last executing test programs:

2m24.787401195s ago: executing program 5 (id=141):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r0, 0x891a, 0x0)

2m24.155568855s ago: executing program 5 (id=145):
r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_read(r0, 0x4, 0x0, 0x0)
syz_usb_ep_write(r0, 0x83, 0x0, 0x0)

2m21.682806876s ago: executing program 5 (id=162):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca34880080061a1cfc700000000000008000380641c1d80"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

2m21.564975708s ago: executing program 5 (id=164):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[], 0xff, 0x257, &(0x7f0000000240)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00', 0x0, 0x0)

2m21.437995107s ago: executing program 5 (id=167):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000004c0)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@gid_forget}, {@fileset={'fileset', 0x3d, 0x6}}, {@unhide}, {@uid}, {@uid_forget}, {@uid}, {@shortad}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x7fffffff}}, {@uid_ignore}, {@fileset}, {@shortad}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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")
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
chown(&(0x7f0000000080)='./file1\x00', r0, 0x0)

2m20.699897491s ago: executing program 5 (id=175):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500030001000000050003000200000005000300050000000500030080ff000005000300010000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2m19.75853637s ago: executing program 32 (id=175):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff340004800500030001000000050003000200000005000300050000000500030080ff000005000300010000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1m49.424580718s ago: executing program 2 (id=480):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x9})

1m49.116014211s ago: executing program 2 (id=483):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d00000000001400", @ANYRES64=r0], 0x38}}, 0x0)

1m48.725913565s ago: executing program 2 (id=488):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x1b}, {&(0x7f0000000080)="f6c9e32ae40f4dc0815fd0d897079a161cfb7702311e629acda76933ddd0c24165eb4d4d28d99f73071535534b2ce744440aa8cdc5aab34c689a95423df70dd6d743273b8f4edfe04c818640a2009a7501acdffa95b58c89e4ff78d363773d65dcd089b0a2faec1608bcb51f78a088acfb5776c00b86c304bb3a298fe0386425971a0e3014c853966b4a5f22b59736eabc5e77d720840b916215f16789e493bc97796e68318f84983461913d8f41e1622569e39875bb2f3f58c5e42d5a4604588509954415a7665a8ea11fe3666500ff2a5a562a153bed774fddb9d54f0e411917b3e95c48c4234bd21a02058d", 0x4}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0)

1m48.399926732s ago: executing program 2 (id=491):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}, 0x8}, r1}}, 0x48)

1m47.940129837s ago: executing program 2 (id=497):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)

1m47.75788855s ago: executing program 2 (id=499):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a800800048004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000)

1m32.626421551s ago: executing program 33 (id=499):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a800800048004000380"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000)

5.56961369s ago: executing program 0 (id=1463):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x61ec, &(0x7f00000011c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x280401, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)

4.65767743s ago: executing program 6 (id=1472):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
ioctl$TIOCCONS(r0, 0x541d)

4.459308156s ago: executing program 6 (id=1474):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000040), &(0x7f0000002840)={'syz', 0x2}, &(0x7f00000011c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eacab940ab5c96cb5d81dac1ad2243d878ddea08b78f666b96206bafe0ab1bd5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4dec1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb751d21b2", 0xc0, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000001340)={r1, r1, r0}, &(0x7f0000001780)=""/4097, 0x1001, 0x0)

4.180202773s ago: executing program 0 (id=1478):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]})
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

3.883348712s ago: executing program 6 (id=1482):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0xa, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x12, 0x4})

3.787336315s ago: executing program 4 (id=1485):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000240)="3f000000010000", 0x7)

3.483878705s ago: executing program 6 (id=1489):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000540)={0x0, @bt={0x2d0, 0x590, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xfe, 0x8, 0x5, 0x722, 0xfffffffb, 0x7, 0x7f, 0x3d, 0x14, {0xffff945a, 0x1}, 0x3, 0xed}})

3.463899948s ago: executing program 4 (id=1490):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x9, 0xfff2}, {0x5, 0x2}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)

3.212132953s ago: executing program 6 (id=1491):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009780)='./file0\x00', 0x41, &(0x7f0000000000)={[{@noalign}]}, 0x1, 0x97f7, &(0x7f0000013c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x3, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xc, 0x3, 0xffffffffffffffff, 0x1}], ['\x00']})

3.048160742s ago: executing program 4 (id=1494):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)

2.800799716s ago: executing program 0 (id=1497):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x52}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000004b00)=""/4100, 0x1004}, {&(0x7f0000000dc0)=""/201, 0xc9}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/41, 0x29}], 0x5}, 0x19}], 0x3, 0x0, 0x0)

2.672522277s ago: executing program 7 (id=1498):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001001400000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100007cffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000012, 0xe, 0x0, &(0x7f00000006c0)="63eced8e46003f2ddf33c9e9b986", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)

2.644534712s ago: executing program 4 (id=1499):
syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x52e, &(0x7f0000000e80)="$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")
mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x9, 0x72}, 0x49)
truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc)

2.480242859s ago: executing program 0 (id=1501):
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4, 0x800101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x963c}, {0xa, 0x4e22, 0x80d50, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x93, 0xfffffffd, 0x6, 0x10000, 0x1, 0x1, 0x5, 0x9]}}, 0x5c)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a00000022fdff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

2.443848852s ago: executing program 3 (id=1502):
r0 = open(&(0x7f0000000080)='./file1\x00', 0x1e5a40, 0x0)
io_setup(0x43, &(0x7f0000000440)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x18, 0x8, 0x647b, r0, 0x0, 0x0, 0x200, 0x0, 0x2}])

2.333649293s ago: executing program 7 (id=1503):
setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()

2.208491964s ago: executing program 4 (id=1506):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a9d8ca08450c038064f9010243010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="c01601"], 0x0, 0x0, 0x0, 0x0})

2.140783891s ago: executing program 1 (id=1507):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x100, 0x1f, 0x1, 0x9, 0x5, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x6, 0x1, 0x80, 0x80000006, 0xffffffbb, 0x20000009, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x17f, 0x200008, 0x8, 0xf39e, 0xffffffff, 0x8, 0xa6b3, 0xffffffff, 0xfffffff8]})

1.90224171s ago: executing program 1 (id=1508):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0xa0, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x5, 0x1, 0x9, 0x2, 0x3, 0x8d8, 0xff, 0x8}}}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xcf, 0x3, 0xfc00, 0x9, 0x1, 0x5, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x5, 0x101, 0x1, 0x0, 0x4003, 0x5, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

1.852996962s ago: executing program 3 (id=1509):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0a000000010001", 0x7)

1.656054903s ago: executing program 7 (id=1510):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x20, 0x4, 0x3f, 0xfffff004}, {0x16, 0x4, 0xc, 0xd4a}]})

1.611213041s ago: executing program 3 (id=1511):
setns(0xc9, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000000080101000000000000000005000005240004800800014000000003080001400000000c080002"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4)

1.492918535s ago: executing program 3 (id=1512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x4040)

1.389273203s ago: executing program 3 (id=1513):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0xff, 0x5f9a, &(0x7f0000003100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80014)

1.324685241s ago: executing program 1 (id=1514):
timer_create(0x7, 0x0, &(0x7f0000004140)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000004180)={{0x77359400}, {0x77359400}}, 0x0)
timer_gettime(r0, &(0x7f0000004340))

934.948989ms ago: executing program 7 (id=1515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x10040000)

932.515901ms ago: executing program 1 (id=1516):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./proc/kallsyms\x00', 0x8c800, 0x0)

812.585918ms ago: executing program 0 (id=1517):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648d87932fde4a461458beec0cff", 0x44, 0x10, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='b '], 0xb8)

535.690959ms ago: executing program 1 (id=1518):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0xffffff65, 0x0, 0x0})

533.121754ms ago: executing program 6 (id=1519):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000014c0)={r1, 0x0, 0x0}, 0x20)

523.839582ms ago: executing program 0 (id=1520):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x4}]}}]}, 0x38}}, 0x4048000)

500.866376ms ago: executing program 7 (id=1521):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

179.568987ms ago: executing program 1 (id=1522):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x1, 0x40000)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0})

78.585686ms ago: executing program 4 (id=1523):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200004018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

76.881555ms ago: executing program 7 (id=1524):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff050000000000000000000000000001080001"], 0x50}}, 0x0)

0s ago: executing program 3 (id=1525):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000940)={0x2, 0x4e24, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1ff, 0x9}, &(0x7f0000019300)=0x7ff, 0x0, 0x2, 0x8000000000000001, 0xe1, 0xf, 0x0, 0xffffffffffffffff}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0xa7}, 0x0, 0x0, 0x2, 0x4, 0x7, 0x0, 0x4, 0x8001}}], 0xb0, 0x8004}, 0x0)

kernel console output (not intermixed with test programs):

4] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  161.719510][ T7534] BTRFS info (device loop1): using crc32c checksum algorithm
[  161.779001][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.593'.
[  161.860856][ T7534] BTRFS info (device loop1): enabling ssd optimizations
[  161.860894][ T7534] BTRFS info (device loop1): turning on flush-on-commit
[  161.860916][ T7534] BTRFS info (device loop1): enabling free space tree
[  161.860936][ T7534] BTRFS info (device loop1): enabling auto defrag
[  161.860967][ T7534] BTRFS info (device loop1): use lzo compression, level 1
[  161.860992][ T7534] BTRFS info (device loop1): max_inline set to 4096
[  162.227658][ T5607] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.259121][ T7538] loop6: detected capacity change from 0 to 32768
[  162.481392][ T7538] ERROR: (device loop6): dbAllocBits: leaf page corrupt
[  162.481392][ T7538] 
[  162.493507][ T7538] ERROR: (device loop6): remounting filesystem as read-only
[  162.630649][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'.
[  162.630715][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'.
[  162.898777][  T119] blkno = b00, nblocks = 400
[  162.898806][  T119] ERROR: (device loop6): dbFree: block to be freed is outside the map
[  162.898806][  T119] 
[  163.457364][ T7566] loop0: detected capacity change from 0 to 32768
[  163.461270][ T7592] loop1: detected capacity change from 0 to 128
[  163.490614][ T7566] 
[  163.490614][ T7566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.490614][ T7566] 
[  163.569196][ T7592] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.604088][ T7592] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  163.910264][ T5607] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.987963][ T7602] netlink: 'syz.3.612': attribute type 10 has an invalid length.
[  163.988505][ T7602] netlink: 'syz.3.612': attribute type 10 has an invalid length.
[  164.455222][ T7566] blkno = 0, nblocks = 40
[  164.455244][ T7566] ERROR: (device loop0): dbFree: block to be freed is outside the map
[  164.455244][ T7566] 
[  164.476425][ T7566] ERROR: (device loop0): remounting filesystem as read-only
[  164.552753][ T5727] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  164.711258][ T5727] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  164.727452][ T5727] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  164.727485][ T5727] usb 2-1: config 0 has no interface number 0
[  164.727533][ T5727] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.727564][ T5727] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.727609][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.782015][ T5727] usb 2-1: config 0 descriptor??
[  164.944719][ T7626] netlink: 'syz.0.618': attribute type 2 has an invalid length.
[  165.022921][ T7627] loop6: detected capacity change from 0 to 1024
[  165.037797][ T7627] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  165.076319][ T7627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.247037][ T6412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.306821][ T5727] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1
[  165.343634][ T5727] hid_prodikeys: hid-prodikeys: failed to find output report
[  165.343634][ T5727] 
[  165.490490][   T25] usb 2-1: USB disconnect, device number 3
[  165.730248][ T7616] loop3: detected capacity change from 0 to 32768
[  165.747841][ T7616] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.615 (7616)
[  165.817773][ T7616] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  165.817812][ T7616] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  165.884940][ T7645] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame.
[  165.962057][ T7616] BTRFS info (device loop3): enabling ssd optimizations
[  165.962088][ T7616] BTRFS info (device loop3): turning on async discard
[  165.962107][ T7616] BTRFS info (device loop3): enabling free space tree
[  165.970465][ T7662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'.
[  165.970492][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'.
[  166.089056][ T4926] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  166.100648][ T4926] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  166.117513][ T4926] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  166.120232][ T4926] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  166.120926][ T4926] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  166.268971][ T5626] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  166.857253][ T5727] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  167.011177][ T5727] usb 7-1: Using ep0 maxpacket: 16
[  167.027944][ T5727] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  167.036039][ T5727] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.036075][ T5727] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.036100][ T5727] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  167.036145][ T5727] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.083978][ T5727] usb 7-1: config 0 descriptor??
[  167.198550][ T7694] loop0: detected capacity change from 0 to 1024
[  167.607562][   T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.615968][ T5727] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  167.694608][ T7700] xt_CT: No such helper "snmp"
[  167.814583][   T10] usb 7-1: USB disconnect, device number 2
[  167.890943][   T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.002771][   T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  168.053212][   T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.162527][   T30] usb 5-1: Using ep0 maxpacket: 8
[  168.170353][   T30] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  168.171754][   T30] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  168.171780][   T30] usb 5-1: config 0 has no interface number 0
[  168.195845][   T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.211331][   T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.211362][   T30] usb 5-1: Product: syz
[  168.211379][   T30] usb 5-1: Manufacturer: syz
[  168.211397][   T30] usb 5-1: SerialNumber: syz
[  168.272685][   T30] usb 5-1: config 0 descriptor??
[  168.302909][ T4926] Bluetooth: hci6: command tx timeout
[  168.512012][   T30] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  168.512089][   T30] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized!
[  168.540466][   T30] uvcvideo 5-1:0.31: Failed to create links for entity 5
[  168.540488][   T30] uvcvideo 5-1:0.31: Failed to register entities (-22).
[  168.770084][ T5841] usb 5-1: USB disconnect, device number 5
[  169.110356][ T7749] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5607] was attempted by ""[7749]
[  169.342325][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'.
[  169.449626][   T39] bridge_slave_1: left allmulticast mode
[  169.449661][   T39] bridge_slave_1: left promiscuous mode
[  169.449928][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.505732][   T39] bridge_slave_0: left allmulticast mode
[  169.505763][   T39] bridge_slave_0: left promiscuous mode
[  169.505999][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.585196][ T7768] loop0: detected capacity change from 0 to 256
[  169.696659][ T7774] loop3: detected capacity change from 0 to 512
[  169.697789][ T7774] EXT4-fs: Ignoring removed oldalloc option
[  169.749223][ T7774] EXT4-fs (loop3): 1 truncate cleaned up
[  169.788213][ T7774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.845381][ T7780] loop0: detected capacity change from 0 to 512
[  169.866989][ T7780] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  169.868362][ T7780] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  169.895847][ T7780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.011983][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.061799][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.210154][ T7789] Bluetooth: MGMT ver 1.23
[  170.283556][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'.
[  170.373622][ T4926] Bluetooth: hci6: command tx timeout
[  170.555014][   T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.561595][   T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.568814][   T39] bond0 (unregistering): Released all slaves
[  170.738011][   T39] ovs-system: left promiscuous mode
[  171.038061][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.038181][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.038312][ T7664] bridge_slave_0: entered allmulticast mode
[  171.050369][ T7664] bridge_slave_0: entered promiscuous mode
[  171.065433][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.065544][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.065673][ T7664] bridge_slave_1: entered allmulticast mode
[  171.078033][ T7664] bridge_slave_1: entered promiscuous mode
[  171.096863][ T7814] loop3: detected capacity change from 0 to 2048
[  171.165322][ T7814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.165432][ T7814] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.211772][ T7822] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  171.211920][ T7822] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  171.212064][ T7822] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  171.212219][ T7822] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  171.212356][ T7822] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  171.212570][ T7822] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  171.212711][ T7822] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  171.212848][ T7822] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  171.212985][ T7822] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  171.213129][ T7822] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  171.233222][ T7821] loop4: detected capacity change from 0 to 64
[  171.562417][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.661472][ T7831] [U] �
[  171.696968][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.792244][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.165415][ T7848] loop4: detected capacity change from 0 to 1024
[  172.166481][ T7848] EXT4-fs: Ignoring removed orlov option
[  172.210292][ T7848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.226403][ T7664] team0: Port device team_slave_0 added
[  172.254517][ T7664] team0: Port device team_slave_1 added
[  172.270755][ T7856] loop0: detected capacity change from 0 to 128
[  172.303135][ T7856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  172.303241][ T7856] System zones: 1-3, 19-19, 35-36
[  172.314038][ T7856] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  172.317945][ T7856] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  172.387307][ T7857] loop3: detected capacity change from 0 to 2048
[  172.393754][ T7862] EXT4-fs error (device loop4): ext4_lookup:1787: inode #16: comm syz.4.702: unexpected EA_INODE flag
[  172.405772][ T7862] EXT4-fs (loop4): Remounting filesystem read-only
[  172.423945][ T7857] NILFS (loop3): invalid segment: Magic number mismatch
[  172.423975][ T7857] NILFS (loop3): trying rollback from an earlier position
[  172.452651][ T4926] Bluetooth: hci6: command tx timeout
[  172.498557][ T7857] NILFS (loop3): recovery complete
[  172.512200][ T7865] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.539603][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0
[  172.539622][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.539651][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  172.566075][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1
[  172.566094][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  172.566126][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.655920][ T5616] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  172.722849][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.890549][   T39] hsr_slave_0: left promiscuous mode
[  172.911015][   T39] hsr_slave_1: left promiscuous mode
[  172.918591][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.918615][   T39] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.936984][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.937006][   T39] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.016943][ T7879] loop6: detected capacity change from 0 to 2048
[  173.046030][   T39] veth1_macvtap: left promiscuous mode
[  173.046070][   T39] veth0_macvtap: left promiscuous mode
[  173.046188][   T39] veth1_vlan: left promiscuous mode
[  173.046211][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'.
[  173.046262][   T39] veth0_vlan: left promiscuous mode
[  173.073074][ T7886] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.171115][ T7888] loop0: detected capacity change from 0 to 128
[  173.209327][ T7888] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  173.406857][ T7886] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  173.406892][ T7886] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  173.431734][ T7886] Remounting filesystem read-only
[  173.446126][ T6412] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  174.394782][   T39] team0 (unregistering): Port device team_slave_1 removed
[  174.444254][   T39] team0 (unregistering): Port device team_slave_0 removed
[  174.532634][ T4926] Bluetooth: hci6: command tx timeout
[  174.711169][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5
[  174.715502][ T7892] netlink: 144 bytes leftover after parsing attributes in process `syz.1.716'.
[  175.006729][ T7931] xt_hashlimit: size too large, truncated to 1048576
[  175.028260][ T7933] loop0: detected capacity change from 0 to 1024
[  175.050869][ T7664] hsr_slave_0: entered promiscuous mode
[  175.059482][ T7933] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  175.070344][ T7664] hsr_slave_1: entered promiscuous mode
[  175.078294][ T7664] debugfs: 'hsr0' already exists in 'hsr'
[  175.078314][ T7664] Cannot create hsr debugfs directory
[  175.096199][ T7933] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  175.096550][ T7933] EXT4-fs (loop0): orphan cleanup on readonly fs
[  175.096670][ T7933] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #3: comm syz.0.736: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0)
[  175.096714][ T7933] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  175.097143][ T7933] EXT4-fs error (device loop0): ext4_quota_enable:7263: comm syz.0.736: Bad quota inode: 3, type: 0
[  175.097173][ T7933] loop0: lost filesystem error report for type 5 error -117
[  175.097348][ T7933] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  175.097380][ T7933] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  175.102244][ T7933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  175.290217][ T7933] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  175.304795][ T7934] loop3: detected capacity change from 0 to 4096
[  175.326195][ T7934] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  175.466601][ T7934] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  175.545987][ T7934] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  175.566186][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.921007][ T7951] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[  176.342362][ T7965] loop4: detected capacity change from 0 to 128
[  176.378716][ T7965] zonefs: Bad value for 'errors'
[  177.022718][ T7953] loop3: detected capacity change from 0 to 32768
[  177.026721][ T7953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.742 (7953)
[  177.066452][ T7953] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.066488][ T7953] BTRFS info (device loop3): using crc32c checksum algorithm
[  177.095967][ T7664] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  177.138700][ T7664] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  177.139574][ T7664] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  177.176850][ T7664] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  177.178228][ T7664] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  177.317685][ T7664] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  177.358678][ T7664] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  177.428538][ T7953] BTRFS info (device loop3): setting nodatasum
[  177.428567][ T7953] BTRFS info (device loop3): setting nodatacow
[  177.428588][ T7953] BTRFS info (device loop3): disabling tree log
[  177.428607][ T7953] BTRFS info (device loop3): turning on async discard
[  177.428627][ T7953] BTRFS info (device loop3): enabling free space tree
[  177.428646][ T7953] BTRFS info (device loop3): max_inline set to 0
