last executing test programs:

2m51.211397503s ago: executing program 0 (id=147):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m51.070166165s ago: executing program 0 (id=149):
syz_mount_image$udf(&(0x7f0000001540), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f00000012c0)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@gid_ignore}, {@adinicb}, {}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@rootdir={'rootdir', 0x3d, 0x10001}}, {@dmode={'dmode', 0x3d, 0x4}}, {@session}, {@uid_forget}, {@mode={'mode', 0x3d, 0x3}}, {@lastblock={'lastblock', 0x3d, 0xf}}, {@gid_ignore}]}, 0x1, 0xc71, &(0x7f0000001cc0)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

2m50.694753435s ago: executing program 0 (id=151):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r1}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0)

2m50.447010935s ago: executing program 0 (id=153):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)

2m49.847510514s ago: executing program 0 (id=155):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m49.227366844s ago: executing program 0 (id=158):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)

2m48.807638238s ago: executing program 32 (id=158):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542080005000000000090000880"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)

59.941627716s ago: executing program 3 (id=1175):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f)

59.255755291s ago: executing program 3 (id=1182):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBLED(r0, 0x4b65, 0x7)

59.039220809s ago: executing program 3 (id=1185):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',ro'])
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xf010004, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x16, '\x00', @string=0x0}})

58.784842839s ago: executing program 3 (id=1198):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)

58.40497027s ago: executing program 3 (id=1194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r1, 0x801, 0x709d2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x4, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x200000c0)

57.847354975s ago: executing program 3 (id=1196):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

57.41875611s ago: executing program 33 (id=1196):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002e00)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

5.254972725s ago: executing program 5 (id=1668):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040)

5.022762724s ago: executing program 1 (id=1672):
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000c40)="9b216cf5", 0x4, r0)

4.993171896s ago: executing program 5 (id=1673):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x90)

4.759325545s ago: executing program 1 (id=1675):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf77}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b954f95e59682cf5cbd902eb37", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.746417546s ago: executing program 5 (id=1676):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)

4.421147382s ago: executing program 1 (id=1688):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2000, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x4008cd01, 0x0)

4.420418963s ago: executing program 5 (id=1681):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x3000010, &(0x7f00000002c0)={[{@nodiscard}, {}]}, 0x2, 0xb9a7, &(0x7f000000c1c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @auto="2d0318129479bdc2"}})

3.479456118s ago: executing program 1 (id=1685):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4804)

2.239735899s ago: executing program 5 (id=1696):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0xe00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.745502959s ago: executing program 2 (id=1698):
r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0xc3d33000)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc0b9a)

1.461860382s ago: executing program 2 (id=1702):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
ioctl(r0, 0x8b2c, &(0x7f0000000040))

1.259506328s ago: executing program 2 (id=1703):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4)

1.259360468s ago: executing program 4 (id=1704):
msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x8, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000680)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9})

1.259260139s ago: executing program 1 (id=1705):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0xb4, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x84, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x58, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x3, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

1.141797668s ago: executing program 4 (id=1707):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCFLSH(r0, 0x8926, 0xffffffffffffc)

1.090591122s ago: executing program 5 (id=1708):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008d0, &(0x7f0000000680)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610936dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84bb90577b8b405a48292eeca69f5275cb7b7027d4bf643bd69b034c0221a30"], 0x1, 0x442d, &(0x7f0000004480)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x81)
creat(&(0x7f00000000c0)='./bus\x00', 0x182)

1.015488088s ago: executing program 1 (id=1709):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fdatasync(r0)

1.014961208s ago: executing program 2 (id=1710):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)

857.526891ms ago: executing program 2 (id=1711):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x4c}}, 0x0)

696.044353ms ago: executing program 4 (id=1712):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000800000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

639.403928ms ago: executing program 2 (id=1713):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="87e9"], 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x2000)
ioctl$EVIOCSABS2F(r0, 0x401845ef, 0x0)

445.383174ms ago: executing program 4 (id=1714):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2b, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x28}}, 0x0)

204.033134ms ago: executing program 4 (id=1715):
setresgid(0xee00, 0xee01, 0x0)
setfsgid(0x0)
setfsgid(0x0)

0s ago: executing program 4 (id=1716):
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100))

kernel console output (not intermixed with test programs):

