last executing test programs:

1m22.307473823s ago: executing program 0 (id=2046):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080)={[{@cache_strategy_readahead}, {@dax}]}, 0x1, 0x178, &(0x7f0000000240)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0)

1m21.983376203s ago: executing program 0 (id=2054):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b00000005010400000000000000000300008054020100030000000080000002ff06000700140073797a31000000000000000000000000000000000000000000000000000000004283c41a9e18d09ca54f435f1988ff82bd828f81d320447df520c31ac8366fc8"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040)

1m21.743361694s ago: executing program 0 (id=2059):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8942, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})

1m21.55636124s ago: executing program 0 (id=2063):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x847, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0xe0, 0xc2e, &(0x7f0000000f40)="$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")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1m21.075212324s ago: executing program 0 (id=2068):
syz_mount_image$bcachefs(&(0x7f0000000b40), &(0x7f0000005900)='./file0\x00', 0x1000000, &(0x7f0000000380)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d6669785f736166652c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c76657273696f6e5f757067726164653d6e6f6e652c736d61636b66736861743d2a2c6f626a5f747970653d28aa2900212c66756e633d4b455845435f4b45524e454c5f434845434b2c657569643d", @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC, @ANYBLOB=',obj_type=BPRM_CHECK,obj_role=\',,\x00'], 0x1, 0x58de, &(0x7f000000b240)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

1m20.611875861s ago: executing program 0 (id=2075):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x6000000)

1m20.2944426s ago: executing program 32 (id=2075):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x6000000)

2.729323562s ago: executing program 4 (id=3163):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564)

2.424568927s ago: executing program 4 (id=3167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0)

2.424097309s ago: executing program 3 (id=3168):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r0, &(0x7f0000000080)={0x2a, 0x1, 0x4001}, 0xc)

2.163848397s ago: executing program 3 (id=3172):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "cecdbcf1aa86addc", "47d22a42113d3b383d8b32dd3c50960aa5814170021d26930e3c4eba07c04321", "60ffd1e9", "01614384d34884ed"}, 0x38)

2.146576475s ago: executing program 4 (id=3173):
r0 = fanotify_init(0x0, 0x0)
fanotify_mark(r0, 0x1, 0x1, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00')

1.919983645s ago: executing program 3 (id=3177):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)

1.880032562s ago: executing program 4 (id=3178):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x0, 0x5, 0x6})

1.74984674s ago: executing program 3 (id=3181):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, 0x0)

1.623954405s ago: executing program 4 (id=3183):
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$afs(&(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)

1.578518001s ago: executing program 3 (id=3184):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x5}}]}}}]}, 0x48}}, 0x0)

1.44358382s ago: executing program 1 (id=3186):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSACCEPT(r0, 0x89e3)

1.381557432s ago: executing program 3 (id=3187):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f00000002c0), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)=ANY=[@ANYBLOB="000000002b303030303019ea0a3f9e3a"])

1.34673003s ago: executing program 4 (id=3189):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@journal_async_commit}, {@localflocks}, {@intr}, {@dir_resv_level}]}, 0x9, 0x443d, &(0x7f00000088c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)

1.27911968s ago: executing program 1 (id=3190):
syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x3, 0x1, "005ff92900ddab4992020900"}]}}}}}}, 0x0)
syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff92900ddab4992020900"}]}}}}}}, 0x0)

1.078788874s ago: executing program 1 (id=3193):
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r0}, &(0x7f0000000100)={'enc=', 'pkcs1', ' hash=', {'cmac-aes-ce\x00'}}, 0x0, 0x0)

1.038826913s ago: executing program 5 (id=3194):
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f0000000340), 0x0, 0x0, 0x0)

973.306395ms ago: executing program 2 (id=3195):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x4, &(0x7f0000000080)={0x0, "684da751434fbabcdf3aa54bce5d926ef908d52773fa7f00"}})

880.0719ms ago: executing program 5 (id=3196):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x1410, 0x6964cf48694fdc75}, 0x10}}, 0x20004000)

879.653857ms ago: executing program 1 (id=3197):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003d00090000005b0600000000010000000c0000000c000180080010800401de80080002"], 0x2c}}, 0x0)

815.999241ms ago: executing program 2 (id=3198):
r0 = socket$packet(0x11, 0x2, 0x300)
sendmmsg$sock(r0, &(0x7f0000000800)=[{{&(0x7f00000005c0)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000480)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, 0x0}}], 0x2, 0x0)

675.987149ms ago: executing program 5 (id=3199):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, 0x0, 0xb, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xd, 0x1, '[\'+%!%-!\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1f230e12abf1efb1}, 0x4000000)

675.501146ms ago: executing program 1 (id=3200):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xcc}]}}}]}, 0x48}}, 0x0)

574.076775ms ago: executing program 2 (id=3201):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0016000500142603600e1208001e0000000401a8400900080008400400040000000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017dbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703928723f9a941", 0xd8}], 0x1}, 0x0)

470.438604ms ago: executing program 5 (id=3202):
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f0000000080)=@hat={'permhat '}, 0x1b)

469.978962ms ago: executing program 1 (id=3203):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable}, {@noblock_validity}, {@mblk_io_submit}, {@resuid}]}, 0x1, 0x4b5, &(0x7f0000000580)="$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")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

323.511298ms ago: executing program 2 (id=3204):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x20001, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x2)

275.998918ms ago: executing program 5 (id=3205):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}})

260.412747ms ago: executing program 2 (id=3206):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x1a}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0)

114.656247ms ago: executing program 2 (id=3207):
r0 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x9, 0x2}, 0x20)

0s ago: executing program 5 (id=3208):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000007500)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x68034)

kernel console output (not intermixed with test programs):

 chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  196.082907][T10537] loop2: detected capacity change from 0 to 32768
[  196.170150][T10537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1820 (10537)
[  196.225209][T10572] loop1: detected capacity change from 0 to 512
[  196.296009][T10537] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.353438][T10572] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  196.371254][T10537] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  196.380655][T10537] BTRFS info (device loop2): using free-space-tree
[  196.409033][T10572] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  196.419604][T10572] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1829: Failed to acquire dquot type 1
[  196.524209][T10572] EXT4-fs (loop1): 1 truncate cleaned up
[  196.549721][T10572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.562674][T10572] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.786285][T10566] loop4: detected capacity change from 0 to 32768
[  196.920775][T10566] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  196.925751][T10610] loop0: detected capacity change from 0 to 4096
[  196.943639][T10610] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  196.976829][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.993046][T10537] BTRFS info (device loop2): balance: start -susage=0..67,limit=1,limit=1..0
[  197.077809][T10537] BTRFS info (device loop2): relocating block group 1048576 flags system
[  197.113754][T10610] ntfs3(loop0): failed to convert "c46c" to cp1251
[  197.331935][T10624] loop0: detected capacity change from 0 to 16
[  197.344380][T10624] erofs (device loop0): mounted with root inode @ nid 36.
[  197.364000][T10537] BTRFS info (device loop2): balance: ended with status: 0
[  197.418499][T10624] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[  197.433445][T10624] erofs (device loop0): failed to decompress -24 in[52, 4044] out[1851]
[  197.437172][ T5834] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.449926][T10624] erofs (device loop0): read error -117 @ 43 of nid 36
[  197.471466][T10566] XFS (loop4): Ending clean mount
[  197.486485][T10566] XFS (loop4): Quotacheck needed: Please wait.
[  197.672051][T10566] XFS (loop4): Quotacheck: Done.
[  197.735764][T10629] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  197.781759][T10618] loop3: detected capacity change from 0 to 32768
[  197.816093][T10618] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1839 (10618)
[  197.879887][T10618] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  197.890323][T10618] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  197.900219][T10618] BTRFS info (device loop3): using free-space-tree
[  197.942856][ T5844] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.251127][T10655] loop2: detected capacity change from 0 to 2048
[  198.270921][T10618] BTRFS info (device loop3): rebuilding free space tree
[  198.309518][T10655] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.539468][ T5832] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  198.769621][T10634] loop0: detected capacity change from 0 to 40427
[  198.794953][T10634] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  198.795003][T10634] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  198.845104][T10634] F2FS-fs (loop0): Found nat_bits in checkpoint
[  199.078005][T10634] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  199.117711][T10634] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  199.758800][   T29] audit: type=1326 audit(1734594409.478:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10699 comm="syz.3.1869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec7d385d29 code=0x0
[  200.120061][    T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  200.155828][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'.
[  200.272614][    T8] usb 3-1: Using ep0 maxpacket: 16
[  200.301327][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  200.327003][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  200.375982][    T8] usb 3-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=60.d0
[  200.418626][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.437296][    T8] usb 3-1: Product: syz
[  200.458775][    T8] usb 3-1: Manufacturer: syz
[  200.467732][    T8] usb 3-1: SerialNumber: syz
[  200.495333][T10720] loop3: detected capacity change from 0 to 256
[  200.528936][    T8] usb 3-1: config 0 descriptor??
[  200.822398][    T8] kaweth 3-1:0.0: Firmware present in device.
[  201.038087][    T8] kaweth 3-1:0.0: Error reading configuration (-71), no net device created
[  201.093276][    T8] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[  201.131031][    T8] usb 3-1: USB disconnect, device number 11
[  201.992427][T10775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1905'.
[  202.038195][T10744] loop0: detected capacity change from 0 to 32768
[  202.103507][T10744] ea_get: invalid extended attribute
[  202.109218][T10744] ffff88807e4c71d0: 04 00 00 00                                      ....
[  202.244413][T10781] xt_bpf: check failed: parse error
[  202.382539][T10765] loop4: detected capacity change from 0 to 32768
[  202.406410][T10765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1900 (10765)
[  202.465750][T10765] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.497402][T10765] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  202.527940][T10765] BTRFS info (device loop4): using free-space-tree
[  202.897015][T10771] loop3: detected capacity change from 0 to 40427
[  203.046920][T10771] F2FS-fs (loop3): heap/no_heap options were deprecated
[  203.098875][T10771] F2FS-fs (loop3): invalid crc value
[  203.124716][T10771] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  203.151708][T10771] F2FS-fs (loop3): Found nat_bits in checkpoint
[  203.177592][ T5844] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.318586][T10821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1919'.
[  203.354430][T10771] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  203.747277][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1927'.
[  204.122150][T10846] loop2: detected capacity change from 0 to 64
[  204.407185][T10853] loop0: detected capacity change from 0 to 4096
[  204.466828][T10853] ntfs3: Unknown parameter 'ÿÿÿÿÿÿ01777777777777777777777'
[  204.538066][T10853] tmpfs: Bad value for 'mpol'
[  204.672234][T10867] loop0: detected capacity change from 0 to 512
[  204.765744][T10867] EXT4-fs: Ignoring removed nomblk_io_submit option
[  204.951710][T10867] EXT4-fs (loop0): orphan cleanup on readonly fs
[  205.015493][T10867] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1938: bg 0: block 248: padding at end of block bitmap is not set
[  205.225203][T10867] EXT4-fs (loop0): Remounting filesystem read-only
[  205.232014][T10867] Quota error (device loop0): write_blk: dquota write failed
[  205.239469][T10867] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  205.346967][T10867] EXT4-fs (loop0): 1 truncate cleaned up
[  205.422192][T10867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  205.504519][T10917] No such timeout policy "syz0"
[  205.605616][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.780959][T10927] 
@ÿ: renamed from veth0_vlan (while UP)
[  205.888514][T10933] loop3: detected capacity change from 0 to 1024
[  206.180734][T10941] loop0: detected capacity change from 0 to 4096
[  206.313029][T10941] ntfs3(loop0): ino=5, "/" attr_set_size
[  206.319214][T10941] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  206.329976][   T29] audit: type=1400 audit(1734594416.038:180): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10949 comm="syz.3.1966"
[  206.380399][ T5846] usb 3-1: new low-speed USB device number 12 using dummy_hcd
[  206.522710][T10961] loop4: detected capacity change from 0 to 8
[  206.549717][T10963] loop3: detected capacity change from 0 to 256
[  206.559433][ T5846] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  206.582949][ T5846] usb 3-1: string descriptor 0 read error: -22
[  206.589407][ T5846] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  206.598993][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.619049][T10963] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  206.637121][T10963] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  206.675248][ T5846] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  206.844426][T10971] netlink: 'syz.1.1978': attribute type 1 has an invalid length.
[  206.863417][T10971] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1978'.
[  206.899684][ T5846] usb 3-1: USB disconnect, device number 12
[  206.941622][T10976] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  207.520136][T10999] cgroup: Invalid name
[  207.568691][T11002] loop1: detected capacity change from 0 to 512
[  207.611387][T11002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  207.692365][T11002] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1991: bg 0: block 248: padding at end of block bitmap is not set
[  207.732657][T11002] Quota error (device loop1): write_blk: dquota write failed
[  207.820106][T11002] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  207.840006][T11002] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.1991: Failed to acquire dquot type 1
[  207.873042][T11002] EXT4-fs (loop1): 1 truncate cleaned up
[  207.879594][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'.
[  207.895407][T11002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.896573][ T5841] Bluetooth: hci4: command 0x0406 tx timeout
[  207.916073][T11002] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  208.090875][T11027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2003'.
[  208.099991][T11027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2003'.
[  208.165749][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.184291][T10898] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[  208.215240][T10898] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:9: Failed to release dquot type 1
[  208.455349][   T29] audit: type=1326 audit(1734594418.178:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  208.523952][   T29] audit: type=1326 audit(1734594418.208:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  208.595205][T11047] netlink: 'syz.4.2012': attribute type 5 has an invalid length.
[  208.617580][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'.
[  208.648569][   T29] audit: type=1326 audit(1734594418.208:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  208.689678][   T29] audit: type=1326 audit(1734594418.208:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  208.880087][  T975] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  208.988957][T11062] loop4: detected capacity change from 0 to 256
[  209.076401][  T975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  209.112539][  T975] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  209.154864][T11032] loop2: detected capacity change from 0 to 32768
[  209.155064][T11062] FAT-fs (loop4): Directory bread(block 64) failed
[  209.171474][  T975] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  209.194853][T11062] FAT-fs (loop4): Directory bread(block 65) failed
[  209.203226][  T975] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  209.210074][T11062] FAT-fs (loop4): Directory bread(block 66) failed
[  209.212638][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  209.226994][  T975] usb 4-1: SerialNumber: syz
[  209.240136][T11053] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  209.249951][  T975] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  209.260926][T11062] FAT-fs (loop4): Directory bread(block 67) failed
[  209.290044][T11062] FAT-fs (loop4): Directory bread(block 68) failed
[  209.296613][T11062] FAT-fs (loop4): Directory bread(block 69) failed
[  209.306116][T11032] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  209.323087][T11032] bcachefs (loop2): initializing new filesystem
[  209.324568][T11062] FAT-fs (loop4): Directory bread(block 70) failed
[  209.331836][T11032] bcachefs (loop2): going read-write
[  209.350211][T11032] bcachefs (loop2): marking superblocks
[  209.370057][T11062] FAT-fs (loop4): Directory bread(block 71) failed
[  209.402253][T11062] FAT-fs (loop4): Directory bread(block 72) failed
[  209.419424][T11062] FAT-fs (loop4): Directory bread(block 73) failed
[  209.428695][T11032] bcachefs (loop2): initializing freespace
[  209.437197][T11032] bcachefs (loop2): done initializing freespace
[  209.453703][T11032] bcachefs (loop2): reading snapshots table
[  209.479998][T11032] bcachefs (loop2): reading snapshots done
[  209.654655][T11067] loop1: detected capacity change from 0 to 32768
[  209.671059][T11067] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2022 (11067)
[  209.697338][T11032] bcachefs (loop2): done starting filesystem
[  209.701043][T11067] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.724068][T11067] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  209.736751][T11067] BTRFS info (device loop1): using free-space-tree
[  209.740065][  T975] usb 4-1: USB disconnect, device number 7
[  209.865551][T11065] loop0: detected capacity change from 0 to 32768
[  209.925655][ T5834] bcachefs (loop2): shutting down
[  209.953117][ T5834] bcachefs (loop2): going read-only
[  209.962597][T11065] (syz.0.2020,11065,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  209.992279][ T5834] bcachefs (loop2): finished waiting for writes to stop
[  210.025003][T11065] (syz.0.2020,11065,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  210.040648][ T5827] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  210.070085][ T5834] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  210.076110][T11065] JBD2: Ignoring recovery information on journal
[  210.190248][T11065] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  210.304840][ T5834] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 5
[  210.350302][ T5834] bcachefs (loop2): clean shutdown complete, journal seq 6
[  210.358696][ T5834] bcachefs (loop2): marking filesystem clean
[  210.447986][ T5834] bcachefs (loop2): shutdown complete
[  210.486118][T11103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2028'.
[  210.636799][ T5831] ocfs2: Unmounting device (7,0) on (node local)
[  210.643962][T11109] loop3: detected capacity change from 0 to 2048
[  210.673533][T11109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.750100][T11105] loop1: detected capacity change from 0 to 4096
[  210.764991][T11105] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  210.838528][T11116] loop0: detected capacity change from 0 to 256
[  210.877895][T11116] FAT-fs (loop0): Directory bread(block 64) failed
[  210.930208][T11116] FAT-fs (loop0): Directory bread(block 65) failed
[  210.936859][T11116] FAT-fs (loop0): Directory bread(block 66) failed
[  210.942380][T11105] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  210.964029][T11116] FAT-fs (loop0): Directory bread(block 67) failed
[  210.986282][T11116] FAT-fs (loop0): Directory bread(block 68) failed
[  210.993978][T11116] FAT-fs (loop0): Directory bread(block 69) failed
[  211.001815][T11116] FAT-fs (loop0): Directory bread(block 70) failed
[  211.007755][T11105] ntfs3(loop1): ino=0, attr_set_size
[  211.009521][T11116] FAT-fs (loop0): Directory bread(block 71) failed
[  211.056117][T11116] FAT-fs (loop0): Directory bread(block 72) failed
[  211.063302][T11116] FAT-fs (loop0): Directory bread(block 73) failed
[  211.188614][T11120] loop4: detected capacity change from 0 to 256
[  211.459685][T11132] loop3: detected capacity change from 0 to 8
[  211.810106][T11145] loop0: detected capacity change from 0 to 16
[  211.827681][T11145] erofs: DAX unsupported by block device. Turning off DAX.
[  211.857705][T11145] erofs (device loop0): mounted with root inode @ nid 36.
[  212.138582][T11161] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.2054'.
[  212.213380][ T5885] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  212.370144][ T5885] usb 4-1: Using ep0 maxpacket: 16
[  212.385331][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.419942][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.464181][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  212.473270][T11175] loop4: detected capacity change from 0 to 128
[  212.481078][ T5885] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  212.492430][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.507488][ T5885] usb 4-1: config 0 descriptor??
[  212.519363][ T5885] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12
[  212.534243][ T5190] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  212.590719][ T5190] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  212.609042][ T5190] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  212.635681][T11177] loop0: detected capacity change from 0 to 2048