[  177.464138][ T7664] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  177.865880][ T5626] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.001603][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6
[  178.114670][ T7664] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.197048][ T7664] 8021q: adding VLAN 0 to HW filter on device team0
[  178.238349][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.238464][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.277898][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.278019][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.428234][ T8027] loop4: detected capacity change from 0 to 512
[  178.527090][ T8027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  178.573444][ T8027] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  178.573606][ T8027] System zones: 1-12
[  178.590654][ T8027] EXT4-fs (loop4): 1 truncate cleaned up
[  178.621392][ T8027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.727654][ T7976] loop1: detected capacity change from 0 to 40427
[  178.792847][ T7976] F2FS-fs (loop1): invalid crc value
[  179.196925][  T101] IPVS: starting estimator thread 0...
[  179.283725][ T8047] IPVS: using max 23 ests per chain, 55200 per kthread
[  179.338996][ T7976] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  179.474472][ T7976] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  179.704805][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.049203][ T5607] syz-executor: attempt to access beyond end of device
[  180.049203][ T5607] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  180.075039][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  180.075082][ T5607] Tainted: [L]=SOFTLOCKUP
[  180.075094][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  180.075111][ T5607] Call Trace:
[  180.075123][ T5607]  <TASK>
[  180.075134][ T5607]  dump_stack_lvl+0xe8/0x150
[  180.075184][ T5607]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  180.075230][ T5607]  f2fs_write_end_bio+0x1211/0x16e0
[  180.075264][ T5607]  ? blkg_put+0x22/0x240
[  180.075320][ T5607]  __submit_merged_bio+0x258/0x6a0
[  180.075360][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.075395][ T5607]  ? rcu_is_watching+0x16/0xb0
[  180.075439][ T5607]  __submit_merged_write_cond+0x3c9/0x4e0
[  180.075491][ T5607]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  180.075556][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.075601][ T5607]  f2fs_write_data_pages+0x2a27/0x36f0
[  180.075693][ T5607]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.075735][ T5607]  ? is_bpf_text_address+0x26/0x2b0
[  180.075787][ T5607]  ? arch_stack_walk+0xfb/0x150
[  180.075857][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.075890][ T5607]  ? add_lock_to_list+0xc7/0x100
[  180.075929][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.075962][ T5607]  ? __lock_acquire+0x1511/0x2de0
[  180.076026][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.076059][ T5607]  ? do_raw_spin_lock+0x12b/0x2f0
[  180.076106][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.076144][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.076176][ T5607]  ? do_raw_spin_unlock+0xf5/0x200
[  180.076218][ T5607]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.076267][ T5607]  do_writepages+0x338/0x560
[  180.076299][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.076335][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.076372][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.076404][ T5607]  ? do_raw_spin_unlock+0xf5/0x200
[  180.076451][ T5607]  filemap_fdatawrite+0x1e9/0x2f0
[  180.076486][ T5607]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  180.076571][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.076607][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.076646][ T5607]  ? do_raw_spin_unlock+0xf5/0x200
[  180.076693][ T5607]  f2fs_sync_dirty_inodes+0x30e/0x830
[  180.076742][ T5607]  f2fs_write_checkpoint+0xa3d/0x2710
[  180.076770][ T5607]  ? __lock_acquire+0x747/0x2de0
[  180.076841][ T5607]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  180.076869][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.076974][ T5607]  kill_f2fs_super+0x2dd/0x700
[  180.077030][ T5607]  ? __pfx_kill_f2fs_super+0x10/0x10
[  180.077082][ T5607]  ? call_rcu+0x64d/0x8b0
[  180.077116][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.077149][ T5607]  ? lockdep_hardirqs_on+0x7b/0x110
[  180.077181][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.077233][ T5607]  deactivate_locked_super+0xbc/0x110
[  180.077278][ T5607]  cleanup_mnt+0x3d3/0x460
[  180.077314][ T5607]  task_work_run+0x1d9/0x270
[  180.077352][ T5607]  ? __pfx_task_work_run+0x10/0x10
[  180.077397][ T5607]  exit_to_user_mode_loop+0x204/0x770
[  180.077427][ T5607]  ? srso_alias_return_thunk+0x5/0xfbef5
[  180.077461][ T5607]  ? rcu_is_watching+0x16/0xb0
[  180.077502][ T5607]  do_syscall_64+0x328/0x520
[  180.077539][ T5607]  ? trace_irq_disable+0x3b/0x140
[  180.077569][ T5607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.077606][ T5607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.077636][ T5607] RIP: 0033:0x7f4c3779f397
[  180.077662][ T5607] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  180.077686][ T5607] RSP: 002b:00007ffc5a4a45a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  180.077717][ T5607] RAX: 0000000000000000 RBX: 00007f4c3783448b RCX: 00007f4c3779f397
[  180.077737][ T5607] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5a4a4660
[  180.077756][ T5607] RBP: 00007ffc5a4a4660 R08: 00007ffc5a4a5660 R09: 00000000ffffffff
[  180.077776][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc5a4a56f0
[  180.077796][ T5607] R13: 00007f4c3783448b R14: 000000000002be4f R15: 00007ffc5a4a5730
[  180.077841][ T5607]  </TASK>
[  180.097330][ T5607] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  180.252138][ T8061] bridge0: port 3(vlan0) entered blocking state
[  180.252276][ T8061] bridge0: port 3(vlan0) entered disabled state
[  180.253293][ T8061] vlan0: entered allmulticast mode
[  180.261561][ T8062] loop3: detected capacity change from 0 to 1024
[  180.263452][ T8061] veth0_vlan: entered allmulticast mode
[  180.372040][ T8061] vlan0: entered promiscuous mode
[  180.383846][ T8067] loop0: detected capacity change from 0 to 64
[  180.434339][ T8062] hfsplus: invalid length 1280 has been corrected to 255
[  180.476949][ T8061] bridge0: port 3(vlan0) entered blocking state
[  180.477081][ T8061] bridge0: port 3(vlan0) entered forwarding state
[  180.774533][ T8070] support for the xor transformation has been removed.
[  180.955450][ T8040] loop6: detected capacity change from 0 to 32768
[  180.998982][ T8040] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.109385][ T8084] xt_hashlimit: size too large, truncated to 1048576
[  181.136437][ T8040] XFS (loop6): Ending clean mount
[  181.687824][ T6412] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.735492][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7
[  182.226849][ T7664] 8021q: adding VLAN 0 to HW filter on device batadv0
[  182.346068][ T8111] loop0: detected capacity change from 0 to 256
[  183.361743][ T8145] loop3: detected capacity change from 0 to 64
[  183.457055][   T31] kauditd_printk_skb: 18 callbacks suppressed
[  183.457079][   T31] audit: type=1800 audit(1789066897.538:80): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.791" name="file1" dev="loop3" ino=21 res=0 errno=0
[  183.808245][ T7664] veth0_vlan: entered promiscuous mode
[  183.894619][ T7664] veth1_vlan: entered promiscuous mode
[  184.116472][ T7664] veth0_macvtap: entered promiscuous mode
[  184.150834][ T7664] veth1_macvtap: entered promiscuous mode
[  184.196895][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.299228][ T7664] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.378900][   T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.413779][   T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.414120][   T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.414293][   T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.560776][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8
[  184.626088][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.626114][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.730334][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.730365][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.029697][ T8181] loop4: detected capacity change from 0 to 256
[  185.129048][ T8183] loop1: detected capacity change from 0 to 16
[  185.189297][ T8183] erofs (device loop1): mounted with root inode @ nid 36.
[  185.270761][ T8183] erofs (device loop1): invalid de[0].nameoff 87 @ nid 36
[  185.271691][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.6.803'.
[  185.455830][ T8190] loop7: detected capacity change from 0 to 1024
[  185.489739][ T8190] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  185.489868][ T8190] EXT4-fs (loop7): stripe (203) is not aligned with cluster size (16), stripe is disabled
[  185.516579][ T8190] EXT4-fs error (device loop7): ext4_get_journal_inode:5927: inode #32: comm syz.7.804: iget: special inode unallocated
[  185.516614][ T8190] loop7: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  185.521344][ T8190] EXT4-fs (loop7): no journal found
[  185.521365][ T8190] EXT4-fs (loop7): can't get journal size
[  185.522488][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  185.522509][    C1] EXT4-fs (loop7): initial error at time 1789066899: ext4_get_journal_inode:5927: inode 32
[  185.522545][    C1] EXT4-fs (loop7): last error at time 1789066899: ext4_get_journal_inode:5927: inode 32
[  185.596103][ T8190] EXT4-fs (loop7): filesystem is read-only
[  185.612726][ T8190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  185.858192][ T8190] EXT4-fs (loop7): stripe (227) is not aligned with cluster size (16), stripe is disabled
[  185.934946][ T8204] netlink: 28 bytes leftover after parsing attributes in process `syz.6.809'.
[  186.065506][ T8206] netlink: 'syz.6.810': attribute type 4 has an invalid length.
[  186.224954][ T7664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.343693][ T8164] loop3: detected capacity change from 0 to 32768
[  186.432312][ T8164] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  186.444527][ T8210] net_ratelimit: 44 callbacks suppressed
[  186.444567][ T8210] netlink: Failed to add  helper -22
[  186.444644][ T8210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.643807][ T8164] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  186.680868][ T8164] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30
[  186.804986][ T8164] XFS (loop3): Ending clean mount
[  186.898732][ T8222] loop4: detected capacity change from 0 to 4096
[  187.064979][ T5626] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  187.140709][ T8230] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.238882][ T8233] netlink: 64 bytes leftover after parsing attributes in process `syz.6.816'.
[  187.406110][ T8194] loop0: detected capacity change from 0 to 32768
[  187.637818][ T8194] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  187.931021][ T8245] loop4: detected capacity change from 0 to 1024
[  187.960789][ T8246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.155900][ T8211] loop1: detected capacity change from 0 to 32768
[  188.226401][ T5616] ocfs2: Unmounting device (7,0) on (node local)
[  188.241628][ T8211] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  188.505655][ T8265] capability: warning: `syz.3.826' uses deprecated v2 capabilities in a way that may be insecure
[  188.755693][ T8211] XFS (loop1): Starting recovery (logdev: internal)
[  188.939852][ T8211] XFS (loop1): Ending recovery (logdev: internal)
[  189.042048][ T8271] pimreg3: entered allmulticast mode
[  189.242297][ T5607] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  190.369309][ T8306] loop1: detected capacity change from 0 to 64
[  190.711935][ T8288] loop3: detected capacity change from 0 to 32768
[  190.731738][ T8288] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.838 (8288)
[  190.749104][ T8313] netlink: zone id is out of range
[  190.749330][ T8313] netlink: zone id is out of range
[  190.749744][ T8313] netlink: zone id is out of range
[  190.750237][ T8313] netlink: zone id is out of range
[  190.752710][ T8313] netlink: zone id is out of range
[  190.752908][ T8313] netlink: zone id is out of range
[  190.752950][ T8313] netlink: zone id is out of range
[  190.805078][ T8288] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  190.805110][ T8288] BTRFS info (device loop3): using crc32c checksum algorithm
[  190.964517][ T8288] BTRFS info (device loop3): enabling ssd optimizations
[  190.964546][ T8288] BTRFS info (device loop3): turning on async discard
[  190.964566][ T8288] BTRFS info (device loop3): enabling free space tree
[  191.350659][ T8344] netlink: 232 bytes leftover after parsing attributes in process `syz.1.857'.
[  191.400840][ T5626] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.841381][ T8359] loop1: detected capacity change from 0 to 256
[  191.841731][ T8357] netlink: 774 bytes leftover after parsing attributes in process `syz.3.860'.
[  191.859647][ T8359] exfat: Deprecated parameter 'utf8'
[  191.859685][ T8359] exfat: Deprecated parameter 'utf8'
[  191.859760][ T8359] exfat: Deprecated parameter 'utf8'
[  191.884466][ T8359] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  192.096965][ T8307] mmap: syz.7.846 (8307) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  192.122572][   T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  192.172888][ T5727] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  192.182875][ T8365] netlink: 68 bytes leftover after parsing attributes in process `syz.3.866'.
[  192.279638][   T25] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  192.290624][   T25] usb 1-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.290688][   T25] usb 1-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  192.290719][   T25] usb 1-1: config 0 interface 0 has no altsetting 0
[  192.290758][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.303591][   T25] usb 1-1: config 0 descriptor??
[  192.335494][ T5727] usb 5-1: Using ep0 maxpacket: 32
[  192.347699][ T5727] usb 5-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00
[  192.358253][ T5727] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 26, changing to 8
[  192.358287][ T5727] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  192.358317][ T5727] usb 5-1: config 0 interface 0 has no altsetting 0
[  192.358352][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.411771][ T5727] usb 5-1: config 0 descriptor??
[  192.543768][ T8363] loop6: detected capacity change from 0 to 40427
[  192.567039][ T8363] F2FS-fs (loop6): invalid crc value
[  192.589897][ T8372] process 'syz.3.868' launched './file2' with NULL argv: empty string added
[  192.621211][ T8372] loop3: detected capacity change from 0 to 256
[  192.694408][ T8372] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  192.865166][   T25] aquacomputer_d5next 0003:0C70:F011.0008: hidraw0: USB HID v80.00 Joystick [HID 0c70:f011] on usb-dummy_hcd.0-1/input0
[  192.916124][ T5727] input: HID 28bd:0905 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0905.0009/input/input9
[  192.946866][ T8363] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  192.969224][ T8363] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0
[  192.969274][ T8363] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  192.969303][ T8363] F2FS-fs (loop6): Start checkpoint disabled!
[  193.026559][ T8363] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0
[  193.030529][ T8363] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  193.076875][ T5727] uclogic 0003:28BD:0905.0009: input,hidraw1: USB HID v80.04 Mouse [HID 28bd:0905] on usb-dummy_hcd.4-1/input0
[  193.102812][ T5727] usb 5-1: USB disconnect, device number 6
[  193.158756][   T31] audit: type=1800 audit(1789066907.188:81): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.865" name="file1" dev="loop6" ino=10 res=0 errno=0
[  193.297246][   T25] usb 1-1: USB disconnect, device number 2
[  193.319060][   T13] kworker/u8:1: attempt to access beyond end of device
[  193.319060][   T13] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.319129][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  193.319163][   T13] Tainted: [L]=SOFTLOCKUP
[  193.319173][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  193.319189][   T13] Workqueue: writeback wb_workfn (flush-7:6)
[  193.319229][   T13] Call Trace:
[  193.319239][   T13]  <TASK>
[  193.319250][   T13]  dump_stack_lvl+0xe8/0x150