r parsing attributes in process `syz.3.490'.
[  133.678667][ T7287] loop4: detected capacity change from 0 to 32768
[  133.714135][ T7287] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.485 (7287)
[  133.822287][ T7287] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.867699][ T7287] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  133.896570][ T7287] BTRFS info (device loop4): setting nodatacow, compression disabled
[  133.915678][ T7287] BTRFS info (device loop4): setting datacow
[  133.935636][ T7287] BTRFS info (device loop4): doing ref verification
[  133.944794][ T7287] BTRFS info (device loop4): force clearing of disk cache
[  133.962551][ T7287] BTRFS info (device loop4): turning off barriers
[  133.986588][ T7287] BTRFS info (device loop4): enabling ssd optimizations
[  134.014644][ T7287] BTRFS info (device loop4): using spread ssd allocation scheme
[  134.022384][ T7287] BTRFS info (device loop4): using free space tree
[  134.256939][ T7300] loop2: detected capacity change from 0 to 32768
[  134.275735][ T7287] BTRFS info (device loop4): rebuilding free space tree
[  134.385385][ T7300] syz.2.488: attempt to access beyond end of device
[  134.385385][ T7300] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  134.468474][ T7300] metapage_write_end_io: I/O error
[  134.525551][ T7300] blkno = 8ed2c, nblocks = 1
[  134.550671][ T7300] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  134.550671][ T7300] 
[  134.612499][ T7300] ERROR: (device loop2): remounting filesystem as read-only
[  134.689433][ T7300] UFO tlock:0xffffc9000285a090
[  134.815948][ T6260] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  134.841323][ T7300] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt
[  134.841323][ T7300] 
[  134.888950][ T7300] jfs_lookup: dtSearch returned -5
[  134.927883][ T7365] loop1: detected capacity change from 0 to 512
[  134.944760][ T7365] EXT4-fs: Ignoring removed orlov option
[  135.033395][ T7365] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  135.049496][  T110] blkno = 8ed2c, nblocks = 4
[  135.058851][  T110] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  135.058851][  T110] 
[  135.119157][ T5779] syz-executor: attempt to access beyond end of device
[  135.119157][ T5779] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  135.165638][ T7365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  135.217015][ T5779] metapage_write_end_io: I/O error
[  135.222585][ T5779] JFS: metapage_get_blocks failed
[  135.233638][ T7365] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.503: corrupted in-inode xattr: e_value size too large
[  135.262286][ T5779] JFS: metapage_get_blocks failed
[  135.273484][ T5779] JFS: metapage_get_blocks failed
[  135.280353][ T5779] JFS: metapage_get_blocks failed
[  135.294449][ T7365] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.503: couldn't read orphan inode 15 (err -117)
[  135.330561][ T7365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.367167][ T7374] loop3: detected capacity change from 0 to 4096
[  135.408496][ T7374] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  135.464343][ T7374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.738917][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.811793][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.233655][ T7391] netlink: 'syz.1.512': attribute type 1 has an invalid length.
[  136.571688][ T7397] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  136.602483][ T7397] macvtap1: entered promiscuous mode
[  136.618573][ T7397] macvtap1: entered allmulticast mode
[  136.639641][ T7397] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  136.764158][ T7403] loop1: detected capacity change from 0 to 64
[  136.884106][ T7407] loop4: detected capacity change from 0 to 64
[  137.149611][ T7387] loop2: detected capacity change from 0 to 32768
[  137.758770][ T7405] loop3: detected capacity change from 0 to 32768
[  137.862382][ T7405] JBD2: Ignoring recovery information on journal
[  138.126754][ T7405] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  138.141201][ T7409] loop1: detected capacity change from 0 to 32768
[  138.220315][ T7409] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.410250][ T7409] XFS (loop1): Ending clean mount
[  138.416639][ T7426] Bluetooth: MGMT ver 1.22
[  138.655912][ T5781] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.712051][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  139.392418][ T7437] tipc: Started in network mode
[  139.403495][ T7437] tipc: Node identity , cluster identity 4711
[  139.426432][ T7437] tipc: Failed to obtain node identity
[  139.432005][ T7437] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  139.494495][ T7441] loop1: detected capacity change from 0 to 128
[  139.537058][ T7441] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  139.588747][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'.
[  139.700694][ T7447] loop4: detected capacity change from 0 to 1024
[  140.652986][ T7477] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  140.662765][ T7477] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  140.672146][ T7477] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.681207][ T7477] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.721677][ T7477] Zero length message leads to an empty skb
[  140.853178][ T7481] loop1: detected capacity change from 0 to 2048
[  140.925623][ T7483] sp0: Synchronizing with TNC
[  140.941707][ T7481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.022212][ T7483] sp0: Found TNC
[  141.046373][ T7481] UDF-fs: incorrect filename length (10)
[  141.596116][ T7497] netlink: 209824 bytes leftover after parsing attributes in process `syz.1.559'.
[  141.629209][ T7475] loop4: detected capacity change from 0 to 40427
[  141.709263][ T7475] F2FS-fs (loop4): Found nat_bits in checkpoint
[  141.808665][ T7504] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  141.833928][ T7504] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  141.843114][ T7475] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  141.851863][ T7504] comedi comedi3: 8255: I/O port conflict (0x21,4)
[  141.853928][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.562'.
[  141.863446][ T7504] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  141.894872][ T7504] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  141.901425][ T7504] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  141.962623][ T7503] loop3: detected capacity change from 0 to 4096
[  142.033714][ T7503] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  142.112496][ T7503] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  142.124955][ T6260] syz-executor: attempt to access beyond end of device
[  142.124955][ T6260] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  142.151176][ T7503] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  142.181211][ T6260] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  142.567252][ T7517] loop2: detected capacity change from 0 to 4096
[  142.610505][ T7517] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  142.691907][ T7521] tmpfs: Too few inodes for current use
[  142.707709][ T7517] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  143.763410][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  143.963371][    T9] usb 2-1: Using ep0 maxpacket: 8
[  143.985116][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.005687][    T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.036834][ T7553] loop4: detected capacity change from 0 to 512
[  144.043567][    T9] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.055531][ T7554] loop2: detected capacity change from 0 to 16
[  144.065981][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  144.084232][    T9] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[  144.105798][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.138004][ T7553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.152286][    T9] usb 2-1: config 0 descriptor??
[  144.376218][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.469011][ T7562] loop3: detected capacity change from 0 to 2048
[  144.521837][ T7562] EXT4-fs: Ignoring removed bh option
[  144.552279][ T7565] loop4: detected capacity change from 0 to 64
[  144.574837][ T7562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.617354][   T27] audit: type=1800 audit(1755229568.025:18): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.587" name="file1" dev="loop3" ino=15 res=0 errno=0
[  144.657558][    T9] hid-alps 0003:044E:1215.0009: hidraw0: USB HID v0.00 Device [HID 044e:1215] on usb-dummy_hcd.1-1/input0
[  144.802712][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.924041][  T785] usb 2-1: USB disconnect, device number 3
[  145.099911][ T7577] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  145.401901][ T7586] loop3: detected capacity change from 0 to 2048
[  145.449834][ T7586] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  145.495547][ T7589] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.946279][ T7597] loop1: detected capacity change from 0 to 64
[  146.181294][ T7603] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  146.320934][ T7608] loop4: detected capacity change from 0 to 256
[  146.322852][  T785] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  146.389452][ T7608] FAT-fs (loop4): Directory bread(block 64) failed
[  146.419390][ T7608] FAT-fs (loop4): Directory bread(block 65) failed
[  146.444619][ T7608] FAT-fs (loop4): Directory bread(block 66) failed
[  146.457049][ T7608] FAT-fs (loop4): Directory bread(block 67) failed
[  146.483595][ T7608] FAT-fs (loop4): Directory bread(block 68) failed
[  146.504974][ T7608] FAT-fs (loop4): Directory bread(block 69) failed
[  146.511694][ T7608] FAT-fs (loop4): Directory bread(block 70) failed
[  146.526609][ T7608] FAT-fs (loop4): Directory bread(block 71) failed
[  146.539774][ T7608] FAT-fs (loop4): Directory bread(block 72) failed
[  146.549579][ T7608] FAT-fs (loop4): Directory bread(block 73) failed
[  146.584012][  T785] usb 3-1: Using ep0 maxpacket: 8
[  146.624424][  T785] usb 3-1: unable to get BOS descriptor or descriptor too short
[  146.639041][  T785] usb 3-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30
[  146.658837][  T785] usb 3-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[  146.676404][  T785] usb 3-1: config 4 interface 0 has no altsetting 0
[  146.690139][  T785] usb 3-1: string descriptor 0 read error: -22
[  146.696808][  T785] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  146.706021][  T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.730316][  T785] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  146.754521][  T785] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  146.765567][  T785] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  146.774007][  T785] usb 3-1: media controller created
[  146.831854][  T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  146.923426][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  146.932665][ T7618] loop4: detected capacity change from 0 to 1024
[  146.950801][ T7618] EXT4-fs: Ignoring removed bh option
[  146.960277][ T7618] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  146.982753][ T7618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.023002][ T7618] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.611: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  147.051994][ T7618] EXT4-fs (loop4): Remounting filesystem read-only
[  147.087625][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.113524][    T9] usb 2-1: Using ep0 maxpacket: 16
[  147.139273][    T9] usb 2-1: config 0 has no interfaces?
[  147.171005][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  147.204599][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.223422][    T9] usb 2-1: Product: syz
[  147.229309][    T9] usb 2-1: Manufacturer: syz
[  147.246768][    T9] usb 2-1: SerialNumber: syz
[  147.276973][    T9] usb 2-1: config 0 descriptor??
[  147.446068][ T7631] loop4: detected capacity change from 0 to 1024
[  147.489821][ T7631] hfsplus: bad catalog entry type
[  147.546362][ T1319] hfsplus: b-tree write err: -5, ino 4
[  147.781928][ T7637] loop4: detected capacity change from 0 to 512
[  147.832524][ T7637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.845835][ T7637] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.904029][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.915979][ T7599] usb 3-1: dvb_usb_au6610: wlen=0, aborting
[  147.922053][  T785] zl10353_read_register: readreg error (reg=127, ret==0)
[  148.000021][  T785] usb 3-1: USB disconnect, device number 5
[  148.143948][ T5785] usb 2-1: USB disconnect, device number 4
[  148.720460][ T7660] trusted_key: encrypted_key: key trusted:syz not found
[  148.916924][ T7666] loop2: detected capacity change from 0 to 64
[  149.086480][ T7646] loop1: detected capacity change from 0 to 32768
[  149.391757][ T7676] netlink: 100 bytes leftover after parsing attributes in process `syz.1.634'.
[  150.037828][ T7698] loop2: detected capacity change from 0 to 1024
[  150.080253][ T7698] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  150.105976][ T7698] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  150.131582][ T7698] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  150.157112][ T7698] EXT4-fs error (device loop2): ext4_get_journal_inode:5805: inode #5: comm syz.2.642: unexpected bad inode w/o EXT4_IGET_BAD
[  150.191463][ T7698] EXT4-fs (loop2): no journal found
[  150.197155][ T7698] EXT4-fs (loop2): can't get journal size
[  150.218321][ T7698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  150.452385][ T7687] loop1: detected capacity change from 0 to 32768
[  150.482129][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.535752][ T7687] JBD2: Ignoring recovery information on journal
[  150.545137][ T7687] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  150.553848][ T7687] JBD2: bad block at offset 32
[  150.583211][ T7687] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  150.660235][ T7713] loop3: detected capacity change from 0 to 512
[  150.688400][ T7713] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  150.806587][ T7687] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  150.851646][ T7713] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  150.861324][ T7713] FAT-fs (loop3): Filesystem has been set read-only
[  150.868081][ T7687] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  150.890787][ T7718] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  150.913470][ T7687] OCFS2: File system is now read-only.
[  150.934371][ T7687] (syz.1.639,7687,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  150.956103][ T7687] (syz.1.639,7687,0):__ocfs2_claim_clusters:2355 ERROR: status = -30
[  150.970809][ T7687] (syz.1.639,7687,0):__ocfs2_claim_clusters:2363 ERROR: status = -30
[  150.993469][ T7687] (syz.1.639,7687,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  151.002218][ T7687] (syz.1.639,7687,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  151.020307][ T7687] (syz.1.639,7687,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  151.048841][ T7687] (syz.1.639,7687,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  151.060673][ T7687] (syz.1.639,7687,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  151.074828][ T7687] (syz.1.639,7687,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  151.103112][ T7687] (syz.1.639,7687,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30
[  151.123456][ T7687] (syz.1.639,7687,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30
[  151.135307][ T7687] (syz.1.639,7687,0):ocfs2_lock_allocators:2672 ERROR: status = -30
[  151.171030][ T7687] (syz.1.639,7687,0):ocfs2_write_begin_nolock:1744 ERROR: status = -30
[  151.180558][ T7687] (syz.1.639,7687,0):ocfs2_write_begin:1907 ERROR: status = -30
[  151.282543][ T5781] ocfs2: Unmounting device (7,1) on (node local)
[  151.570327][ T7733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.656'.
[  151.738012][ T7737] loop1: detected capacity change from 0 to 4096
[  151.773552][ T5785] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  151.920766][ T7737] ntfs: volume version 3.1.
[  151.971806][ T5785] usb 5-1: config 0 has an invalid interface number: 28 but max is 0
[  151.986751][ T5785] usb 5-1: config 0 has no interface number 0
[  152.007646][ T5785] usb 5-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.046247][ T5785] usb 5-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.068013][ T5785] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  152.088530][ T5785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.116300][ T5785] usb 5-1: config 0 descriptor??
[  152.291464][ T7749] netlink: 256 bytes leftover after parsing attributes in process `syz.3.665'.
[  152.321086][ T7749] netlink: 72 bytes leftover after parsing attributes in process `syz.3.665'.