[  212.678633][ T6180] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  212.724778][ T5190] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  212.737855][T11177] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.789698][T11153] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  212.838672][ T5190] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  212.863821][T11183] loop4: detected capacity change from 0 to 512
[  212.884851][ T5885] usb 4-1: USB disconnect, device number 8
[  212.906006][ T5190] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  212.932550][T11183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.970171][T11183] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.989497][ T5831] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  212.999230][ T5831] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  213.081004][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2024'.
[  213.139070][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.993624][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  214.003258][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  214.014418][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  214.023750][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  214.031832][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  214.039132][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  214.350258][T11204] loop4: detected capacity change from 0 to 32768
[  214.395732][T11204] XFS: ikeep mount option is deprecated.
[  214.440868][T11204] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  214.513686][T11215] chnl_net:caif_netlink_parms(): no params data found
[  214.537878][T11248] loop3: detected capacity change from 0 to 1024
[  214.571236][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2090'.
[  214.602691][T11248] EXT4-fs: Ignoring removed bh option
[  214.645772][T11248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  214.703687][T11248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.740054][T11256] netlink: 'syz.1.2094': attribute type 2 has an invalid length.
[  214.770447][T11256] netlink: 'syz.1.2094': attribute type 8 has an invalid length.
[  214.778322][T11256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2094'.
[  214.802106][T11204] XFS (loop4): Ending clean mount
[  214.808878][T11215] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.810201][T11204] XFS (loop4): Quotacheck needed: Please wait.
[  214.836850][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.844610][T11215] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.873816][T11215] bridge_slave_0: entered allmulticast mode
[  214.917117][T11215] bridge_slave_0: entered promiscuous mode
[  214.934548][T11204] XFS (loop4): Quotacheck: Done.
[  214.956945][T11215] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.972784][T11215] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.024275][T11215] bridge_slave_1: entered allmulticast mode
[  215.050543][T11215] bridge_slave_1: entered promiscuous mode
[  215.124755][ T5844] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  215.133659][T11263] netlink: 'syz.1.2098': attribute type 15 has an invalid length.
[  215.218772][T11215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.244087][T11215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.317010][T11271] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  215.528319][T11215] team0: Port device team_slave_0 added
[  215.543207][T11215] team0: Port device team_slave_1 added
[  215.549057][T11275] netlink: 'syz.3.2104': attribute type 11 has an invalid length.
[  215.562705][T11275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2104'.
[  215.701561][T11215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.706536][T11284] loop3: detected capacity change from 0 to 512
[  215.708540][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.708568][T11215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.720427][T11215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.773049][T11215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.822122][ T5885] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  215.844567][T11215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.884962][T11284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.915630][T11284] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.947771][T11215] hsr_slave_0: entered promiscuous mode
[  215.969770][T11215] hsr_slave_1: entered promiscuous mode
[  215.996849][T11215] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.006876][T11215] Cannot create hsr debugfs directory
[  216.009877][ T5885] usb 2-1: Using ep0 maxpacket: 16
[  216.022270][ T5885] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  216.031646][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.039650][ T5885] usb 2-1: Product: syz
[  216.049876][ T5885] usb 2-1: Manufacturer: syz
[  216.059146][ T5885] usb 2-1: SerialNumber: syz
[  216.079486][ T5885] r8152-cfgselector 2-1: Unknown version 0x0000
[  216.094006][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.109010][ T5885] r8152-cfgselector 2-1: config 0 descriptor??
[  216.160367][ T5846] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  216.220106][ T5841] Bluetooth: hci3: command tx timeout
[  216.275905][T11285] loop2: detected capacity change from 0 to 32768
[  216.307417][T11285] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2106 (11285)
[  216.338565][T11215] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  216.352888][ T5846] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  216.372234][T11215] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  216.392913][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.396172][T11215] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  216.412615][T11285] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  216.415345][ T5846] usb 5-1: Product: syz
[  216.427155][T11215] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  216.440169][T11285] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  216.455499][ T5846] usb 5-1: Manufacturer: syz
[  216.465626][ T5846] usb 5-1: SerialNumber: syz
[  216.491168][ T5846] r8152-cfgselector 5-1: Unknown version 0x0000
[  216.497475][ T5846] r8152-cfgselector 5-1: config 0 descriptor??
[  216.583404][T11215] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.636787][T11215] 8021q: adding VLAN 0 to HW filter on device team0
[  216.652733][T10906] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.661505][T10906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.676895][  T975] r8152-cfgselector 2-1: USB disconnect, device number 9
[  216.694361][T11285] BTRFS info (device loop2): rebuilding free space tree
[  216.728568][T11285] BTRFS info (device loop2): disabling free space tree
[  216.742479][T11285] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  216.753321][T11285] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  216.772849][T10898] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.780040][T10898] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.817308][T10898] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.864450][ T5834] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  216.998555][  T975] r8152-cfgselector 5-1: USB disconnect, device number 7
[  217.407244][T11215] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.937301][T11331] loop4: detected capacity change from 0 to 4096
[  218.009271][T11331] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  218.051981][T11331] ntfs3(loop4): Failed to load $Extend (-22).
[  218.058134][T11331] ntfs3(loop4): Failed to initialize $Extend.
[  218.127749][T11331] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB
[  218.177966][T11215] veth0_vlan: entered promiscuous mode
[  218.225652][T11215] veth1_vlan: entered promiscuous mode
[  218.253469][T11324] loop1: detected capacity change from 0 to 32768
[  218.290212][ T5841] Bluetooth: hci3: command tx timeout
[  218.295728][T11324] (syz.1.2116,11324,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  218.369138][T11215] veth0_macvtap: entered promiscuous mode
[  218.380013][T11324] (syz.1.2116,11324,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  218.428166][T11215] veth1_macvtap: entered promiscuous mode
[  218.436797][T11324] JBD2: Ignoring recovery information on journal
[  218.547595][T11324] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  218.565847][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.596826][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.607855][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.620088][T11324] ocfs2: Unmounting device (7,1) on (node local)
[  218.621199][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.647233][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.681251][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.703938][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.715208][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.725487][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  218.736552][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.748222][T11215] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.756041][  T975] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  218.790776][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.825735][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.832774][ T5846] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  218.850822][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.870019][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.899871][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.912259][  T975] usb 5-1: Using ep0 maxpacket: 32
[  218.920594][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  218.954096][  T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  218.977606][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  218.992665][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.003141][T11215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.018573][T11215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.034065][ T5846] usb 4-1: Using ep0 maxpacket: 32
[  219.037265][  T975] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  219.064612][T11215] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.074683][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.129975][  T975] usb 5-1: Product: syz
[  219.156420][  T975] usb 5-1: Manufacturer: syz
[  219.181445][  T975] usb 5-1: SerialNumber: syz
[  219.188510][ T5846] usb 4-1: unable to get BOS descriptor or descriptor too short
[  219.189741][T11215] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.216610][ T5846] usb 4-1: config 7 has an invalid interface number: 187 but max is 0
[  219.231629][  T975] usb 5-1: config 0 descriptor??
[  219.244650][ T5846] usb 4-1: config 7 has no interface number 0
[  219.258630][T11215] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.268986][  T975] hub 5-1:0.0: bad descriptor, ignoring hub
[  219.278064][ T5846] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  219.283843][  T975] hub 5-1:0.0: probe with driver hub failed with error -5
[  219.295637][T11215] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.303915][ T5846] usb 4-1: config 7 interface 187 has no altsetting 0
[  219.315558][T11215] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.329757][  T975] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14
[  219.361634][ T5846] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  219.371000][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.379059][ T5846] usb 4-1: Product: syz
[  219.383666][ T5846] usb 4-1: Manufacturer: syz
[  219.388293][ T5846] usb 4-1: SerialNumber: syz
[  219.389678][  T975] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  219.421537][T11348] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  219.456025][  T975] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -22
[  219.559816][  T975] usb 5-1: USB disconnect, device number 8
[  219.675494][ T5846] usb 4-1: Limiting number of CPorts to U8_MAX
[  219.682895][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.684521][ T5846] usb 4-1: Unknown endpoint type found, address 0x07
[  219.698164][ T5846] usb 4-1: Not enough endpoints found in device, aborting!
[  219.724036][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.756102][T10901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.765120][T10901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.869801][  T975] usb 4-1: USB disconnect, device number 9
[  219.874323][T11374] program syz.1.2136 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  219.941968][T11377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.353588][T11391] loop2: detected capacity change from 0 to 1764
[  220.373022][ T5841] Bluetooth: hci3: command tx timeout
[  220.579991][T11402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2148'.
[  220.836057][T11413] loop2: detected capacity change from 0 to 64
[  220.875402][T11417] autofs4:pid:11417:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4294967071), cmd(0xc0189372)
[  220.932246][T11417] autofs4:pid:11417:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189372)
[  221.046489][  T975] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  221.220670][T11425] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  221.231599][T11425] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  221.271486][  T975] usb 2-1: Using ep0 maxpacket: 16
[  221.347361][  T975] usb 2-1: config 1 has an invalid interface descriptor of length 5, skipping
[  221.356541][  T975] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  221.365359][  T975] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  221.375586][  T975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  221.572208][  T975] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  221.581288][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.589415][  T975] usb 2-1: Product: syz
[  221.722339][  T975] usb 2-1: Manufacturer: syz
[  221.726993][  T975] usb 2-1: SerialNumber: syz
[  221.987458][  T975] usb 2-1: 0:2 : does not exist
[  221.995297][T11454] loop2: detected capacity change from 0 to 256
[  221.997648][  T975] usb 2-1: unit 4 not found!
[  222.035519][  T975] usb 2-1: USB disconnect, device number 10
[  222.065806][T11454] FAT-fs (loop2): Directory bread(block 64) failed
[  222.073241][T11454] FAT-fs (loop2): Directory bread(block 65) failed
[  222.103609][T11454] FAT-fs (loop2): Directory bread(block 66) failed
[  222.119583][T11454] FAT-fs (loop2): Directory bread(block 67) failed
[  222.134744][T11454] FAT-fs (loop2): Directory bread(block 68) failed
[  222.161111][T11454] FAT-fs (loop2): Directory bread(block 69) failed
[  222.171279][T11454] FAT-fs (loop2): Directory bread(block 70) failed
[  222.201700][T11454] FAT-fs (loop2): Directory bread(block 71) failed
[  222.225545][T11454] FAT-fs (loop2): Directory bread(block 72) failed
[  222.249437][T11454] FAT-fs (loop2): Directory bread(block 73) failed
[  222.256149][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2178'.
[  222.278679][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  222.443804][ T5841] Bluetooth: hci3: command tx timeout
[  222.548631][    T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  222.610574][T11468] loop5: detected capacity change from 0 to 512
[  222.739581][T11468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.773994][    T8] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  222.782211][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  222.782934][T11479] loop1: detected capacity change from 0 to 1024
[  222.859010][    T8] usb 4-1: config 0 has no interface number 0
[  222.876569][T11468] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.882454][    T8] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  222.903469][    T8] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  222.906826][T11483] loop4: detected capacity change from 0 to 1024
[  222.933907][    T8] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  222.943659][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.953207][    T8] usb 4-1: Product: syz
[  222.958311][    T8] usb 4-1: Manufacturer: syz
[  222.963108][    T8] usb 4-1: SerialNumber: syz
[  222.969790][    T8] usb 4-1: config 0 descriptor??
[  222.982862][T11483] EXT4-fs: Ignoring removed orlov option
[  223.022639][T11483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.046370][T10906] hfsplus: b-tree write err: -5, ino 4
[  223.097036][T11215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.142067][T11490] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  223.209469][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.222641][T11494] loop1: detected capacity change from 0 to 164
[  223.276848][T11494] rock: directory entry would overflow storage
[  223.293832][T11494] rock: sig=0x66, size=4, remaining=3
[  223.310176][T11494] rock: directory entry would overflow storage
[  223.316372][T11494] rock: sig=0x66, size=4, remaining=3
[  223.388676][    T8] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71
[  223.405516][    T8] usb 4-1: USB disconnect, device number 10
[  223.425133][T11496] syz.2.2193: attempt to access beyond end of device