[  193.319289][   T13]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  193.319330][   T13]  f2fs_write_end_bio+0x1211/0x16e0
[  193.319359][   T13]  ? blkg_put+0x22/0x240
[  193.319411][   T13]  __submit_merged_bio+0x258/0x6a0
[  193.319473][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.319504][   T13]  ? rcu_is_watching+0x16/0xb0
[  193.319542][   T13]  __submit_merged_write_cond+0x3c9/0x4e0
[  193.319588][   T13]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  193.319640][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.319679][   T13]  f2fs_write_data_pages+0x2a27/0x36f0
[  193.319760][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.319817][   T13]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  193.319890][   T13]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  193.319950][   T13]  ? __lock_acquire+0x747/0x2de0
[  193.319985][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.320029][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.320060][   T13]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  193.320103][   T13]  do_writepages+0x338/0x560
[  193.320137][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.320166][   T13]  ? reacquire_held_locks+0x117/0x1a0
[  193.320197][   T13]  ? writeback_sb_inodes+0x450/0x1b00
[  193.320238][   T13]  __writeback_single_inode+0x136/0x1220
[  193.320277][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.320307][   T13]  ? do_raw_spin_unlock+0xf5/0x200
[  193.320349][   T13]  writeback_sb_inodes+0x9de/0x1b00
[  193.320383][   T13]  ? __lock_acquire+0x747/0x2de0
[  193.320438][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  193.320528][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.320558][   T13]  ? rcu_is_watching+0x16/0xb0
[  193.320589][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.320618][   T13]  ? queue_io+0x2d3/0x470
[  193.320656][   T13]  wb_writeback+0x41c/0xad0
[  193.320693][   T13]  ? queue_io+0x251/0x470
[  193.320734][   T13]  ? __pfx_wb_writeback+0x10/0x10
[  193.320766][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  193.320822][   T13]  wb_workfn+0x431/0x10f0
[  193.320872][   T13]  ? __pfx_wb_workfn+0x10/0x10
[  193.320906][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.320943][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.320973][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[  193.321018][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.321048][   T13]  ? lock_acquire+0x115/0x350
[  193.321075][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.321113][   T13]  ? rcu_is_watching+0x16/0xb0
[  193.321144][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.321176][   T13]  ? process_scheduled_works+0x97a/0x1630
[  193.321212][   T13]  process_scheduled_works+0xc3d/0x1630
[  193.321247][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.321313][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  193.321355][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.321384][   T13]  ? assign_work+0x3cf/0x5d0
[  193.321425][   T13]  worker_thread+0xa47/0xfb0
[  193.321500][   T13]  kthread+0x38b/0x480
[  193.321526][   T13]  ? __pfx_worker_thread+0x10/0x10
[  193.321559][   T13]  ? __pfx_kthread+0x10/0x10
[  193.321586][   T13]  ret_from_fork+0x514/0xb70
[  193.321615][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  193.321655][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  193.321685][   T13]  ? __switch_to+0xc89/0x1420
[  193.321724][   T13]  ? __pfx_kthread+0x10/0x10
[  193.321752][   T13]  ret_from_fork_asm+0x1a/0x30
[  193.321811][   T13]  </TASK>
[  193.366475][   T13] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  193.736340][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  193.736407][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  193.931351][ T8396] loop1: detected capacity change from 0 to 4096
[  193.989214][ T8396] NILFS (loop1): invalid segment: Checksum error in segment payload
[  193.989242][ T8396] NILFS (loop1): trying rollback from an earlier position
[  194.083507][ T8396] NILFS (loop1): recovery complete
[  194.104710][ T8400] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.274807][ T8397] fido_id[8397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  194.705129][ T8403] loop4: detected capacity change from 0 to 32768
[  194.711381][  T190] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  194.781021][ T8403] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  194.781045][ T8403] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  194.886479][ T8403] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  194.903021][ T5736] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  194.903041][ T5736] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  194.907528][  T190] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  194.908687][  T190] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[  194.908714][  T190] usb 4-1: config 0 has no interface number 0
[  194.908757][  T190] usb 4-1: config 0 interface 239 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.908787][  T190] usb 4-1: config 0 interface 239 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.908814][  T190] usb 4-1: config 0 interface 239 has no altsetting 0
[  194.908850][  T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.011101][  T190] usb 4-1: config 0 descriptor??
[  195.386350][ T5736] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 483ms
[  195.387316][ T5736] gfs2: fsid=syz:syz.0: jid=0: Done
[  195.392598][ T8403] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  195.486983][ T8403] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 1 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1445
[  195.487030][ T8403] CPU: 0 UID: 0 PID: 8403 Comm: syz.4.880 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  195.487063][ T8403] Tainted: [L]=SOFTLOCKUP
[  195.487073][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  195.487092][ T8403] Call Trace:
[  195.487102][ T8403]  <TASK>
[  195.487112][ T8403]  dump_stack_lvl+0xe8/0x150
[  195.487155][ T8403]  gfs2_withdraw+0xc3/0x1b0
[  195.487185][ T8403]  gfs2_quota_init+0x10ec/0x1220
[  195.487250][ T8403]  ? __pfx_gfs2_quota_init+0x10/0x10
[  195.487288][ T8403]  ? __pfx_wake_up_bit+0x10/0x10
[  195.487330][ T8403]  ? inode_go_inval+0x2a0/0x360
[  195.487359][ T8403]  gfs2_make_fs_rw+0x143/0x230
[  195.487394][ T8403]  gfs2_fill_super+0x1ab6/0x20d0
[  195.487437][ T8403]  ? __pfx_gfs2_fill_super+0x10/0x10
[  195.487461][ T8403]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.487497][ T8403]  ? init_locking+0xb8/0x210
[  195.487520][ T8403]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.487549][ T8403]  ? sb_set_blocksize+0x155/0x240
[  195.487578][ T8403]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.487607][ T8403]  ? setup_bdev_super+0x586/0x680
[  195.487652][ T8403]  get_tree_bdev_flags+0x430/0x4f0
[  195.487678][ T8403]  ? __pfx_gfs2_fill_super+0x10/0x10
[  195.487705][ T8403]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  195.487749][ T8403]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.487787][ T8403]  gfs2_get_tree+0x51/0x1e0
[  195.487818][ T8403]  vfs_get_tree+0x92/0x2a0
[  195.487845][ T8403]  do_new_mount+0x319/0xdc0
[  195.487879][ T8403]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.487915][ T8403]  ? __pfx_do_new_mount+0x10/0x10
[  195.487951][ T8403]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.487984][ T8403]  ? ns_capable+0x89/0xe0
[  195.488019][ T8403]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.488048][ T8403]  ? path_mount+0x647/0x1050
[  195.488085][ T8403]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.488114][ T8403]  ? user_path_at+0xd4/0x160
[  195.488155][ T8403]  __se_sys_mount+0x31d/0x420
[  195.488197][ T8403]  ? __pfx___se_sys_mount+0x10/0x10
[  195.488230][ T8403]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.488268][ T8403]  ? srso_alias_return_thunk+0x5/0xfbef5
[  195.488297][ T8403]  ? __x64_sys_mount+0x20/0xc0
[  195.488335][ T8403]  do_syscall_64+0x166/0x520
[  195.488362][ T8403]  ? trace_irq_disable+0x3b/0x140
[  195.488388][ T8403]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.488421][ T8403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.488446][ T8403] RIP: 0033:0x7f5d4d79f3ca
[  195.488469][ T8403] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.488490][ T8403] RSP: 002b:00007f5d4e702e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  195.488517][ T8403] RAX: ffffffffffffffda RBX: 00007f5d4e702ee0 RCX: 00007f5d4d79f3ca
[  195.488536][ T8403] RDX: 0000200000037f40 RSI: 0000200000000080 RDI: 00007f5d4e702ea0
[  195.488554][ T8403] RBP: 0000200000037f40 R08: 00007f5d4e702ee0 R09: 0000000001010084
[  195.488572][ T8403] R10: 0000000001010084 R11: 0000000000000246 R12: 0000200000000080
[  195.488589][ T8403] R13: 00007f5d4e702ea0 R14: 0000000000037f88 R15: 0000200000000480
[  195.488628][ T8403]  </TASK>
[  195.488735][ T8403] gfs2: fsid=syz:syz.0: can't make FS RW: -5
[  195.766710][  T190] logitech-djreceiver 0003:046D:C532.000A: unknown main item tag 0x0
[  195.766745][  T190] logitech-djreceiver 0003:046D:C532.000A: unknown main item tag 0x0
[  195.766770][  T190] logitech-djreceiver 0003:046D:C532.000A: unknown main item tag 0x0
[  195.766795][  T190] logitech-djreceiver 0003:046D:C532.000A: unknown main item tag 0x0
[  195.766819][  T190] logitech-djreceiver 0003:046D:C532.000A: unknown main item tag 0x0
[  195.766844][  T190] logitech-djreceiver 0003:046D:C532.000A: unknown main item tag 0x0
[  195.766868][  T190] logitech-djreceiver 0003:046D:C532.000A: unknown main item tag 0x0
[  195.810127][  T190] logitech-djreceiver 0003:046D:C532.000A: hidraw0: USB HID v0.00 Device [HID 046d:c532] on usb-dummy_hcd.3-1/input239
[  195.905533][  T190] usb 4-1: USB disconnect, device number 5
[  196.046552][ T8415] loop7: detected capacity change from 0 to 64
[  196.216880][ T8415] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.	Mounting read-only.
[  196.948625][ T8413] loop0: detected capacity change from 0 to 32768
[  196.966415][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.892'.
[  197.029633][ T8413] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  197.197041][ T8413] XFS (loop0): Ending clean mount
[  197.295181][ T8452] fido_id[8452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  197.431019][ T8458] loop3: detected capacity change from 0 to 64
[  197.623422][ T5616] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  197.802733][   T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  197.969621][   T25] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  197.970784][   T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  197.970820][   T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  197.970866][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.031253][   T25] usb 8-1: config 0 descriptor??
[  198.440556][ T8428] loop4: detected capacity change from 0 to 32768
[  198.465924][ T8480] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  198.497217][ T8428] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  198.560216][   T25] wacom 0003:056A:0331.000B: hidraw0: USB HID v0.00 Joystick [HID 056a:0331] on usb-dummy_hcd.7-1/input0
[  198.619822][ T8428] XFS (loop4): Ending clean mount
[  198.760895][   T25] usb 8-1: USB disconnect, device number 2
[  198.896404][ T5608] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  199.489248][ T8510] sctp: [Deprecated]: syz.3.913 (pid 8510) Use of int in max_burst socket option.
[  199.489248][ T8510] Use struct sctp_assoc_value instead
[  199.537331][ T8512] loop6: detected capacity change from 0 to 512
[  199.540682][ T8512] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  199.613609][ T8512] EXT4-fs (loop6): 1 truncate cleaned up
[  199.643756][ T8512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.735170][ T8512] EXT4-fs error (device loop6): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.6.914: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  199.741477][ T8512] EXT4-fs (loop6): Remounting filesystem read-only
[  199.741502][ T8512] EXT4-fs warning (device loop6): ext4_rename_delete:3741: inode #2: comm syz.6.914: Deleting old file: nlink 4, error=-117
[  199.823955][ T8528] loop0: detected capacity change from 0 to 1024
[  200.053352][ T6412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.423924][   T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  200.471838][ T8549] vlan3: entered promiscuous mode
[  200.471869][ T8549] bridge0: entered promiscuous mode
[  200.575926][   T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  200.576976][   T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  200.577002][   T10] usb 2-1: config 0 has no interface number 0
[  200.577039][   T10] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  200.577065][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  200.577094][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  200.586498][   T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  200.586527][   T10] usb 2-1: Product: syz
[  200.586545][   T10] usb 2-1: SerialNumber: syz
[  200.609357][   T10] usb 2-1: config 0 descriptor??
[  200.651564][   T10] cm109 2-1:0.8: invalid payload size 0, expected 4
[  200.681170][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input13
[  200.895249][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  200.898413][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  200.898648][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  200.898870][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  200.899092][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  200.899309][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  200.899525][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  200.899786][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  200.900005][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  200.900314][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  200.908100][   T10] usb 2-1: USB disconnect, device number 4
[  200.908250][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  201.096775][   T10] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  201.587082][ T8582] loop4: detected capacity change from 0 to 1024
[  201.588436][ T8582] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.687811][ T8582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.099327][ T8603] loop1: detected capacity change from 0 to 512
[  202.108654][ T8603] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  202.113314][ T8603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  202.113479][ T8603] System zones: 1-12
[  202.115513][ T8603] EXT4-fs (loop1): 1 truncate cleaned up
[  202.119782][ T8603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.276852][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.492962][ T5841] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  202.643919][ T5841] usb 8-1: Using ep0 maxpacket: 8
[  202.644707][ T5841] usb 8-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40
[  202.646253][ T5841] usb 8-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 114, changing to 10
[  202.646288][ T5841] usb 8-1: config 1 interface 0 has no altsetting 0
[  202.651990][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.652018][ T5841] usb 8-1: Product: syz
[  202.652035][ T5841] usb 8-1: Manufacturer: syz
[  202.652053][ T5841] usb 8-1: SerialNumber: syz
[  202.856639][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.970816][ T5841] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input14
[  203.005274][ T4961] bcm5974 8-1:1.0: could not read from device
[  203.026965][ T8619] Driver unsupported XDP return value 0 on prog  (id 49) dev N/A, expect packet loss!
[  203.058550][ T8618] net_ratelimit: 12 callbacks suppressed
[  203.058574][ T8618] netlink: Failed to add GPL helper -22
[  203.058643][ T8618] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.059288][ T4961] bcm5974 8-1:1.0: could not read from device
[  203.094669][ T5841] usb 8-1: USB disconnect, device number 3
[  203.139929][ T8625] netlink: 40 bytes leftover after parsing attributes in process `syz.1.953'.
[  203.257835][ T8627] loop3: detected capacity change from 0 to 64
[  203.900106][ T8643] binder: 8642:8643 ioctl c0306201 200000000080 returned -22
[  204.116757][ T8647] loop4: detected capacity change from 0 to 2048
[  204.245392][ T8647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  204.909056][ T8662] block device autoloading is deprecated and will be removed.