[  152.572587][ T5785] logitech-djreceiver 0003:046D:C534.000A: unbalanced collection at end of report description
[  152.638716][ T5785] logitech-djreceiver 0003:046D:C534.000A: logi_dj_probe: parse failed
[  152.658133][ T5785] logitech-djreceiver: probe of 0003:046D:C534.000A failed with error -22
[  152.715946][ T7761] netlink: 'syz.3.670': attribute type 30 has an invalid length.
[  152.840528][    T9] usb 5-1: USB disconnect, device number 4
[  153.568408][ T7789] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  153.806486][ T7773] loop3: detected capacity change from 0 to 32768
[  153.994910][ T7797] loop4: detected capacity change from 0 to 8
[  154.044656][ T7797] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  154.109607][ T5771] udevd[5771]: incorrect cramfs checksum on /dev/loop4
[  154.200057][ T5771] udevd[5771]: incorrect cramfs checksum on /dev/loop4
[  154.632406][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'.
[  154.682925][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'.
[  154.729668][ T7810] netlink: 'syz.1.695': attribute type 11 has an invalid length.
[  154.945977][ T7799] loop3: detected capacity change from 0 to 32768
[  154.968291][ T7799] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.690 (7799)
[  154.990363][ T7799] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  155.007380][ T7799] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  155.017098][ T7799] BTRFS info (device loop3): using free space tree
[  155.201275][ T7799] BTRFS info (device loop3): enabling ssd optimizations
[  155.213755][ T7834] tipc: Started in network mode
[  155.218700][ T7834] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  155.236802][ T7799] BTRFS info (device loop3): auto enabling async discard
[  155.246803][ T7834] tipc: Enabled bearer <udp:s>, priority 10
[  155.454843][ T5780] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.083418][  T785] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  156.243487][   T23] tipc: Node number set to 4269801488
[  156.313880][  T785] usb 2-1: Using ep0 maxpacket: 32
[  156.344386][  T785] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.373528][  T785] usb 2-1: config 0 interface 0 has no altsetting 0
[  156.380238][  T785] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  156.433409][  T785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.480472][  T785] usb 2-1: config 0 descriptor??
[  156.688472][ T7872] loop3: detected capacity change from 0 to 16
[  156.737969][ T7872] erofs: (device loop3): mounted with root inode @ nid 36.
[  156.810108][ T7872] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  156.851427][ T7872] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851]
[  156.876749][ T7872] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  156.966709][  T785] aquacomputer_d5next 0003:0C70:F00E.000B: unknown main item tag 0x0
[  156.996876][  T785] aquacomputer_d5next 0003:0C70:F00E.000B: unknown main item tag 0x0
[  157.016264][  T785] aquacomputer_d5next 0003:0C70:F00E.000B: unknown main item tag 0x0
[  157.043413][  T785] aquacomputer_d5next 0003:0C70:F00E.000B: unknown main item tag 0x0
[  157.051580][  T785] aquacomputer_d5next 0003:0C70:F00E.000B: unknown main item tag 0x0
[  157.085938][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'.
[  157.096768][  T785] aquacomputer_d5next 0003:0C70:F00E.000B: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0
[  157.136054][ T7862] loop4: detected capacity change from 0 to 32768
[  157.151805][ T7862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.712 (7862)
[  157.216502][ T7862] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.238380][  T785] usb 2-1: USB disconnect, device number 5
[  157.265780][ T7862] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  157.316502][ T7862] BTRFS info (device loop4): using free space tree
[  157.350185][ T7879] fido_id[7879]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  157.568080][ T7862] BTRFS info (device loop4): enabling ssd optimizations
[  157.617220][ T7862] BTRFS info (device loop4): auto enabling async discard
[  157.928120][ T6260] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.339635][ T7882] loop3: detected capacity change from 0 to 32768
[  158.384215][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'.
[  158.451374][ T7882] jfs_strtoUCS: char2uni returned -22.
[  158.457971][ T7882] charset = euc-jp, char = 0xd4
[  159.321696][ T7918] loop3: detected capacity change from 0 to 40427
[  159.335561][ T7919] loop2: detected capacity change from 0 to 40427
[  159.348348][ T7919] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  159.369340][ T7919] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  159.380578][ T7919] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff
[  159.390377][ T7919] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8
[  159.400354][ T7918] F2FS-fs (loop3): Found nat_bits in checkpoint
[  159.441205][ T7919] F2FS-fs (loop2): invalid crc value
[  159.483744][ T7919] F2FS-fs (loop2): Found nat_bits in checkpoint
[  159.508232][ T7918] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  159.619973][ T7919] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  159.631040][ T7919] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  159.687673][ T5780] syz-executor: attempt to access beyond end of device
[  159.687673][ T5780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  159.712196][ T5780] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  160.354147][ T7940] netlink: 32 bytes leftover after parsing attributes in process `syz.4.737'.
[  160.651308][ T7948] loop2: detected capacity change from 0 to 1024
[  160.738492][   T27] audit: type=1326 audit(1755229584.145:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa18ebe9 code=0x7ffc0000
[  160.768024][ T7948] hfsplus: bad catalog entry type
[  160.802588][   T27] audit: type=1326 audit(1755229584.175:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa18ebe9 code=0x7ffc0000
[  160.899634][ T1003] hfsplus: b-tree write err: -5, ino 4
[  160.903806][   T27] audit: type=1326 audit(1755229584.185:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f90fa18ebe9 code=0x7ffc0000
[  160.942121][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.743'.
[  160.951552][   T27] audit: type=1326 audit(1755229584.185:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa18ebe9 code=0x7ffc0000
[  160.987752][   T27] audit: type=1326 audit(1755229584.185:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa18ebe9 code=0x7ffc0000
[  161.010265][   T27] audit: type=1326 audit(1755229584.195:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f90fa18ebe9 code=0x7ffc0000
[  161.039927][   T27] audit: type=1326 audit(1755229584.195:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7951 comm="syz.4.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa18ebe9 code=0x7ffc0000
[  161.581797][ T7974] loop4: detected capacity change from 0 to 512
[  161.663554][ T7974] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.751: iget: bad i_size value: 38620345925642
[  161.777399][ T7974] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.751: couldn't read orphan inode 15 (err -117)
[  161.811820][ T7974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.839316][ T7958] loop2: detected capacity change from 0 to 40427
[  161.922272][ T7958] F2FS-fs (loop2): Found nat_bits in checkpoint
[  161.985195][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.044321][ T7958] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  162.133395][ T5785] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  162.259974][ T5779] syz-executor: attempt to access beyond end of device
[  162.259974][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  162.277994][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  162.364206][ T5785] usb 4-1: unable to get BOS descriptor or descriptor too short
[  162.387712][ T5785] usb 4-1: config 33 has an invalid interface number: 225 but max is 2
[  162.410148][ T5785] usb 4-1: config 33 has an invalid interface number: 228 but max is 2
[  162.419427][ T5785] usb 4-1: config 33 has an invalid interface number: 228 but max is 2
[  162.428388][ T5785] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  162.442761][ T7992] netlink: 'syz.4.761': attribute type 2 has an invalid length.
[  162.443189][ T5785] usb 4-1: config 33 has 2 interfaces, different from the descriptor's value: 3
[  162.481290][ T5785] usb 4-1: config 33 has no interface number 0
[  162.491819][ T5785] usb 4-1: config 33 has no interface number 1
[  162.530925][ T5785] usb 4-1: config 33 interface 228 altsetting 3 bulk endpoint 0x8 has invalid maxpacket 1023
[  162.552084][ T5785] usb 4-1: config 33 interface 228 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  162.583323][ T5785] usb 4-1: config 33 interface 228 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  162.604508][ T5785] usb 4-1: config 33 interface 228 altsetting 3 bulk endpoint 0xC has invalid maxpacket 1023
[  162.618070][ T5785] usb 4-1: config 33 interface 228 altsetting 204 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  162.630022][ T5785] usb 4-1: config 33 interface 228 altsetting 204 has an invalid endpoint with address 0x80, skipping
[  162.642679][ T5785] usb 4-1: config 33 interface 228 altsetting 204 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[  162.661289][ T5785] usb 4-1: config 33 interface 225 has no altsetting 0
[  162.686881][ T5785] usb 4-1: config 33 interface 228 has no altsetting 0
[  162.714092][ T5785] usb 4-1: config 33 interface 228 has no altsetting 1
[  162.724639][ T5785] usb 4-1: New USB device found, idVendor=12d1, idProduct=7b1f, bcdDevice=ca.cf
[  162.745049][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.753110][ T5785] usb 4-1: Product: syz
[  162.779234][ T5785] usb 4-1: Manufacturer: syz
[  162.785632][ T5785] usb 4-1: SerialNumber: syz
[  163.019466][ T5785] option 4-1:33.225: GSM modem (1-port) converter detected
[  163.035994][ T5785] rndis_host 4-1:33.228: skipping garbage
[  163.041739][ T5785] rndis_host 4-1:33.228: skipping garbage
[  163.047874][ T5785] usb 4-1: bad CDC descriptors
[  163.058011][ T5785] usb 4-1: USB disconnect, device number 6
[  163.068439][ T5785] option 4-1:33.225: device disconnected
[  163.426779][   T27] audit: type=1326 audit(1755229586.835:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fa18ebe9 code=0x7fc00000
[  163.561162][ T8007] loop2: detected capacity change from 0 to 1024
[  164.415791][ T8036] program syz.1.782 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  164.959690][ T8034] loop4: detected capacity change from 0 to 32768
[  164.998254][ T8034] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  165.026761][   T27] audit: type=1800 audit(1755229588.435:27): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.788" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  165.059613][   T27] audit: type=1800 audit(1755229588.465:28): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.788" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  165.169245][ T8055] loop2: detected capacity change from 0 to 512
[  165.199566][ T6260] ocfs2: Unmounting device (7,4) on (node local)
[  165.218906][ T8055] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  165.280038][ T8055] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.789: invalid indirect mapped block 4294967295 (level 0)
[  165.316305][ T8055] EXT4-fs (loop2): Remounting filesystem read-only
[  165.323429][ T8055] EXT4-fs (loop2): 1 orphan inode deleted
[  165.329211][ T8055] EXT4-fs (loop2): 1 truncate cleaned up
[  165.396396][ T8055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.455412][ T8063] loop4: detected capacity change from 0 to 256
[  165.566511][ T8063] FAT-fs (loop4): Directory bread(block 64) failed
[  165.588482][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.593622][ T8063] FAT-fs (loop4): Directory bread(block 65) failed
[  165.636349][ T8063] FAT-fs (loop4): Directory bread(block 66) failed
[  165.673773][ T8063] FAT-fs (loop4): Directory bread(block 67) failed
[  165.680469][ T8063] FAT-fs (loop4): Directory bread(block 68) failed
[  165.722889][ T8063] FAT-fs (loop4): Directory bread(block 69) failed
[  165.758341][ T8063] FAT-fs (loop4): Directory bread(block 70) failed
[  165.765799][ T8069] genirq: Flags mismatch irq 4. 00000000 (aio_iiro_16) vs. 00000000 (ttyS0)
[  165.784360][ T8063] FAT-fs (loop4): Directory bread(block 71) failed
[  165.791544][ T8063] FAT-fs (loop4): Directory bread(block 72) failed
[  165.823330][ T8063] FAT-fs (loop4): Directory bread(block 73) failed
[  165.975837][ T8063] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  166.243424][ T5785] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  166.401908][ T8075] loop4: detected capacity change from 0 to 512
[  166.433608][ T8075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  166.436243][ T8067] loop1: detected capacity change from 0 to 32768
[  166.463563][ T5785] usb 4-1: Using ep0 maxpacket: 32
[  166.479880][ T5785] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  166.483903][ T8067] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.794 (8067)
[  166.504253][ T5785] usb 4-1: config 0 has no interface number 0
[  166.535281][ T5785] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  166.548171][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.564878][ T8075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.582783][ T8067] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.593293][ T5785] usb 4-1: Product: syz
[  166.593325][ T5785] usb 4-1: Manufacturer: syz
[  166.593350][ T5785] usb 4-1: SerialNumber: syz
[  166.608755][ T8075] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.621401][ T5785] usb 4-1: config 0 descriptor??
[  166.636770][ T5785] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  166.646097][ T8067] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  166.654999][ T5785] usb 4-1: selecting invalid altsetting 1
[  166.660781][ T5785] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  166.668454][ T8067] BTRFS info (device loop1): setting nodatacow, compression disabled
[  166.680598][ T8067] BTRFS info (device loop1): max_inline at 0
[  166.693293][ T5785] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  166.707413][ T8067] BTRFS info (device loop1): enabling disk space caching
[  166.716151][ T5785] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  166.724585][ T8067] BTRFS info (device loop1): turning off barriers
[  166.731199][ T8067] BTRFS info (device loop1): turning on flush-on-commit
[  166.738383][ T5785] usb 4-1: media controller created
[  166.743888][ T8067] BTRFS info (device loop1): doing ref verification
[  166.750535][ T8067] BTRFS info (device loop1): force clearing of disk cache
[  166.803674][ T8067] BTRFS info (device loop1): enabling ssd optimizations
[  166.812977][ T8080] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  166.826724][ T5785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  166.851426][ T8067] BTRFS info (device loop1): max_inline at 4096
[  166.868240][ T8071] usb 4-1: dvb_usb_ce6230: I2C read not implemented
[  166.883769][ T8067] BTRFS info (device loop1): disk space caching is enabled
[  166.964313][ T5785] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  166.977789][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.987971][ T5785] zl10353_read_register: readreg error (reg=127, ret==-71)
[  166.998230][ T5785] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  167.082991][ T8067] BTRFS info (device loop1): auto enabling async discard
[  167.147943][ T8067] BTRFS info (device loop1): rebuilding free space tree
[  167.187370][ T5785] usb 4-1: USB disconnect, device number 7
[  167.209361][ T8067] BTRFS info (device loop1): disabling free space tree
[  167.237664][ T8067] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  167.279430][ T8067] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  167.614271][ T5781] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.687906][ T8133] loop3: detected capacity change from 0 to 512
[  168.726967][ T8133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  168.815536][ T8133] EXT4-fs (loop3): 1 truncate cleaned up
[  168.854765][ T8133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.928600][ T8137] loop2: detected capacity change from 0 to 256
[  169.017312][ T8115] loop1: detected capacity change from 0 to 32768
[  169.135978][ T8115] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.151500][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.389160][ T8115] XFS (loop1): Ending clean mount
[  169.430050][ T8115] XFS (loop1): Quotacheck needed: Please wait.
[  169.573066][ T8115] XFS (loop1): Quotacheck: Done.
[  169.813769][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.852544][ T8160] loop4: detected capacity change from 0 to 16
