disconnect, device number 6
[  235.378731][    T8] usb 1-1: Manufacturer: syz
[  235.446527][    T8] usb 1-1: selecting invalid altsetting 1
[  235.478728][    T8] dvb_ttusb_budget: ttusb_init_controller: error
[  235.500220][    T8] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  235.569998][    T8] DVB: Unable to find symbol cx22700_attach()
[  235.584649][    T8] DVB: Unable to find symbol tda10046_attach()
[  235.593434][    T8] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  235.613578][T10288] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  235.675912][T10288] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  235.686764][ T5831] usb 1-1: USB disconnect, device number 12
[  235.925108][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  235.962965][ T2973] wlan1: Trigger new scan to find an IBSS to join
[  236.116269][    T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  236.127583][    T8] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  236.140181][    T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  236.149318][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.164856][T10304] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  236.176301][    T8] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  236.547112][ T5831] usb 4-1: USB disconnect, device number 12
[  237.050129][T10340] loop4: detected capacity change from 0 to 64
[  237.304065][T10347] ip6tnl0: Caught tx_queue_len zero misconfig
[  237.327063][T10347] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1531'.
[  237.392046][T10353] loop4: detected capacity change from 0 to 2048
[  237.434764][T10356] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.462742][T10353] syz.4.1534: attempt to access beyond end of device
[  237.462742][T10353] loop4: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048
[  237.479322][T10353] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1)
[  237.525593][T10356] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  237.547153][T10356] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  237.563495][T10356] Remounting filesystem read-only
[  237.570495][ T8271] NILFS (loop4): discard dirty page: offset=0, ino=6
[  237.582422][ T8271] NILFS (loop4): discard dirty block: blocknr=35, size=1024
[  237.590282][ T8271] NILFS (loop4): discard dirty block: blocknr=1099461296164, size=1024
[  237.602177][ T8271] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  237.616119][ T8271] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  237.624665][ T8271] NILFS (loop4): discard dirty page: offset=0, ino=5
[  237.631369][ T8271] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  237.642352][ T8271] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  237.652057][ T8271] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  237.661544][ T8271] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  237.671344][ T8271] NILFS (loop4): discard dirty page: offset=0, ino=4
[  237.678370][ T8271] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  237.686041][ T8271] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  237.695302][ T8271] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  237.704536][ T8271] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  237.714968][ T8271] NILFS (loop4): discard dirty page: offset=0, ino=3
[  237.721677][ T8271] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  237.737986][ T8271] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  237.745552][ T8271] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  237.753458][ T8271] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  237.829629][T10369] loop4: detected capacity change from 0 to 512
[  237.851696][T10369] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.1539: iget: bad i_size value: 38620345925642
[  237.863389][ T8473] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  237.869145][T10369] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1539: couldn't read orphan inode 15 (err -117)
[  237.888882][T10369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.910361][T10369] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1539: bg 0: block 5: invalid block bitmap
[  237.925980][T10369] EXT4-fs error (device loop4) in ext4_setattr:5695: error 28
[  237.972031][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.056151][ T8473] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  238.073593][ T8473] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  238.093112][ T8473] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  238.112668][ T8473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.134554][T10362] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  238.148239][ T8473] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  238.201091][T10381] loop3: detected capacity change from 0 to 2048
[  238.263903][T10381]  loop3: p1 < > p4
[  238.263903][T10381]  p4: <netbsd: >
[  238.279100][T10381] loop3: p4 size 722688 extends beyond EOD, truncated
[  238.645255][   T23] usb 1-1: USB disconnect, device number 13
[  238.957164][T10411] loop3: detected capacity change from 0 to 256
[  239.003319][ T1144] wlan1: Trigger new scan to find an IBSS to join
[  239.298702][T10413] loop3: detected capacity change from 0 to 32768
[  239.348799][T10413] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  239.420780][T10413] XFS (loop3): Ending clean mount
[  239.433897][T10427] netlink: 'syz.0.1564': attribute type 6 has an invalid length.
[  239.510265][ T6081] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  239.833060][ T8473] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  239.917757][T10444] overlayfs: invalid origin (0000)
[  240.034874][ T8473] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.049099][ T8473] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  240.078050][T10454] loop4: detected capacity change from 0 to 512
[  240.089592][ T8473] usb 1-1: config 0 interface 0 has no altsetting 0
[  240.099052][ T8473] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  240.153198][ T8473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.176913][T10454] EXT4-fs (loop4): 1 truncate cleaned up
[  240.188564][ T8473] usb 1-1: config 0 descriptor??
[  240.230947][T10454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.234245][T10460] kAFS: bad VL server IP address
[  240.317354][T10454] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1576: bg 0: block 465: padding at end of block bitmap is not set
[  240.361910][T10454] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28
[  240.387131][T10454] EXT4-fs (loop4): This should not happen!! Data will be lost
[  240.387131][T10454] 
[  240.397081][T10454] EXT4-fs (loop4): Total free blocks count 0
[  240.404553][T10454] EXT4-fs (loop4): Free/Dirty block details
[  240.410908][T10454] EXT4-fs (loop4): free_blocks=0
[  240.421431][T10454] EXT4-fs (loop4): dirty_blocks=8
[  240.428687][T10454] EXT4-fs (loop4): Block reservation details
[  240.435372][T10454] EXT4-fs (loop4): i_reserved_data_blocks=8
[  240.497311][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.518354][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1583'.