[  223.425133][T11496] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0
[  223.474558][T11496] VFS: could not find a valid V7 on nbd2.
[  223.694129][T11506] loop2: detected capacity change from 0 to 1024
[  223.732959][T11506] EXT4-fs: Ignoring removed orlov option
[  223.756228][T11506] EXT4-fs: Ignoring removed nomblk_io_submit option
[  223.831593][T11506] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002]
[  223.872311][T11506] System zones: 0-1, 3-36
[  223.893309][T11517] loop1: detected capacity change from 0 to 256
[  223.901258][T11517] exfat: Deprecated parameter 'namecase'
[  223.907507][T11517] exfat: Deprecated parameter 'namecase'
[  224.040148][T11506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.100418][T11523] loop5: detected capacity change from 0 to 1764
[  224.115070][T11517] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d)
[  224.305844][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.359069][T11530] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  224.551208][T11535] IPv6: sit1: Disabled Multicast RS
[  224.909563][T11521] loop3: detected capacity change from 0 to 32768
[  225.171443][T11553] netlink: 'syz.5.2220': attribute type 5 has an invalid length.
[  225.255597][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2223'.
[  225.264693][T11559] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  225.274354][T11559] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  225.527804][T11531] loop1: detected capacity change from 0 to 32768
[  225.571503][T11531] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  225.731992][T11557] loop2: detected capacity change from 0 to 40427
[  225.784870][T11557] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  225.791947][T11557] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  225.887136][T11557] F2FS-fs (loop2): invalid crc value
[  225.929011][T11587] loop5: detected capacity change from 0 to 256
[  226.010543][T11557] F2FS-fs (loop2): Found nat_bits in checkpoint
[  226.124956][T11595] loop4: detected capacity change from 0 to 47
[  226.190978][T11557] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  226.224783][T11557] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  226.354507][T11531] XFS (loop1): Ending clean mount
[  226.362604][T11557] F2FS-fs (loop2): Corrupted max_depth of 3: 8449
[  226.466785][ T5827] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  226.626694][T11611] pim6reg: entered allmulticast mode
[  226.865883][T11619] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  227.020976][T11627] netlink: 'syz.1.2250': attribute type 2 has an invalid length.
[  227.029795][T11627] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2250'.
[  227.141411][T11632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2253'.
[  227.150818][T11632] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2253'.
[  227.347549][T11642] loop1: detected capacity change from 0 to 256
[  227.813262][T11608] loop5: detected capacity change from 0 to 32768
[  227.849011][T11608] (syz.5.2242,11608,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  227.897042][T11608] (syz.5.2242,11608,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  227.936958][ T5846] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[  228.004494][T11608] JBD2: Ignoring recovery information on journal
[  228.106663][ T5846] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  228.114849][T11608] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  228.145136][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  228.180506][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  228.221663][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  228.260169][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  228.303560][ T5846] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  228.311452][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  228.326527][T11673] loop3: detected capacity change from 0 to 1764
[  228.333688][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  228.350107][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  228.377639][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  228.378748][T11215] ocfs2: Unmounting device (7,5) on (node local)
[  228.397789][T11673] iso9660: Corrupted directory entry in block 2 of inode 1920
[  228.406907][ T5846] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  228.414545][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  228.435554][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  228.455723][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  228.483151][ T5846] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  228.535373][ T5846] usb 2-1: string descriptor 0 read error: -22
[  228.544068][ T5846] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  228.559680][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.606796][ T5846] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  228.829024][  T977] usb 2-1: USB disconnect, device number 11
[  228.910000][ T5846] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  229.075686][T11697] loop5: detected capacity change from 0 to 256
[  229.091448][ T5846] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  229.115680][T11697] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  229.118290][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.147046][ T5846] usb 5-1: Product: syz
[  229.151342][ T5846] usb 5-1: Manufacturer: syz
[  229.155950][ T5846] usb 5-1: SerialNumber: syz
[  229.171609][ T5846] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  229.204677][  T977] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  229.575503][ T5846] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  229.640936][T11717] loop1: detected capacity change from 0 to 64
[  229.782998][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2290'.
[  229.866417][    T8] usb 5-1: USB disconnect, device number 9
[  229.880691][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.890949][ T5846] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  229.901066][ T5846] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[  229.937163][ T5846] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  229.960600][ T5846] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  229.970292][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  229.992578][ T5846] usb 3-1: SerialNumber: syz
[  230.215233][ T5846] usb 3-1: 0:2 : does not exist
[  230.222138][ T5846] usb 3-1: unit 5 not found!
[  230.291106][  T977] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  230.310555][ T5846] usb 3-1: USB disconnect, device number 13
[  230.317087][  T977] ath9k_htc: Failed to initialize the device
[  230.343562][    T8] usb 5-1: ath9k_htc: USB layer deinitialized
[  230.492071][T11740] netlink: 'syz.3.2299': attribute type 9 has an invalid length.
[  230.518995][T11740] netlink: 'syz.3.2299': attribute type 7 has an invalid length.
[  230.558208][T11740] netlink: 'syz.3.2299': attribute type 8 has an invalid length.
[  230.625765][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  231.184995][T11770] loop1: detected capacity change from 0 to 256
[  231.212228][T11770] exfat: Deprecated parameter 'namecase'
[  231.234927][T11770] exfat: Deprecated parameter 'utf8'
[  231.240287][T11770] exfat: Deprecated parameter 'namecase'
[  231.257374][T11764] loop3: detected capacity change from 0 to 2048
[  231.281301][T11770] exfat: Deprecated parameter 'utf8'
[  231.357992][T11778] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  231.379083][T11770] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  231.404480][T11764] syz.3.2314: attempt to access beyond end of device
[  231.404480][T11764] loop3: rw=0, sector=19791209300040, nr_sectors = 2 limit=2048
[  231.474848][T11764] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1)
[  231.681116][T11787] netlink: 'syz.1.2324': attribute type 1 has an invalid length.
[  231.714094][T11787] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2324'.
[  231.721352][T11778] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  231.761984][T11778] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  231.780928][T11791] netlink: 'syz.5.2326': attribute type 1 has an invalid length.
[  231.788692][T11791] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2326'.
[  231.800636][T11778] Remounting filesystem read-only
[  232.124697][T11805] netlink: 'syz.1.2334': attribute type 5 has an invalid length.
[  232.355006][T11815] loop3: detected capacity change from 0 to 1024
[  232.419669][T11823] loop2: detected capacity change from 0 to 256
[  232.426843][T11823] exfat: Deprecated parameter 'namecase'
[  232.432535][T11823] exfat: Deprecated parameter 'utf8'
[  232.438076][T11823] exfat: Deprecated parameter 'namecase'
[  232.443749][T11823] exfat: Deprecated parameter 'utf8'
[  232.551083][T11827] bridge2: the hash_elasticity option has been deprecated and is always 16
[  232.626366][T11831] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2346'.
[  232.651139][T11823] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  232.866163][T11835] loop5: detected capacity change from 0 to 8
[  232.872920][T11835] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  232.960762][T11835] cramfs: Error -3 while decompressing!
[  232.991451][T11835] cramfs: ffffffff9a512b68(26)->ffff888063ed3000(4096)
[  233.009120][T11835] cramfs: Error -5 while decompressing!
[  233.027777][T11835] cramfs: ffffffff9a512b82(26)->ffff888052041000(4096)
[  233.050469][T11835] cramfs: Error -3 while decompressing!
[  233.072717][T11835] cramfs: ffffffff9a512b9c(16)->ffff888051e57000(4096)
[  233.092731][T11835] cramfs: Error -3 while decompressing!
[  233.102698][  T975] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  233.112256][T11835] cramfs: ffffffff9a512b68(26)->ffff888063ed3000(4096)
[  233.128078][T11845] loop3: detected capacity change from 0 to 4096
[  233.140430][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  233.140444][   T29] audit: type=1800 audit(1734594442.956:187): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2349" name="file2" dev="loop5" ino=348 res=0 errno=0
[  233.172740][T11845] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  233.311100][  T975] usb 5-1: Using ep0 maxpacket: 32
[  233.321648][  T975] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  233.321802][T11845] overlayfs: conflicting options: nfs_export=on,index=off
[  233.338867][  T975] usb 5-1: config 0 has no interface number 0
[  233.368096][  T975] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  233.386046][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.424896][  T975] usb 5-1: Product: syz
[  233.429113][  T975] usb 5-1: Manufacturer: syz
[  233.466591][  T975] usb 5-1: SerialNumber: syz
[  233.526628][  T975] usb 5-1: config 0 descriptor??
[  233.562478][  T975] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  233.586169][T11863] loop3: detected capacity change from 0 to 256
[  233.602537][T11864] loop2: detected capacity change from 0 to 512
[  233.602865][  T975] usb 5-1: selecting invalid altsetting 1
[  233.625780][T11863] exfat: Deprecated parameter 'namecase'
[  233.640258][T11863] exfat: Deprecated parameter 'namecase'
[  233.650307][T11864] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.2363: casefold flag without casefold feature
[  233.676783][  T975] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  233.683157][T11863] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff7d, chksum : 0x87f3c146, utbl_chksum : 0xe619d30d)
[  233.688706][T11864] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2363: couldn't read orphan inode 15 (err -117)
[  233.772155][  T975] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  233.818160][  T975] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  233.821362][T11864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.826464][  T975] usb 5-1: media controller created
[  233.951213][  T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  234.027842][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.070136][  T975] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)...
[  234.082558][T11882] ieee802154 phy0 wpan0: encryption failed: -22
[  234.083314][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2369'.
[  234.107884][  T975] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered.
[  234.240921][  T975] DVB: Unable to find symbol mxl5005s_attach()
[  234.284905][  T975] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  234.405671][  T975] usb 5-1: USB disconnect, device number 10
[  234.438272][T11891] loop2: detected capacity change from 0 to 2048
[  234.503838][T11891] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  234.571638][T11891] syz.2.2374: attempt to access beyond end of device
[  234.571638][T11891] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  234.586139][T11898] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  234.679522][T11900] netlink: 'syz.5.2378': attribute type 24 has an invalid length.
[  234.771260][T11891] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 16777227
[  234.805119][T11891] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16)
[  234.841621][T11906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2381'.
[  234.871314][T11891] Remounting filesystem read-only
[  234.876516][   T29] audit: type=1326 audit(1734594444.707:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  234.899056][T11891] NILFS (loop2): error -5 truncating bmap (ino=16)
[  234.907021][   T29] audit: type=1326 audit(1734594444.707:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  234.949949][   T29] audit: type=1326 audit(1734594444.707:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  235.039703][ T5834] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  235.064048][   T29] audit: type=1326 audit(1734594444.707:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11909 comm="syz.1.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  235.242564][T11920] trusted_key: encrypted_key: keylen parameter is missing
[  235.425904][T11928] netlink: 'syz.5.2391': attribute type 10 has an invalid length.
[  235.575648][T11928] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  235.772763][T11938] loop4: detected capacity change from 0 to 1024
[  235.864979][T11942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2399'.
[  235.887288][T11938] overlay: filesystem on ./file0 not supported
[  236.350041][T11926] loop2: detected capacity change from 0 to 32768
[  236.377125][T11926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2392 (11926)
[  236.411694][T11926] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.429470][T11926] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  236.447988][T11926] BTRFS info (device loop2): using free-space-tree
[  236.852293][ T5834] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.939996][T11986] loop4: detected capacity change from 0 to 4096
[  237.012651][T11986] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  237.175804][T11986] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  237.258593][T11960] loop5: detected capacity change from 0 to 32768
[  237.297581][T11960] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2407 (11960)
[  237.387273][T11960] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  237.445874][T11960] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  237.455254][T11960] BTRFS info (device loop5): disk space caching is enabled
[  237.525414][T11960] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  237.585608][T11998] netlink: zone id is out of range
[  237.601569][T11998] netlink: zone id is out of range
[  237.620785][T11998] netlink: zone id is out of range
[  237.630889][T11998] netlink: zone id is out of range
[  237.640979][T11998] netlink: zone id is out of range
[  237.645916][T11974] loop3: detected capacity change from 0 to 32768
[  237.651056][T11998] netlink: zone id is out of range
[  237.662844][T11998] netlink: zone id is out of range
[  237.672966][T11998] netlink: zone id is out of range
[  237.683430][T11998] netlink: zone id is out of range
[  237.693499][T11998] netlink: zone id is out of range
[  237.737428][T11960] BTRFS info (device loop5): rebuilding free space tree
[  237.836800][T11960] BTRFS info (device loop5): disabling free space tree
[  237.844238][T11960] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  237.861504][T11960] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  237.861755][T12019] loop4: detected capacity change from 0 to 64
[  237.882145][T11974] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  237.945475][T11974] (syz.3.2408,11974,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  238.080579][   T29] audit: type=1326 audit(1734594447.926:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.4.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073385d29 code=0x7ffc0000
[  238.158321][   T29] audit: type=1326 audit(1734594447.926:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.4.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fd073385d29 code=0x7ffc0000