[  204.992575][   T25] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[  205.146256][   T25] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  205.162617][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  205.162661][   T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.162712][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.214384][   T25] usb 1-1: config 0 descriptor??
[  205.701236][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.980'.
[  205.701267][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.980'.
[  205.701301][ T8693] netlink: 'syz.6.980': attribute type 12 has an invalid length.
[  205.701321][ T8693] netlink: 'syz.6.980': attribute type 13 has an invalid length.
[  205.764734][ T8696] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER'
[  205.781400][   T25] aquacomputer_d5next 0003:0C70:F0B6.000C: item fetching failed at offset 5/7
[  205.803826][   T25] aquacomputer_d5next 0003:0C70:F0B6.000C: probe with driver aquacomputer_d5next failed with error -22
[  205.920902][ T5736] usb 1-1: USB disconnect, device number 3
[  206.068121][ T8650] Bluetooth: hci1: command 0x0406 tx timeout
[  206.068171][ T8650] Bluetooth: hci2: command 0x0406 tx timeout
[  206.068205][ T8650] Bluetooth: hci0: command 0x0406 tx timeout
[  206.146296][ T8704] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  206.386459][ T8714] loop6: detected capacity change from 0 to 128
[  206.454229][ T8714] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  206.460666][ T8714] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  206.581574][ T8719] netlink: 136 bytes leftover after parsing attributes in process `syz.7.989'.
[  206.650676][ T6412] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  206.767785][ T8726] loop3: detected capacity change from 0 to 8
[  206.987865][ T8690] loop4: detected capacity change from 0 to 32768
[  207.037926][ T8735] loop1: detected capacity change from 0 to 2048
[  207.058925][ T8690] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  207.085811][ T8735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.159404][ T8741] loop3: detected capacity change from 0 to 8
[  207.169997][   T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  207.197676][ T8741] SQUASHFS error: Unable to read directory block [1d0:74]
[  207.314011][   T25] usb 7-1: New USB device found, idVendor=12ba, idProduct=074b, bcdDevice= 0.00
[  207.315379][   T25] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.315417][   T25] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.315446][   T25] usb 7-1: config 0 interface 0 has no altsetting 0
[  207.315493][   T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.345698][   T25] usb 7-1: config 0 descriptor??
[  207.399127][ T5608] ocfs2: Unmounting device (7,4) on (node local)
[  207.594491][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1002'.
[  207.919451][   T25] input: HID 12ba:074b as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:12BA:074B.000D/input/input15
[  208.107266][   T25] sony 0003:12BA:074B.000D: input,hidraw0: USB HID v80.00 Joystick [HID 12ba:074b] on usb-dummy_hcd.6-1/input0
[  208.153152][   T25] usb 7-1: USB disconnect, device number 3
[  208.332133][ T8764] loop4: detected capacity change from 0 to 256
[  209.011126][ T8787] loop4: detected capacity change from 0 to 128
[  209.051589][ T8787] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  209.051650][ T8787] hpfs: filesystem error: improperly stopped
[  209.051669][ T8787] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  209.051688][ T8787] hpfs: You really don't want any checks? You are crazy...
[  209.052176][ T8787] hpfs: hpfs_map_sector(): read error
[  209.052190][ T8787] hpfs: code page support is disabled
[  209.052296][ T8787] hpfs: hpfs_map_4sectors(): unaligned read
[  209.052369][ T8787] hpfs: hpfs_map_4sectors(): unaligned read
[  209.052381][ T8787] hpfs: filesystem error: unable to find root dir
[  209.354141][ T8791] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  209.354183][ T8791] CIFS: Unable to determine destination address
[  209.372749][ T8786] fido_id[8786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  209.774827][ T8797] loop0: detected capacity change from 0 to 4096
[  209.797571][ T8797] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  210.063540][ T8797] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  210.088986][ T8811] loop6: detected capacity change from 0 to 512
[  210.159481][ T8811] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  210.405383][ T6412] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  210.536140][ T8827] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  210.537052][  T190] team_slave_0: entered promiscuous mode
[  210.537093][  T190] team_slave_1: entered promiscuous mode
[  210.683943][ T5841] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  210.746406][ T8837] loop6: detected capacity change from 0 to 256
[  210.831993][ T8837] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  210.854498][ T5841] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  210.856756][ T5841] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.856815][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.860195][ T5841] usb 4-1: config 0 descriptor??
[  211.100002][ T8845] netlink: 'syz.4.1048': attribute type 3 has an invalid length.
[  211.100032][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'.
[  211.301618][ T8848] loop0: detected capacity change from 0 to 512
[  211.320579][ T8848] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  211.346310][ T8848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  211.346521][ T8848] System zones: 1-12
[  211.374476][ T8848] EXT4-fs (loop0): 1 truncate cleaned up
[  211.404439][ T8848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.539198][ T5841] ath6kl: Failed to read usb control message: -71
[  211.539267][ T5841] ath6kl: Unable to read the bmi data from the device: -71
[  211.539286][ T5841] ath6kl: unable to read target info byte count: -71
[  211.645698][ T5841] ath6kl: Failed to init ath6kl core: -71
[  211.667975][ T5841] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  211.737635][ T5841] usb 4-1: USB disconnect, device number 6
[  211.793267][  T190] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  211.947819][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.950334][  T190] usb 7-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  211.975073][  T190] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.975119][  T190] usb 7-1: config 0 interface 0 has no altsetting 0
[  211.975160][  T190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.027623][  T190] usb 7-1: config 0 descriptor??
[  212.233554][   T25] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  212.321631][ T8869] netlink: 3560 bytes leftover after parsing attributes in process `syz.0.1056'.
[  212.387261][   T25] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  212.389546][   T25] usb 8-1: config 0 interface 0 has no altsetting 0
[  212.389589][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.398325][   T25] usb 8-1: config 0 descriptor??
[  212.500477][  T190] uclogic 0003:28BD:0055.000E: interface is invalid, ignoring
[  212.652342][ T8881] loop0: detected capacity change from 0 to 128
[  212.666607][ T8881] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  212.685150][ T8881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.706803][ T8883] loop4: detected capacity change from 0 to 1024
[  212.719539][ T8883] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  212.730674][ T5841] usb 7-1: USB disconnect, device number 4
[  212.793389][ T8883] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 2: comm syz.4.1063: lblock 2 mapped to illegal pblock 2 (length 1)
[  212.793464][ T8883] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  212.794907][ T8883] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  212.794961][ T8883] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 48: comm syz.4.1063: lblock 0 mapped to illegal pblock 48 (length 1)
[  212.794999][ T8883] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  212.796750][ T8883] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  212.796776][ T8883] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1063: Failed to acquire dquot type 0
[  212.796802][ T8883] loop4: lost filesystem error report for type 5 error -117
[  212.799690][ T8883] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  212.799718][ T8883] loop4: lost filesystem error report for type 5 error -117
[  212.801649][ T8883] EXT4-fs error (device loop4): ext4_evict_inode:269: inode #11: comm syz.4.1063: mark_inode_dirty error
[  212.801728][ T8883] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  212.802630][    C0] EXT4-fs (loop4): error count since last fsck: 5
[  212.802652][    C0] EXT4-fs (loop4): initial error at time 1789066926: ext4_map_blocks:790: inode 3: block 2
[  212.803771][    C0] EXT4-fs (loop4): last error at time 1789066926: ext4_evict_inode:269: inode 11
[  212.814131][ T8883] EXT4-fs warning (device loop4): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  212.827590][ T8883] EXT4-fs (loop4): 1 orphan inode deleted
[  212.844390][ T8883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.845203][   T39] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  212.845248][   T39] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  212.855163][   T25] hid (null): global environment stack underflow
[  212.855199][   T25] hid (null): global environment stack underflow
[  212.855214][   T25] hid (null): invalid report_size 13705
[  212.858076][   T39] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  212.858122][   T39] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0
[  212.859273][   T25] bigben 0003:146B:0902.000F: unexpected rdesc, please submit for review
[  212.859998][   T25] bigben 0003:146B:0902.000F: global environment stack underflow
[  212.860017][   T25] bigben 0003:146B:0902.000F: item 0 0 1 11 parsing failed
[  212.860823][   T25] bigben 0003:146B:0902.000F: parse failed
[  212.860948][   T25] bigben 0003:146B:0902.000F: probe with driver bigben failed with error -22
[  213.143651][   T13] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  213.143701][   T13] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  213.158784][   T13] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  213.158838][   T13] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:1: Failed to release dquot type 0
[  213.158866][   T13] loop4: lost filesystem error report for type 5 error -117
[  213.197770][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.224269][   T25] usb 8-1: USB disconnect, device number 4
[  213.286938][ T5608] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  213.286992][ T5608] loop4: lost filesystem error report for type 5 error -117
[  213.348563][ T5608] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6522: Corrupt filesystem
[  213.348612][ T5608] loop4: lost filesystem error report for type 5 error -117
[  213.383014][ T5608] EXT4-fs error (device loop4): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  213.383058][ T5608] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  213.386704][ T5608] EXT4-fs error (device loop4): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  213.386744][ T5608] loop4: lost filesystem error report for type 5 error -117
[  213.794608][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  213.804328][ T8901] loop0: detected capacity change from 0 to 4096
[  213.908708][ T8905] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.953140][   T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  213.967558][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.967590][   T10] usb 5-1: Product: syz
[  213.967609][   T10] usb 5-1: Manufacturer: syz
[  213.967627][   T10] usb 5-1: SerialNumber: syz
[  214.150007][ T8915] loop1: detected capacity change from 0 to 64
[  214.403044][ T5749] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  214.553091][ T5749] usb 8-1: Using ep0 maxpacket: 16
[  214.554058][ T5749] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  214.555582][ T5749] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.555629][ T5749] usb 8-1: config 0 interface 0 has no altsetting 0
[  214.555680][ T5749] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.613240][ T5749] usb 8-1: config 0 descriptor??
[  214.704873][   T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:aa:a4:df:71:6e
[  214.766114][ T8928] loop0: detected capacity change from 0 to 256
[  214.811126][ T8928] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  214.811522][ T8932] loop3: detected capacity change from 0 to 128
[  214.826681][   T10] rtl8150 5-1:1.0: eth9: rtl8150 is detected
[  214.848180][ T8932] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  214.869869][   T10] usb 5-1: USB disconnect, device number 7
[  214.907224][ T8926] vlan2: entered promiscuous mode
[  214.907251][ T8926] batadv0: entered promiscuous mode
[  214.907525][ T8926] vlan2: entered allmulticast mode
[  214.907547][ T8926] batadv0: entered allmulticast mode
[  215.053115][ T5736] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  215.062263][   T94] IPVS: starting estimator thread 0...
[  215.083862][ T5749] mcp2221 0003:04D8:00DD.0010: unbalanced delimiter at end of report description
[  215.086772][ T5749] mcp2221 0003:04D8:00DD.0010: can't parse reports
[  215.086898][ T5749] mcp2221 0003:04D8:00DD.0010: probe with driver mcp2221 failed with error -22
[  215.170396][ T8935] IPVS: using max 25 ests per chain, 60000 per kthread
[  215.211484][ T8939] loop1: detected capacity change from 0 to 2048
[  215.219995][ T5736] usb 7-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice= 0.01
[  215.221612][ T5736] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  215.221646][ T5736] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  215.233704][ T5736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  215.233733][ T5736] usb 7-1: Product: syz
[  215.233751][ T5736] usb 7-1: Manufacturer: syz
[  215.249370][ T8931] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  215.249546][ T8931] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  215.271173][ T5736] ipw 7-1:1.0: IPWireless converter converter detected
[  215.285343][ T8939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.389753][   T10] usb 8-1: USB disconnect, device number 5
[  215.446993][ T5736] usb 7-1: IPWireless converter converter now attached to ttyUSB0
[  216.007833][   T10] usb 7-1: USB disconnect, device number 5
[  216.026974][   T10] ipw ttyUSB0: IPWireless converter converter now disconnected from ttyUSB0
[  216.028987][   T10] ipw 7-1:1.0: device disconnected
[  216.829667][ T8953] loop3: detected capacity change from 0 to 32768
[  217.081735][ T8979] loop1: detected capacity change from 0 to 512
[  217.176288][ T8979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  217.288698][ T8979] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.1105: verity file corrupted; can't find descriptor
[  217.289406][ T8979] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[  217.581648][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.896469][ T9003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1115'.
[  218.087023][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1117'.
[  218.456027][ T9023] loop6: detected capacity change from 0 to 8
[  218.691888][   T31] audit: type=1326 audit(1789066932.768:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.3.1125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302cd9e159 code=0x7ffc0000
[  218.692153][   T31] audit: type=1326 audit(1789066932.768:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.3.1125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302cd9e159 code=0x7ffc0000
[  218.699852][   T31] audit: type=1326 audit(1789066932.778:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.3.1125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f302cd9e159 code=0x7ffc0000
[  218.699910][   T31] audit: type=1326 audit(1789066932.778:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.3.1125" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f302cd9e159 code=0x7ffc0000
[  218.939438][   T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  219.092570][   T25] usb 8-1: Using ep0 maxpacket: 32
[  219.095011][   T25] usb 8-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  219.096228][   T25] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  219.096262][   T25] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 8271, setting to 1024