[  240.635518][ T8473] playstation 0003:054C:09CC.000D: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.0-1/input0
[  240.683313][T10477] udevd[10477]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error
[  240.829223][ T8473] playstation 0003:054C:09CC.000D: Invalid byte count transferred, expected 16 got 0
[  240.855276][ T8473] playstation 0003:054C:09CC.000D: Failed to retrieve DualShock4 pairing info: -22
[  240.885818][ T8473] playstation 0003:054C:09CC.000D: Failed to get MAC address from DualShock4
[  240.905428][ T8473] playstation 0003:054C:09CC.000D: Failed to create dualshock4.
[  240.923738][T10484] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1587'.
[  240.931082][ T8473] playstation: probe of 0003:054C:09CC.000D failed with error -22
[  241.019884][T10489] jffs2: notice: (10489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  241.046097][ T8473] usb 1-1: USB disconnect, device number 14
[  241.241818][T10498] loop4: detected capacity change from 0 to 64
[  241.383673][T10504] rnbd_client L127: Can't parse path h: -93
[  241.699883][T10516] loop4: detected capacity change from 0 to 1024
[  241.753132][T10516] hfsplus: keylen 65060 too large
[  241.758716][T10516] hfsplus: xattr searching failed
[  241.797240][T10519] hfsplus: keylen 65060 too large
[  241.806219][T10519] hfsplus: xattr searching failed
[  241.974229][   T12] wlan1: Trigger new scan to find an IBSS to join
[  242.017082][T10523] loop3: detected capacity change from 0 to 128
[  242.027085][T10525] loop4: detected capacity change from 0 to 256
[  242.055031][T10523] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  242.083306][T10523] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.578960][T10515] loop0: detected capacity change from 0 to 40427
[  242.624518][T10515] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  242.641190][T10515] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  242.717381][T10515] F2FS-fs (loop0): Found nat_bits in checkpoint
[  242.853255][T10550] msr: Write to unrecognized MSR 0x0 by syz.4.1615 (pid: 10550).
[  242.861864][T10550] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details.
[  242.872487][T10515] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  242.884526][T10515] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  242.908230][ T3520] wlan1: Creating new IBSS network, BSSID d2:ed:41:17:13:1c
[  243.330063][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1622'.
[  243.347358][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'.
[  243.359530][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1622'.
[  243.372159][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'.
[  243.724729][T10584] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string
[  244.093160][T10586] loop1: detected capacity change from 0 to 32768
[  244.152415][T10586] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  244.393680][ T5770] ocfs2: Unmounting device (7,1) on (node local)
[  244.611815][T10605] scsi_strcpy_devinfo: vendor string '��M��ꇋ8KH,P�}�/(a��&�WCa�8(���Au��������6c�1�كX��Pwe���$XP���K���5�����'R�X7R.�]O\��k�ek���өo�p��ґ0�[�{��q6��?U�q9�mߣ�7`�`�0I3��ŵ�' is too long
[  244.694292][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1638'.
[  244.907935][T10619] loop0: detected capacity change from 0 to 128
[  244.925847][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  244.969499][T10619] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  245.031911][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  245.126676][    T9] usb 5-1: Using ep0 maxpacket: 8
[  245.136299][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  245.165919][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  245.169332][T10615] loop1: detected capacity change from 0 to 32768
[  245.179421][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  245.196889][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  245.210276][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  245.242970][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.414237][T10631] bonding: no command found in bonding_masters - use +ifname or -ifname
[  245.482770][    T9] usb 5-1: GET_CAPABILITIES returned 0
[  245.504493][    T9] usbtmc 5-1:16.0: can't read capabilities
[  245.559738][T10633] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1649'.