[  238.197127][ T5832] ocfs2: Unmounting device (7,3) on (node local)
[  238.249126][   T29] audit: type=1326 audit(1734594447.926:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.4.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073385d29 code=0x7ffc0000
[  238.316267][T11215] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  238.400181][   T29] audit: type=1326 audit(1734594447.926:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12021 comm="syz.4.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073385d29 code=0x7ffc0000
[  238.710280][T12024] loop4: detected capacity change from 0 to 40427
[  238.727719][T12024] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  238.734900][T12024] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  238.745260][T12024] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1fffff
[  238.795770][T12024] F2FS-fs (loop4): invalid crc value
[  239.218990][T12024] F2FS-fs (loop4): Found nat_bits in checkpoint
[  239.277019][T12024] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  239.304600][T12024] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  239.443251][T12024] syz.4.2422: attempt to access beyond end of device
[  239.443251][T12024] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  239.545976][T12070] loop2: detected capacity change from 0 to 64
[  239.642836][ T5844] syz-executor: attempt to access beyond end of device
[  239.642836][ T5844] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  239.692115][ T5844] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  239.706474][T12078] kernel read not supported for file / 
œ7³ÏüâW)ëÇ-ë: (pid: 12078 comm: syz.3.2439)
[  239.748664][   T29] audit: type=1800 audit(1734594449.606:196): pid=12078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2439" name=20019C1437B3CFFCC3A25729EBC72DEB3A dev="mqueue" ino=26662 res=0 errno=0
[  241.203579][T12111] loop1: detected capacity change from 0 to 32768
[  241.245728][T12111] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2452 (12111)
[  241.292050][T12111] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  241.302444][T12111] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  241.369137][T12104] loop5: detected capacity change from 0 to 32768
[  241.448732][T12104] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2449 (12104)
[  241.560005][T12094] loop2: detected capacity change from 0 to 32768
[  241.576793][T12111] BTRFS info (device loop1): rebuilding free space tree
[  241.584273][T12094] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2447 (12094)
[  241.636045][T12111] BTRFS info (device loop1): disabling free space tree
[  241.649901][T12111] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  241.685265][T12111] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  241.761360][T12104] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  241.816301][T12104] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  241.828923][T12094] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  241.839462][T12094] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  241.853830][T12094] BTRFS info (device loop2): disk space caching is enabled
[  241.868391][T12094] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  241.899158][T12104] BTRFS info (device loop5): using free-space-tree
[  241.969223][T12179] loop4: detected capacity change from 0 to 512
[  242.073222][T12193] dns_resolver: Unsupported content type (98)
[  242.139682][T12179] EXT4-fs: Ignoring removed orlov option
[  242.228815][ T5827] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.257996][T12179] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.2463: Attempting to read directory block (0) that is past i_size (256)
[  242.295656][T12094] BTRFS info (device loop2): rebuilding free space tree
[  242.334611][T12094] BTRFS info (device loop2): disabling free space tree
[  242.354262][T12094] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  242.406387][T12094] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  242.409764][T12179] EXT4-fs (loop4): Remounting filesystem read-only
[  242.429929][T12179] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  242.439813][T12179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.517663][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.706198][ T5834] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  242.766890][T11215] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  243.160797][T12239] syz.5.2470: attempt to access beyond end of device
[  243.160797][T12239] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0
[  243.273458][T12239] gfs2: error -5 reading superblock
[  243.851632][T12263] xt_CT: You must specify a L4 protocol and not use inversions on it
[  244.417103][T12273] loop5: detected capacity change from 0 to 8192
[  244.553199][T12252] loop3: detected capacity change from 0 to 32768
[  244.635019][T12281] loop1: detected capacity change from 0 to 4096
[  244.654425][T12252] JBD2: Ignoring recovery information on journal
[  244.664296][T12281] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  244.831753][T12261] loop2: detected capacity change from 0 to 32768
[  244.859187][T12261] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2480 (12261)
[  244.900229][T12261] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  244.910863][T12261] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  244.920479][T12261] BTRFS info (device loop2): using free-space-tree
[  244.928474][T12252] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  244.957223][T12281] ntfs3(loop1): failed to convert "076c" to cp949
[  245.220157][T12301] loop4: detected capacity change from 0 to 512
[  245.339686][T12301] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2495: Invalid inode bitmap blk 4 in block_group 0
[  245.358704][ T5832] ocfs2: Unmounting device (7,3) on (node local)
[  245.402535][T12301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.647538][ T5834] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  245.658532][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.737619][T12324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2498'.
[  245.746935][T12324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2498'.
[  246.076136][T12316] loop5: detected capacity change from 0 to 32768
[  246.155159][T12316] XFS (loop5): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  246.359754][T12316] XFS (loop5): Quotacheck needed: Please wait.
[  246.688071][T12335] loop4: detected capacity change from 0 to 32768
[  246.688704][T12356] loop1: detected capacity change from 0 to 128
[  246.703999][T12357] loop2: detected capacity change from 0 to 256
[  246.713730][T12335] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2507 (12335)
[  246.747405][T12356] befs: (loop1): No write support. Marking filesystem read-only
[  246.765869][T12316] XFS (loop5): Quotacheck: Done.
[  246.766049][T12335] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  246.826488][T12357] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000e8a2, chksum : 0xd7c774f0, utbl_chksum : 0xe619d30d)
[  246.839527][T12335] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  246.874467][T12356] befs: (loop1): invalid magic header
[  246.917127][T12357] exFAT-fs (loop2): error, in sector 160, dentry 8 should be unused, but 0xc1
[  246.945772][T12357] exFAT-fs (loop2): Filesystem has been set read-only
[  246.980082][T11215] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  247.659657][T12403] net_ratelimit: 79 callbacks suppressed
[  247.659677][T12403] openvswitch: netlink: Tunnel attr 191 out of range max 16
[  247.865463][T12407] loop1: detected capacity change from 0 to 512
[  248.025574][T12407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.058792][T12335] BTRFS info (device loop4): rebuilding free space tree
[  248.074725][T12407] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.083681][T12430] netlink: 'syz.3.2538': attribute type 21 has an invalid length.
[  248.108378][T12335] BTRFS info (device loop4): disabling free space tree
[  248.119228][T12335] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  248.133397][T12430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2538'.
[  248.157390][T12335] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  248.169194][T12407] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  248.201540][T12407] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  248.229483][T12407] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.2530: Failed to acquire dquot type 0
[  248.490340][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.516074][ T5844] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  248.834395][T12432] loop5: detected capacity change from 0 to 32768
[  248.993502][  T977] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  249.144351][  T977] usb 2-1: Using ep0 maxpacket: 32
[  249.160163][  T977] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  249.172246][T12441] loop3: detected capacity change from 0 to 32768
[  249.202464][  T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  249.252185][  T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  249.272088][  T977] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  249.281164][  T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.306512][  T977] usb 2-1: config 0 descriptor??
[  249.320811][T12444] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  249.330079][T12441] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  249.372379][T12432] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,background_compression=zstd,fsck,norecovery,reconstruct_alloc
[  249.402548][  T977] hub 2-1:0.0: USB hub found
[  249.409027][T12432] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  249.441618][T12432] bcachefs (loop5): Version upgrade required:
[  249.441618][T12432] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  249.441618][T12432] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.19: autofix_errors
[  249.441618][T12432]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  249.580902][T12432] bcachefs (loop5): dropping and reconstructing all alloc info
[  249.594715][T12432] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0: (unpack error)
[  249.594757][T12432]   invalid variable length fields: delete?, fixing
[  249.617472][  T977] hub 2-1:0.0: 2 ports detected
[  249.628846][ T5832] ocfs2: Unmounting device (7,3) on (node local)
[  249.757940][T12432] bcachefs (loop5): accounting_read... done
[  249.765901][T12432] bcachefs (loop5): alloc_read... done
[  249.804942][T12432] bcachefs (loop5): stripes_read... done
[  249.817091][  T977] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  249.817575][T12432] bcachefs (loop5): snapshots_read... done
[  249.845803][T12432] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  249.849355][  T977] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  249.910010][  T977] usbhid 2-1:0.0: can't add hid device: -71
[  249.926310][  T977] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  249.937338][T12478] loop2: detected capacity change from 0 to 8
[  249.968673][T12477] loop3: detected capacity change from 0 to 4096
[  249.971941][T12432] bcachefs (loop5): done starting filesystem
[  250.024741][  T977] usb 2-1: USB disconnect, device number 12
[  250.038058][T12477] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  250.218147][T12477] ntfs3(loop3): failed to convert "c46c" to cp857
[  250.227153][T11215] bcachefs (loop5): shutting down
[  250.268784][T12482] loop2: detected capacity change from 0 to 4096
[  250.287837][T12482] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  250.311136][T11215] bcachefs (loop5): shutdown complete
[  250.760463][T12500] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.993922][ T5914] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  251.077799][T12514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  251.173302][ T5914] usb 2-1: Using ep0 maxpacket: 16
[  251.184202][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.196124][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  251.213375][ T5914] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  251.227477][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.240010][ T5914] usb 2-1: Product: syz
[  251.252544][ T5914] usb 2-1: Manufacturer: syz
[  251.268415][ T5914] usb 2-1: SerialNumber: syz
[  251.696951][ T5914] usb 2-1: cannot find UAC_HEADER
[  251.745470][ T5914] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  251.760356][    T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  251.800168][ T5914] usb 2-1: USB disconnect, device number 13
[  251.951004][    T8] usb 3-1: config 0 has an invalid interface number: 100 but max is 0
[  251.968373][    T8] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  252.010380][    T8] usb 3-1: config 0 has no interface number 1
[  252.013888][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  252.026340][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  252.091912][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  252.102950][    T8] usb 3-1: too many endpoints for config 0 interface 100 altsetting 7: 237, using maximum allowed: 30
[  252.117099][    T8] usb 3-1: config 0 interface 100 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 237
[  252.208099][    T8] usb 3-1: config 0 interface 100 has no altsetting 0
[  252.248304][    T8] usb 3-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba
[  252.278883][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.307734][    T8] usb 3-1: Product: syz
[  252.347500][    T8] usb 3-1: Manufacturer: syz
[  252.369158][    T8] usb 3-1: SerialNumber: syz
[  252.385057][    T8] usb 3-1: config 0 descriptor??
[  252.480577][T12554] loop4: detected capacity change from 0 to 256
[  252.515705][T12557] loop5: detected capacity change from 0 to 512
[  252.528479][T12557] EXT4-fs: Ignoring removed bh option
[  252.608528][T12557] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  252.617110][    T8] kaweth 3-1:0.0: Firmware present in device.
[  252.626415][T12557] EXT4-fs (loop5): invalid journal inode
[  252.642327][T12557] EXT4-fs (loop5): can't get journal size
[  252.685957][T12557] EXT4-fs (loop5): 1 truncate cleaned up
[  252.726402][T12557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.818252][    T8] kaweth 3-1:0.0: Error reading configuration (-71), no net device created
[  252.839117][    T8] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[  252.891820][    T8] kaweth 3-1:0.100: Firmware present in device.
[  252.931437][    T8] kaweth 3-1:0.100: Error reading configuration (-71), no net device created
[  252.947514][    T8] kaweth 3-1:0.100: probe with driver kaweth failed with error -5
[  253.003324][T11215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.004803][    T8] usb 3-1: USB disconnect, device number 14
[  253.322998][T12586] usb usb1: usbfs: process 12586 (syz.4.2607) did not claim interface 27 before use
[  253.390865][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2610'.
[  253.411236][T12588] tc_dump_action: action bad kind
[  253.925863][T12618] netlink: 'syz.5.2619': attribute type 29 has an invalid length.
[  253.986253][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2619'.
[  253.995755][T12622] loop3: detected capacity change from 0 to 8
[  254.126754][T12622] SQUASHFS error: Failed to read block 0x1ec: -5
[  254.133295][T12622] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  254.177141][T12626] loop4: detected capacity change from 0 to 2048
[  254.711998][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2630'.
[  254.734925][T12592] loop2: detected capacity change from 0 to 32768
[  254.813895][T12592] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  254.862136][T12644] loop1: detected capacity change from 0 to 4096
[  254.994157][T12644] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  255.048073][T12669] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  255.147327][T12592] XFS (loop2): Ending clean mount
[  255.199831][T12673] loop3: detected capacity change from 0 to 256
[  255.340643][T12673] FAT-fs (loop3): Directory bread(block 64) failed
[  255.383603][T12673] FAT-fs (loop3): Directory bread(block 65) failed
[  255.390481][ T5834] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  255.413712][T12673] FAT-fs (loop3): Directory bread(block 66) failed
[  255.420287][T12673] FAT-fs (loop3): Directory bread(block 67) failed
[  255.456939][T12673] FAT-fs (loop3): Directory bread(block 68) failed
[  255.495796][T12673] FAT-fs (loop3): Directory bread(block 69) failed
[  255.502444][T12673] FAT-fs (loop3): Directory bread(block 70) failed
[  255.560468][T12673] FAT-fs (loop3): Directory bread(block 71) failed
[  255.591233][T12673] FAT-fs (loop3): Directory bread(block 72) failed
[  255.635950][T12673] FAT-fs (loop3): Directory bread(block 73) failed
[  255.703334][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'.
[  255.753939][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  256.036330][T12702] loop2: detected capacity change from 0 to 512
