last executing test programs:

2m46.01480763s ago: executing program 0 (id=1095):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010)

2m45.446796418s ago: executing program 0 (id=1103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000006d0001"], 0x38}}, 0x0)

2m45.189719027s ago: executing program 0 (id=1108):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25DELUID(r0, 0x891c, 0x0)

2m45.045283766s ago: executing program 0 (id=1109):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0)
write$ppp(r0, &(0x7f0000000040), 0x100000)

2m44.836198456s ago: executing program 0 (id=1113):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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")
open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)

2m43.673321402s ago: executing program 0 (id=1128):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/549, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x234)

2m28.59935662s ago: executing program 32 (id=1128):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/549, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x234)

2m0.970737715s ago: executing program 3 (id=1672):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x7, &(0x7f0000000140)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x93}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

2m0.792099145s ago: executing program 3 (id=1675):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69dfc3712e5ce440432fbd29ffd004000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)

2m0.517902424s ago: executing program 3 (id=1679):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000000)=0x60)

2m0.322511243s ago: executing program 3 (id=1683):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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")
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)

1m59.677530711s ago: executing program 3 (id=1691):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
write$cgroup_int(r0, &(0x7f00000001c0)=0x4, 0xffc3)

1m59.015554679s ago: executing program 3 (id=1697):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa42, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000080))

1m58.696016797s ago: executing program 33 (id=1697):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa42, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000080))

4.278383355s ago: executing program 6 (id=3070):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x1, 0x34524742, 0x5, 0x0, [{0x8, 0xf}, {0x8, 0x5d4}, {0xd, 0x8}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x40d}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}})

4.013719344s ago: executing program 6 (id=3076):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

3.799649213s ago: executing program 6 (id=3080):
creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")

1.809996596s ago: executing program 4 (id=3109):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xcc}}, 0x0)

1.711555736s ago: executing program 2 (id=3111):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000240)=0xfffffffffffffffa, 0xffffffffffffffff)

1.567627395s ago: executing program 4 (id=3113):
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, 0x0)

1.495324595s ago: executing program 2 (id=3116):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x2b4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1.359821445s ago: executing program 4 (id=3117):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000680), 0x4)

1.315530664s ago: executing program 5 (id=3118):
r0 = socket$inet(0x2, 0x1, 0x0)
sendto$inet(r0, 0x0, 0xffffff9c, 0x4000, &(0x7f0000e68000)={0x2, 0x4e23, @multicast1}, 0xffffff12)

1.147511304s ago: executing program 1 (id=3119):
r0 = socket(0x22, 0x2, 0x3)
recvfrom$phonet(r0, 0x0, 0x0, 0x3, 0x0, 0x0)

1.121890954s ago: executing program 5 (id=3120):
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x141701, 0x0)
ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000001680)=0x627d)

1.061374634s ago: executing program 4 (id=3121):
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x21408, 0x0, 0x3, 0x0, &(0x7f0000006380))
mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='smb3\x00', 0x0, &(0x7f0000000500)='acl')

1.007518233s ago: executing program 5 (id=3122):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f00000001c0)={'exec ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb0)

964.243124ms ago: executing program 1 (id=3123):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0)

855.916933ms ago: executing program 5 (id=3124):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x3c, 0x12, 0x513, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0)

795.982843ms ago: executing program 2 (id=3125):
setrlimit(0x2, &(0x7f0000000040)={0x3ff, 0x2cd6})
mprotect(&(0x7f0000c58000/0x1000)=nil, 0x1000, 0xb)

767.374893ms ago: executing program 6 (id=3126):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000ec0), 0xffffffffffffffff)

583.488712ms ago: executing program 1 (id=3127):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x40187013, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffc}})

583.200402ms ago: executing program 5 (id=3128):
r0 = syz_mount_image$ext4(&(0x7f0000002080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f00000020c0)={[{@lazytime}, {@noinit_itable}, {@debug}]}, 0x0, 0x548, &(0x7f0000000cc0)="$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")
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

583.015432ms ago: executing program 4 (id=3129):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f0000000940)=[@free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

497.497141ms ago: executing program 2 (id=3130):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000190001090000000000000000021800000001ff000000000008000100ac14146661"], 0x24}}, 0x0)

464.978522ms ago: executing program 6 (id=3131):
r0 = semget$private(0x0, 0x20000000102, 0x420)
semctl$SETALL(r0, 0x0, 0x11, 0x0)

351.508601ms ago: executing program 1 (id=3132):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x38, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048085}, 0x800)

308.763511ms ago: executing program 2 (id=3133):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325258, 0x0, [0x2], [0x80ffff], [0x40000002, 0x0, 0x0, 0xfffffffc], [0x0, 0xffffffffffffffff]})

211.014721ms ago: executing program 4 (id=3134):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1414, 0x1}, 0x10}}, 0x0)