[  169.860020][ T8160] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  170.731057][ T8184] capability: warning: `syz.1.835' uses 32-bit capabilities (legacy support in use)
[  171.033832][ T5826] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  171.096880][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'.
[  171.143454][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'.
[  171.184323][ T8199] netlink: 'syz.1.843': attribute type 14 has an invalid length.
[  171.196329][ T8199] netlink: 'syz.1.843': attribute type 12 has an invalid length.
[  171.233693][ T5826] usb 4-1: Using ep0 maxpacket: 32
[  171.260784][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.303414][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.325143][ T5826] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  171.343325][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.364947][ T5826] usb 4-1: config 0 descriptor??
[  171.379428][ T5826] hub 4-1:0.0: USB hub found
[  171.594775][ T5826] hub 4-1:0.0: 1 port detected
[  171.788409][ T8213] loop1: detected capacity change from 0 to 8192
[  171.805149][ T5826] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  171.812006][ T5826] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  171.865623][ T5826] usbhid 4-1:0.0: can't add hid device: -71
[  171.883507][ T5826] usbhid: probe of 4-1:0.0 failed with error -71
[  171.946593][ T5826] usb 4-1: USB disconnect, device number 8
[  172.354733][ T8231] sp0: Synchronizing with TNC
[  172.434892][    T9] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0
[  172.444202][    T9] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0
[  172.458460][    T9] hid-generic 0000:0004:0000.000C: unknown main item tag 0x0
[  172.470855][    T9] hid-generic 0000:0004:0000.000C: hidraw0: <UNKNOWN> HID v0.01 Device [syz1] on syz0
[  172.684334][ T8237] fido_id[8237]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  172.725199][ T8243] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  172.725199][ T8243]    program syz.2.863 not setting count and/or reply_len properly
[  173.384801][ T8241] loop3: detected capacity change from 0 to 32768
[  173.626933][ T8268] loop1: detected capacity change from 0 to 256
[  173.644167][ T8268] exfat: Deprecated parameter 'namecase'
[  173.688239][ T8268] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  173.940257][ T8272] netem: incorrect gi model size
[  173.983578][ T8272] netem: change failed
[  174.707952][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'.
[  174.741901][ T8277] loop3: detected capacity change from 0 to 32768
[  174.758492][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.882'.
[  174.774944][ T8277] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.876 (8277)
[  174.779466][ T8291] macvlan2: entered promiscuous mode
[  174.836985][ T8291] macvlan2: entered allmulticast mode
[  174.842460][ T8291] bridge0: entered allmulticast mode
[  174.856945][ T8277] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  174.873017][ T8277] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  174.921870][ T8277] BTRFS info (device loop3): using free space tree
[  175.018160][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  175.031937][ T8310] loop2: detected capacity change from 0 to 256
[  175.066863][ T8277] BTRFS info (device loop3): enabling ssd optimizations
[  175.074029][ T8277] BTRFS info (device loop3): auto enabling async discard
[  175.089977][ T8310] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  175.243638][ T5780] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  175.757344][ T8329] loop2: detected capacity change from 0 to 1024
[  176.232123][ T8339] loop4: detected capacity change from 0 to 512
[  176.278437][ T8339] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.896: corrupted in-inode xattr: e_value size too large
[  176.371942][ T8339] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.896: couldn't read orphan inode 15 (err -117)
[  176.419070][ T8351] loop2: detected capacity change from 0 to 1024
[  176.435921][ T8339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.608417][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.510600][ T8375] netlink: 71 bytes leftover after parsing attributes in process `syz.4.914'.
[  177.733553][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'.
[  177.763973][ T8382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  177.992182][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'.
[  178.492682][ T5845] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  178.498093][ T8370] loop2: detected capacity change from 0 to 40427
[  178.525685][ T5845] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  178.548665][ T8370] F2FS-fs (loop2): Found nat_bits in checkpoint
[  178.550240][ T5845] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  178.582403][ T5845] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  178.786625][ T8370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  178.842102][ T8408] fido_id[8408]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  178.860645][ T8411] vim2m vim2m.0: vidioc_s_fmt queue busy
[  178.902591][ T8415] loop3: detected capacity change from 0 to 512
[  179.184056][ T8415] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.930: corrupted inode contents
[  179.222040][ T8415] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #16: comm syz.3.930: mark_inode_dirty error
[  179.276408][ T8415] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.930: corrupted inode contents
[  179.308252][ T8415] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.930: mark_inode_dirty error
[  179.320948][ T8415] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.930: corrupted inode contents
[  179.343782][ T8415] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  179.353003][ T8415] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #16: comm syz.3.930: corrupted inode contents
[  179.367070][ T8415] EXT4-fs error (device loop3): ext4_truncate:4288: inode #16: comm syz.3.930: mark_inode_dirty error
[  179.380988][ T8415] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  179.395859][ T8415] EXT4-fs (loop3): 1 truncate cleaned up
[  179.403172][ T8415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.417527][ T8415] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.418455][ T1319] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  179.457502][ T1319] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:6: Failed to release dquot type 1
[  179.520861][ T8415] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  179.599211][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.678444][ T8430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.945'.
[  180.021089][ T8440] loop1: detected capacity change from 0 to 512
[  180.061273][ T8440] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  180.335487][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.944'.
[  180.436188][ T8452] loop3: detected capacity change from 0 to 512
[  180.455531][ T8452] EXT4-fs: Ignoring removed bh option
[  180.486803][ T8452] EXT4-fs: Ignoring removed nomblk_io_submit option
[  180.515089][ T8452] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  180.549396][ T8452] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.947: corrupted in-inode xattr: e_value out of bounds
[  180.571470][ T8452] EXT4-fs (loop3): Remounting filesystem read-only
[  180.595295][ T8452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.710555][ T8452] EXT4-fs warning (device loop3): __ext4fs_dirhash:283: invalid/unsupported hash tree version 62
[  180.803773][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.291918][ T8480] netlink: 'syz.4.960': attribute type 1 has an invalid length.
[  181.326685][ T8480] netlink: 244 bytes leftover after parsing attributes in process `syz.4.960'.
[  181.482378][ T8487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.963'.
[  181.522075][ T8485] loop3: detected capacity change from 0 to 4096
[  181.550438][ T8485] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  183.422761][ T8554] loop3: detected capacity change from 0 to 512
[  183.494986][ T8554] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  183.520399][ T8554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  183.553511][ T8554] System zones: 1-12
[  183.558889][ T8554] EXT4-fs (loop3): 1 truncate cleaned up
[  183.575075][ T8554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.632195][ T8554] EXT4-fs warning (device loop3): ext4_group_extend:1868: can't shrink FS - resize aborted
[  183.661828][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.727182][ T8562] [U] �ÿ
[  183.826523][ T8565] loop3: detected capacity change from 0 to 4096
[  183.891792][ T8565] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  183.915806][ T8565] ntfs3: loop3: Failed to load $Extend (-2).
[  183.926903][ T8565] ntfs3: loop3: Failed to initialize $Extend.
[  184.282468][ T8575] loop2: detected capacity change from 0 to 1024
[  184.327267][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'.
[  184.437452][ T8575] hfsplus: bad catalog entry type
[  184.586552][ T2881] hfsplus: b-tree write err: -5, ino 4
[  185.329458][ T8607] Bluetooth: MGMT ver 1.22
[  185.867604][ T8598] loop3: detected capacity change from 0 to 32768
[  185.903560][ T8598] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1010 (8598)
[  185.942836][ T8600] loop1: detected capacity change from 0 to 32768
[  185.958033][ T8598] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  185.985626][ T8598] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  186.004776][ T8598] BTRFS info (device loop3): setting nodatacow, compression disabled
[  186.012945][ T8598] BTRFS info (device loop3): setting datacow
[  186.063354][ T8598] BTRFS info (device loop3): doing ref verification
[  186.077428][ T8600] syz.1.1012: attempt to access beyond end of device
[  186.077428][ T8600] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  186.105175][ T8598] BTRFS info (device loop3): force clearing of disk cache
[  186.112383][ T8598] BTRFS info (device loop3): turning off barriers
[  186.143867][ T8600] metapage_write_end_io: I/O error
[  186.170919][ T8598] BTRFS info (device loop3): enabling ssd optimizations
[  186.194003][ T8600] blkno = 8ed2c, nblocks = 1
[  186.198800][ T8600] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  186.198800][ T8600] 
[  186.216157][ T8598] BTRFS info (device loop3): using spread ssd allocation scheme
[  186.236498][ T8598] BTRFS info (device loop3): using free space tree
[  186.259279][ T8600] ERROR: (device loop1): remounting filesystem as read-only
[  186.290436][ T8600] UFO tlock:0xffffc9000285a090
[  186.342443][ T8620] loop2: detected capacity change from 0 to 4096
[  186.351903][ T8620] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  186.418751][ T8600] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt
[  186.418751][ T8600] 
[  186.427645][ T8620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.429574][ T8600] jfs_lookup: dtSearch returned -5
[  186.495477][ T8598] BTRFS info (device loop3): rebuilding free space tree
[  186.520258][  T110] blkno = 8ed2c, nblocks = 4
[  186.525280][  T110] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  186.525280][  T110] 
[  186.587509][ T5781] syz-executor: attempt to access beyond end of device
[  186.587509][ T5781] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  186.638997][ T5781] metapage_write_end_io: I/O error
[  186.653968][ T5781] JFS: metapage_get_blocks failed
[  186.660716][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.684265][ T5781] JFS: metapage_get_blocks failed
[  186.689383][ T5781] JFS: metapage_get_blocks failed
[  186.715325][ T5781] JFS: metapage_get_blocks failed
[  186.870774][ T5780] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  186.882035][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'.
[  187.663132][ T8664] netlink: 'syz.3.1036': attribute type 30 has an invalid length.
[  187.931218][ T8672] loop2: detected capacity change from 0 to 2048
[  187.979836][ T8672] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  188.017847][ T8672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.275437][ T8682] loop1: detected capacity change from 0 to 512
[  188.371069][ T8682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.404274][ T8682] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.535324][ T8682] overlayfs: failed to resolve './file1': -2
[  188.615118][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.701835][ T8686] loop2: detected capacity change from 0 to 256
[  188.746391][ T8680] loop4: detected capacity change from 0 to 32768
[  188.830707][ T8686] FAT-fs (loop2): Directory bread(block 64) failed
[  188.854377][ T8686] FAT-fs (loop2): Directory bread(block 65) failed
[  188.854784][ T8680] JBD2: Ignoring recovery information on journal
[  188.867803][ T8686] FAT-fs (loop2): Directory bread(block 66) failed
[  188.899587][ T8686] FAT-fs (loop2): Directory bread(block 67) failed
[  188.943567][ T8686] FAT-fs (loop2): Directory bread(block 68) failed
[  188.950179][ T8686] FAT-fs (loop2): Directory bread(block 69) failed
[  188.963382][ T5786] Bluetooth: hci3: command tx timeout
[  189.071083][ T8686] FAT-fs (loop2): Directory bread(block 70) failed
[  189.098924][ T8686] FAT-fs (loop2): Directory bread(block 71) failed
[  189.099879][ T8680] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  189.113421][ T8686] FAT-fs (loop2): Directory bread(block 72) failed
[  189.144873][ T8686] FAT-fs (loop2): Directory bread(block 73) failed
[  189.409144][ T6260] ocfs2: Unmounting device (7,4) on (node local)
[  189.835043][ T8709] loop3: detected capacity change from 0 to 128
[  189.878153][ T8709] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  189.922189][ T8713] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1051'.
[  189.933379][ T8713] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1051'.
[  189.972987][ T8711] loop1: detected capacity change from 0 to 4096
[  190.154493][ T8718] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1059'.
[  190.193424][ T8718] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1059'.
[  190.232718][ T8711] ntfs3: loop1: failed to convert "0080" to cp860
[  190.253927][ T8715] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1059'.
[  190.311061][ T8711] ntfs3: loop1: failed to convert name for inode 1e.
[  190.517840][ T8726] loop3: detected capacity change from 0 to 256
[  190.524618][ T8724] loop4: detected capacity change from 0 to 128
[  190.626520][ T8726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  190.717675][   T27] audit: type=1800 audit(1755229614.095:29): pid=8726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1063" name="file1" dev="loop3" ino=1048679 res=0 errno=0
[  190.796096][ T8726] syz.3.1063: attempt to access beyond end of device
[  190.796096][ T8726] loop3: rw=0, sector=256, nr_sectors = 8 limit=256
[  190.968244][ T8737] netlink: 'syz.3.1067': attribute type 4 has an invalid length.
[  191.000288][ T8737] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1067'.
[  191.098879][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1070'.
[  191.270996][ T8746] loop1: detected capacity change from 0 to 256
[  191.293641][ T8745] loop4: detected capacity change from 0 to 2048
[  191.333041][ T8745] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051
[  191.394016][ T8745] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.959550][ T8766] loop4: detected capacity change from 0 to 164
[  192.203924][   T28] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  192.688033][ T8758] loop3: detected capacity change from 0 to 32768
[  192.710279][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'.
[  192.786332][ T8758] JBD2: Ignoring recovery information on journal
[  192.813551][   T28] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  192.856257][ T8758] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  192.929578][ T8793] loop2: detected capacity change from 0 to 256
[  193.001298][ T8793] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf059ff26, utbl_chksum : 0xe619d30d)
[  193.154653][ T8796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'.
[  193.176428][ T5780] ocfs2: Unmounting device (7,3) on (node local)
[  193.678309][    T8] kernel read not supported for file /swradio9 (pid: 8 comm: kworker/0:0)
[  193.864097][ T8809] overlay: Unknown parameter '\ns_resolver'
[  193.877571][ T8811] loop4: detected capacity change from 0 to 256
[  193.992529][ T8811] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  194.088554][ T8794] loop1: detected capacity change from 0 to 32768
[  194.251453][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  194.258538][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  194.264109][ T8794] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  194.392589][ T8798] loop3: detected capacity change from 0 to 32768