[  256.101352][T12702] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2651: invalid indirect mapped block 256 (level 2)
[  256.170002][T12702] EXT4-fs (loop2): Remounting filesystem read-only
[  256.196887][T12702] EXT4-fs (loop2): 2 truncates cleaned up
[  256.206633][T12702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.386952][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.705470][T12727] loop3: detected capacity change from 0 to 512
[  256.767514][T12727] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  256.806427][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2663'.
[  256.833762][T12727] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  256.854404][T12727] System zones: 1-12
[  256.867237][ T5914] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  256.911502][T12727] EXT4-fs (loop3): 1 truncate cleaned up
[  256.920024][T12727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.949675][T12737] loop1: detected capacity change from 0 to 64
[  257.038803][ T5914] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  257.048992][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.082758][ T5914] usb 6-1: config 0 descriptor??
[  257.100050][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.215844][T12745] netlink: 'syz.2.2672': attribute type 2 has an invalid length.
[  257.318737][ T5914] [drm] vendor descriptor length:6 data:06 5f 01 03 00 00 00 00 00 00 00
[  257.327285][ T5914] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  257.519127][ T5914] [drm:udl_init] *ERROR* Selecting channel failed
[  257.551915][ T5914] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[  257.567690][ T5914] [drm] Initialized udl on minor 2
[  257.579439][ T5914] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  257.590724][ T5914] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  257.606025][  T975] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  257.618206][  T975] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  257.626851][  T975] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  257.653867][ T5914] usb 6-1: USB disconnect, device number 2
[  257.725765][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'.
[  257.742482][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'.
[  258.270030][T12787] loop1: detected capacity change from 0 to 256
[  258.606412][T12799] netlink: 'syz.4.2698': attribute type 3 has an invalid length.
[  258.821192][T12808] netlink: 'syz.4.2701': attribute type 2 has an invalid length.
[  258.840408][T12811] loop1: detected capacity change from 0 to 8
[  258.927627][T12809] loop5: detected capacity change from 0 to 4096
[  258.957674][T12809] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  259.019627][T12782] loop2: detected capacity change from 0 to 32768
[  259.027412][T12782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2686 (12782)
[  259.046903][T12809] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  259.056321][T12782] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.083090][T12813] loop4: detected capacity change from 0 to 164
[  259.098842][T12782] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  259.121693][T12782] BTRFS info (device loop2): using free-space-tree
[  259.141996][T12809] ntfs3(loop5): ino=1e, "file1" failed to parse mft record
[  259.168668][T12813] Unable to read rock-ridge attributes
[  259.174762][T12809] ntfs3(loop5): ino=1e, "file1" attr_set_size
[  259.192065][T12813] Unable to read rock-ridge attributes
[  259.511839][ T5834] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.795766][T12841] loop1: detected capacity change from 0 to 256
[  259.840682][T12805] loop3: detected capacity change from 0 to 32768
[  260.084787][T12858] loop4: detected capacity change from 0 to 164
[  260.115282][T12805] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  260.177788][T12805] bcachefs (loop3): initializing new filesystem
[  260.294684][T12805] bcachefs (loop3): going read-write
[  260.342635][T12805] bcachefs (loop3): marking superblocks
[  260.472004][T12805] bcachefs (loop3): initializing freespace
[  260.479472][T12805] bcachefs (loop3): done initializing freespace
[  260.507580][T12873] usb usb8: usbfs: process 12873 (syz.1.2722) did not claim interface 0 before use
[  260.512551][T12805] bcachefs (loop3): reading snapshots table
[  260.554082][T12805] bcachefs (loop3): reading snapshots done
[  260.790243][T12805] bcachefs (loop3): done starting filesystem
[  260.890447][T12888] capability: warning: `syz.1.2728' uses 32-bit capabilities (legacy support in use)
[  261.288683][ T5832] bcachefs (loop3): shutting down
[  261.293770][ T5832] bcachefs (loop3): going read-only
[  261.308454][ T5832] bcachefs (loop3): finished waiting for writes to stop
[  261.442646][T12900] loop1: detected capacity change from 0 to 32768
[  261.463987][ T5832] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  261.640024][T12900] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  261.746715][ T5832] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5
[  261.832698][ T5832] bcachefs (loop3): clean shutdown complete, journal seq 6
[  261.841561][ T5832] bcachefs (loop3): marking filesystem clean
[  261.978581][ T5832] bcachefs (loop3): shutdown complete
[  262.100549][ T5827] ocfs2: Unmounting device (7,1) on (node local)
[  262.155787][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2747'.
[  262.187678][T12927] loop2: detected capacity change from 0 to 128
[  262.276804][T12927] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  262.366083][T12927] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  262.744398][T12945] loop5: detected capacity change from 0 to 128
[  262.773915][T12945] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  262.897050][T12935] loop1: detected capacity change from 0 to 32768
[  262.929615][T12945] EXT4-fs error (device loop5): __ext4_remount:6738: comm syz.5.2756: Abort forced by user
[  262.987350][T12945] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none.
[  263.013201][T12935] JBD2: Ignoring recovery information on journal
[  263.055305][T12958] loop2: detected capacity change from 0 to 256
[  263.154094][T12935] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  263.158085][T11215] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  263.259100][T12963] loop5: detected capacity change from 0 to 2048
[  263.282494][T12963] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  263.339190][ T5827] ocfs2: Unmounting device (7,1) on (node local)
[  263.818727][  T977] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  263.983127][  T977] usb 3-1: Using ep0 maxpacket: 32
[  264.000820][  T977] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[  264.025562][  T977] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  264.070586][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.084612][  T977] usb 3-1: Product: syz
[  264.106599][  T977] usb 3-1: Manufacturer: syz
[  264.111439][  T977] usb 3-1: SerialNumber: syz
[  264.149171][  T977] usb 3-1: config 0 descriptor??
[  264.163835][T12969] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  264.179925][  T977] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  264.418336][  T977] usb 3-1: USB disconnect, device number 15
[  264.583309][T13004] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2784'.
[  264.592927][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2784'.
[  265.392645][T13030] program syz.4.2794 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  265.532735][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  265.698135][    T8] usb 3-1: Using ep0 maxpacket: 8
[  265.731642][    T8] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  265.745774][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.764798][    T8] usb 3-1: config 0 descriptor??
[  265.792350][    T8] gspca_main: spca501-2.14.0 probing 0000:0000
[  265.929255][T13035] loop1: detected capacity change from 0 to 32768
[  265.955419][T13035] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2797 (13035)
[  266.023471][T13035] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  266.075040][T13035] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  266.094085][T13035] BTRFS info (device loop1): using free-space-tree
[  266.217393][    T8] gspca_spca501: reg write: error -71
[  266.239868][    T8] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00
[  266.265763][    T8] spca501 3-1:0.0: probe with driver spca501 failed with error -22
[  266.279602][ T5827] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  266.349110][    T8] usb 3-1: USB disconnect, device number 16
[  266.541457][T13068] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  266.568030][T13068] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  266.653846][T13042] loop5: detected capacity change from 0 to 32768
[  266.805145][T13042] exFAT-fs (nullb0): invalid boot record signature
[  266.866962][T13042] exFAT-fs (nullb0): failed to read boot sector
[  266.873345][T13042] exFAT-fs (nullb0): failed to recognize exfat type
[  267.089904][T13085] i2c i2c-0: Invalid block write size 68
[  267.402532][T13088] loop4: detected capacity change from 0 to 4096
[  267.439081][T13094] loop5: detected capacity change from 0 to 1024
[  267.446336][T13094] EXT4-fs: Ignoring removed nomblk_io_submit option
[  267.454779][T13088] NILFS: invalid option "cp=2": read-only option is not specified
[  267.481908][T13094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  267.545827][ T5830] Bluetooth: hci3: command 0x0405 tx timeout
[  267.566978][T13094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.660730][T11215] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.168600][T13120] loop5: detected capacity change from 0 to 4096
[  268.327077][T13131] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.378496][T13133] netlink: 'syz.1.2836': attribute type 29 has an invalid length.
[  268.381545][T13120] NILFS (loop5): vblocknr = 9 has abnormal lifetime: start cno (= 1080863910568919042) > current cno (= 3)
[  268.406827][T13133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'.
[  268.444796][T13120] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16)
[  268.557904][T13120] Remounting filesystem read-only
[  268.572534][T13139] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  268.604445][T13120] NILFS (loop5): error -5 truncating bmap (ino=16)
[  268.754035][T11215] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  268.844719][T13151] netlink: 'syz.1.2847': attribute type 4 has an invalid length.
[  268.964641][T13155] Device name cannot be null; rc = [-22]
[  269.466536][T13169] bridge1: entered promiscuous mode
[  269.479817][T13169] bridge1: entered allmulticast mode
[  269.779233][T13148] loop4: detected capacity change from 0 to 32768
[  269.838575][T13157] loop5: detected capacity change from 0 to 32768
[  269.876801][T13157] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2845 (13157)
[  269.895234][T13148] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  270.029202][T13157] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.039698][T13157] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  270.065446][T13157] BTRFS info (device loop5): using free-space-tree
[  270.075028][T13193] loop1: detected capacity change from 0 to 4096
[  270.112808][T13193] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  270.135328][    T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  270.162796][T13148] XFS (loop4): Ending clean mount
[  270.250305][T13175] loop3: detected capacity change from 0 to 32768
[  270.264857][T13193] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  270.275442][T13175] BTRFS: device /dev/loop3 (7:3) using temp-fsid bb4eb8b4-9260-408b-b070-e0da03dd27de
[  270.287741][ T5844] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  270.294688][T13175] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2857 (13175)
[  270.312715][    T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  270.323713][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.349443][T13175] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.390925][    T8] usb 3-1: config 0 descriptor??
[  270.401986][T13175] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  270.454542][T13175] BTRFS info (device loop3): using free-space-tree
[  270.858969][    T8] [drm:udl_init] *ERROR* Selecting channel failed
[  270.903354][T11215] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.911578][    T8] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  270.933584][    T8] [drm] Initialized udl on minor 2
[  270.961697][T13230] loop1: detected capacity change from 0 to 1024
[  270.979575][    T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  271.005773][    T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  271.013509][  T977] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  271.036857][    T8] usb 3-1: USB disconnect, device number 17
[  271.072296][  T977] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  271.171295][  T977] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  271.340747][T13238] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  271.343456][ T5832] BTRFS info (device loop3): last unmount of filesystem bb4eb8b4-9260-408b-b070-e0da03dd27de
[  271.824920][T13245] loop1: detected capacity change from 0 to 4096
[  271.951016][T13256] loop2: detected capacity change from 0 to 256
[  271.973447][T13245] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  272.007281][T13245] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22.
[  272.457108][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  272.609917][    T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  272.629343][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.666430][    T8] usb 4-1: config 0 descriptor??
[  272.675479][T13274] loop1: detected capacity change from 0 to 512
[  272.693587][    T8] cp210x 4-1:0.0: cp210x converter detected
[  272.744608][T13274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.770680][T13258] loop4: detected capacity change from 0 to 32768
[  272.779698][T13274] ext4 filesystem being mounted at /582/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  272.791046][T13258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2877 (13258)
[  272.815981][T13258] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  272.837883][T13258] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  272.853414][T13258] BTRFS info (device loop4): disk space caching is enabled
[  272.873356][T13258] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  272.916039][    T8] usb 4-1: cp210x converter now attached to ttyUSB0
[  272.929096][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.184645][ T5914] usb 4-1: USB disconnect, device number 11
[  273.229555][ T5914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  273.268241][ T5914] cp210x 4-1:0.0: device disconnected
[  273.341569][T13258] BTRFS info (device loop4): rebuilding free space tree
[  273.383355][T13258] BTRFS info (device loop4): disabling free space tree
[  273.401786][T13258] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  273.421073][T13258] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  273.575705][T13258] BTRFS info (device loop4 state M): max_inline set to 23
[  273.583499][  T975] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  273.652667][ T5844] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.899526][T13331] loop4: detected capacity change from 0 to 256
[  273.906233][  T975] usb 6-1: Using ep0 maxpacket: 8
[  274.005295][  T975] usb 6-1: unable to get BOS descriptor or descriptor too short
[  274.119354][  T975] usb 6-1: config 8 has an invalid interface number: 255 but max is 0
[  274.127814][  T975] usb 6-1: config 8 has no interface number 0
[  274.134003][  T975] usb 6-1: config 8 interface 255 has no altsetting 0
[  274.326761][T13343] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  274.364643][  T975] usb 6-1: string descriptor 0 read error: -22
[  274.371047][  T975] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  274.380105][  T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.537511][T13347] 9pnet_fd: p9_fd_create_tcp (13347): problem connecting socket to 127.0.0.1
[  274.816864][  T975] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.5-1, 00:00:00:00:00:00.
[  274.902901][  T975] usb 6-1: USB disconnect, device number 3
[  275.338263][T13383] xt_CT: You must specify a L4 protocol and not use inversions on it
[  275.495870][T13388] binfmt_misc: register: failed to install interpreter file ./file0
[  275.626145][T13393] loop4: detected capacity change from 0 to 2048
[  275.711905][T13396] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  275.758242][T13393] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  275.785089][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2937'.
[  275.868620][T13393] Remounting filesystem read-only
[  275.922310][T13371] loop2: detected capacity change from 0 to 32768
[  275.959188][T13371] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2923 (13371)