[  245.688647][    T9] usb 5-1: USB disconnect, device number 7
[  245.839873][T10644] ip6gretap1: entered allmulticast mode
[  245.888814][T10646] loop0: detected capacity change from 0 to 736
[  246.312579][ T5778] Bluetooth: Wrong link type (-71)
[  246.878117][T10670] loop3: detected capacity change from 0 to 32768
[  246.897464][T10670] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1667 (10670)
[  246.926391][T10670] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  246.951695][T10670] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  246.970630][T10670] BTRFS info (device loop3): using free space tree
[  247.069964][T10701] udevd[10701]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  247.070332][T10670] BTRFS info (device loop3): enabling ssd optimizations
[  247.095549][T10670] BTRFS info (device loop3): auto enabling async discard
[  247.204177][ T6081] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  247.264831][T10704] udevd[10704]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  247.433926][T10713] loop4: detected capacity change from 0 to 128
[  247.497937][T10713] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  247.795694][T10723] loop3: detected capacity change from 0 to 128
[  247.805870][T10723] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  247.821259][T10723] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  247.831892][T10723] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  247.848163][T10723] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  247.860343][T10723] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  247.874961][T10723] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  247.888743][T10723] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  247.910893][T10723] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  247.942221][T10723] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  247.951954][T10723] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  248.170279][T10732] loop3: detected capacity change from 0 to 512
[  248.179075][T10732] EXT4-fs: Ignoring removed orlov option
[  248.226172][T10732] EXT4-fs error (device loop3): __ext4_iget:5091: inode #11: block 1: comm syz.3.1687: invalid block
[  248.274086][T10732] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1687: couldn't read orphan inode 11 (err -117)
[  248.305625][T10732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.334525][T10725] loop4: detected capacity change from 0 to 32768
[  248.354027][T10725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1683 (10725)
[  248.394161][T10732] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #2: comm syz.3.1687: Directory hole found for htree leaf block 0
[  248.422188][T10725] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  248.453048][T10725] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  248.470660][T10725] BTRFS info (device loop4): setting nodatacow, compression disabled
[  248.471535][ T6081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.496875][T10725] BTRFS info (device loop4): disabling tree log
[  248.510193][T10725] BTRFS info (device loop4): max_inline at 0
[  248.536968][T10725] BTRFS info (device loop4): using free space tree
[  248.549027][T10739] udevd[10739]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  248.692502][T10725] BTRFS info (device loop4): auto enabling async discard
[  248.916980][T10738] loop0: detected capacity change from 0 to 40427
[  248.945796][T10738] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  248.981558][T10738] F2FS-fs (loop0): invalid crc value
[  249.001409][T10738] F2FS-fs (loop0): Found nat_bits in checkpoint
[  249.081268][ T8271] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  249.130349][T10738] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  249.745703][T10757] loop1: detected capacity change from 0 to 40427
[  249.773490][T10757] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  249.781274][T10757] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  249.831834][T10757] F2FS-fs (loop1): Found nat_bits in checkpoint
[  249.959851][T10757] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  249.996176][T10757] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  250.240697][T10798] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  250.300683][T10800] loop3: detected capacity change from 0 to 4096
[  250.353385][T10800] NILFS (loop3): invalid segment: Checksum error in segment payload
[  250.361946][T10800] NILFS (loop3): trying rollback from an earlier position
[  250.417449][T10800] NILFS (loop3): recovery complete
[  250.458921][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'.
[  250.484945][T10800] NILFS error (device loop3): nilfs_readdir: zero-length directory entry
[  250.746976][T10813] loop3: detected capacity change from 0 to 64
[  251.217342][T10830] loop1: detected capacity change from 0 to 512
[  251.236510][T10830] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  251.316692][T10833] loop0: detected capacity change from 0 to 764
[  251.401048][T10837] nbd: socks must be embedded in a SOCK_ITEM attr
[  251.861632][T10853] loop3: detected capacity change from 0 to 512
[  251.913027][T10853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.021945][T10841] loop1: detected capacity change from 0 to 32768
[  252.032191][T10841] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.1720 (10841)
[  252.062319][T10841] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  252.074556][T10841] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  252.084871][T10841] BTRFS info (device loop1): using free space tree
[  252.120017][T10861] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  252.142042][T10861] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  252.149371][T10841] BTRFS info (device loop1): enabling ssd optimizations
[  252.170568][T10841] BTRFS info (device loop1): auto enabling async discard
[  252.207104][T10877] udevd[10877]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  252.309842][ T5770] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  252.316608][T10880] udevd[10880]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  252.552984][ T8473] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  252.740907][   T27] audit: type=1326 audit(36846161.743:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2159e1d9 code=0x7ffc0000
[  252.752953][ T8473] usb 1-1: Using ep0 maxpacket: 8
[  252.764731][    C1] vkms_vblank_simulate: vblank timer overrun
[  252.774071][   T27] audit: type=1326 audit(36846161.743:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2159e1d9 code=0x7ffc0000
[  252.806565][   T27] audit: type=1326 audit(36846161.793:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fce2159e1d9 code=0x7ffc0000
[  252.826789][ T8473] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  252.830384][    C1] vkms_vblank_simulate: vblank timer overrun
[  252.839624][ T8473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.851925][   T27] audit: type=1326 audit(36846161.793:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2159e1d9 code=0x7ffc0000
[  252.877327][    C1] vkms_vblank_simulate: vblank timer overrun
[  252.882897][ T8473] usb 1-1: Product: syz
[  252.887770][ T8473] usb 1-1: Manufacturer: syz
[  252.888231][   T27] audit: type=1326 audit(36846161.793:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2159e1d9 code=0x7ffc0000
[  252.892358][ T8473] usb 1-1: SerialNumber: syz
[  252.903850][T10886] loop1: detected capacity change from 0 to 2364
[  252.932244][   T27] audit: type=1326 audit(36846161.803:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fce2159e1d9 code=0x7ffc0000
[  252.934262][ T8473] usb 1-1: config 0 descriptor??