[  194.397127][ T8822] loop2: detected capacity change from 0 to 2048
[  194.409042][ T8798] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1096 (8798)
[  194.459618][ T8798] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  194.470045][ T8798] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  194.479687][ T8798] BTRFS info (device loop3): setting nodatacow, compression disabled
[  194.490681][ T8798] BTRFS info (device loop3): ignoring data csums
[  194.497751][ T8798] BTRFS info (device loop3): ignoring bad roots
[  194.505094][ T8798] BTRFS info (device loop3): turning on async discard
[  194.511993][ T8798] BTRFS info (device loop3): turning on flush-on-commit
[  194.520120][ T8798] BTRFS info (device loop3): using free space tree
[  194.530392][ T8822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.606956][ T8834] loop4: detected capacity change from 0 to 256
[  194.635252][ T8794] XFS (loop1): Ending clean mount
[  194.658720][ T8794] XFS (loop1): Quotacheck needed: Please wait.
[  194.723624][ T8798] BTRFS info (device loop3: state C): enabling ssd optimizations
[  194.943136][ T8794] XFS (loop1): Quotacheck: Done.
[  194.950240][ T5780] BTRFS info (device loop3: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  195.247472][ T5781] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  196.148763][ T8876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1120'.
[  196.156830][ T8874] loop1: detected capacity change from 0 to 512
[  196.191169][ T8874] EXT4-fs (loop1): Test dummy encryption mode enabled
[  196.213666][ T8874] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  196.317304][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  196.317315][ T5101] Bluetooth: hci2: command 0x0406 tx timeout
[  196.325475][ T5101] Bluetooth: hci1: command 0x0406 tx timeout
[  196.343819][ T8874] EXT4-fs (loop1): 1 truncate cleaned up
[  196.351086][ T8874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.634221][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.139363][ T8904] Bluetooth: MGMT ver 1.22
[  197.163625][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  197.183362][    T8] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  197.227957][ T8895] loop3: detected capacity change from 0 to 32768
[  197.244901][ T8895] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1131 (8895)
[  197.277788][ T8895] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  197.288192][ T8895] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  197.299504][ T8895] BTRFS info (device loop3): using free space tree
[  197.361557][    T9] usb 2-1: config 0 has an invalid interface number: 20 but max is 0
[  197.380477][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  197.407144][    T9] usb 2-1: config 0 has no interface number 0
[  197.436086][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.455320][    T9] usb 2-1: config 0 interface 20 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.487238][    T8] usb 3-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00
[  197.498799][ T8895] BTRFS info (device loop3): enabling ssd optimizations
[  197.506059][    T9] usb 2-1: config 0 interface 20 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.507151][ T8923] devtmpfs: Cannot change global quota limit on remount
[  197.520857][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.533568][ T8895] BTRFS info (device loop3): auto enabling async discard
[  197.551509][    T9] usb 2-1: config 0 interface 20 has no altsetting 0
[  197.562194][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  197.580509][    T8] usb 3-1: config 0 descriptor??
[  197.587481][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.617713][    T9] usb 2-1: config 0 descriptor??
[  197.690078][ T5780] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  198.080891][    T9] logitech-djreceiver 0003:046D:C534.000E: unknown main item tag 0x0
[  198.128031][    T8] wacom 0003:056A:0029.000F: Unknown device_type for 'HID 056a:0029'. Assuming pen.
[  198.144304][    T9] logitech-djreceiver 0003:046D:C534.000E: unknown main item tag 0x0
[  198.160985][    T9] logitech-djreceiver 0003:046D:C534.000E: unknown main item tag 0x0
[  198.188352][    T8] wacom 0003:056A:0029.000F: hidraw0: USB HID v0.00 Device [HID 056a:0029] on usb-dummy_hcd.2-1/input0
[  198.224854][    T9] logitech-djreceiver 0003:046D:C534.000E: hidraw1: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.1-1/input20
[  198.247377][    T8] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0029.000F/input/input9
[  198.303795][    T9] usb 2-1: USB disconnect, device number 6
[  198.390224][ T8936] loop3: detected capacity change from 0 to 64
[  198.400482][    T8] usb 3-1: USB disconnect, device number 6
[  198.471059][ T8932] fido_id[8932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  198.485819][ T8935] fido_id[8935]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  198.765675][ T8942] 9pnet_fd: p9_fd_create_unix (8942): problem connecting socket: ./file0: -111
[  199.094719][ T8950] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  199.104039][ T8950] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  199.112783][ T8950] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  199.122058][ T8950] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.216541][ T8954] loop3: detected capacity change from 0 to 1024
[  199.281482][ T8954] hfsplus: bad catalog entry type
[  199.375580][ T2881] hfsplus: b-tree write err: -5, ino 4
[  199.528594][ T8960] loop4: detected capacity change from 0 to 2048
[  199.644068][ T8967] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.743477][ T8960] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12
[  199.804118][ T8960] Remounting filesystem read-only
[  199.822577][ T8960] NILFS (loop4): the device already has a read-only mount.
[  199.868367][ T8969] loop2: detected capacity change from 0 to 512
[  199.948230][ T8969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.015259][ T8969] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.110390][ T8977] loop3: detected capacity change from 0 to 512
[  200.148886][ T8977] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  200.163139][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.188479][ T8977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  200.249067][ T8977] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1159: invalid indirect mapped block 4294967295 (level 1)
[  200.308455][ T8977] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1159: invalid indirect mapped block 4294967295 (level 1)
[  200.365039][ T8977] EXT4-fs (loop3): 2 truncates cleaned up
[  200.388011][ T8977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.576567][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.108804][ T8996] loop3: detected capacity change from 0 to 4096
[  201.142784][ T8996] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  201.249974][ T8996] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  201.561798][ T9009] loop4: detected capacity change from 0 to 64
[  202.025526][ T9001] loop2: detected capacity change from 0 to 32768
[  202.466701][ T9026] loop2: detected capacity change from 0 to 2048
[  202.525687][ T9026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.044933][ T9043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1187'.
[  203.114246][ T9045] loop3: detected capacity change from 0 to 128
[  203.136429][ T9045] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  203.177871][ T9045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.266269][ T9045] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05
[  203.293681][ T9045] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed
[  203.321234][ T9047] loop4: detected capacity change from 0 to 4096
[  203.410202][ T9052] loop1: detected capacity change from 0 to 256
[  203.457967][ T5780] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh
[  203.476455][ T5780] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh
[  203.487897][ T9054] loop2: detected capacity change from 0 to 1024
[  203.502789][ T9047] ntfs: volume version 3.1.
[  203.543060][ T9052] FAT-fs (loop1): Directory bread(block 64) failed
[  203.560586][ T9052] FAT-fs (loop1): Directory bread(block 65) failed
[  203.560900][ T9054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.573609][ T9052] FAT-fs (loop1): Directory bread(block 66) failed
[  203.617427][ T9052] FAT-fs (loop1): Directory bread(block 67) failed
[  203.653497][ T9052] FAT-fs (loop1): Directory bread(block 68) failed
[  203.661563][ T9052] FAT-fs (loop1): Directory bread(block 69) failed
[  203.714579][ T9052] FAT-fs (loop1): Directory bread(block 70) failed
[  203.721197][ T9052] FAT-fs (loop1): Directory bread(block 71) failed
[  203.755403][ T9052] FAT-fs (loop1): Directory bread(block 72) failed
[  203.778874][ T9052] FAT-fs (loop1): Directory bread(block 73) failed
[  204.099079][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.176291][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.277577][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.404488][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.477035][    C1] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  204.560699][ T9064] loop2: detected capacity change from 0 to 1024
[  204.572805][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.754644][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  204.977096][    T9] usb 5-1: Using ep0 maxpacket: 16
[  205.000951][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  205.039018][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[  205.086228][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.135177][    T9] usb 5-1: config 0 descriptor??
[  205.218078][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  205.233856][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  205.243047][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  205.271515][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  205.280793][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  205.290592][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  205.449473][ T9079] loop2: detected capacity change from 0 to 2048
[  205.510093][ T9079] EXT4-fs: Ignoring removed bh option
[  205.610405][ T9079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.644780][    T9] apple 0003:05AC:029F.0010: unknown main item tag 0x0
[  205.651747][    T9] apple 0003:05AC:029F.0010: unknown main item tag 0x0
[  205.685236][    T9] apple 0003:05AC:029F.0010: unknown main item tag 0x0
[  205.692229][    T9] apple 0003:05AC:029F.0010: unknown main item tag 0x0
[  205.700980][    T9] apple 0003:05AC:029F.0010: unknown main item tag 0x0
[  205.711240][    T9] apple 0003:05AC:029F.0010: hidraw0: USB HID v0.fe Device [HID 05ac:029f] on usb-dummy_hcd.4-1/input0
[  205.734040][   T27] audit: type=1800 audit(1755229629.145:30): pid=9079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1207" name="file1" dev="loop2" ino=15 res=0 errno=0
[  205.828602][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.975841][   T23] usb 5-1: USB disconnect, device number 5
[  206.048794][ T9093] fido_id[9093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  206.914182][ T9074] chnl_net:caif_netlink_parms(): no params data found
[  206.959530][ T9119] loop2: detected capacity change from 0 to 512
[  207.038184][ T9119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.059961][ T9119] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.136046][ T9123] loop4: detected capacity change from 0 to 4096
[  207.158813][ T9123] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  207.178770][ T9119] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #12: comm syz.2.1217: invalid size
[  207.192554][ T9098] loop1: detected capacity change from 0 to 32768
[  207.240234][ T9119] EXT4-fs (loop2): Remounting filesystem read-only
[  207.347941][ T9123] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  207.355394][ T5792] Bluetooth: hci1: command tx timeout
[  207.402545][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.424380][   T42] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  207.467151][   T42] Quota error (device loop2): write_blk: dquota write failed
[  207.467204][ T9123] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  207.475343][   T42] Quota error (device loop2): free_dqentry: Can't write quota data block 5
[  207.954174][   T12] hsr_slave_0: left promiscuous mode
[  208.003501][   T12] hsr_slave_1: left promiscuous mode
[  208.080964][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.111764][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.134844][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.152598][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.172773][   T12] bridge_slave_1: left allmulticast mode
[  208.184526][   T12] bridge_slave_1: left promiscuous mode
[  208.201299][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.216517][   T12] bridge_slave_0: left allmulticast mode
[  208.229212][   T12] bridge_slave_0: left promiscuous mode
[  208.238590][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.283374][   T12] veth1_macvtap: left promiscuous mode
[  208.289198][   T12] veth0_macvtap: left promiscuous mode
[  208.295421][   T12] veth1_vlan: left promiscuous mode
[  208.300961][   T12] veth0_vlan: left promiscuous mode
[  208.499041][   T12] bond1 (unregistering): Released all slaves
[  208.980398][   T12] team0 (unregistering): Port device team_slave_1 removed
[  209.026759][   T12] team0 (unregistering): Port device team_slave_0 removed
[  209.072527][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.122081][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.433464][ T5792] Bluetooth: hci1: command tx timeout
[  209.625802][   T12] bond0 (unregistering): Released all slaves
[  209.710834][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.719530][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.727155][ T9074] bridge_slave_0: entered allmulticast mode
[  209.735188][ T9074] bridge_slave_0: entered promiscuous mode
[  209.813602][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.846726][ T9074] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.875582][ T9074] bridge_slave_1: entered allmulticast mode
[  209.883068][ T9074] bridge_slave_1: entered promiscuous mode
[  209.977230][ T9074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.007385][ T9074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.284528][ T9074] team0: Port device team_slave_0 added
[  210.325043][ T9074] team0: Port device team_slave_1 added
[  210.506186][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.519491][ T9171] loop2: detected capacity change from 0 to 64
[  210.540092][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.624028][ T9074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.675638][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.682750][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.751298][ T9074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.839981][ T9178] sp0: Synchronizing with TNC
[  211.203619][ T9192] loop4: detected capacity change from 0 to 256
[  211.217802][ T9074] hsr_slave_0: entered promiscuous mode
[  211.305821][ T9192] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  211.314863][ T9074] hsr_slave_1: entered promiscuous mode
[  211.366535][ T9074] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.406037][ T9074] Cannot create hsr debugfs directory
[  211.528816][ T5792] Bluetooth: hci1: command tx timeout
[  211.731315][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1243'.
[  211.767638][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1245'.
[  212.316271][ T9074] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  212.349165][ T9074] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  212.437911][ T9074] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  212.491034][ T9074] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  212.844380][ T9074] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.942556][ T9074] 8021q: adding VLAN 0 to HW filter on device team0
[  212.982847][ T2881] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.990124][ T2881] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.029371][ T2881] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.036711][ T2881] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.109452][ T9214] loop1: detected capacity change from 0 to 32768
[  213.256899][ T9214] jfs_strtoUCS: char2uni returned -22.
[  213.291114][ T9214] charset = euc-jp, char = 0xd4
[  213.593772][ T5792] Bluetooth: hci1: command tx timeout
[  213.868881][ T9074] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.298333][   T27] audit: type=1326 audit(1755229637.705:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8e78ebe9 code=0x7ffc0000