[  275.974978][T13404] loop3: detected capacity change from 0 to 128
[  276.014544][T13371] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  276.044093][T13404] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  276.084244][T13371] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  276.099736][T13404] ext4 filesystem being mounted at /586/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  276.112015][T13371] BTRFS info (device loop2): using free-space-tree
[  276.126612][T13404] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.2939: No space for directory leaf checksum. Please run e2fsck -D.
[  276.218001][T13404] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.2939: checksumming directory block 0
[  276.336790][ T5832] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  276.462891][T13431] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2945'.
[  276.476852][ T5834] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  276.521011][T13433] loop1: detected capacity change from 0 to 256
[  276.627009][T13402] loop5: detected capacity change from 0 to 32768
[  276.673954][T13402] btrfs: Deprecated parameter 'usebackuproot'
[  276.703312][T13402] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  276.785700][T13402] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2938 (13402)
[  276.889556][T13441] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2949'.
[  276.899493][T13402] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  276.922567][T13402] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm
[  276.981129][T13402] BTRFS info (device loop5): using free-space-tree
[  277.151452][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2954'.
[  277.193365][T13402] BTRFS info (device loop5): rebuilding free space tree
[  277.294257][T13467] loop2: detected capacity change from 0 to 4096
[  277.315821][T13467] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  277.463338][T13467] ntfs3(loop2): failed to convert "c46c" to maccroatian
[  277.497789][T11215] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  277.502447][T13473] loop1: detected capacity change from 0 to 1024
[  277.555813][T13473] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  277.738172][T13473] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.2957: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  277.769773][T13473] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2957: couldn't read orphan inode 11 (err -117)
[  277.879248][T13473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.077110][T13473] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2957: Invalid block bitmap block 0 in block_group 0
[  278.095961][T13469] loop3: detected capacity change from 0 to 32768
[  278.153238][T13469] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2955 (13469)
[  278.167392][T13473] Quota error (device loop1): write_blk: dquota write failed
[  278.222462][T13473] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  278.253836][T13473] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.2957: Failed to acquire dquot type 0
[  278.282526][T13469] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.308253][T13469] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  278.317205][T13469] BTRFS info (device loop3): using free-space-tree
[  278.375259][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2967'.
[  278.495889][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.686967][ T5914] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  278.852264][ T5832] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.873673][ T5914] usb 3-1: Using ep0 maxpacket: 8
[  278.893152][ T5914] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  278.919376][T13527] loop1: detected capacity change from 0 to 64
[  278.925833][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.965788][ T5914] usb 3-1: Product: syz
[  278.988316][ T5914] usb 3-1: Manufacturer: syz
[  278.992996][ T5914] usb 3-1: SerialNumber: syz
[  279.035664][T13530] x_tables: duplicate underflow at hook 2
[  279.071278][ T5914] usb 3-1: config 0 descriptor??
[  279.084143][ T5914] gspca_main: sq905-2.14.0 probing 2770:9120
[  279.162918][T13532] netlink: 'syz.3.2976': attribute type 11 has an invalid length.
[  279.506372][ T5914] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  279.534320][ T5885] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  279.544719][ T5914] sq905 3-1:0.0: probe with driver sq905 failed with error -71
[  279.581904][ T5914] usb 3-1: USB disconnect, device number 18
[  279.673965][  T977] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  279.724765][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  279.735967][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  279.748372][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64
[  279.760675][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  279.797614][ T5885] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  279.807161][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.822828][ T5885] usb 2-1: Product: syz
[  279.829748][ T5885] usb 2-1: Manufacturer: syz
[  279.835111][  T977] usb 5-1: config 0 has an invalid interface number: 186 but max is 1
[  279.842282][ T5885] usb 2-1: SerialNumber: syz
[  279.861328][  T977] usb 5-1: config 0 has no interface number 1
[  279.865359][ T5885] usb 2-1: config 0 descriptor??
[  279.879926][T13536] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  279.881707][  T977] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83
[  279.892226][ T5885] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18
[  279.923264][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.940994][  T977] usb 5-1: Product: syz
[  279.946569][  T977] usb 5-1: Manufacturer: syz
[  279.951226][  T977] usb 5-1: SerialNumber: syz
[  279.966496][  T977] usb 5-1: config 0 descriptor??
[  279.968840][T13534] loop5: detected capacity change from 0 to 32768
[  279.975673][  T977] hub 5-1:0.186: bad descriptor, ignoring hub
[  279.992219][  T977] hub 5-1:0.186: probe with driver hub failed with error -5
[  280.245532][T13534] ERROR: (device loop5): duplicateIXtree: 
[  280.245532][T13534] 
[  280.284214][T13534] ERROR: (device loop5): remounting filesystem as read-only
[  280.321898][ T5885] usb 2-1: USB disconnect, device number 14
[  280.439532][T13555] loop3: detected capacity change from 0 to 1024
[  280.445583][    T8] usb 5-1: USB disconnect, device number 11
[  280.474229][T10906] hfsplus: b-tree write err: -5, ino 4
[  280.515686][T13557] loop2: detected capacity change from 0 to 2048
[  280.557728][T13557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  280.684323][T13559] loop3: detected capacity change from 0 to 256
[  281.462155][T13595] loop4: detected capacity change from 0 to 256
[  281.500144][T13591] loop1: detected capacity change from 0 to 4096
[  281.516106][T13591] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  281.777680][  T977] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  282.084572][T13621] openvswitch: netlink: Flow key attr not present in new flow.
[  282.156913][  T977] usb 4-1: config 0 has an invalid interface number: 74 but max is 1
[  282.166723][  T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.176975][  T977] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  282.185867][  T977] usb 4-1: config 0 has no interface number 0
[  282.192247][  T977] usb 4-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  282.203155][  T977] usb 4-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  282.214791][  T977] usb 4-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  282.225934][  T977] usb 4-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  282.248574][  T977] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[  282.257831][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.265919][  T977] usb 4-1: Product: syz
[  282.270682][  T977] usb 4-1: Manufacturer: syz
[  282.275310][  T977] usb 4-1: SerialNumber: syz
[  282.282902][  T977] usb 4-1: config 0 descriptor??
[  282.318456][T13630] netlink: 'syz.1.3024': attribute type 9 has an invalid length.
[  282.363243][T13630] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3024'.
[  282.526354][  T977] cypress_m8 4-1:0.74: HID->COM RS232 Adapter converter detected
[  282.561175][  T977] usb 4-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  282.631215][  T977] usb 4-1: USB disconnect, device number 12
[  282.687510][  T977] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  282.716134][  T977] cypress_m8 4-1:0.74: device disconnected
[  282.839225][T13642] netlink: 30 bytes leftover after parsing attributes in process `syz.1.3029'.
[  283.072720][T13633] loop2: detected capacity change from 0 to 32768
[  283.094051][T13633] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3025 (13633)
[  283.145967][T13633] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  283.161155][T13633] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  283.205514][T13633] BTRFS info (device loop2): using free-space-tree
[  283.383169][  T977] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  283.529970][ T5834] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  283.573848][T13676] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3039'.
[  283.586459][  T977] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  283.608317][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.616442][  T977] usb 2-1: Product: syz
[  283.620618][  T977] usb 2-1: Manufacturer: syz
[  283.625395][  T977] usb 2-1: SerialNumber: syz
[  283.636249][  T977] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  283.726991][ T5846] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  284.211567][  T977] usb 2-1: USB disconnect, device number 15
[  284.257580][T13681] loop4: detected capacity change from 0 to 4096
[  284.300380][T13681] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  284.345786][T13690] loop3: detected capacity change from 0 to 4096
[  284.368047][T13690] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  284.474942][T13681] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  284.485924][T13690] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  284.508049][T13681] ntfs3(loop4): ino=5, "/" directory corrupted
[  284.647998][   T29] audit: type=1326 audit(1734594494.689:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13701 comm="syz.4.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073385d29 code=0x7ffc0000
[  284.701771][   T29] audit: type=1326 audit(1734594494.689:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13701 comm="syz.4.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073385d29 code=0x7ffc0000
[  284.724714][   T29] audit: type=1326 audit(1734594494.699:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13701 comm="syz.4.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fd073385d29 code=0x7ffc0000
[  284.747774][   T29] audit: type=1326 audit(1734594494.699:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13701 comm="syz.4.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073385d29 code=0x7ffc0000
[  284.770415][   T29] audit: type=1326 audit(1734594494.699:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13701 comm="syz.4.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073385d29 code=0x7ffc0000
[  284.775913][ T5846] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  284.793162][T13705] netlink: 'syz.2.3054': attribute type 13 has an invalid length.
[  284.837641][ T5846] ath9k_htc: Failed to initialize the device
[  284.859381][  T977] usb 2-1: ath9k_htc: USB layer deinitialized
[  285.496427][T13736] loop2: detected capacity change from 0 to 1024
[  285.554332][T13736] EXT4-fs: Ignoring removed orlov option
[  285.574044][T13736] EXT4-fs: Ignoring removed nomblk_io_submit option
[  285.663016][T13736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.790750][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.873760][T13727] loop5: detected capacity change from 0 to 32768
[  285.919861][T13755] No source specified
[  286.076791][T13760] QAT: failed to copy from user cfg_data.
[  286.257403][T13768] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  287.370454][T13820] netlink: 'syz.3.3108': attribute type 2 has an invalid length.
[  287.491724][T13826] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3110'.
[  287.609995][T13828] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[13828]
[  287.675008][T13833] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3116'.
[  287.698645][T13833] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3116'.
[  287.832525][T13814] loop2: detected capacity change from 0 to 32768
[  287.842007][T13814] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3106 (13814)
[  287.859298][T13814] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  287.869655][T13814] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  287.879180][T13814] BTRFS info (device loop2): using free-space-tree
[  288.032677][T13850] netlink: 'syz.4.3119': attribute type 3 has an invalid length.
[  288.257953][ T5834] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  288.335213][T13870] xt_TCPMSS: Only works on TCP SYN packets
[  288.581370][T13876] loop1: detected capacity change from 0 to 1024
[  288.639932][T13876] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  289.058848][T13864] loop4: detected capacity change from 0 to 32768
[  289.066612][T13864] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3123 (13864)
[  289.104198][T13864] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  289.117360][ T5914] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  289.148292][T13864] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  289.234968][T13908] loop1: detected capacity change from 0 to 256
[  289.242198][T13908] exfat: Deprecated parameter 'utf8'
[  289.262766][T13908] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  289.298769][T13864] BTRFS info (device loop4): rebuilding free space tree
[  289.372851][T13864] BTRFS info (device loop4): disabling free space tree
[  289.386708][ T5914] usb 4-1: Using ep0 maxpacket: 32
[  289.388940][T13864] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  289.393584][ T5914] usb 4-1: config 0 has an invalid interface number: 146 but max is 0
[  289.414762][ T5914] usb 4-1: config 0 has no interface number 0
[  289.423801][ T5914] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  289.434942][   T29] audit: type=1326 audit(1734594499.491:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  289.456507][T13864] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  289.457276][    C1] vkms_vblank_simulate: vblank timer overrun
[  289.474090][ T5914] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  289.487904][ T5914] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  289.499573][ T5914] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  289.510828][   T29] audit: type=1326 audit(1734594499.491:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  289.556447][ T5914] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  289.585339][ T5914] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  289.586346][   T29] audit: type=1326 audit(1734594499.532:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  289.604144][ T5914] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  289.628153][ T5914] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 26159, setting to 1024
[  289.640056][ T5914] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  289.650200][ T5914] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  289.656015][T13864] BTRFS info (device loop4 state M): max_inline set to 0
[  289.689057][ T5914] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  289.699174][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.708594][ T5914] usb 4-1: Product: syz
[  289.709398][   T29] audit: type=1326 audit(1734594499.532:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  289.712762][ T5914] usb 4-1: Manufacturer: syz
[  289.712781][ T5914] usb 4-1: SerialNumber: syz
[  289.755754][T13921] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  289.779293][T13922] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3141'.
[  289.800892][   T29] audit: type=1326 audit(1734594499.532:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13914 comm="syz.1.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fb185d29 code=0x7ffc0000
[  289.832408][ T5844] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  289.846323][ T5914] usb 4-1: config 0 descriptor??
[  289.854207][T13883] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  289.866548][T13883] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  289.885049][ T5914] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  289.926977][ T5914] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  290.006111][ T5914] scsi host1: microtekX6
[  290.270419][  T977] usb 4-1: USB disconnect, device number 13
[  290.364436][T13939] loop1: detected capacity change from 0 to 1024