[  252.960990][   T27] audit: type=1326 audit(36846161.803:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce2159df42 code=0x7ffc0000
[  252.996169][ T8473] gspca_main: se401-2.14.0 probing 047d:5003
[  253.002640][   T27] audit: type=1326 audit(36846161.813:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fce2155ea0e code=0x7ffc0000
[  253.003045][ T1144] wlan1: Trigger new scan to find an IBSS to join
[  253.026365][    C1] vkms_vblank_simulate: vblank timer overrun
[  253.035633][   T27] audit: type=1326 audit(36846161.873:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fce2159e007 code=0x7ffc0000
[  253.043094][T10882] loop4: detected capacity change from 0 to 32768
[  253.062909][    C1] vkms_vblank_simulate: vblank timer overrun
[  253.076588][   T27] audit: type=1326 audit(36846161.913:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.1.1732" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce2155ea0e code=0x7ffc0000
[  253.086955][T10882] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  253.123821][ T5763] blk_print_req_error: 9 callbacks suppressed
[  253.123835][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  253.227636][T10882] XFS (loop4): Ending clean mount
[  253.365814][ T8271] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  253.407637][ T8473] gspca_se401: ExtraFeatures: 86
[  253.412636][ T8473] gspca_se401: Too many frame sizes
[  253.614439][   T23] kernel write not supported for file /uinput (pid: 23 comm: kworker/1:0)
[  253.643571][ T8473] usb 1-1: USB disconnect, device number 15
[  253.748225][T10905] loop4: detected capacity change from 0 to 512
[  253.783691][T10905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  253.828324][T10905] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1734: Failed to acquire dquot type 0
[  253.891173][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  254.284302][T10927] bridge0: port 3(netdevsim0) entered blocking state
[  254.291303][T10927] bridge0: port 3(netdevsim0) entered disabled state
[  254.299965][T10927] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  254.307649][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1746'.
[  254.321461][T10927] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  254.331861][T10927] bridge0: port 3(netdevsim0) entered blocking state
[  254.338733][T10927] bridge0: port 3(netdevsim0) entered forwarding state
[  254.701259][T10945] vhci_hcd vhci_hcd.0: failed to lookup sock
[  254.877710][T10954] set_capacity_and_notify: 1 callbacks suppressed
[  254.877727][T10954] loop1: detected capacity change from 0 to 1024
[  254.981379][ T1144] hfsplus: b-tree write err: -5, ino 4
[  254.993234][ T1144] hfsplus: b-tree write err: -5, ino 2
[  255.221458][T10958] loop0: detected capacity change from 0 to 32768
[  255.246691][T10958] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  255.283708][T10958] XFS (loop0): Ending clean mount
[  255.323579][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  255.817096][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  255.823689][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  256.548681][T10989] netlink: 'syz.0.1771': attribute type 14 has an invalid length.
[  256.631118][T10993] loop4: detected capacity change from 0 to 16
[  256.650853][T10993] erofs: (device loop4): mounted with root inode @ nid 36.
[  256.910714][T11006] GUP no longer grows the stack in syz.4.1779 (11006): 200000009000-20000000a000 (200000005000)
[  256.926378][T11006] CPU: 1 PID: 11006 Comm: syz.4.1779 Not tainted syzkaller #0
[  256.933886][T11006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  256.944045][T11006] Call Trace:
[  256.947334][T11006]  <TASK>
[  256.950260][T11006]  dump_stack_lvl+0x18c/0x250
[  256.954935][T11006]  ? show_regs_print_info+0x20/0x20
[  256.960152][T11006]  ? load_image+0x420/0x420
[  256.964659][T11006]  ? find_vma+0x134/0x1b0
[  256.969034][T11006]  __get_user_pages+0xfe7/0x1580
[  256.974017][T11006]  ? populate_vma_page_range+0x380/0x380
[  256.979680][T11006]  ? __gup_longterm_locked+0x21d8/0x2cb0
[  256.985324][T11006]  ? down_read_killable+0x1d0/0x340
[  256.990542][T11006]  __gup_longterm_locked+0x2345/0x2cb0
[  256.996035][T11006]  ? pin_user_pages_remote+0x220/0x220
[  257.001495][T11006]  ? mark_lock+0x94/0x320
[  257.005836][T11006]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  257.011855][T11006]  ? __lock_acquire+0x7eb0/0x7eb0
[  257.016900][T11006]  ? lock_chain_count+0x20/0x20
[  257.021750][T11006]  ? internal_get_user_pages_fast+0x1f8e/0x27a0
[  257.028012][T11006]  internal_get_user_pages_fast+0x2174/0x27a0
[  257.034096][T11006]  ? get_user_pages_fast_only+0xa0/0xa0
[  257.039637][T11006]  ? trace_contention_end+0x39/0xe0
[  257.044841][T11006]  ? __mutex_lock+0x30d/0xc80
[  257.049531][T11006]  ? futex_wait_queue+0x9d/0x1b0
[  257.054463][T11006]  ? iov_iter_iovec_advance+0x1ef/0x290
[  257.060012][T11006]  __iov_iter_get_pages_alloc+0x380/0xac0
[  257.065762][T11006]  iov_iter_get_pages2+0x5f/0xa0
[  257.070750][T11006]  __se_sys_vmsplice+0x5e5/0x11f0
[  257.075784][T11006]  ? __x64_sys_vmsplice+0xb0/0xb0
[  257.080822][T11006]  ? fd_install+0x60/0x4e0
[  257.085260][T11006]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  257.091288][T11006]  ? lockdep_hardirqs_on+0x98/0x150
[  257.096482][T11006]  do_syscall_64+0x55/0xb0
[  257.100905][T11006]  ? clear_bhb_loop+0x40/0x90
[  257.105605][T11006]  ? clear_bhb_loop+0x40/0x90
[  257.110297][T11006]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.116189][T11006] RIP: 0033:0x7fa27fd9e1d9
[  257.120595][T11006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  257.140212][T11006] RSP: 002b:00007fa280c34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  257.148661][T11006] RAX: ffffffffffffffda RBX: 00007fa280025fa0 RCX: 00007fa27fd9e1d9
[  257.156658][T11006] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004
[  257.164640][T11006] RBP: 00007fa27fe35888 R08: 0000000000000000 R09: 0000000000000000
[  257.172629][T11006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.180608][T11006] R13: 00007fa280026038 R14: 00007fa280025fa0 R15: 00007ffecfb04d28
[  257.191615][T11006]  </TASK>
[  257.194699][    C1] vkms_vblank_simulate: vblank timer overrun
[  257.266126][T11008] loop0: detected capacity change from 0 to 256
[  257.317978][T11008] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d)
[  257.388274][T11008] syz.0.1780: attempt to access beyond end of device
[  257.388274][T11008] loop0: rw=34817, sector=256, nr_sectors = 8 limit=256
[  257.449504][T11014] loop4: detected capacity change from 0 to 512
[  257.492742][T11014] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1783: bg 0: block 7: invalid block bitmap
[  257.506212][T11014] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  257.520682][T11014] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2974: inode #11: comm syz.4.1783: corrupted xattr block 95: invalid header
[  257.524732][T11017] ima: policy update completed
[  257.543191][T11014] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[  257.552314][T11014] EXT4-fs (loop4): 1 orphan inode deleted
[  257.559725][T11014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.618038][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.700061][T11023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1786'.