[  219.096292][   T25] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  219.096321][   T25] usb 8-1: config 0 interface 0 has no altsetting 0
[  219.096356][   T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.096633][ T9044] loop0: detected capacity change from 0 to 512
[  219.107893][   T25] usb 8-1: config 0 descriptor??
[  219.117244][ T5736] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  219.238221][ T9044] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1130: bg 0: block 7: invalid block bitmap
[  219.238255][ T9044] loop0: lost filesystem error report for type 5 error -117
[  219.242484][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  219.242506][    C1] EXT4-fs (loop0): initial error at time 1789066933: ext4_validate_block_bitmap:436
[  219.242548][    C1] EXT4-fs (loop0): last error at time 1789066933: ext4_validate_block_bitmap:436
[  219.256672][ T9044] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  219.256695][ T9044] loop0: lost filesystem error report for type 5 error -117
[  219.299678][ T9044] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #11: comm syz.0.1130: corrupted xattr block 95: invalid header
[  219.299718][ T9044] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  219.304546][ T5736] usb 7-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.00
[  219.305730][ T9044] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117)
[  219.305816][ T9044] EXT4-fs (loop0): 1 orphan inode deleted
[  219.308246][ T9044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.349837][ T5736] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.349877][ T5736] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  219.349907][ T5736] usb 7-1: config 0 interface 0 has no altsetting 0
[  219.349943][ T5736] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.434185][ T5736] usb 7-1: config 0 descriptor??
[  219.623410][ T5616] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.644064][   T25] cherry 0003:046A:0023.0011: unknown main item tag 0x0
[  219.644095][   T25] cherry 0003:046A:0023.0011: unknown main item tag 0x0
[  219.644120][   T25] cherry 0003:046A:0023.0011: unknown main item tag 0x0
[  219.644144][   T25] cherry 0003:046A:0023.0011: unknown main item tag 0x0
[  219.644168][   T25] cherry 0003:046A:0023.0011: unknown main item tag 0x0
[  219.657940][   T25] cherry 0003:046A:0023.0011: unknown main item tag 0x0
[  219.657971][   T25] cherry 0003:046A:0023.0011: unknown main item tag 0x0
[  219.657996][   T25] cherry 0003:046A:0023.0011: unknown main item tag 0x0
[  219.658019][   T25] cherry 0003:046A:0023.0011: unknown main item tag 0x0
[  219.658043][   T25] cherry 0003:046A:0023.0011: unknown main item tag 0x0
[  219.694176][   T25] cherry 0003:046A:0023.0011: hidraw0: USB HID v80.00 Device [HID 046a:0023] on usb-dummy_hcd.7-1/input0
[  219.808025][ T9037] loop1: detected capacity change from 0 to 32768
[  219.830815][ T9037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus (7:1) scanned by syz.1.1129 (9037)
[  219.831142][ T9037] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  219.831168][ T9037] btrfs: Unknown parameter 'fowner<00000000000000000000'
[  219.917909][ T5736] wacom 0003:056A:0017.0012: Unknown device_type for 'HID 056a:0017'. Assuming pen.
[  219.930451][ T5749] usb 8-1: USB disconnect, device number 6
[  219.945922][ T5736] wacom 0003:056A:0017.0012: hidraw1: USB HID v0.00 Device [HID 056a:0017] on usb-dummy_hcd.6-1/input0
[  219.985830][ T5736] input: Wacom BambooFun 4x5 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0017.0012/input/input17
[  220.134617][ T5736] usb 7-1: USB disconnect, device number 6
[  220.164066][ T9058] fido_id[9058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  220.235008][ T1215] kernel write not supported for file /467/gid_map (pid: 1215 comm: kworker/1:2)
[  220.238796][ T5900] udevd[5900]: incorrect btrfs checksum on /dev/loop1
[  220.596049][ T9076] netlink: 'syz.0.1140': attribute type 3 has an invalid length.
[  220.620431][ T9072] fido_id[9072]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  221.368606][ T5736] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  221.527387][ T5736] usb 1-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00
[  221.530161][ T5736] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.530214][ T5736] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.530259][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.018565][ T5736] dvb_usb_af9035 1-1:1.0: command=00 checksum mismatch (0000 != fdfc)
[  222.018664][ T5736] dvb_usb_af9035 1-1:1.0: probe with driver dvb_usb_af9035 failed with error -5
[  222.235687][   T25] usb 1-1: USB disconnect, device number 4
[  222.392951][ T9093] loop7: detected capacity change from 0 to 32768
[  222.422350][ T9093] (syz.7.1147,9093,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  222.441017][ T9093] (syz.7.1147,9093,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  222.444078][ T9135] loop6: detected capacity change from 0 to 1024
[  222.445214][ T9135] EXT4-fs: Ignoring removed bh option
[  222.464259][ T9135] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  222.517603][ T9135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.557625][ T9136] loop1: detected capacity change from 0 to 2048
[  222.571677][ T9093] JBD2: Ignoring recovery information on journal
[  222.615841][ T9136]  loop1: p1 < > p3
[  222.651973][ T9136] loop1: p3 size 134217728 extends beyond EOD, truncated
[  222.789459][ T9093] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  222.944051][ T6412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.066150][ T6021] udevd[6021]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  223.070031][ T6447] udevd[6447]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  223.212185][ T9093] (syz.7.1147,9093,1):ocfs2_read_blocks_sync:110 ERROR: status = -12
[  223.212223][ T9093] (syz.7.1147,9093,1):update_backups:196 ERROR: status = -12
[  223.212248][ T9093] ocfs2: Failed to update super blocks on 7,7 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[  223.449669][ T9124] loop4: detected capacity change from 0 to 32768
[  223.635938][ T9164] loop3: detected capacity change from 0 to 512
[  223.642307][ T9164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  223.707061][ T7664] ocfs2: Unmounting device (7,7) on (node local)
[  223.708056][ T9164] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1170: invalid indirect mapped block 4294967295 (level 0)
[  223.708098][ T9164] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  223.733048][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  223.733083][    C0] EXT4-fs (loop3): initial error at time 1789066937: ext4_free_branches:1023: inode 16
[  223.733122][    C0] EXT4-fs (loop3): last error at time 1789066937: ext4_free_branches:1023: inode 16
[  223.796008][ T9164] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1170: invalid indirect mapped block 4294967295 (level 1)
[  223.796054][ T9164] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  223.821352][ T9164] EXT4-fs (loop3): 1 orphan inode deleted
[  223.821383][ T9164] EXT4-fs (loop3): 1 truncate cleaned up
[  223.845243][ T9164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.873103][ T9164] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.1170: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[  223.941766][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.250097][ T9216] loop4: detected capacity change from 0 to 512
[  225.274205][ T9216] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  225.277850][ T9216] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002]
[  225.278137][ T9216] EXT4-fs (loop4): orphan cleanup on readonly fs
[  225.290491][ T9216] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.1191: Allocating blocks 41-42 which overlap fs metadata
[  225.290525][ T9216] loop4: lost filesystem error report for type 5 error -117
[  225.292467][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  225.292495][    C1] EXT4-fs (loop4): initial error at time 1789066939: ext4_mb_mark_diskspace_used:4223
[  225.292524][    C1] EXT4-fs (loop4): last error at time 1789066939: ext4_mb_mark_diskspace_used:4223
[  225.346370][ T9216] Quota error (device loop4): write_blk: dquota write failed
[  225.346483][ T9216] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  225.346523][ T9216] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.1191: Failed to acquire dquot type 0
[  225.346547][ T9216] loop4: lost filesystem error report for type 5 error -117
[  225.349336][ T9216] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  225.386830][ T9216] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.1191: corrupted inode contents
[  225.386861][ T9216] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  225.415083][ T9216] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #12: comm syz.4.1191: mark_inode_dirty error
[  225.415115][ T9216] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  225.416065][ T9216] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.1191: corrupted inode contents
[  225.420170][ T9216] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  225.433266][ T9216] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.1191: mark_inode_dirty error
[  225.433297][ T9216] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  225.437424][ T9216] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.1191: corrupted inode contents
[  225.437455][ T9216] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  225.517161][ T9216] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem
[  225.517191][ T9216] loop4: lost filesystem error report for type 5 error -117
[  225.520693][ T9216] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #12: comm syz.4.1191: corrupted inode contents
[  225.520727][ T9216] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  225.524226][ T9216] EXT4-fs error (device loop4): ext4_truncate:4721: inode #12: comm syz.4.1191: mark_inode_dirty error
[  225.524257][ T9216] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  225.537612][ T9216] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem
[  225.537638][ T9216] loop4: lost filesystem error report for type 5 error -117
[  225.540102][ T9216] EXT4-fs (loop4): 1 truncate cleaned up
[  225.560604][ T9216] EXT4-fs (loop4): pa ffff888034dbbd98: logic 1, phys. 41, len 23
[  225.560634][ T9216] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23
[  225.630077][ T9216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  225.765884][ T9216] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  225.765922][ T9216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  225.799476][ T9216] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  225.816854][ T9216] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c098, mo2=0003]
[  225.946578][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1202'.
[  226.279166][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.388277][   T39] IPVS: starting estimator thread 0...
[  226.473581][ T9253] IPVS: using max 25 ests per chain, 60000 per kthread
[  226.561048][ T9255] loop7: detected capacity change from 0 to 1024
[  226.562136][ T9255] EXT4-fs: Ignoring removed nomblk_io_submit option
[  226.620800][ T9264] loop6: detected capacity change from 0 to 256
[  226.632188][ T9255] EXT4-fs (loop7): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  226.632297][ T9255] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.752532][ T9264] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[  226.824107][ T9264] exFAT-fs (loop6): error, in sector 160, dentry 5 should be unused, but 0xc1
[  226.824132][ T9264] exFAT-fs (loop6): Filesystem has been set read-only
[  227.020626][ T7664] EXT4-fs (loop7): unmounting filesystem 00000000-0100-0006-0000-000000000000.
[  227.285693][ T9286] loop7: detected capacity change from 0 to 256
[  227.388336][ T9288] loop0: detected capacity change from 0 to 1024
[  227.418668][ T9288] hfsplus: catalog record size mismatch (type 1, got 46, expected 88)
[  227.896627][ T9241] loop3: detected capacity change from 0 to 40427
[  227.921901][ T9304] loop4: detected capacity change from 0 to 512
[  227.942296][ T9241] F2FS-fs (loop3): invalid crc value
[  228.022072][ T9308] loop1: detected capacity change from 0 to 64
[  228.027819][ T9304] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.027919][ T9304] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.096877][ T9304] EXT4-fs (loop4): resizing filesystem from 256 to 2 blocks
[  228.096909][ T9304] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  228.316438][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.816749][ T5948] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  228.830480][ T9241] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  228.935216][ T9241] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[  228.935248][ T9241] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  228.935279][ T9241] F2FS-fs (loop3): Start checkpoint disabled!
[  228.938811][ T9299] loop7: detected capacity change from 0 to 32768
[  228.969433][ T9299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1220 (9299)
[  228.995617][ T5948] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  228.996778][ T5948] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[  228.996805][ T5948] usb 7-1: config 0 has no interface number 0
[  228.996849][ T5948] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  228.996878][ T5948] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  228.999813][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.999844][ T5948] usb 7-1: Product: syz
[  228.999864][ T5948] usb 7-1: Manufacturer: syz
[  228.999884][ T5948] usb 7-1: SerialNumber: syz
[  229.066342][ T9299] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  229.066382][ T9299] BTRFS info (device loop7): using crc32c checksum algorithm
[  229.104985][ T5948] usb 7-1: config 0 descriptor??
[  229.105985][ T9322] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  229.126072][ T5948] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  229.155396][ T5948] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  229.196341][ T9333] loop1: detected capacity change from 0 to 256
[  229.263077][ T9333] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d)
[  229.373233][ T9299] BTRFS info (device loop7): enabling ssd optimizations
[  229.373272][ T9299] BTRFS info (device loop7): turning on async discard
[  229.373292][ T9299] BTRFS info (device loop7): enabling free space tree
[  229.397012][ T1215] kernel write not supported for file /sg0 (pid: 1215 comm: kworker/1:2)
[  229.432606][ T9333] exFAT-fs (loop1): error, bogus directory size (clus : ondisk(7) != counted(8))
[  229.432637][ T9333] exFAT-fs (loop1): Filesystem has been set read-only
[  229.484753][ T9241] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[  229.565906][ T1215] usb 7-1: USB disconnect, device number 7
[  229.701507][ T7664] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  229.757258][ T1215] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  229.788193][ T1215] cyberjack 7-1:0.69: device disconnected
[  231.073178][  T190] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  231.234439][  T190] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  231.235942][  T190] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  231.235979][  T190] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  231.236007][  T190] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  231.236032][  T190] usb 2-1: config 220 has no interface number 2
[  231.236111][  T190] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  231.236150][  T190] usb 2-1: config 220 interface 0 has no altsetting 0
[  231.236179][  T190] usb 2-1: config 220 interface 76 has no altsetting 0
[  231.236208][  T190] usb 2-1: config 220 interface 1 has no altsetting 0
[  231.239967][  T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.240003][  T190] usb 2-1: Product: syz
[  231.240026][  T190] usb 2-1: Manufacturer: syz
[  231.240049][  T190] usb 2-1: SerialNumber: syz
[  231.599002][  T190] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  231.599048][  T190] uvcvideo 2-1:220.0: No valid video chain found.
[  231.599114][  T190] usb 2-1: selecting invalid altsetting 0
[  231.670703][  T190] usb 2-1: selecting invalid altsetting 0
[  231.670756][  T190] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  231.704339][  T190] usb 2-1: USB disconnect, device number 5
[  231.934840][ T9392] loop4: detected capacity change from 0 to 512
[  231.939976][ T9392] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  231.980671][ T9392] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  231.980808][ T9392] System zones: 1-12