[  290.588561][T13941] loop2: detected capacity change from 0 to 4096
[  290.608049][T13941] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  290.657805][T13945] x_tables: duplicate underflow at hook 2
[  290.667399][T13941] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  290.852976][T13949] loop3: detected capacity change from 0 to 8
[  291.011273][T13949] SQUASHFS error: Unknown inode type 80 in squashfs_iget!
[  291.499928][T13972] loop2: detected capacity change from 0 to 128
[  291.576349][T13972] FAT-fs (loop2): Directory bread(block 3236) failed
[  291.602010][T13972] FAT-fs (loop2): Directory bread(block 3237) failed
[  291.608778][T13972] FAT-fs (loop2): Directory bread(block 3238) failed
[  291.651332][T13972] FAT-fs (loop2): Directory bread(block 3239) failed
[  291.672837][T13972] FAT-fs (loop2): Directory bread(block 3240) failed
[  291.679593][T13972] FAT-fs (loop2): Directory bread(block 3241) failed
[  291.739918][T13972] FAT-fs (loop2): Directory bread(block 3242) failed
[  291.752618][T13972] FAT-fs (loop2): Directory bread(block 3243) failed
[  291.783475][T13972] FAT-fs (loop2): Directory bread(block 3236) failed
[  291.810701][T13972] FAT-fs (loop2): Directory bread(block 3237) failed
[  292.121286][T13993] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3176'.
[  292.265058][T13999] loop1: detected capacity change from 0 to 256
[  292.341906][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'.
[  292.438084][T14007] geneve2: entered promiscuous mode
[  292.455068][T14007] geneve2: entered allmulticast mode
[  292.489206][T14009] kAFS: unable to lookup cell 'syz0.r™iXýÕßðÒ<̧®© +âÔR!K+K™áû
4ÚÍö[Ÿ“EšýÖîê¯dî<¾æ6ócº7Ë(n�ÅÙÓÅ@À×8A¯5W®/7|{ÒÚü?�îÇhÇT•³8#&3�ræ?3ÚUü<·ÚG`-իǾóQ8õ%¹$­lH•YïL5еžYÏ^÷!!–\p"È3�¹Ä!£ò·
[  292.489206][T14009] ÛñÙÔh1„#-¹ï*·º„EºÍ=î)ú½¥"À6<Ú—H#.‚ýLÝÊ(˜Ü[Ý1„hã¯uC�8y
Þê½Ða½HÚ'(ùè‘lÚ“—+#-€nоYMËÆî²Àÿð«%'
[  292.567564][T14011] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  292.874341][T14025] netlink: 'syz.2.3192': attribute type 8 has an invalid length.
[  293.206398][T14035] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  293.473840][T14017] loop3: detected capacity change from 0 to 32768
[  293.489248][T14044] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3201'.
[  293.515815][T14017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3187 (14017)
[  293.537086][T14046] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  293.544372][T14017] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  293.562986][T14017] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  293.573115][T14017] BTRFS info (device loop3): using free-space-tree
[  293.632295][T14051] loop1: detected capacity change from 0 to 512
[  293.656677][T14051] EXT4-fs: Ignoring removed mblk_io_submit option
[  293.756815][T14051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.773145][T14051] ext4 filesystem being mounted at /650/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.833907][T14021] loop4: detected capacity change from 0 to 32768
[  293.874124][T14021] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  293.891184][T14051] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 5 index 2
[  293.941196][T14051] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 2
[  293.980263][T14051] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3203: Failed to acquire dquot type 0
[  293.987527][T14021] 
[  293.994106][T14021] ======================================================
[  294.001144][T14021] WARNING: possible circular locking dependency detected
[  294.008175][T14021] 6.13.0-rc3-next-20241219-syzkaller #0 Not tainted
[  294.014777][T14021] ------------------------------------------------------
[  294.021800][T14021] syz.4.3189/14021 is trying to acquire lock:
[  294.027879][T14021] ffff888052c92640 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x192/0x4e70
[  294.041150][T14021] 
[  294.041150][T14021] but task is already holding lock:
[  294.048532][T14021] ffff888052c94e38 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x633/0x1930
[  294.058047][T14021] 
[  294.058047][T14021] which lock already depends on the new lock.
[  294.058047][T14021] 
[  294.068450][T14021] 
[  294.068450][T14021] the existing dependency chain (in reverse order) is:
[  294.077454][T14021] 
[  294.077454][T14021] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  294.085277][T14021]        lock_acquire+0x1ed/0x550
[  294.090301][T14021]        down_read+0xb1/0xa40
[  294.094970][T14021]        ocfs2_init_acl+0x397/0x930
[  294.100162][T14021]        ocfs2_mknod+0x1c05/0x2b30
[  294.105357][T14021]        ocfs2_create+0x1ab/0x470
[  294.110380][T14021]        path_openat+0x192f/0x3580
[  294.115487][T14021]        do_filp_open+0x27f/0x4e0
[  294.120513][T14021]        do_sys_openat2+0x13e/0x1d0
[  294.125703][T14021]        __x64_sys_openat+0x247/0x2a0
[  294.131081][T14021]        do_syscall_64+0xf3/0x230
[  294.136174][T14021]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.142592][T14021] 
[  294.142592][T14021] -> #4 (jbd2_handle){++++}-{0:0}:
[  294.149894][T14021]        lock_acquire+0x1ed/0x550
[  294.154921][T14021]        start_this_handle+0x1eb4/0x2110
[  294.160556][T14021]        jbd2__journal_start+0x2da/0x5d0
[  294.166190][T14021]        jbd2_journal_start+0x29/0x40
[  294.171560][T14021]        ocfs2_start_trans+0x3c9/0x700
[  294.177104][T14021]        ocfs2_symlink+0x1401/0x2d80
[  294.182388][T14021]        vfs_symlink+0x137/0x2e0
[  294.187323][T14021]        do_symlinkat+0x222/0x3a0
[  294.192341][T14021]        __x64_sys_symlink+0x7a/0x90
[  294.197623][T14021]        do_syscall_64+0xf3/0x230
[  294.202645][T14021]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.209088][T14021] 
[  294.209088][T14021] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  294.217608][T14021]        lock_acquire+0x1ed/0x550
[  294.222638][T14021]        down_read+0xb1/0xa40
[  294.227304][T14021]        ocfs2_start_trans+0x3be/0x700
[  294.232760][T14021]        ocfs2_symlink+0x1401/0x2d80
[  294.238039][T14021]        vfs_symlink+0x137/0x2e0
[  294.242974][T14021]        do_symlinkat+0x222/0x3a0
[  294.247990][T14021]        __x64_sys_symlink+0x7a/0x90
[  294.253269][T14021]        do_syscall_64+0xf3/0x230
[  294.258288][T14021]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.264712][T14021] 
[  294.264712][T14021] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  294.272208][T14021]        lock_acquire+0x1ed/0x550
[  294.277240][T14021]        ocfs2_start_trans+0x2b9/0x700
[  294.282702][T14021]        ocfs2_symlink+0x1401/0x2d80
[  294.287992][T14021]        vfs_symlink+0x137/0x2e0
[  294.292937][T14021]        do_symlinkat+0x222/0x3a0
[  294.298409][T14021]        __x64_sys_symlink+0x7a/0x90
[  294.303953][T14021]        do_syscall_64+0xf3/0x230
[  294.308981][T14021]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.315396][T14021] 
[  294.315396][T14021] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}:
[  294.325923][T14021]        lock_acquire+0x1ed/0x550
[  294.330951][T14021]        down_write+0x99/0x220
[  294.335711][T14021]        ocfs2_reserve_local_alloc_bits+0x132/0x2840
[  294.342385][T14021]        ocfs2_reserve_clusters_with_limit+0x1b8/0xb60
[  294.349240][T14021]        ocfs2_mknod+0x1486/0x2b30
[  294.354351][T14021]        ocfs2_create+0x1ab/0x470
[  294.359375][T14021]        path_openat+0x192f/0x3580
[  294.364485][T14021]        do_filp_open+0x27f/0x4e0
[  294.369508][T14021]        do_sys_openat2+0x13e/0x1d0
[  294.374700][T14021]        __x64_sys_openat+0x247/0x2a0
[  294.380062][T14021]        do_syscall_64+0xf3/0x230
[  294.385088][T14021]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.391499][T14021] 
[  294.391499][T14021] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{4:4}:
[  294.402014][T14021]        validate_chain+0x18ef/0x5920
[  294.407388][T14021]        __lock_acquire+0x1397/0x2100
[  294.412755][T14021]        lock_acquire+0x1ed/0x550
[  294.417774][T14021]        down_write+0x99/0x220
[  294.422533][T14021]        ocfs2_reserve_suballoc_bits+0x192/0x4e70
[  294.428956][T14021]        ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0
[  294.435803][T14021]        ocfs2_init_xattr_set_ctxt+0x3a6/0x8e0
[  294.441946][T14021]        ocfs2_xattr_set+0xf4e/0x1930
[  294.447315][T14021]        ocfs2_set_acl+0x4cb/0x580
[  294.452422][T14021]        ocfs2_iop_set_acl+0x24a/0x3c0
[  294.457875][T14021]        vfs_set_acl+0x7fd/0xa60
[  294.462806][T14021]        do_set_acl+0xf4/0x180
[  294.467575][T14021]        filename_setxattr+0x325/0x430
[  294.473074][T14021]        path_setxattrat+0x440/0x510
[  294.478370][T14021]        __x64_sys_setxattr+0xbc/0xe0
[  294.483826][T14021]        do_syscall_64+0xf3/0x230
[  294.488855][T14021]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.495268][T14021] 
[  294.495268][T14021] other info that might help us debug this:
[  294.495268][T14021] 
[  294.505489][T14021] Chain exists of:
[  294.505489][T14021]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> jbd2_handle --> &oi->ip_xattr_sem
[  294.505489][T14021] 
[  294.521227][T14021]  Possible unsafe locking scenario:
[  294.521227][T14021] 
[  294.528676][T14021]        CPU0                    CPU1
[  294.534036][T14021]        ----                    ----
[  294.539391][T14021]   lock(&oi->ip_xattr_sem);
[  294.543979][T14021]                                lock(jbd2_handle);
[  294.550653][T14021]                                lock(&oi->ip_xattr_sem);
[  294.557847][T14021]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7);
[  294.565133][T14021] 
[  294.565133][T14021]  *** DEADLOCK ***
[  294.565133][T14021] 
[  294.573263][T14021] 3 locks held by syz.4.3189/14021:
[  294.578457][T14021]  #0: ffff8880329ec420 (sb_writers#28){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[  294.587696][T14021]  #1: ffff888052c95100 (&type->i_mutex_dir_key#23){+.+.}-{4:4}, at: vfs_set_acl+0x364/0xa60
[  294.598322][T14021]  #2: ffff888052c94e38 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x633/0x1930
[  294.608238][T14021] 
[  294.608238][T14021] stack backtrace:
[  294.614124][T14021] CPU: 1 UID: 0 PID: 14021 Comm: syz.4.3189 Not tainted 6.13.0-rc3-next-20241219-syzkaller #0
[  294.614142][T14021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  294.614152][T14021] Call Trace:
[  294.614159][T14021]  <TASK>
[  294.614166][T14021]  dump_stack_lvl+0x241/0x360
[  294.614184][T14021]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.614199][T14021]  ? __pfx__printk+0x10/0x10
[  294.614223][T14021]  print_circular_bug+0x13a/0x1b0
[  294.614238][T14021]  check_noncircular+0x36a/0x4a0
[  294.614261][T14021]  ? __pfx_check_noncircular+0x10/0x10
[  294.614288][T14021]  ? lockdep_lock+0x123/0x2b0
[  294.614309][T14021]  validate_chain+0x18ef/0x5920
[  294.614329][T14021]  ? __pfx_validate_chain+0x10/0x10
[  294.614355][T14021]  ? __pfx_validate_chain+0x10/0x10
[  294.614378][T14021]  ? mark_lock+0x9a/0x360
[  294.614397][T14021]  ? look_up_lock_class+0x77/0x170
[  294.614417][T14021]  ? register_lock_class+0x102/0x980
[  294.614436][T14021]  ? __pfx_register_lock_class+0x10/0x10
[  294.614453][T14021]  ? __pfx_lock_release+0x10/0x10
[  294.614470][T14021]  ? mark_lock+0x9a/0x360
[  294.614489][T14021]  __lock_acquire+0x1397/0x2100
[  294.614512][T14021]  lock_acquire+0x1ed/0x550
[  294.614529][T14021]  ? ocfs2_reserve_suballoc_bits+0x192/0x4e70
[  294.614552][T14021]  ? __pfx_lock_acquire+0x10/0x10
[  294.614570][T14021]  ? __pfx___might_resched+0x10/0x10
[  294.614587][T14021]  ? __pfx_ocfs2_get_system_file_inode+0x10/0x10
[  294.614605][T14021]  ? __lock_acquire+0x1397/0x2100
[  294.614624][T14021]  down_write+0x99/0x220
[  294.614637][T14021]  ? ocfs2_reserve_suballoc_bits+0x192/0x4e70
[  294.614657][T14021]  ? __pfx_down_write+0x10/0x10
[  294.614673][T14021]  ocfs2_reserve_suballoc_bits+0x192/0x4e70
[  294.614693][T14021]  ? mark_lock+0x9a/0x360
[  294.614713][T14021]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  294.614731][T14021]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  294.614750][T14021]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  294.614767][T14021]  ? lockdep_hardirqs_on+0x99/0x150
[  294.614786][T14021]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  294.614803][T14021]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  294.614821][T14021]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  294.614843][T14021]  ? stack_depot_save_flags+0x7b4/0x940
[  294.614867][T14021]  ? kasan_save_track+0x51/0x80
[  294.614885][T14021]  ? kasan_save_track+0x3f/0x80
[  294.614901][T14021]  ? __kasan_kmalloc+0x98/0xb0
[  294.614919][T14021]  ? __kmalloc_cache_noprof+0x243/0x390
[  294.614933][T14021]  ? ocfs2_reserve_new_metadata_blocks+0x117/0x9c0
[  294.614952][T14021]  ? ocfs2_init_xattr_set_ctxt+0x3a6/0x8e0
[  294.614965][T14021]  ? ocfs2_xattr_set+0xf4e/0x1930
[  294.614978][T14021]  ? ocfs2_set_acl+0x4cb/0x580
[  294.614995][T14021]  ? ocfs2_iop_set_acl+0x24a/0x3c0
[  294.615013][T14021]  ? vfs_set_acl+0x7fd/0xa60
[  294.615029][T14021]  ? do_set_acl+0xf4/0x180
[  294.615044][T14021]  ? filename_setxattr+0x325/0x430
[  294.615057][T14021]  ? path_setxattrat+0x440/0x510
[  294.615073][T14021]  ? __x64_sys_setxattr+0xbc/0xe0
[  294.615086][T14021]  ? do_syscall_64+0xf3/0x230
[  294.615106][T14021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.615139][T14021]  ? __kasan_kmalloc+0x98/0xb0
[  294.615157][T14021]  ? __kmalloc_cache_noprof+0x243/0x390
[  294.615170][T14021]  ? ocfs2_reserve_new_metadata_blocks+0x117/0x9c0
[  294.615191][T14021]  ocfs2_reserve_new_metadata_blocks+0x41c/0x9c0
[  294.615212][T14021]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  294.615232][T14021]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  294.615250][T14021]  ? ocfs2_xattr_set+0xf00/0x1930
[  294.615266][T14021]  ocfs2_init_xattr_set_ctxt+0x3a6/0x8e0
[  294.615288][T14021]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  294.615302][T14021]  ? up_write+0x1a9/0x590
[  294.615316][T14021]  ? __pfx_ocfs2_truncate_log_needs_flush+0x10/0x10
[  294.615338][T14021]  ? __pfx_up_write+0x10/0x10
[  294.615351][T14021]  ? __kmalloc_cache_noprof+0x243/0x390
[  294.615365][T14021]  ? ocfs2_xattr_set+0x4d5/0x1930
[  294.615379][T14021]  ocfs2_xattr_set+0xf4e/0x1930
[  294.615399][T14021]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  294.615413][T14021]  ? stack_depot_save_flags+0x7b4/0x940
[  294.615436][T14021]  ? kasan_save_track+0x51/0x80
[  294.615452][T14021]  ? kasan_save_track+0x3f/0x80
[  294.615468][T14021]  ? __kasan_kmalloc+0x98/0xb0
[  294.615487][T14021]  ? do_set_acl+0xf4/0x180
[  294.615501][T14021]  ? filename_setxattr+0x325/0x430
[  294.615514][T14021]  ? path_setxattrat+0x440/0x510
[  294.615529][T14021]  ? __x64_sys_setxattr+0xbc/0xe0
[  294.615556][T14021]  ? rcu_is_watching+0x15/0xb0
[  294.615569][T14021]  ? trace_kmalloc+0x1f/0xd0
[  294.615581][T14021]  ? __kmalloc_noprof+0x2a5/0x4c0
[  294.615594][T14021]  ? ocfs2_set_acl+0x11b/0x580
[  294.615614][T14021]  ocfs2_set_acl+0x4cb/0x580
[  294.615635][T14021]  ocfs2_iop_set_acl+0x24a/0x3c0
[  294.615655][T14021]  ? __pfx_ocfs2_iop_set_acl+0x10/0x10
[  294.615674][T14021]  ? __pfx_evm_inode_set_acl+0x10/0x10
[  294.615692][T14021]  ? __pfx_down_write+0x10/0x10
[  294.615705][T14021]  ? evm_revalidate_status+0x4f/0xb0
[  294.615721][T14021]  ? posix_acl_valid+0x35d/0x3e0
[  294.615737][T14021]  vfs_set_acl+0x7fd/0xa60
[  294.615756][T14021]  do_set_acl+0xf4/0x180
[  294.615773][T14021]  filename_setxattr+0x325/0x430
[  294.615786][T14021]  ? __phys_addr_symbol+0x2f/0x70
[  294.615808][T14021]  ? __pfx_filename_setxattr+0x10/0x10
[  294.615822][T14021]  ? getname_flags+0x1e3/0x540
[  294.615837][T14021]  path_setxattrat+0x440/0x510
[  294.615855][T14021]  ? __pfx_path_setxattrat+0x10/0x10
[  294.615870][T14021]  ? do_sys_openat2+0x17a/0x1d0
[  294.615895][T14021]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  294.615913][T14021]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  294.615932][T14021]  __x64_sys_setxattr+0xbc/0xe0
[  294.615947][T14021]  do_syscall_64+0xf3/0x230
[  294.615967][T14021]  ? clear_bhb_loop+0x35/0x90
[  294.615987][T14021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.616005][T14021] RIP: 0033:0x7fd073385d29
[  294.616024][T14021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.616037][T14021] RSP: 002b:00007fd074152038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  294.616052][T14021] RAX: ffffffffffffffda RBX: 00007fd073575fa0 RCX: 00007fd073385d29
[  294.616064][T14021] RDX: 0000000020002b40 RSI: 0000000020002a40 RDI: 0000000020002a00
[  294.616074][T14021] RBP: 00007fd073401a20 R08: 0000000000000000 R09: 0000000000000000
[  294.616084][T14021] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[  294.616093][T14021] R13: 0000000000000000 R14: 00007fd073575fa0 R15: 00007ffe324f9c88
[  294.616108][T14021]  </TASK>
[  295.320721][ T5832] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.380610][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.389367][ T5844] ocfs2: Unmounting device (7,4) on (node local)