[  257.769993][ T5778] Bluetooth: hci0: Zero size dump init pkt
[  257.985771][ T1144] wlan1: Trigger new scan to find an IBSS to join
[  258.772727][T11042] loop0: detected capacity change from 0 to 4096
[  258.905490][ T2953] wlan1: Creating new IBSS network, BSSID 7e:23:a4:94:df:b5
[  259.108922][T11050] loop1: detected capacity change from 0 to 8
[  259.120556][T11050] Major/Minor mismatch, trying to mount newer 4.1792 filesystem
[  259.152986][T11050] Please update your kernel
[  259.239232][T11056] loop4: detected capacity change from 0 to 256
[  259.453138][   T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  259.670854][   T23] usb 1-1: config 0 has no interfaces?
[  259.681479][   T23] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  259.712866][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.734059][   T23] usb 1-1: config 0 descriptor??
[  259.963443][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.984223][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.004362][    T9] usb 1-1: USB disconnect, device number 16
[  260.159536][T11082] loop4: detected capacity change from 0 to 4096
[  260.168026][T11082] EXT4-fs: inline encryption not supported
[  260.175865][T11082] EXT4-fs: Ignoring removed orlov option
[  260.182746][T11082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  260.199037][T11082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.244882][T11082] overlayfs: missing 'workdir'
[  260.291802][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.376083][T11085] loop4: detected capacity change from 0 to 512
[  260.385311][T11085] EXT4-fs: Ignoring removed bh option
[  260.396241][T11085] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  260.409527][T11085] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  260.419744][T11085] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1815: Corrupt directory, running e2fsck is recommended
[  260.442343][T11085] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  260.452027][T11085] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.1815: corrupted in-inode xattr: e_name out of bounds
[  260.475441][T11085] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1815: couldn't read orphan inode 15 (err -117)
[  260.489527][T11085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.524255][T11085] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  260.537033][T11085] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  260.550088][T11085] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1815: Corrupt directory, running e2fsck is recommended
[  260.565668][T11085] CacheFiles: Lookup cache failed with error -117
[  260.574208][T11085] CacheFiles: Failed to register: -117
[  260.586976][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  260.600959][ T8271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.701134][T11090] loop4: detected capacity change from 0 to 128
[  260.722738][T11090] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  260.784488][    T9] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  260.798769][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.816638][    T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.00
[  260.825948][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.837871][    T9] usb 1-1: config 0 descriptor??
[  261.056321][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  261.062416][    T9] usbhid: probe of 1-1:0.0 failed with error -71
[  261.112572][    T9] usb 1-1: USB disconnect, device number 17
[  261.583032][ T1060] block nbd0: Possible stuck request ffff8880227b8000: control (read@0,1024B). Runtime 90 seconds
[  261.593900][ T1060] block nbd0: Possible stuck request ffff8880227b8200: control (read@1024,1024B). Runtime 90 seconds
[  261.605004][ T1060] block nbd0: Possible stuck request ffff8880227b8400: control (read@2048,1024B). Runtime 90 seconds
[  261.616468][ T1060] block nbd0: Possible stuck request ffff8880227b8600: control (read@3072,1024B). Runtime 90 seconds
[  262.578010][T11110] loop4: detected capacity change from 0 to 1764
[  262.606100][T11112] loop0: detected capacity change from 0 to 1024
[  262.846082][T11118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1830'.