[  231.984226][ T9392] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1257: bad orphan inode 131072
[  231.984255][ T9392] loop4: lost filesystem error report for type 5 error -117
[  232.002443][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  232.002465][    C0] EXT4-fs (loop4): initial error at time 1789066946: ext4_orphan_get:1429
[  232.002491][    C0] EXT4-fs (loop4): last error at time 1789066946: ext4_orphan_get:1429
[  232.052378][ T9392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.132257][ T5609] Bluetooth: hci6: link tx timeout
[  232.135494][ T5609] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  232.190651][ T9384] loop0: detected capacity change from 0 to 32768
[  232.240178][ T9384] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  232.300151][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.399156][ T9362] loop7: detected capacity change from 0 to 32768
[  232.419985][ T9384] XFS (loop0): Ending clean mount
[  232.486608][   T31] audit: type=1800 audit(1789066946.568:86): pid=9384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1254" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  232.498057][ T9410] loop1: detected capacity change from 0 to 512
[  232.527314][ T9410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e866c018, mo2=0002]
[  232.527458][ T9410] System zones: 1-12
[  232.545968][ T9410] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.1260: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840
[  232.546021][ T9410] loop1: lost filesystem error report for type 5 error -117
[  232.549461][ T9410] EXT4-fs (loop1): 1 orphan inode deleted
[  232.554984][ T9410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.564212][ T9410] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6542: inode #15: comm syz.1.1260: bad extra_isize 6 (inode size 256)
[  232.694932][ T5607] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.802783][ T9414] loop6: detected capacity change from 0 to 2048
[  232.881135][ T9414] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.890609][ T5616] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  233.651481][ T9431] macsec1: entered promiscuous mode
[  233.651517][ T9431] macsec1: entered allmulticast mode
[  233.918765][ T9438] loop6: detected capacity change from 0 to 256
[  233.925954][ T9438] exfat: Deprecated parameter 'utf8'
[  233.972052][ T9438] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  234.223242][ T5610] Bluetooth: hci6: command 0x0406 tx timeout
[  234.381733][ T9428] loop3: detected capacity change from 0 to 32768
[  234.397360][ T9428] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1270 (9428)
[  234.463838][ T9455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead
[  234.463885][ T9455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead
[  234.464166][ T9455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead
[  234.464172][ T9428] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  234.464190][ T9455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead
[  234.464205][ T9428] BTRFS info (device loop3): using sha256 checksum algorithm
[  234.464213][ T9455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead
[  234.464848][ T9455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead
[  234.464909][ T9455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead
[  234.464934][ T9455] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead
[  234.634152][ T9455] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  234.634175][ T9455] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  234.807802][ T9428] BTRFS info (device loop3): rebuilding free space tree
[  234.894867][ T9428] BTRFS info (device loop3): setting nodatasum
[  234.894902][ T9428] BTRFS info (device loop3): setting nodatacow
[  234.894923][ T9428] BTRFS info (device loop3): turning off barriers
[  234.894944][ T9428] BTRFS info (device loop3): turning on sync discard
[  234.894964][ T9428] BTRFS info (device loop3): enabling free space tree
[  234.894986][ T9428] BTRFS info (device loop3): force clearing of disk cache
[  235.019840][   T31] audit: type=1800 audit(1789066949.098:87): pid=9428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1270" name="file1" dev="loop3" ino=260 res=0 errno=0
[  235.191808][ T5626] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  235.470606][ T9451] loop1: detected capacity change from 0 to 32768
[  235.549981][ T9451] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  235.594814][   T31] audit: type=1326 audit(1789066949.678:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.0.1291" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  235.594881][   T31] audit: type=1326 audit(1789066949.678:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.0.1291" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  235.609035][   T31] audit: type=1326 audit(1789066949.688:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.0.1291" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  235.609097][   T31] audit: type=1326 audit(1789066949.688:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.0.1291" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  235.690033][ T9451] XFS (loop1): Ending clean mount
[  235.725214][   T31] audit: type=1326 audit(1789066949.688:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.0.1291" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  235.734622][   T31] audit: type=1326 audit(1789066949.808:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.0.1291" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  235.734727][   T31] audit: type=1326 audit(1789066949.808:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.0.1291" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44b459dec2 code=0x7ffc0000
[  235.734782][   T31] audit: type=1326 audit(1789066949.818:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.0.1291" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f44b459df57 code=0x7ffc0000
[  236.095528][ T5607] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  236.311711][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'.
[  236.549864][ T9508] loop6: detected capacity change from 0 to 8
[  236.636435][ T9508] SQUASHFS error: lzo decompression failed, data probably corrupt
[  236.636483][ T9508] SQUASHFS error: Failed to read block 0x91: -5
[  236.636501][ T9508] SQUASHFS error: Unable to read metadata cache entry [8f]
[  236.636518][ T9508] SQUASHFS error: Unable to read inode 0x11f
[  237.320823][ T9529] vlan3: entered promiscuous mode
[  237.320849][ T9529] bridge0: entered promiscuous mode
[  238.336841][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1318'.
[  238.483384][ T9522] loop6: detected capacity change from 0 to 32768
[  238.559429][ T9522] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  238.683640][ T9522] XFS (loop6): Ending clean mount
[  238.730707][ T9548] loop3: detected capacity change from 0 to 32768
[  238.753283][ T9539] loop7: detected capacity change from 0 to 32768
[  238.755610][ T9548] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1312 (9548)
[  238.776692][ T9539] BTRFS info: device /dev/loop7 (7:7) using temp-fsid ff5f71db-4698-4293-8c09-795006b078cf
[  238.776755][ T9539] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1309 (9539)
[  238.823731][ T9548] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  238.823765][ T9548] BTRFS info (device loop3): using blake2b checksum algorithm
[  238.825551][ T9539] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  238.825583][ T9539] BTRFS info (device loop7): using sha256 checksum algorithm
[  238.937728][ T6412] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  238.977242][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'.
[  239.116598][ T9545] loop1: detected capacity change from 0 to 32768
[  239.153633][ T9548] BTRFS info (device loop3): enabling ssd optimizations
[  239.153666][ T9548] BTRFS info (device loop3): turning on async discard
[  239.153687][ T9548] BTRFS info (device loop3): enabling free space tree
[  239.213478][ T9539] BTRFS info (device loop7): enabling ssd optimizations
[  239.213507][ T9539] BTRFS info (device loop7): turning on sync discard
[  239.213528][ T9539] BTRFS info (device loop7): enabling free space tree
[  239.213549][ T9539] BTRFS info (device loop7): use zlib compression, level 3
[  239.509566][ T5626] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  239.616609][ T7664] BTRFS info (device loop7): last unmount of filesystem ff5f71db-4698-4293-8c09-795006b078cf
[  240.230725][ T9614] loop0: detected capacity change from 0 to 8
[  241.590119][ T9639] loop3: detected capacity change from 0 to 512
[  241.598662][ T9639] EXT4-fs: Ignoring removed i_version option
[  241.610565][ T9639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  241.680476][ T9639] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1341: invalid block
[  241.680544][ T9639] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  241.683530][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  241.683593][    C0] EXT4-fs (loop3): initial error at time 1789066955: ext4_get_branch:178: inode 11: block 4294967295
[  241.683664][    C0] EXT4-fs (loop3): last error at time 1789066955: ext4_get_branch:178: inode 11: block 4294967295
[  241.698900][ T9639] EXT4-fs error (device loop3) in ext4_process_orphan:346: IO failure
[  241.698937][ T9639] loop3: lost filesystem error report for type 5 error -5
[  241.700437][ T9639] EXT4-fs (loop3): 2 truncates cleaned up
[  241.782118][ T9639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.893538][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  241.894811][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  242.054761][ T9637] loop1: detected capacity change from 0 to 4096
[  242.076342][ T9648] loop0: detected capacity change from 0 to 256
[  242.081085][ T9637] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  242.161543][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.243780][ T9637] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  242.285818][ T9637] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  244.056190][ T5610] Bluetooth: hci5: command 0x0406 tx timeout
[  244.165445][ T9683] loop0: detected capacity change from 0 to 4096
[  244.188494][ T9683] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  244.188528][ T9683] NILFS (loop0): mounting unchecked fs
[  244.188543][ T9683] NILFS (loop0): recovery required for readonly filesystem
[  244.188560][ T9683] NILFS (loop0): write access will be enabled during recovery
[  244.240952][ T9686] loop6: detected capacity change from 0 to 1024
[  244.336845][ T9686] hfsplus: request for non-existent node 100663296 in B*Tree
[  244.336871][ T9686] hfsplus: request for non-existent node 100663296 in B*Tree
[  244.336980][ T9686] hfsplus: failed to load root directory
[  244.345838][ T9683] NILFS (loop0): norecovery option specified, skipping roll-forward recovery
[  244.384475][ T9691] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1365'.
[  244.525819][ T6021] udevd[6021]: incorrect nilfs2 checksum on /dev/loop0
[  244.720160][ T9700] loop6: detected capacity change from 0 to 128
[  244.736698][ T9667] loop7: detected capacity change from 0 to 32768
[  244.740928][ T9667] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1353 (9667)
[  244.741298][ T9700] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  244.741330][ T9700] hpfs: filesystem error: improperly stopped
[  244.741347][ T9700] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  244.741365][ T9700] hpfs: You really don't want any checks? You are crazy...
[  244.741384][ T9700] hpfs: Code page index out of array
[  244.741393][ T9700] hpfs: code page support is disabled
[  244.751445][ T9700] hpfs: hpfs_map_4sectors(): unaligned read
[  244.751540][ T9700] hpfs: hpfs_map_4sectors(): unaligned read
[  244.751552][ T9700] hpfs: filesystem error: unable to find root dir
[  244.829061][ T9667] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  244.829105][ T9667] BTRFS info (device loop7): using sha256 checksum algorithm
[  245.058099][ T9667] BTRFS info (device loop7): turning off barriers
[  245.058131][ T9667] BTRFS info (device loop7): enabling free space tree
[  245.329037][ T7664] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  245.383895][ T9726] Bluetooth: MGMT ver 1.23
[  246.053269][ T5841] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  246.132749][ T5610] Bluetooth: hci5: command 0x0406 tx timeout
[  246.262001][ T9751] 9p: Bad value for 'rfdno'
[  246.369612][ T5841] usb 2-1: Using ep0 maxpacket: 32
[  246.378206][ T5841] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  246.380038][ T5841] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  246.380065][ T5841] usb 2-1: config 0 has no interface number 0
[  246.389419][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.389447][ T5841] usb 2-1: Product: syz
[  246.389464][ T5841] usb 2-1: Manufacturer: syz
[  246.389482][ T5841] usb 2-1: SerialNumber: syz
[  246.393292][ T5841] usb 2-1: config 0 descriptor??
[  246.398881][ T5841] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  246.537387][ T9730] loop6: detected capacity change from 0 to 32768
[  246.540555][ T9730] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1376 (9730)
[  246.598939][ T9730] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  246.598973][ T9730] BTRFS info (device loop6): using crc32c checksum algorithm
[  246.688830][ T5841] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  246.752902][ T5841] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  246.879561][ T9730] BTRFS info (device loop6): enabling ssd optimizations
[  246.879591][ T9730] BTRFS info (device loop6): turning on flush-on-commit
[  246.879641][ T9730] BTRFS info (device loop6): enabling free space tree
[  246.879661][ T9730] BTRFS info (device loop6): enabling auto defrag
[  246.879681][ T9730] BTRFS info (device loop6): use lzo compression, level 1
[  246.879704][ T9730] BTRFS info (device loop6): max_inline set to 4096
[  247.008250][   T31] kauditd_printk_skb: 16 callbacks suppressed
[  247.008276][   T31] audit: type=1800 audit(1789066961.088:112): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1376" name="file1" dev="loop6" ino=260 res=0 errno=0
[  247.132187][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  247.182054][ T5736] usb 2-1: USB disconnect, device number 6
[  247.209358][ T6412] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.244338][ T5736] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  247.302211][ T5736] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  247.329648][ T5736] quatech2 2-1:0.51: device disconnected
[  247.464944][ T9788] loop3: detected capacity change from 0 to 1024
[  247.469448][ T9788] EXT4-fs: Ignoring removed bh option
[  247.610271][ T9788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  247.692861][ T9783] loop7: detected capacity change from 0 to 32768
[  247.721720][ T9788] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks
[  247.721745][ T9788] EXT4-fs warning (device loop3): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  247.809845][ T9783] JBD2: Ignoring recovery information on journal
[  247.884616][ T9783] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  248.050470][ T5626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.216348][ T5610] Bluetooth: hci5: command 0x0406 tx timeout
[  248.379209][ T7664] ocfs2: Unmounting device (7,7) on (node local)
[  248.804248][ T9821] loop4: detected capacity change from 0 to 4096
[  248.911766][ T9821] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  249.033276][ T9821] ntfs3(loop4): Failed to load $Extend (-22).
[  249.033308][ T9821] ntfs3(loop4): Failed to initialize $Extend.
[  249.260148][ T9834] ALSA: seq fatal error: cannot create timer (-19)
[  249.344023][ T9844] loop6: detected capacity change from 0 to 512
[  249.376343][ T9844] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.1420: Unrecognised inode hash code 255
[  249.376375][ T9844] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1420: Corrupt directory, running e2fsck is recommended
[  249.653260][ T9844] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  249.653380][ T9844] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.1420: corrupted in-inode xattr: invalid ea_ino
[  249.653411][ T9844] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  249.662471][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  249.662494][    C1] EXT4-fs (loop6): initial error at time 1789066963: ext4_iget_extra_inode:5210: inode 15