[  214.372511][   T27] audit: type=1326 audit(1755229637.705:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8e78ebe9 code=0x7ffc0000
[  214.388460][ T9287] loop4: detected capacity change from 0 to 256
[  214.444620][ T9281] loop1: detected capacity change from 0 to 4096
[  214.465065][   T27] audit: type=1326 audit(1755229637.735:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcc8e78ebe9 code=0x7ffc0000
[  214.519015][ T9281] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  214.546396][ T9287] FAT-fs (loop4): Directory bread(block 64) failed
[  214.575880][ T9287] FAT-fs (loop4): Directory bread(block 65) failed
[  214.576836][   T27] audit: type=1326 audit(1755229637.735:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8e78ebe9 code=0x7ffc0000
[  214.613088][ T9287] FAT-fs (loop4): Directory bread(block 66) failed
[  214.641713][ T9287] FAT-fs (loop4): Directory bread(block 67) failed
[  214.683574][ T9287] FAT-fs (loop4): Directory bread(block 68) failed
[  214.707667][   T27] audit: type=1326 audit(1755229637.735:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8e78ebe9 code=0x7ffc0000
[  214.719870][ T9287] FAT-fs (loop4): Directory bread(block 69) failed
[  214.743432][ T9281] ntfs3: loop1: Failed to load $Extend (-22).
[  214.749575][ T9281] ntfs3: loop1: Failed to initialize $Extend.
[  214.805239][ T9287] FAT-fs (loop4): Directory bread(block 70) failed
[  214.833308][   T27] audit: type=1326 audit(1755229637.735:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fcc8e78ebe9 code=0x7ffc0000
[  214.837970][ T9287] FAT-fs (loop4): Directory bread(block 71) failed
[  214.875917][   T27] audit: type=1326 audit(1755229637.735:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9283 comm="syz.2.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8e78ebe9 code=0x7ffc0000
[  214.926211][ T9287] FAT-fs (loop4): Directory bread(block 72) failed
[  214.944060][ T9287] FAT-fs (loop4): Directory bread(block 73) failed
[  215.257892][ T9074] veth0_vlan: entered promiscuous mode
[  215.330135][ T9074] veth1_vlan: entered promiscuous mode
[  215.483079][ T9074] veth0_macvtap: entered promiscuous mode
[  215.543553][ T9074] veth1_macvtap: entered promiscuous mode
[  215.627030][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.691070][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.713350][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.743273][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.775110][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.806154][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.835486][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.887099][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.925317][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.952542][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.978920][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.999393][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.020337][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.042747][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.101139][ T9074] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.127524][ T9074] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.142910][ T9074] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.152503][ T9074] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.341411][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.369776][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.415050][ T9313] loop1: detected capacity change from 0 to 32768
[  216.458592][ T9313] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  216.475256][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.518182][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.584193][ T5781] ocfs2: Unmounting device (7,1) on (node local)
[  216.621149][ T9328] loop4: detected capacity change from 0 to 4096
[  216.706027][ T9328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.960303][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.537290][ T9361] loop4: detected capacity change from 0 to 1024
[  217.943396][   T27] audit: type=1326 audit(1755229641.345:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4e78ebe9 code=0x7fc00000
[  218.333901][ T9375] loop4: detected capacity change from 0 to 4096
[  218.524226][ T9388] loop5: detected capacity change from 0 to 128
[  218.588261][ T9375] ntfs3: loop4: failed to convert "0080" to macceltic
[  218.591681][ T9388] EXT4-fs (loop5): Test dummy encryption mode enabled
[  218.616994][ T9375] ntfs3: loop4: failed to convert name for inode 1e.
[  218.669453][ T9388] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  218.751813][ T9388] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  219.206523][ T9411] program syz.4.1305 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  219.236798][ T9388] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  219.401464][ T9418] loop2: detected capacity change from 0 to 512
[  219.427553][ T9074] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  219.462223][ T9418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  219.538684][ T9418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.683710][ T9418] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.832051][ T9418] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  220.017820][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.410721][ T9425] loop1: detected capacity change from 0 to 32768
[  220.627232][ T9450] geneve2: entered promiscuous mode
[  220.632544][ T9450] geneve2: entered allmulticast mode
[  221.045749][ T9466] loop2: detected capacity change from 0 to 16
[  221.053027][ T9466] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  221.843487][ T5845] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  222.036554][ T5845] usb 3-1: unable to get BOS descriptor or descriptor too short
[  222.054762][ T5845] usb 3-1: config 33 has an invalid interface number: 225 but max is 2
[  222.065038][ T5845] usb 3-1: config 33 has an invalid interface number: 228 but max is 2
[  222.083327][ T5845] usb 3-1: config 33 has an invalid interface number: 228 but max is 2
[  222.133293][ T5845] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  222.163979][ T5845] usb 3-1: config 33 has 2 interfaces, different from the descriptor's value: 3
[  222.185400][ T5845] usb 3-1: config 33 has no interface number 0
[  222.191643][ T5845] usb 3-1: config 33 has no interface number 1
[  222.202104][ T5845] usb 3-1: config 33 interface 228 altsetting 3 bulk endpoint 0x8 has invalid maxpacket 1023
[  222.216954][ T5845] usb 3-1: config 33 interface 228 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  222.236467][ T5845] usb 3-1: config 33 interface 228 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  222.251553][ T5845] usb 3-1: config 33 interface 228 altsetting 3 bulk endpoint 0xC has invalid maxpacket 1023
[  222.263680][ T5845] usb 3-1: config 33 interface 228 altsetting 204 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  222.279263][ T5845] usb 3-1: config 33 interface 228 altsetting 204 has an invalid endpoint with address 0x80, skipping
[  222.295230][ T5845] usb 3-1: config 33 interface 228 altsetting 204 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[  222.311488][ T5845] usb 3-1: config 33 interface 225 has no altsetting 0
[  222.322802][ T5845] usb 3-1: config 33 interface 228 has no altsetting 0
[  222.332707][ T5845] usb 3-1: config 33 interface 228 has no altsetting 1
[  222.346352][ T5845] usb 3-1: New USB device found, idVendor=12d1, idProduct=7b1f, bcdDevice=ca.cf
[  222.353360][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  222.356008][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.391491][ T5845] usb 3-1: Product: syz
[  222.403293][ T5845] usb 3-1: Manufacturer: syz
[  222.407966][ T5845] usb 3-1: SerialNumber: syz
[  222.420739][ T9486] loop1: detected capacity change from 0 to 32768
[  222.482915][ T9486] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  222.545044][   T23] usb 6-1: Using ep0 maxpacket: 32
[  222.555084][   T23] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  222.564231][   T23] usb 6-1: config 0 has no interface number 0
[  222.573133][   T23] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  222.582575][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.592062][   T23] usb 6-1: Product: syz
[  222.596739][   T23] usb 6-1: Manufacturer: syz
[  222.601375][   T23] usb 6-1: SerialNumber: syz
[  222.605597][   T27] audit: type=1800 audit(1755229646.005:39): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1328" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  222.632044][   T23] usb 6-1: config 0 descriptor??
[  222.656107][   T23] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  222.694047][ T5845] option 3-1:33.225: GSM modem (1-port) converter detected
[  222.698260][   T27] audit: type=1800 audit(1755229646.035:40): pid=9486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1328" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  222.723174][   T23] usb 6-1: selecting invalid altsetting 1
[  222.730670][   T23] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  222.733008][ T5845] rndis_host 3-1:33.228: skipping garbage
[  222.751455][   T23] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  222.757467][ T5845] rndis_host 3-1:33.228: skipping garbage
[  222.764892][   T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  222.781046][ T5781] ocfs2: Unmounting device (7,1) on (node local)
[  222.798417][   T23] usb 6-1: media controller created
[  222.803541][ T5845] usb 3-1: bad CDC descriptors
[  222.875559][ T5845] usb 3-1: USB disconnect, device number 7
[  222.890193][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  222.907471][ T9498] usb 6-1: dvb_usb_ce6230: I2C read not implemented
[  222.916240][ T5845] option 3-1:33.225: device disconnected
[  223.058475][   T23] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  223.074765][   T23] zl10353_read_register: readreg error (reg=127, ret==-71)
[  223.113450][   T23] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  223.258357][   T23] usb 6-1: USB disconnect, device number 2
[  223.931533][ T9532] loop4: detected capacity change from 0 to 2048
[  223.942596][ T9532] EXT4-fs: Ignoring removed bh option
[  223.979043][ T9532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.024704][   T27] audit: type=1800 audit(1755229647.435:41): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1343" name="file1" dev="loop4" ino=15 res=0 errno=0
[  224.069528][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.337055][ T9545] loop1: detected capacity change from 0 to 4096
[  224.358994][ T9545] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  224.397254][ T9549] sp0: Synchronizing with TNC
[  224.532469][ T9545] ntfs: volume version 3.1.
[  224.694910][ T9557] netem: incorrect gi model size
[  224.709166][ T9557] netem: change failed
[  224.745945][ T9545] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13.  You might want to try to use the mount option nls=utf8.
[  224.829939][ T9545] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  225.097794][ T9568] loop5: detected capacity change from 0 to 2048
[  225.111834][ T9568] EXT4-fs: Ignoring removed bh option
[  225.183314][ T9572] loop4: detected capacity change from 0 to 256
[  225.190695][ T9572] exfat: Deprecated parameter 'namecase'
[  225.236497][ T9568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.267728][ T9572] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  225.376601][   T27] audit: type=1800 audit(1755229648.765:42): pid=9568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1357" name="file1" dev="loop5" ino=15 res=0 errno=0
[  225.497318][ T9074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.499138][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  225.801190][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'.
[  225.840088][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1362'.
[  226.053347][ T5826] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  226.133369][    T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  226.221842][ T9608] loop4: detected capacity change from 0 to 1024
[  226.237187][ T5826] usb 6-1: Using ep0 maxpacket: 16
[  226.266373][ T5826] usb 6-1: config 0 has no interfaces?
[  226.288402][ T5826] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  226.299413][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.318310][ T5826] usb 6-1: Product: syz
[  226.322558][ T5826] usb 6-1: Manufacturer: syz
[  226.358347][ T5826] usb 6-1: SerialNumber: syz
[  226.373654][    T8] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  226.382832][ T5826] usb 6-1: config 0 descriptor??
[  226.400139][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  226.430504][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  226.472134][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  226.502239][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  226.533268][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  226.536721][ T9614] loop2: detected capacity change from 0 to 2048
[  226.573164][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  226.588886][ T9614] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  226.606739][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  226.623730][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  226.663883][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  226.677934][ T9618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  226.689709][ T5771] udevd[5771]: incorrect nilfs2 checksum on /dev/loop2
[  226.697596][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  226.718043][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  226.763525][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  226.800068][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  226.819406][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  226.845951][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  226.869377][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  226.897690][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  226.918991][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  226.939284][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  226.953774][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  226.993650][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  227.091860][    T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  227.106841][ T9625] loop2: detected capacity change from 0 to 64
[  227.115925][    T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  227.156666][    T8] usb 2-1: config 0 interface 0 has no altsetting 0
[  227.205050][    T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  227.237698][ T5826] usb 6-1: USB disconnect, device number 3
[  227.241148][    T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  227.258748][    T8] usb 2-1: Product: syz
[  227.264983][    T8] usb 2-1: Manufacturer: syz
[  227.269626][    T8] usb 2-1: SerialNumber: syz
[  227.315875][    T8] usb 2-1: config 0 descriptor??
[  227.338036][    T8] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  227.672402][ T5770] usb 2-1: USB disconnect, device number 7
[  227.689626][ T5770] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  227.879832][ T9636] loop5: detected capacity change from 0 to 32768
[  228.364996][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'.
[  229.121920][ T9664] loop2: detected capacity change from 0 to 512
[  229.150274][ T9664] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  229.332123][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1391'.
[  229.628011][ T9649] loop5: detected capacity change from 0 to 32768
[  229.653557][ T9649] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1377 (9649)
[  229.691042][ T9649] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  229.703757][ T9649] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  229.712691][ T9649] BTRFS info (device loop5): using free space tree
[  229.855767][ T9649] BTRFS info (device loop5): enabling ssd optimizations
[  229.862802][ T9649] BTRFS info (device loop5): auto enabling async discard
[  230.033847][ T9074] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  230.152341][ T5771] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (5771)
[  230.465046][ T9698] netlink: 'syz.2.1406': attribute type 3 has an invalid length.
[  230.489762][ T9668] loop1: detected capacity change from 0 to 40427
[  230.652001][ T9668] F2FS-fs (loop1): Found nat_bits in checkpoint
[  230.900461][ T9668] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  231.606857][ T9732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1413'.
[  231.996382][ T9742] loop5: detected capacity change from 0 to 4096
[  232.081508][ T9742] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  232.100969][ T9742] ntfs3: loop5: Failed to load $Extend (-2).
[  232.112769][ T9747] loop2: detected capacity change from 0 to 4096