[  262.846616][T11119] loop0: detected capacity change from 0 to 512
[  262.877190][T11119] EXT4-fs (loop0): Test dummy encryption mode enabled
[  262.884824][T11119] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  262.919182][T11119] EXT4-fs (loop0): 1 truncate cleaned up
[  262.934833][T11119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.002148][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.260614][T11137] gretap0: entered promiscuous mode
[  263.366501][T11143] loop1: detected capacity change from 0 to 1024
[  263.716942][   T27] kauditd_printk_skb: 27 callbacks suppressed
[  263.716957][   T27] audit: type=1326 audit(36846172.723:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11156 comm="syz.4.1848" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa27fd9e1d9 code=0x0
[  263.746613][    C1] vkms_vblank_simulate: vblank timer overrun
[  264.337471][T11166] macvlan0: entered promiscuous mode
[  264.566727][T11168] loop0: detected capacity change from 0 to 32768
[  265.186538][T11177] loop4: detected capacity change from 0 to 32768
[  265.202282][T11177] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1857 (11177)
[  265.228704][T11177] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  265.255206][T11177] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  265.266795][T11177] BTRFS info (device loop4): using free space tree
[  265.361976][T11194] udevd[11194]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  265.397055][T11177] BTRFS info (device loop4): enabling ssd optimizations
[  265.418535][T11200] loop0: detected capacity change from 0 to 8
[  265.536744][T11201] udevd[11201]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': Input/output error
[  265.573678][ T8271] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  265.956388][T11207] loop4: detected capacity change from 0 to 1024
[  266.106728][T11205] loop0: detected capacity change from 0 to 32768
[  266.156035][T11205] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root
[  266.156035][T11205] 
[  266.326279][ T5771] BUG: Bad page state in process syz-executor  pfn:686e4
[  266.336764][ T5771] page:ffffea0001a1b900 refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x686e4
Mar  3 11:02:55 syzkaller kern.alert kernel: [  266.326279][ T57[  266.354629][ T5771] flags: 0xfff1800000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
71] BUG: Bad page state in proce[  266.368065][ T5771] page_type: 0xffffffff()
ss syz-executor [  266.372450][ T5771] raw: 00fff1800000820c ffffea00019aaf08 ffffc9000481f940 0000000000000000
 pfn:686e4
[  266.384821][ T5771] raw: 0000000000000004 ffff88805eff10f8 00000000ffffffff 0000000000000000
[  266.393744][ T5771] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  266.401075][ T5771] page_owner tracks the page as allocated
Mar  3 11:02:55 syzkaller kern.a[  266.422667][ T5771] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11205, tgid 11204 (syz.0.1863), ts 266152732478, free_ts 266135432935
lert kernel: [  [  266.442087][    C1] vkms_vblank_simulate: vblank timer overrun
266.401075][ T57[  266.450224][ T5771]  post_alloc_hook+0x1c1/0x200
71] page_owner t[  266.455637][ T5771]  get_page_from_freelist+0x2181/0x22a0
racks the page a[  266.462516][ T5771]  __alloc_pages+0x1f0/0x460
s allocated
Mar[  266.468493][ T5771]  folio_alloc+0x1e/0x30
  3 11:02:55 syz[  266.474125][ T5771]  filemap_alloc_folio+0xdf/0x490
kaller kern.aler[  266.480519][ T5771]  do_read_cache_folio+0x381/0x7f0
t kernel: [  266[  266.487043][ T5771]  do_read_cache_page+0x32/0x260
.422667][ T5771][  266.493597][ T5771]  __get_metapage+0x31d/0xfa0
 page last alloc[  266.499366][ T5771]  dbAllocCtl+0xd2/0x980
ated via order 0[  266.505145][ T5771]  dbAllocAG+0xc46/0x1000
, migratetype Un[  266.510763][ T5771]  dbDiscardAG+0x2c5/0x8e0
movable, gfp_mas[  266.516536][ T5771]  jfs_ioc_trim+0x42c/0x670
k 0x140c40(GFP_N[  266.522633][ T5771]  jfs_ioctl+0x292/0x3b0
OFS|__GFP_COMP|_[  266.528226][ T5771]  __se_sys_ioctl+0xfd/0x170
_GFP_HARDWALL), [  266.533948][ T5771]  do_syscall_64+0x55/0xb0
pid 11205, tgid [  266.539666][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
11204 (syz.0.186[  266.547803][ T5771] page last free stack trace:
3), ts 266152732[  266.553049][ T5771]  free_unref_page_prepare+0x7d7/0x8f0
478, free_ts 266[  266.559858][ T5771]  free_unref_page+0x32/0x2e0
[  266.559933][ T5771]  lmLogShutdown+0x44f/0x850
135432935
[  266.559958][ T5771]  lmLogClose+0x28c/0x530
[  266.559979][ T5771]  jfs_remount+0x414/0x5c0