[  249.662528][    C1] EXT4-fs (loop6): last error at time 1789066963: ext4_iget_extra_inode:5210: inode 15
[  249.724337][ T9844] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1420: couldn't read orphan inode 15 (err -117)
[  249.724373][ T9844] loop6: lost filesystem error report for type 5 error -117
[  249.783801][ T9844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.838142][ T9853] loop7: detected capacity change from 0 to 256
[  249.839151][ T9853] exfat: Deprecated parameter 'utf8'
[  249.851564][ T9853] exfat: Deprecated parameter 'namecase'
[  249.851608][ T9853] exfat: Deprecated parameter 'namecase'
[  249.919849][ T5948] kernel write not supported for file /uinput (pid: 5948 comm: kworker/0:9)
[  249.929847][ T9853] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  249.944463][ T9844] EXT4-fs error (device loop6): __ext4_remount:6872: comm syz.6.1420: Abort forced by user
[  249.945224][ T9844] EXT4-fs (loop6): Remounting filesystem read-only
[  249.945243][ T9844] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  250.199087][ T6412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.507872][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'.
[  250.507940][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'.
[  250.770601][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'.
[  250.770666][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'.
[  251.066277][ T9852] loop1: detected capacity change from 0 to 32768
[  251.116428][ T9852] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.161858][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'.
[  251.161915][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'.
[  251.255324][ T9852] XFS (loop1): Ending clean mount
[  251.469953][ T5607] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.743523][ T9920] loop6: detected capacity change from 0 to 2048
[  251.800528][ T9920] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  251.821603][ T9920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  251.833011][ T9924] loop1: detected capacity change from 0 to 256
[  251.908496][   T31] audit: type=1800 audit(1789066965.988:113): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1451" name="file1" dev="loop6" ino=1346 res=0 errno=0
[  251.924461][ T9924] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  251.983838][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1457'.
[  251.983868][ T9929] netlink: 'syz.4.1457': attribute type 5 has an invalid length.
[  252.028096][ T9931] netlink: 'syz.0.1454': attribute type 11 has an invalid length.
[  252.310187][ T9930] loop7: detected capacity change from 0 to 4096
[  252.351352][ T9930] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  252.351374][ T9930] EXT4-fs (loop7): Test dummy encryption mode enabled
[  252.376464][ T9930] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0003]
[  252.377489][ T9930] System zones: 0-5
[  252.455891][ T9930] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.472802][ T9940] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  252.830849][ T9930] fscrypt: AES-256-XTS using blk-crypto-fallback
[  252.941985][ T9956] loop6: detected capacity change from 0 to 1024
[  253.065541][ T7664] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.713131][ T9948] loop0: detected capacity change from 0 to 32768
[  254.501258][ T9993] vim2m vim2m.0: vidioc_s_fmt queue busy
[  254.971438][   T31] audit: type=1326 audit(1789066969.038:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  254.971625][   T31] audit: type=1326 audit(1789066969.048:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  255.035188][   T31] audit: type=1326 audit(1789066969.118:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  255.035251][   T31] audit: type=1326 audit(1789066969.118:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  255.044826][   T31] audit: type=1326 audit(1789066969.128:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  255.044884][   T31] audit: type=1326 audit(1789066969.128:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  255.044936][   T31] audit: type=1326 audit(1789066969.128:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  255.061024][   T31] audit: type=1326 audit(1789066969.128:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  255.061087][   T31] audit: type=1326 audit(1789066969.128:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  255.089779][   T31] audit: type=1326 audit(1789066969.148:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1478" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f44b459e159 code=0x7ffc0000
[  255.179791][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  255.179884][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  255.639649][T10029] loop4: detected capacity change from 0 to 512
[  255.669776][T10029] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  255.669799][T10029] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  255.697987][T10029] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  255.698831][T10029] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  255.698938][T10029] System zones: 0-2, 18-18, 34-35
[  255.747802][T10029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.890834][T10038] loop1: detected capacity change from 0 to 1024
[  256.009005][ T5608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.152953][ T5736] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  256.161936][T10045] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0)
[  256.314760][ T5736] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  256.316194][ T5736] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  256.316226][ T5736] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  256.316248][ T5736] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  256.316273][ T5736] usb 1-1: config 220 has no interface number 2
[  256.316347][ T5736] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  256.316381][ T5736] usb 1-1: config 220 interface 0 has no altsetting 0
[  256.316434][ T5736] usb 1-1: config 220 interface 76 has no altsetting 0
[  256.316457][ T5736] usb 1-1: config 220 interface 1 has no altsetting 0
[  256.320514][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.320548][ T5736] usb 1-1: Product: syz
[  256.320570][ T5736] usb 1-1: Manufacturer: syz
[  256.320591][ T5736] usb 1-1: SerialNumber: syz
[  256.578169][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'.
[  256.578210][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1511'.
[  256.578228][T10054] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22)
[  256.639912][ T5736] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  256.639949][ T5736] uvcvideo 1-1:220.0: No valid video chain found.
[  256.640005][ T5736] usb 1-1: selecting invalid altsetting 0
[  256.685602][ T1215] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  256.758989][ T5736] usb 1-1: selecting invalid altsetting 0
[  256.759027][ T5736] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  256.806626][ T5736] usb 1-1: USB disconnect, device number 5
[  256.842694][ T1215] usb 5-1: Using ep0 maxpacket: 8
[  256.844270][ T1215] usb 5-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  256.876497][ T1215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  256.876531][ T1215] usb 5-1: Product: syz
[  256.876549][ T1215] usb 5-1: Manufacturer: syz
[  256.876566][ T1215] usb 5-1: SerialNumber: syz
[  256.907468][ T1215] usb 5-1: config 0 descriptor??
[  256.918761][ T1215] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  257.017814][T10014] loop6: detected capacity change from 0 to 32768
[  257.062134][T10014] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  257.127074][ T1215] gspca_sn9c2028: read1 error -32
[  257.160681][T10014] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  257.188169][T10014] XFS (loop6): Tail block (0x29) overwrite detected. Updated to 0x30
[  257.229448][T10014] XFS (loop6): Ending clean mount
[  257.335533][ T1215] gspca_sn9c2028: read1 error -71
[  257.335648][ T1215] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71
[  257.367750][ T1215] usb 5-1: USB disconnect, device number 8
[  257.626517][ T6412] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  257.816868][T10059] loop3: detected capacity change from 0 to 32768
[  258.159137][  T120] ==================================================================
[  258.159160][  T120] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x771/0xac0
[  258.159202][  T120] Read of size 4 at addr ffff888026c12094 by task jfsCommit/120
[  258.159222][  T120] 
[  258.159237][  T120] CPU: 1 UID: 0 PID: 120 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  258.159270][  T120] Tainted: [L]=SOFTLOCKUP
[  258.159280][  T120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  258.159295][  T120] Call Trace:
[  258.159304][  T120]  <TASK>
[  258.159315][  T120]  dump_stack_lvl+0xe8/0x150
[  258.159352][  T120]  print_address_description+0x55/0x1e0
[  258.159388][  T120]  ? jfs_lazycommit+0x771/0xac0
[  258.159421][  T120]  print_report+0x58/0x70
[  258.159452][  T120]  kasan_report+0x117/0x150
[  258.159484][  T120]  ? jfs_lazycommit+0x771/0xac0
[  258.159521][  T120]  jfs_lazycommit+0x771/0xac0
[  258.159557][  T120]  ? __pfx_jfs_lazycommit+0x10/0x10
[  258.159587][  T120]  ? srso_alias_return_thunk+0x5/0xfbef5
[  258.159624][  T120]  ? __pfx_default_wake_function+0x10/0x10
[  258.159658][  T120]  ? srso_alias_return_thunk+0x5/0xfbef5
[  258.159687][  T120]  ? __kthread_parkme+0x71/0x1f0
[  258.159723][  T120]  ? __kthread_parkme+0x199/0x1f0
[  258.159761][  T120]  kthread+0x38b/0x480
[  258.159784][  T120]  ? __pfx_jfs_lazycommit+0x10/0x10
[  258.159815][  T120]  ? __pfx_kthread+0x10/0x10
[  258.159840][  T120]  ret_from_fork+0x514/0xb70
[  258.159865][  T120]  ? __pfx_ret_from_fork+0x10/0x10
[  258.159903][  T120]  ? srso_alias_return_thunk+0x5/0xfbef5
[  258.159932][  T120]  ? __switch_to+0xc89/0x1420
[  258.159968][  T120]  ? __pfx_kthread+0x10/0x10
[  258.159992][  T120]  ret_from_fork_asm+0x1a/0x30
[  258.160047][  T120]  </TASK>
[  258.160056][  T120] 
[  258.160062][  T120] Allocated by task 10059:
[  258.160074][  T120]  kasan_save_track+0x3e/0x80
[  258.160099][  T120]  __kasan_kmalloc+0x93/0xb0
[  258.160124][  T120]  __kmalloc_cache_noprof+0x321/0x600
[  258.160146][  T120]  jfs_fill_super+0xc2/0xda0
[  258.160179][  T120]  get_tree_bdev_flags+0x430/0x4f0
[  258.160200][  T120]  vfs_get_tree+0x92/0x2a0
[  258.160219][  T120]  do_new_mount+0x319/0xdc0
[  258.160249][  T120]  __se_sys_mount+0x31d/0x420
[  258.160280][  T120]  do_syscall_64+0x166/0x520
[  258.160306][  T120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.160329][  T120] 
[  258.160335][  T120] Freed by task 5626:
[  258.160346][  T120]  kasan_save_track+0x3e/0x80
[  258.160369][  T120]  kasan_save_free_info+0x40/0x50
[  258.160402][  T120]  __kasan_slab_free+0x5c/0x80
[  258.160428][  T120]  kfree+0x1c5/0x650
[  258.160459][  T120]  generic_shutdown_super+0x13d/0x2d0
[  258.160492][  T120]  kill_block_super+0x44/0xa0
[  258.160512][  T120]  deactivate_locked_super+0xbc/0x110
[  258.160542][  T120]  cleanup_mnt+0x3d3/0x460
[  258.160563][  T120]  task_work_run+0x1d9/0x270
[  258.160587][  T120]  exit_to_user_mode_loop+0x204/0x770
[  258.160612][  T120]  do_syscall_64+0x328/0x520
[  258.160636][  T120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.160659][  T120] 
[  258.160665][  T120] The buggy address belongs to the object at ffff888026c12000
[  258.160665][  T120]  which belongs to the cache kmalloc-256 of size 256
[  258.160685][  T120] The buggy address is located 148 bytes inside of
[  258.160685][  T120]  freed 256-byte region [ffff888026c12000, ffff888026c12100)
[  258.160711][  T120] 
[  258.160716][  T120] The buggy address belongs to the physical page:
[  258.160728][  T120] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26c12
[  258.160749][  T120] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  258.160769][  T120] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  258.160791][  T120] page_type: f5(slab)
[  258.160813][  T120] raw: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122
[  258.160834][  T120] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  258.160857][  T120] head: 00fff00000000040 ffff88801b041b40 dead000000000100 dead000000000122
[  258.160878][  T120] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  258.160900][  T120] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[  258.160921][  T120] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  258.160935][  T120] page dumped because: kasan: bad access detected
[  258.160947][  T120] page_owner tracks the page as allocated
[  258.160955][  T120] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 94, tgid 94 (kworker/u8:5), ts 6965915548
[  258.160994][  T120]  post_alloc_hook+0x1f9/0x250
[  258.161043][  T120]  get_page_from_freelist+0x2209/0x2280
[  258.161067][  T120]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  258.161093][  T120]  allocate_slab+0x7d/0x620
[  258.161122][  T120]  refill_objects+0x2d5/0x350
[  258.161151][  T120]  __pcs_replace_empty_main+0x2c8/0x6c0
[  258.161180][  T120]  __kmalloc_cache_noprof+0x39b/0x600
[  258.161201][  T120]  scsi_probe_and_add_lun+0x23f/0x47b0
[  258.161239][  T120]  __scsi_scan_target+0x199/0xd10
[  258.161259][  T120]  scsi_scan_host_selected+0x391/0x6c0
[  258.161281][  T120]  do_scan_async+0x10e/0x660
[  258.161300][  T120]  async_run_entry_fn+0x9d/0x430
[  258.161332][  T120]  process_scheduled_works+0xc3d/0x1630
[  258.161362][  T120]  worker_thread+0xa47/0xfb0
[  258.161392][  T120]  kthread+0x38b/0x480
[  258.161412][  T120]  ret_from_fork+0x514/0xb70
[  258.161433][  T120] page_owner free stack trace missing
[  258.161441][  T120] 
[  258.161447][  T120] Memory state around the buggy address:
[  258.161460][  T120]  ffff888026c11f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  258.161476][  T120]  ffff888026c12000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  258.161493][  T120] >ffff888026c12080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  258.161506][  T120]                          ^
[  258.161518][  T120]  ffff888026c12100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  258.161534][  T120]  ffff888026c12180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  258.161548][  T120] ==================================================================
[  258.161563][  T120] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  258.752821][  T120] CPU: 1 UID: 0 PID: 120 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  258.763497][  T120] Tainted: [L]=SOFTLOCKUP
[  258.767813][  T120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[  258.777857][  T120] Call Trace:
[  258.781127][  T120]  <TASK>
[  258.784047][  T120]  vpanic+0x56d/0xa60
[  258.788050][  T120]  ? __pfx_vpanic+0x10/0x10
[  258.792598][  T120]  panic+0xc5/0xd0
[  258.796330][  T120]  ? __pfx_panic+0x10/0x10
[  258.800758][  T120]  ? jfs_lazycommit+0x771/0xac0
[  258.805611][  T120]  ? srso_alias_return_thunk+0x5/0xfbef5
[  258.811246][  T120]  ? jfs_lazycommit+0x771/0xac0
[  258.816105][  T120]  ? srso_alias_return_thunk+0x5/0xfbef5
[  258.821739][  T120]  ? jfs_lazycommit+0x771/0xac0
[  258.826589][  T120]  check_panic_on_warn+0x89/0xb0
[  258.831527][  T120]  ? jfs_lazycommit+0x771/0xac0
[  258.836381][  T120]  end_report+0x73/0x170
[  258.840636][  T120]  ? jfs_lazycommit+0x771/0xac0
[  258.845489][  T120]  kasan_report+0x128/0x150
[  258.849998][  T120]  ? jfs_lazycommit+0x771/0xac0
[  258.854861][  T120]  jfs_lazycommit+0x771/0xac0
[  258.859545][  T120]  ? __pfx_jfs_lazycommit+0x10/0x10
[  258.864744][  T120]  ? srso_alias_return_thunk+0x5/0xfbef5
[  258.870377][  T120]  ? __pfx_default_wake_function+0x10/0x10
[  258.876200][  T120]  ? srso_alias_return_thunk+0x5/0xfbef5
[  258.881830][  T120]  ? __kthread_parkme+0x71/0x1f0
[  258.886775][  T120]  ? __kthread_parkme+0x199/0x1f0
[  258.891818][  T120]  kthread+0x38b/0x480
[  258.895907][  T120]  ? __pfx_jfs_lazycommit+0x10/0x10
[  258.901107][  T120]  ? __pfx_kthread+0x10/0x10
[  258.905688][  T120]  ret_from_fork+0x514/0xb70
[  258.910274][  T120]  ? __pfx_ret_from_fork+0x10/0x10
[  258.915393][  T120]  ? srso_alias_return_thunk+0x5/0xfbef5
[  258.921029][  T120]  ? __switch_to+0xc89/0x1420
[  258.925709][  T120]  ? __pfx_kthread+0x10/0x10
[  258.930292][  T120]  ret_from_fork_asm+0x1a/0x30
[  258.935081][  T120]  </TASK>
[  258.938345][  T120] Kernel Offset: disabled
[  258.942658][  T120] Rebooting in 86400 seconds..