[  232.114135][ T9742] ntfs3: loop5: Failed to initialize $Extend.
[  232.185676][ T9747] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  232.455019][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'.
[  232.636345][ T9754] [U] �ÿ
[  233.084705][ T9769] loop5: detected capacity change from 0 to 4096
[  233.102424][ T9769] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  233.195393][ T9769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.347645][ T9781] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  233.361524][ T9781] macvtap1: entered promiscuous mode
[  233.375043][ T9781] macvtap1: entered allmulticast mode
[  233.386025][ T9781] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  233.400699][ T9074] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.544909][ T9783] loop5: detected capacity change from 0 to 64
[  233.780566][ T9785] loop4: detected capacity change from 0 to 512
[  233.999991][ T9791] loop4: detected capacity change from 0 to 512
[  234.037007][ T9791] EXT4-fs: Ignoring removed orlov option
[  234.053163][ T9791] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  234.106388][ T9775] loop2: detected capacity change from 0 to 32768
[  234.132530][ T9791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  234.167970][ T9775] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1434 (9775)
[  234.201390][ T9775] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  234.211840][ T9775] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  234.220659][ T9775] BTRFS info (device loop2): setting nodatacow, compression disabled
[  234.229107][ T9775] BTRFS info (device loop2): setting datacow
[  234.233953][ T9791] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.1439: corrupted in-inode xattr: e_value size too large
[  234.235688][ T9775] BTRFS info (device loop2): doing ref verification
[  234.256727][ T9775] BTRFS info (device loop2): force clearing of disk cache
[  234.264749][ T9775] BTRFS info (device loop2): turning off barriers
[  234.271582][ T9775] BTRFS info (device loop2): enabling ssd optimizations
[  234.292182][ T9775] BTRFS info (device loop2): using spread ssd allocation scheme
[  234.312492][ T9775] BTRFS info (device loop2): using free space tree
[  234.334911][ T9791] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1439: couldn't read orphan inode 15 (err -117)
[  234.371494][ T9791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.471986][ T9775] BTRFS info (device loop2): rebuilding free space tree
[  234.624041][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.788704][ T5779] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  234.793463][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1444'.
[  235.469693][ T9835] loop5: detected capacity change from 0 to 128
[  235.531513][ T9835] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  236.046003][ T9851] loop4: detected capacity change from 0 to 256
[  236.131940][ T9856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1464'.
[  236.152451][ T9851] FAT-fs (loop4): Directory bread(block 64) failed
[  236.191330][ T9851] FAT-fs (loop4): Directory bread(block 65) failed
[  236.208195][ T9851] FAT-fs (loop4): Directory bread(block 66) failed
[  236.245823][ T9851] FAT-fs (loop4): Directory bread(block 67) failed
[  236.252921][ T9851] FAT-fs (loop4): Directory bread(block 68) failed
[  236.303519][ T9851] FAT-fs (loop4): Directory bread(block 69) failed
[  236.316067][ T9851] FAT-fs (loop4): Directory bread(block 70) failed
[  236.322671][ T9851] FAT-fs (loop4): Directory bread(block 71) failed
[  236.340090][ T9851] FAT-fs (loop4): Directory bread(block 72) failed
[  236.359548][ T9851] FAT-fs (loop4): Directory bread(block 73) failed
[  236.632126][ T9869] loop5: detected capacity change from 0 to 128
[  236.893479][ T9875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1473'.
[  236.913552][ T9876] netlink: 'syz.4.1481': attribute type 4 has an invalid length.
[  236.921357][ T9876] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1481'.
[  237.069942][ T9883] loop2: detected capacity change from 0 to 256
[  237.119540][ T9883] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  237.174201][   T27] audit: type=1800 audit(1755229660.575:43): pid=9883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1476" name="file1" dev="loop2" ino=1048735 res=0 errno=0
[  237.229795][ T9887] loop1: detected capacity change from 0 to 2048
[  237.250120][ T9887] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051
[  237.279541][ T9883] syz.2.1476: attempt to access beyond end of device
[  237.279541][ T9883] loop2: rw=0, sector=256, nr_sectors = 8 limit=256
[  237.352819][ T9887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.464050][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'.
[  237.485593][ T9891] loop5: detected capacity change from 0 to 256
[  237.965833][ T9906] loop4: detected capacity change from 0 to 1024
[  238.043063][ T9906] syz.4.1487: attempt to access beyond end of device
[  238.043063][ T9906] loop4: rw=0, sector=393220, nr_sectors = 2 limit=1024
[  238.290824][ T9914] loop1: detected capacity change from 0 to 256
[  238.350353][ T9914] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf059ff26, utbl_chksum : 0xe619d30d)
[  238.602729][ T9924] loop2: detected capacity change from 0 to 1024
[  238.629750][ T9924] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  239.101851][ T9932] loop5: detected capacity change from 0 to 256
[  239.181852][ T9932] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  239.632036][ T9928] loop4: detected capacity change from 0 to 32768
[  239.663945][ T9921] loop1: detected capacity change from 0 to 40427
[  239.691333][ T9921] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  239.705332][ T9921] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  239.773013][ T9928] JBD2: Ignoring recovery information on journal
[  239.790148][ T9921] F2FS-fs (loop1): Found nat_bits in checkpoint
[  239.888404][ T9921] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  239.916316][ T9921] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  239.982351][ T9928] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  240.406599][ T6260] ocfs2: Unmounting device (7,4) on (node local)
[  240.497397][ T9948] loop5: detected capacity change from 0 to 2048
[  240.529372][ T9948] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.982098][ T9954] loop1: detected capacity change from 0 to 1024
[  241.059885][ T9954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.090892][ T9930] loop2: detected capacity change from 0 to 65536
[  241.100581][ T9954] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.193660][ T9930] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  241.338789][ T9930] XFS (loop2): Ending clean mount
[  241.439471][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.457421][ T9966] loop5: detected capacity change from 0 to 4096
[  241.607478][ T5779] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  241.640700][ T9966] ntfs: volume version 3.1.
[  241.714436][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'.
[  242.395863][ T9991] loop4: detected capacity change from 0 to 64
[  242.625761][T10000] loop1: detected capacity change from 0 to 1024
[  242.663617][T10000] EXT4-fs: Ignoring removed nomblk_io_submit option
[  242.689742][T10000] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  242.720330][T10002] loop5: detected capacity change from 0 to 8
[  242.722191][T10000] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  242.740934][T10002] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  242.752937][T10000] EXT4-fs (loop1): Test dummy encryption mode enabled
[  242.846253][T10000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.035322][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.380790][T10023] loop1: detected capacity change from 0 to 64
[  243.521654][T10027] program syz.5.1536 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  243.927835][T10031] loop4: detected capacity change from 0 to 4096
[  244.026073][T10031] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  244.791692][T10059] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1552'.
[  245.267679][T10049] loop1: detected capacity change from 0 to 32768
[  245.282155][T10049] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1545 (10049)
[  245.341096][T10049] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  245.375808][T10049] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  245.390093][T10049] BTRFS info (device loop1): using free space tree
[  245.503017][T10088] tmpfs: Too few inodes for current use
[  245.516679][T10049] BTRFS info (device loop1): enabling ssd optimizations
[  245.556764][T10049] BTRFS info (device loop1): auto enabling async discard
[  245.739049][ T5781] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  246.793046][T10112] loop2: detected capacity change from 0 to 256
[  246.817896][T10111] loop1: detected capacity change from 0 to 1024
[  246.843758][T10112] FAT-fs (loop2): Directory bread(block 64) failed
[  246.864609][T10112] FAT-fs (loop2): Directory bread(block 65) failed
[  246.903504][T10112] FAT-fs (loop2): Directory bread(block 66) failed
[  246.910118][T10112] FAT-fs (loop2): Directory bread(block 67) failed
[  246.943426][T10112] FAT-fs (loop2): Directory bread(block 68) failed
[  246.950124][T10112] FAT-fs (loop2): Directory bread(block 69) failed
[  246.995564][ T2881] hfsplus: b-tree write err: -5, ino 4
[  247.020642][T10112] FAT-fs (loop2): Directory bread(block 70) failed
[  247.050973][T10112] FAT-fs (loop2): Directory bread(block 71) failed
[  247.054127][T10116] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  247.073852][T10112] FAT-fs (loop2): Directory bread(block 72) failed
[  247.080555][T10112] FAT-fs (loop2): Directory bread(block 73) failed
[  247.863823][ T5845] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  248.019624][T10123] loop1: detected capacity change from 0 to 32768
[  248.053424][T10123] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.065879][ T5845] usb 3-1: config 0 has an invalid interface number: 28 but max is 0
[  248.087511][T10123] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  248.099808][T10123] BTRFS info (device loop1): using free space tree
[  248.102032][ T5845] usb 3-1: config 0 has no interface number 0
[  248.117528][ T5845] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.165019][ T5845] usb 3-1: config 0 interface 28 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.198769][ T5845] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  248.227544][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.244225][ T5845] usb 3-1: config 0 descriptor??
[  248.261390][T10123] BTRFS info (device loop1): enabling ssd optimizations
[  248.296037][T10123] BTRFS info (device loop1): auto enabling async discard
[  248.548771][T10164] loop5: detected capacity change from 0 to 256
[  248.595108][T10164] exfat: Deprecated parameter 'namecase'
[  248.651862][T10164] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  248.692781][ T5845] logitech-djreceiver 0003:046D:C534.0011: unbalanced collection at end of report description
[  248.720536][ T5781] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.746540][ T5845] logitech-djreceiver 0003:046D:C534.0011: logi_dj_probe: parse failed
[  248.783329][ T5845] logitech-djreceiver: probe of 0003:046D:C534.0011 failed with error -22
[  248.806258][T10164] process 'syz.5.1586' launched './file1' with NULL argv: empty string added
[  249.019894][ T5785] usb 3-1: USB disconnect, device number 8
[  249.072345][T10172] loop4: detected capacity change from 0 to 256
[  249.098527][T10172] exfat: Deprecated parameter 'utf8'
[  249.150995][T10172] exfat: Deprecated parameter 'namecase'
[  249.182383][T10172] exfat: Deprecated parameter 'namecase'
[  249.208757][T10172] exfat: Deprecated parameter 'utf8'
[  249.296731][T10172] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  249.899780][T10189] loop2: detected capacity change from 0 to 2048
[  250.002521][T10189] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  250.149827][T10197] loop4: detected capacity change from 0 to 256
[  250.174369][T10197] exfat: Deprecated parameter 'utf8'
[  250.179789][T10197] exfat: Deprecated parameter 'namecase'
[  250.238881][T10197] exfat: Deprecated parameter 'namecase'
[  250.272737][T10197] exfat: Deprecated parameter 'utf8'
[  250.339415][T10197] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[  250.408169][T10203] loop2: detected capacity change from 0 to 1764
[  250.659302][T10211] ptrace attach of "./syz-executor exec"[6260] was attempted by ""[10211]
[  250.671675][T10210] netlink: 'syz.2.1609': attribute type 10 has an invalid length.
[  250.692972][T10210] batman_adv: batadv0: Adding interface: team0
[  250.713776][T10210] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.761122][T10210] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  250.792629][T10214] netlink: 'syz.2.1609': attribute type 10 has an invalid length.
[  250.811355][T10214] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1609'.
[  250.833973][T10214] team0: entered promiscuous mode
[  250.842532][T10214] team_slave_0: entered promiscuous mode
[  250.849270][T10214] team_slave_1: entered promiscuous mode
[  250.864177][T10214] 8021q: adding VLAN 0 to HW filter on device team0
[  250.871276][T10214] batman_adv: batadv0: Interface activated: team0
[  250.893360][ T5770] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  250.903518][T10218] loop5: detected capacity change from 0 to 1024
[  250.912219][T10214] batman_adv: batadv0: Interface deactivated: team0
[  250.943697][T10214] batman_adv: batadv0: Removing interface: team0
[  250.989127][T10214] bridge0: port 3(team0) entered blocking state
[  251.006343][T10214] bridge0: port 3(team0) entered disabled state
[  251.019581][T10214] team0: entered allmulticast mode
[  251.026860][ T1319] hfsplus: b-tree write err: -5, ino 4
[  251.048476][T10214] team_slave_0: entered allmulticast mode
[  251.073526][T10214] team_slave_1: entered allmulticast mode
[  251.081572][T10214] team0: left allmulticast mode
[  251.092875][ T5770] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  251.111175][ T5770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  251.133272][T10214] team_slave_0: left allmulticast mode
[  251.138985][T10214] team_slave_1: left allmulticast mode
[  251.139257][ T5770] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  251.160659][ T5770] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  251.190993][ T5770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.232230][ T5770] usb 2-1: config 0 descriptor??
[  251.238578][T10207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  251.674648][ T5770] petalynx 0003:18B1:0037.0012: unknown main item tag 0x0
[  251.701252][ T5770] petalynx 0003:18B1:0037.0012: unknown main item tag 0x0
[  251.723545][ T5770] petalynx 0003:18B1:0037.0012: unknown main item tag 0x0
[  251.745161][ T5770] petalynx 0003:18B1:0037.0012: unknown main item tag 0x0
[  251.767576][ T5770] petalynx 0003:18B1:0037.0012: unknown main item tag 0x0
[  251.788433][ T5770] petalynx 0003:18B1:0037.0012: hidraw0: USB HID v0.05 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0
[  251.823553][T10233] tipc: Enabling of bearer <ud#:s> rejected, media not registered
[  251.835704][T10222] loop5: detected capacity change from 0 to 32768
[  251.864785][ T5770] usb 2-1: USB disconnect, device number 8
[  251.923671][T10222] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  251.960291][T10234] fido_id[10234]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  252.168790][ T9074] ocfs2: Unmounting device (7,5) on (node local)
[  252.518834][T10248] sp0: Synchronizing with TNC
[  252.573993][T10252] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.954944][T10262] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1632'.
[  252.977978][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1632'.
[  253.699958][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'.
[  253.819651][T10295] loop2: detected capacity change from 0 to 1024
[  253.923834][T10295] hfsplus: bad catalog entry type
[  253.981411][   T11] hfsplus: b-tree write err: -5, ino 4
[  254.018617][T10301] loop1: detected capacity change from 0 to 512
[  254.091550][T10301] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1651: casefold flag without casefold feature
[  254.189544][T10301] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1651: couldn't read orphan inode 15 (err -117)
[  254.213816][T10308] loop2: detected capacity change from 0 to 256
[  254.309818][T10301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.415072][T10301] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #2: comm syz.1.1651: invalid size