[  266.559998][ T5771]  reconfigure_super+0x229/0x8e0
Mar  3 11:02:55 [  266.585426][ T5771]  path_mount+0xcfe/0xfa0
syzkaller kern.a[  266.591157][ T5771]  __se_sys_mount+0x2e7/0x3d0
lert kernel: [  [  266.597564][ T5771]  do_syscall_64+0x55/0xb0
266.547803][ T57[  266.604046][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
71] page last fr[  266.611186][ T5771] Modules linked in:
ee stack trace:[  266.615663][ T5771] CPU: 1 PID: 5771 Comm: syz-executor Not tainted syzkaller #0

[  266.624535][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  266.634656][ T5771] Call Trace:
[  266.637927][ T5771]  <TASK>
[  266.640853][ T5771]  dump_stack_lvl+0x18c/0x250
[  266.645531][ T5771]  ? show_regs_print_info+0x20/0x20
[  266.650727][ T5771]  ? swiotlb_print_info+0x70/0x70
[  266.655765][ T5771]  bad_page+0x14b/0x170
[  266.659917][ T5771]  free_unref_page_prepare+0x884/0x8f0
[  266.665373][ T5771]  free_unref_page_list+0xbe/0x860
[  266.670474][ T5771]  ? __folio_memcg+0x63/0x170
[  266.675147][ T5771]  ? folio_memcg+0x127/0x4a0
[  266.679734][ T5771]  release_pages+0x208a/0x2300
[  266.684506][ T5771]  ? lru_cache_disable+0x30/0x30
[  266.689445][ T5771]  ? mlock_drain_local+0x79/0x490
[  266.694468][ T5771]  ? mlock_drain_local+0x79/0x490
[  266.699487][ T5771]  ? mlock_drain_local+0x28d/0x490
[  266.704595][ T5771]  __folio_batch_release+0x71/0xe0
[  266.709702][ T5771]  truncate_inode_pages_range+0x381/0xea0
[  266.715427][ T5771]  ? mapping_evict_folio+0x530/0x530
[  266.720726][ T5771]  ? do_raw_spin_unlock+0x121/0x230
[  266.725924][ T5771]  dbUnmount+0x109/0x180
[  266.730166][ T5771]  jfs_umount+0x235/0x3a0
[  266.734496][ T5771]  jfs_put_super+0x8c/0x190
[  266.739006][ T5771]  ? jfs_free_inode+0x30/0x30
[  266.743681][ T5771]  generic_shutdown_super+0x134/0x2b0
[  266.749054][ T5771]  kill_block_super+0x44/0x90
[  266.753729][ T5771]  deactivate_locked_super+0x97/0x100
[  266.759099][ T5771]  cleanup_mnt+0x3d7/0x460
[  266.763513][ T5771]  task_work_run+0x1d4/0x260
[  266.768103][ T5771]  ? task_work_cancel+0x220/0x220
[  266.773127][ T5771]  ? exit_to_user_mode_loop+0x3b/0x110
[  266.778588][ T5771]  exit_to_user_mode_loop+0xe6/0x110
[  266.783869][ T5771]  exit_to_user_mode_prepare+0xee/0x180
[  266.789413][ T5771]  syscall_exit_to_user_mode+0x1a/0x50
[  266.794869][ T5771]  do_syscall_64+0x61/0xb0
[  266.799281][ T5771]  ? clear_bhb_loop+0x40/0x90
[  266.803952][ T5771]  ? clear_bhb_loop+0x40/0x90
[  266.808621][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  266.814515][ T5771] RIP: 0033:0x7f810ff9f417
[  266.818924][ T5771] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  266.838530][ T5771] RSP: 002b:00007fff0c012bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  266.846961][ T5771] RAX: 0000000000000000 RBX: 00007f8110034ccb RCX: 00007f810ff9f417
[  266.854931][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0c012cb0
[  266.862898][ T5771] RBP: 00007fff0c012cb0 R08: 00007fff0c013cb0 R09: 00000000ffffffff
[  266.870860][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0c013d40
[  266.878822][ T5771] R13: 00007f8110034ccb R14: 0000000000041028 R15: 00007fff0c013d80
[  266.886816][ T5771]  </TASK>
[  266.889921][    C1] vkms_vblank_simulate: vblank timer overrun
[  266.904415][ T5771] Disabling lock debugging due to kernel taint
[  266.910681][ T5771] BUG: Bad page state in process syz-executor  pfn:66abc
Mar  3 11:02:55 [  266.919263][ T5771] page:ffffea00019aaf00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x3 pfn:0x66abc
syzkaller kern.alert kernel: [  [  266.931601][ T5771] flags: 0xfff1800000820c(referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
266.910681][ T57[  266.943559][ T5771] page_type: 0xffffffff()
71] BUG: Bad pag[  266.948677][ T5771] raw: 00fff1800000820c ffffea0001a3a0c8 ffffc9000481f940 0000000000000000
e state in proce[  266.958978][ T5771] raw: 0000000000000003 ffff88805eff14d8 00000000ffffffff 0000000000000000
ss syz-executor [  266.968761][ T5771] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
 pfn:66abc
[  266.977335][ T5771] page_owner tracks the page as allocated
[  266.983982][ T5771] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 11205, tgid 11204 (syz.0.1863), ts 266151149420, free_ts 266135482538
[  267.002415][ T5771]  post_alloc_hook+0x1c1/0x200
Mar  3 11:02:55 [  267.007693][ T5771]  get_page_from_freelist+0x2181/0x22a0
syzkaller kern.a[  267.014400][ T5771]  __alloc_pages+0x1f0/0x460
lert kernel: [  [  267.020287][ T5771]  folio_alloc+0x1e/0x30