154.67339ms ago: executing program 5 (id=3135):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0)

154.173651ms ago: executing program 1 (id=3136):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f0000000300))

153.879581ms ago: executing program 2 (id=3137):
creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000080)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x34, 0x74]}}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")

73.92359ms ago: executing program 6 (id=3138):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)

0s ago: executing program 1 (id=3139):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000101401000000e6ff0000000009000280"], 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

24
[  216.410942][ T8206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  216.420073][   T26] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  216.460827][   T26] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88
[  216.501193][   T26] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  216.542705][   T26] usb 3-1: Product: syz
[  216.546929][   T26] usb 3-1: SerialNumber: syz
[  216.579177][   T26] usb 3-1: config 0 descriptor??
[  216.589255][ T8221] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  216.598997][ T8192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  216.628700][ T4257] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 1828716567: comm syz-executor: invalid block
[  216.659730][ T4257] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 1828716567: comm syz-executor: invalid block
[  216.818655][   T26] usb 3-1: invalid MIDI in EP 0
[  216.898486][   T26] snd-usb-audio: probe of 3-1:0.2 failed with error -22
[  216.930290][   T26] usb 3-1: USB disconnect, device number 7
[  217.116172][ T8231] Scaler: =================  START STATUS  =================
[  217.138495][ T4257] EXT4-fs (loop3): unmounting filesystem.
[  217.145095][ T8231] Scaler: ==================  END STATUS  ==================
[  217.214281][ T4372] udevd[4372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  217.338400][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.440879][ T8235] loop1: detected capacity change from 0 to 256
[  217.564672][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.677743][ T8241] futex_wake_op: syz.2.1709 tries to shift op by -1; fix this program
[  217.769179][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.958802][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.256006][ T8247] loop5: detected capacity change from 0 to 8192
[  218.369542][ T8247] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  218.420521][ T8247] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  218.481150][ T8247] REISERFS (device loop5): using ordered data mode
[  218.488670][ T4261] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  218.500207][ T4261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  218.508998][ T4261] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  218.517112][ T8247] reiserfs: using flush barriers
[  218.524585][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  218.532348][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  218.539638][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  218.631960][ T8247] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  218.683779][ T8247] REISERFS (device loop5): checking transaction log (loop5)
[  218.749154][ T8242] loop4: detected capacity change from 0 to 32768
[  218.797777][ T8242] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1702 (8242)
[  218.999462][ T8242] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  219.023471][ T8247] REISERFS (device loop5): Using tea hash to sort names
[  219.024622][ T8265] loop1: detected capacity change from 0 to 256
[  219.040595][ T8242] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  219.057722][ T8248] loop2: detected capacity change from 0 to 32768
[  219.090565][ T8248] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1704 (8248)
[  219.100795][ T8242] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  219.197296][ T8242] BTRFS info (device loop4): force zstd compression, level 3
[  219.208306][ T8248] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.238061][ T8242] BTRFS info (device loop4): turning on sync discard
[  219.259515][ T8248] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  219.293467][ T8242] BTRFS info (device loop4): enabling ssd optimizations
[  219.310750][ T8248] BTRFS info (device loop2): setting nodatacow, compression disabled
[  219.329156][ T8242] BTRFS info (device loop4): using spread ssd allocation scheme
[  219.386689][ T8248] BTRFS info (device loop2): max_inline at 0
[  219.413378][ T8242] BTRFS info (device loop4): max_inline at 0
[  219.419435][ T8242] BTRFS info (device loop4): force clearing of disk cache
[  219.480604][ T8248] BTRFS info (device loop2): enabling disk space caching
[  219.488617][ T8248] BTRFS info (device loop2): turning off barriers
[  219.512772][ T8242] BTRFS info (device loop4): setting nodatacow
[  219.529968][ T8242] BTRFS info (device loop4): using free space tree
[  219.540674][ T8248] BTRFS info (device loop2): turning on flush-on-commit
[  219.551182][ T8248] BTRFS info (device loop2): doing ref verification
[  219.579238][ T8248] BTRFS info (device loop2): force clearing of disk cache
[  219.606186][ T8248] BTRFS info (device loop2): enabling ssd optimizations
[  219.626916][ T8248] BTRFS info (device loop2): max_inline at 4096
[  219.650028][ T8248] BTRFS info (device loop2): disk space caching is enabled
[  219.847329][ T8242] BTRFS info (device loop4): rebuilding free space tree
[  219.888996][ T8255] chnl_net:caif_netlink_parms(): no params data found
[  220.169723][ T8248] BTRFS info (device loop2): rebuilding free space tree
[  220.191517][ T8248] BTRFS info (device loop2): disabling free space tree