[  254.536426][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.783390][ T5845] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  254.979056][T10310] loop5: detected capacity change from 0 to 32768
[  254.993360][ T5845] usb 3-1: Using ep0 maxpacket: 16
[  255.005932][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.020937][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.057448][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  255.084264][T10310] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  255.096550][ T5845] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  255.143341][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.203087][ T5845] usb 3-1: config 0 descriptor??
[  255.231204][T10310] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  255.290313][T10310] XFS (loop5): Starting recovery (logdev: internal)
[  255.313736][    T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  255.342026][T10310] XFS (loop5): Ending recovery (logdev: internal)
[  255.362716][T10310] XFS (loop5): Quotacheck needed: Please wait.
[  255.397582][T10322] loop1: detected capacity change from 0 to 40427
[  255.450504][T10322] F2FS-fs (loop1): invalid crc value
[  255.451772][T10310] XFS (loop5): Quotacheck: Done.
[  255.499997][T10322] F2FS-fs (loop1): Found nat_bits in checkpoint
[  255.506722][    T8] usb 5-1: Using ep0 maxpacket: 32
[  255.533014][    T8] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  255.573461][    T8] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  255.603412][    T8] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  255.633439][ T9074] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  255.651960][    T8] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  255.667341][ T5845] microsoft 0003:045E:07DA.0013: unbalanced collection at end of report description
[  255.689439][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.694174][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  255.720331][T10322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  255.745626][ T5845] microsoft 0003:045E:07DA.0013: parse failed
[  255.751813][    T8] usb 5-1: Product: syz
[  255.763536][ T5845] microsoft: probe of 0003:045E:07DA.0013 failed with error -22
[  255.779571][    T8] usb 5-1: Manufacturer: syz
[  255.814108][    T8] usb 5-1: SerialNumber: syz
[  255.846341][    T8] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  255.869241][   T23] usb 3-1: USB disconnect, device number 9
[  255.879486][    T8] imon 5-1:155.0: unable to initialize intf0, err -19
[  255.903596][    T8] imon:imon_probe: failed to initialize context!
[  255.915579][    T8] imon 5-1:155.0: unable to register, err -19
[  255.979165][ T5781] syz-executor: attempt to access beyond end of device
[  255.979165][ T5781] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  256.017542][ T5781] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  256.124396][    T8] usb 5-1: USB disconnect, device number 6
[  256.879231][T10356] loop4: detected capacity change from 0 to 512
[  256.918950][T10356] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  256.978874][T10356] EXT4-fs (loop4): 1 truncate cleaned up
[  256.990166][T10356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.009794][T10356] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1670: bg 0: block 256: padding at end of block bitmap is not set
[  257.079197][T10356] EXT4-fs (loop4): Remounting filesystem read-only
[  257.270607][T10371] netlink: 'syz.2.1678': attribute type 5 has an invalid length.
[  257.285599][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1678'.
[  257.289692][ T6260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.661790][T10376] loop1: detected capacity change from 0 to 8192
[  257.692808][T10376] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  257.789787][T10376] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  257.840747][T10376] REISERFS (device loop1): using ordered data mode
[  257.870427][T10382] loop4: detected capacity change from 0 to 4096
[  257.888042][T10376] reiserfs: using flush barriers
[  257.950672][T10376] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  257.992885][T10386] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  258.004205][T10376] REISERFS (device loop1): checking transaction log (loop1)
[  258.020632][T10382] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  258.046541][T10376] REISERFS (device loop1): Using r5 hash to sort names
[  258.060751][T10376] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  258.091322][T10382] Remounting filesystem read-only
[  258.097048][T10382] NILFS error (device loop4): nilfs_readdir: bad page in #2
[  258.104980][T10376] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  258.176477][T10385] loop2: detected capacity change from 0 to 4096
[  258.220455][T10385] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  259.210815][T10379] loop5: detected capacity change from 0 to 65536
[  259.270203][T10379] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  259.359490][T10379] XFS (loop5): Ending clean mount
[  259.546314][T10418] netlink: 'syz.4.1695': attribute type 2 has an invalid length.
[  259.589468][ T9074] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  259.941231][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1697'.
[  260.851254][T10442] mkiss: ax0: crc mode is auto.
[  261.583329][   T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  261.758212][T10444] loop5: detected capacity change from 0 to 32768
[  261.779405][   T23] usb 3-1: Using ep0 maxpacket: 32
[  261.791195][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.812548][   T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  261.859557][   T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  261.869713][   T23] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  261.883286][   T23] usb 3-1: Product: syz
[  261.887565][   T23] usb 3-1: Manufacturer: syz
[  261.900887][T10444] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  261.902476][   T23] usb 3-1: SerialNumber: syz
[  261.945174][   T23] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input13
[  262.056398][T10463] 
[  262.058796][T10463] ======================================================
[  262.060554][T10447] loop1: detected capacity change from 0 to 32768
[  262.065816][T10463] WARNING: possible circular locking dependency detected
[  262.065826][T10463] 6.6.101-syzkaller #0 Not tainted
[  262.065836][T10463] ------------------------------------------------------
[  262.065842][T10463] syz.5.1708/10463 is trying to acquire lock:
[  262.065853][T10463] ffff88805cc28660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x320
[  262.065913][T10463] 
[  262.065913][T10463] but task is already holding lock:
[  262.065918][T10463] ffff88805cc286f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320
[  262.065964][T10463] 
[  262.065964][T10463] which lock already depends on the new lock.
[  262.065964][T10463] 
[  262.065969][T10463] 
[  262.065969][T10463] the existing dependency chain (in reverse order) is:
[  262.065975][T10463] 
[  262.065975][T10463] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  262.154623][T10463]        down_read+0x46/0x2e0
[  262.159315][T10463]        ocfs2_init_acl+0x2fa/0x720
[  262.164526][T10463]        ocfs2_mknod+0x12e5/0x20f0
[  262.169643][T10463]        ocfs2_create+0x196/0x410
[  262.174764][T10463]        path_openat+0x1277/0x3190
[  262.179889][T10463]        do_filp_open+0x1c5/0x3d0
[  262.184920][T10463]        do_sys_openat2+0x12c/0x1c0
[  262.190130][T10463]        __x64_sys_openat+0x139/0x160
[  262.195511][T10463]        do_syscall_64+0x55/0xb0
[  262.200455][T10463]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.206897][T10463] 
[  262.206897][T10463] -> #3 (jbd2_handle){++++}-{0:0}:
[  262.214302][T10463]        start_this_handle+0x1e9d/0x20c0
[  262.219955][T10463]        jbd2__journal_start+0x2bb/0x5b0
[  262.225617][T10463]        jbd2_journal_start+0x2a/0x40
[  262.231006][T10463]        ocfs2_start_trans+0x376/0x6c0
[  262.236485][T10463]        ocfs2_setattr+0x95a/0x1b20
[  262.241694][T10463]        notify_change+0xb0d/0xe10
[  262.246821][T10463]        chown_common+0x3f9/0x5a0
[  262.251857][T10463]        do_fchownat+0x168/0x270
[  262.256799][T10463]        __x64_sys_fchownat+0xb5/0xd0
[  262.262176][T10463]        do_syscall_64+0x55/0xb0
[  262.267122][T10463]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.273548][T10463] 
[  262.273548][T10463] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  262.282083][T10463]        down_read+0x46/0x2e0
[  262.286776][T10463]        ocfs2_start_trans+0x36a/0x6c0
[  262.292345][T10463]        ocfs2_setattr+0x95a/0x1b20
[  262.297564][T10463]        notify_change+0xb0d/0xe10
[  262.302689][T10463]        chown_common+0x3f9/0x5a0
[  262.307723][T10463]        do_fchownat+0x168/0x270
[  262.312666][T10463]        __x64_sys_fchownat+0xb5/0xd0
[  262.318049][T10463]        do_syscall_64+0x55/0xb0
[  262.322991][T10463]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.329478][T10463] 
[  262.329478][T10463] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  262.337093][T10463]        ocfs2_start_trans+0x26b/0x6c0
[  262.342581][T10463]        ocfs2_setattr+0x95a/0x1b20
[  262.347887][T10463]        notify_change+0xb0d/0xe10
[  262.353016][T10463]        chown_common+0x3f9/0x5a0
[  262.358062][T10463]        do_fchownat+0x168/0x270
[  262.363006][T10463]        __x64_sys_fchownat+0xb5/0xd0
[  262.368382][T10463]        do_syscall_64+0x55/0xb0
[  262.373324][T10463]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.379745][T10463] 
[  262.379745][T10463] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  262.388546][T10463]        __lock_acquire+0x2ddb/0x7c80
[  262.393931][T10463]        lock_acquire+0x197/0x410
[  262.398959][T10463]        down_write+0x97/0x1f0
[  262.403746][T10463]        ocfs2_try_remove_refcount_tree+0xb7/0x320
[  262.410278][T10463]        ocfs2_truncate_file+0xd84/0x13a0
[  262.416025][T10463]        ocfs2_setattr+0x150d/0x1b20
[  262.421332][T10463]        notify_change+0xb0d/0xe10
[  262.426547][T10463]        do_truncate+0x19b/0x220
[  262.431490][T10463]        path_openat+0x298c/0x3190
[  262.436612][T10463]        do_filp_open+0x1c5/0x3d0
[  262.441644][T10463]        do_sys_openat2+0x12c/0x1c0
[  262.446851][T10463]        __x64_sys_creat+0x90/0xb0
[  262.451993][T10463]        do_syscall_64+0x55/0xb0
[  262.456936][T10463]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.463369][T10463] 
[  262.463369][T10463] other info that might help us debug this:
[  262.463369][T10463] 
[  262.473599][T10463] Chain exists of:
[  262.473599][T10463]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  262.473599][T10463] 
[  262.487595][T10463]  Possible unsafe locking scenario:
[  262.487595][T10463] 
[  262.495053][T10463]        CPU0                    CPU1
[  262.500423][T10463]        ----                    ----
[  262.505790][T10463]   lock(&oi->ip_xattr_sem);
[  262.510388][T10463]                                lock(jbd2_handle);
[  262.516978][T10463]                                lock(&oi->ip_xattr_sem);
[  262.524267][T10463]   lock(&ocfs2_file_ip_alloc_sem_key);
[  262.529817][T10463] 
[  262.529817][T10463]  *** DEADLOCK ***
[  262.529817][T10463] 
[  262.538114][T10463] 3 locks held by syz.5.1708/10463:
[  262.543318][T10463]  #0: ffff88802b612418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  262.552584][T10463]  #1: ffff88805cc289d8 (&sb->s_type->i_mutex_key#33){+.+.}-{3:3}, at: do_truncate+0x187/0x220
[  262.563061][T10463]  #2: ffff88805cc286f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x320
[  262.574128][T10463] 
[  262.574128][T10463] stack backtrace:
[  262.580098][T10463] CPU: 1 PID: 10463 Comm: syz.5.1708 Not tainted 6.6.101-syzkaller #0
[  262.588347][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  262.599137][T10463] Call Trace:
[  262.602511][T10463]  <TASK>
[  262.605457][T10463]  dump_stack_lvl+0x16c/0x230
[  262.610147][T10463]  ? load_image+0x3b0/0x3b0
[  262.614661][T10463]  ? show_regs_print_info+0x20/0x20
[  262.619870][T10463]  ? print_circular_bug+0x12b/0x1a0
[  262.625099][T10463]  check_noncircular+0x2bd/0x3c0
[  262.630065][T10463]  ? print_deadlock_bug+0x5d0/0x5d0
[  262.635275][T10463]  ? lockdep_lock+0xe0/0x220
[  262.639870][T10463]  ? lockdep_unlock+0x137/0x2d0
[  262.644727][T10463]  ? _find_first_zero_bit+0xd3/0x100
[  262.650032][T10463]  __lock_acquire+0x2ddb/0x7c80
[  262.654899][T10463]  ? verify_lock_unused+0x140/0x140
[  262.660115][T10463]  lock_acquire+0x197/0x410
[  262.664627][T10463]  ? ocfs2_try_remove_refcount_tree+0xb7/0x320
[  262.670886][T10463]  ? __might_sleep+0xe0/0xe0
[  262.675497][T10463]  ? read_lock_is_recursive+0x20/0x20
[  262.680891][T10463]  down_write+0x97/0x1f0
[  262.685230][T10463]  ? ocfs2_try_remove_refcount_tree+0xb7/0x320
[  262.691391][T10463]  ? down_read_killable+0x340/0x340
[  262.696601][T10463]  ? ocfs2_truncate_file+0xcaa/0x13a0
[  262.701988][T10463]  ? __lock_acquire+0x7c80/0x7c80
[  262.707015][T10463]  ocfs2_try_remove_refcount_tree+0xb7/0x320
[  262.712999][T10463]  ? ocfs2_remove_refcount_tree+0xd50/0xd50
[  262.718909][T10463]  ? up_write+0x1c3/0x410
[  262.723241][T10463]  ocfs2_truncate_file+0xd84/0x13a0
[  262.728449][T10463]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  262.734183][T10463]  ? ocfs2_simple_size_update+0x470/0x470
[  262.739924][T10463]  ? do_raw_spin_unlock+0x121/0x230
[  262.745138][T10463]  ? _raw_spin_unlock+0x28/0x40
[  262.750004][T10463]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  262.755736][T10463]  ? ocfs2_inode_lock_atime+0x4e0/0x4e0
[  262.761285][T10463]  ? ocfs2_rw_lock+0x138/0x240
[  262.766058][T10463]  ? dquot_initialize+0x20/0x20
[  262.770917][T10463]  ? ocfs2_create_new_inode_locks+0x640/0x640
[  262.776992][T10463]  ? setattr_prepare+0x1e6/0xac0
[  262.781941][T10463]  ? inode_newsize_ok+0x116/0x1b0
[  262.787066][T10463]  ocfs2_setattr+0x150d/0x1b20
[  262.791870][T10463]  ? ocfs2_extend_allocation+0x1760/0x1760
[  262.797684][T10463]  ? ktime_get_coarse_real_ts64+0x3a/0x120
[  262.803501][T10463]  ? seqcount_lockdep_reader_access+0x176/0x1c0
[  262.809759][T10463]  ? ktime_get_coarse_real_ts64+0x110/0x120
[  262.815664][T10463]  ? current_time+0x18e/0x270
[  262.820349][T10463]  ? inode_set_ctime_current+0x2d0/0x2d0
[  262.826043][T10463]  ? evm_inode_setattr+0x94/0x6a0
[  262.831079][T10463]  ? bpf_lsm_inode_setattr+0x9/0x10
[  262.836285][T10463]  ? try_break_deleg+0x79/0x120
[  262.841149][T10463]  ? ocfs2_extend_allocation+0x1760/0x1760
[  262.846968][T10463]  notify_change+0xb0d/0xe10
[  262.851568][T10463]  do_truncate+0x19b/0x220
[  262.855993][T10463]  ? put_page_bootmem+0x2c0/0x2c0
[  262.861055][T10463]  ? apparmor_file_truncate+0x23f/0x2d0
[  262.866617][T10463]  ? ima_bprm_check+0x1f0/0x1f0
[  262.871564][T10463]  path_openat+0x298c/0x3190
[  262.876183][T10463]  ? do_filp_open+0x3d0/0x3d0
[  262.880885][T10463]  do_filp_open+0x1c5/0x3d0
[  262.885419][T10463]  ? vfs_tmpfile+0x490/0x490
[  262.890120][T10463]  ? _raw_spin_unlock+0x28/0x40
[  262.894981][T10463]  ? alloc_fd+0x58f/0x630
[  262.899326][T10463]  do_sys_openat2+0x12c/0x1c0
[  262.904024][T10463]  ? do_sys_open+0xe0/0xe0
[  262.908454][T10463]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  262.914444][T10463]  ? lock_chain_count+0x20/0x20
[  262.919305][T10463]  ? lock_chain_count+0x20/0x20
[  262.924170][T10463]  __x64_sys_creat+0x90/0xb0
[  262.928770][T10463]  do_syscall_64+0x55/0xb0
[  262.933206][T10463]  ? clear_bhb_loop+0x40/0x90
[  262.937898][T10463]  ? clear_bhb_loop+0x40/0x90
[  262.942578][T10463]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.948482][T10463] RIP: 0033:0x7fe4e198ebe9
[  262.952906][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.972521][T10463] RSP: 002b:00007fe4e2712038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  262.980941][T10463] RAX: ffffffffffffffda RBX: 00007fe4e1bb6090 RCX: 00007fe4e198ebe9
[  262.989013][T10463] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0
[  262.997065][T10463] RBP: 00007fe4e1a11e19 R08: 0000000000000000 R09: 0000000000000000
[  263.005073][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.013052][T10463] R13: 00007fe4e1bb6128 R14: 00007fe4e1bb6090 R15: 00007ffc8972e0b8
[  263.021072][T10463]  </TASK>
[  263.105641][T10447] (syz.1.1709,10447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  263.183672][T10447] (syz.1.1709,10447,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  263.208979][ T5845] usb 3-1: USB disconnect, device number 10
[  263.224425][ T5845] appletouch 3-1:1.0: input: appletouch disconnected
[  263.239414][T10447] JBD2: Ignoring recovery information on journal
[  263.257508][ T9074] ocfs2: Unmounting device (7,5) on (node local)
[  263.346776][T10447] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  263.452670][ T5781] ocfs2: Unmounting device (7,1) on (node local)