266.977335][ T57[  267.020312][ T5771]  filemap_alloc_folio+0xdf/0x490
71] page_owner t[  267.032359][ T5771]  do_read_cache_folio+0x381/0x7f0
racks the page a[  267.039287][ T5771]  do_read_cache_page+0x32/0x260
s allocated
Mar[  267.045391][ T5771]  __get_metapage+0x31d/0xfa0
  3 11:02:56 syz[  267.051179][ T5771]  dbAllocAG+0x3fa/0x1000
kaller kern.aler[  267.056934][ T5771]  dbDiscardAG+0x2c5/0x8e0
t kernel: [  266[  267.063478][ T5771]  jfs_ioc_trim+0x42c/0x670
.983982][ T5771][  267.068641][ T5771]  jfs_ioctl+0x292/0x3b0
 page last alloc[  267.074302][ T5771]  __se_sys_ioctl+0xfd/0x170
ated via order 0[  267.080240][ T5771]  do_syscall_64+0x55/0xb0
, migratetype Un[  267.086612][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
movable, gfp_mas[  267.093365][ T5771] page last free stack trace:
k 0x140c40(GFP_N[  267.099356][ T5771]  free_unref_page_prepare+0x7d7/0x8f0
OFS|__GFP_COMP|_[  267.107038][ T5771]  free_unref_page+0x32/0x2e0
_GFP_HARDWALL), [  267.112280][ T5771]  lmLogShutdown+0x44f/0x850
pid 11205, tgid [  267.118360][ T5771]  lmLogClose+0x28c/0x530
11204 (syz.0.186[  267.124129][ T5771]  jfs_remount+0x414/0x5c0
3), ts 266151149[  267.129864][ T5771]  reconfigure_super+0x229/0x8e0
420, free_ts 266[  267.136504][ T5771]  path_mount+0xcfe/0xfa0
135482538
Mar  [  267.141785][ T5771]  __se_sys_mount+0x2e7/0x3d0
3 11:02:56 syzka[  267.147973][ T5771]  do_syscall_64+0x55/0xb0
ller kern.alert [  267.153777][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
kernel: [  267.0[  267.161214][ T5771] Modules linked in:
93365][ T5771] p[  267.166382][ T5771] CPU: 0 PID: 5771 Comm: syz-executor Tainted: G    B              syzkaller #0
[  267.176598][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  267.186641][ T5771] Call Trace:
[  267.189910][ T5771]  <TASK>
[  267.192834][ T5771]  dump_stack_lvl+0x18c/0x250
[  267.197509][ T5771]  ? show_regs_print_info+0x20/0x20
[  267.202699][ T5771]  ? swiotlb_print_info+0x70/0x70
[  267.207715][ T5771]  bad_page+0x14b/0x170
[  267.211859][ T5771]  free_unref_page_prepare+0x884/0x8f0
[  267.217333][ T5771]  free_unref_page_list+0xbe/0x860
[  267.222445][ T5771]  ? __folio_memcg+0x63/0x170
[  267.227155][ T5771]  ? folio_memcg+0x127/0x4a0
[  267.231772][ T5771]  release_pages+0x208a/0x2300
[  267.236531][ T5771]  ? lru_cache_disable+0x30/0x30
[  267.241493][ T5771]  ? mlock_drain_local+0x79/0x490
[  267.246506][ T5771]  ? mlock_drain_local+0x79/0x490
[  267.251524][ T5771]  ? mlock_drain_local+0x28d/0x490
[  267.256623][ T5771]  __folio_batch_release+0x71/0xe0
[  267.261761][ T5771]  truncate_inode_pages_range+0x381/0xea0
[  267.267482][ T5771]  ? mapping_evict_folio+0x530/0x530
[  267.272766][ T5771]  ? do_raw_spin_unlock+0x121/0x230
[  267.277964][ T5771]  dbUnmount+0x109/0x180
[  267.282246][ T5771]  jfs_umount+0x235/0x3a0
[  267.286572][ T5771]  jfs_put_super+0x8c/0x190
[  267.291074][ T5771]  ? jfs_free_inode+0x30/0x30
[  267.295747][ T5771]  generic_shutdown_super+0x134/0x2b0
[  267.301119][ T5771]  kill_block_super+0x44/0x90
[  267.305793][ T5771]  deactivate_locked_super+0x97/0x100
[  267.311158][ T5771]  cleanup_mnt+0x3d7/0x460
[  267.315570][ T5771]  task_work_run+0x1d4/0x260
[  267.327032][ T5771]  ? task_work_cancel+0x220/0x220
[  267.332062][ T5771]  ? exit_to_user_mode_loop+0x3b/0x110
[  267.337531][ T5771]  exit_to_user_mode_loop+0xe6/0x110
[  267.342832][ T5771]  exit_to_user_mode_prepare+0xee/0x180
[  267.348408][ T5771]  syscall_exit_to_user_mode+0x1a/0x50
[  267.353977][ T5771]  do_syscall_64+0x61/0xb0
[  267.358409][ T5771]  ? clear_bhb_loop+0x40/0x90
[  267.363095][ T5771]  ? clear_bhb_loop+0x40/0x90
[  267.367772][ T5771]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  267.373669][ T5771] RIP: 0033:0x7f810ff9f417
[  267.378078][ T5771] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  267.397701][ T5771] RSP: 002b:00007fff0c012bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  267.406372][ T5771] RAX: 0000000000000000 RBX: 00007f8110034ccb RCX: 00007f810ff9f417
[  267.414338][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff0c012cb0
[  267.422303][ T5771] RBP: 00007fff0c012cb0 R08: 00007fff0c013cb0 R09: 00000000ffffffff
[  267.430304][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff0c013d40
[  267.438273][ T5771] R13: 00007f8110034ccb R14: 0000000000041028 R15: 00007fff0c013d80
[  267.446248][ T5771]  </TASK>
age last free stack trace:
[  270.477082][ T5141] udevd[5141]: worker [6916] /devices/virtual/block/nbd0 is taking a long time