[  220.203498][ T8248] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  220.214166][ T4258] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.224948][ T8248] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  220.645708][ T4267] Bluetooth: hci1: command 0x0409 tx timeout
[  220.820796][ T4260] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  220.867758][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.929060][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.973905][ T8255] device bridge_slave_0 entered promiscuous mode
[  221.032280][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.066205][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.122268][ T8255] device bridge_slave_1 entered promiscuous mode
[  221.528537][ T8351] loop4: detected capacity change from 0 to 764
[  221.576078][ T8351] Symlink component flag not implemented
[  221.634198][ T8351] Symlink component flag not implemented (129)
[  221.679329][ T8255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.712492][ T8351] rock: directory entry would overflow storage
[  221.718695][ T8351] rock: sig=0x4f50, size=4, remaining=3
[  221.762337][ T8255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.790720][ T8351] iso9660: Corrupted directory entry in block 6 of inode 1792
[  221.809439][ T8355] loop2: detected capacity change from 0 to 4096
[  221.965754][ T8358] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  222.018426][ T8355] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  222.093595][ T8355] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12)
[  222.125414][ T8361] loop4: detected capacity change from 0 to 128
[  222.211074][ T8355] Remounting filesystem read-only
[  222.211131][ T8355] NILFS (loop2): error -5 truncating bmap (ino=12)
[  222.233723][ T8343] loop1: detected capacity change from 0 to 32768
[  222.267660][ T8343] (syz.1.1723,8343,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  222.267975][ T8343] (syz.1.1723,8343,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  222.286153][ T8255] team0: Port device team_slave_0 added
[  222.325162][ T8255] team0: Port device team_slave_1 added
[  222.356593][ T8343] JBD2: Ignoring recovery information on journal
[  222.425512][ T4260] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  222.425760][ T4260] NILFS (loop2): discard dirty page: offset=0, ino=2
[  222.425817][ T4260] NILFS (loop2): discard dirty block: blocknr=14, size=4096
[  222.426155][ T4260] NILFS (loop2): discard dirty page: offset=0, ino=6
[  222.426176][ T4260] NILFS (loop2): discard dirty block: blocknr=23, size=4096
[  222.426200][ T4260] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  222.426219][ T4260] NILFS (loop2): discard dirty block: blocknr=24, size=4096
[  222.426242][ T4260] NILFS (loop2): discard dirty page: offset=8192, ino=6
[  222.426260][ T4260] NILFS (loop2): discard dirty block: blocknr=25, size=4096
[  222.537009][   T11] device hsr_slave_0 left promiscuous mode
[  222.538090][   T11] device hsr_slave_1 left promiscuous mode
[  222.539309][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.539390][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.540165][ T8343] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  222.556012][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.556049][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.562071][   T11] device bridge_slave_1 left promiscuous mode
[  222.563577][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.599463][ T8370] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  222.604012][   T11] device bridge_slave_0 left promiscuous mode
[  222.604171][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.711302][ T4267] Bluetooth: hci1: command 0x041b tx timeout
[  222.755257][   T11] device veth1_macvtap left promiscuous mode
[  222.755550][   T11] device veth0_macvtap left promiscuous mode
[  222.757225][   T11] device veth1_vlan left promiscuous mode
[  222.843537][ T4252] ocfs2: Unmounting device (7,1) on (node local)
[  223.327273][ T8387] loop2: detected capacity change from 0 to 764
[  223.649707][ T8396] loop5: detected capacity change from 0 to 512
[  223.714540][ T8396] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  223.753346][ T8396] EXT4-fs (loop5): orphan cleanup on readonly fs
[  223.763658][ T8396] __quota_error: 4 callbacks suppressed
[  223.763677][ T8396] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated!
[  223.781796][ T8401] loop2: detected capacity change from 0 to 128
[  223.792764][ T8396] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota
[  223.802774][ T8396] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.1741: Failed to acquire dquot type 1
[  223.848905][ T8396] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1741: bg 0: block 40: padding at end of block bitmap is not set
[  223.873481][ T8396] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  223.911757][ T8396] EXT4-fs (loop5): 1 truncate cleaned up
[  223.919070][ T8396] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  224.094795][ T7405] EXT4-fs (loop5): unmounting filesystem.
[  224.574609][   T11] team0 (unregistering): Port device team_slave_1 removed
[  224.683600][   T11] team0 (unregistering): Port device team_slave_0 removed
[  224.763563][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.801388][ T4267] Bluetooth: hci1: command 0x040f tx timeout
[  224.897032][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.342860][ T8433] loop5: detected capacity change from 0 to 16
[  225.368925][ T8433] erofs: (device loop5): mounted with root inode @ nid 36.
[  225.403211][ T8433] erofs: (device loop5): init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet
[  225.777790][   T11] bond0 (unregistering): Released all slaves
[  225.946945][ T8437] netlink: 'syz.5.1760': attribute type 21 has an invalid length.
[  225.969041][ T8437] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1760'.
[  225.986207][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1760'.
[  226.021937][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.041154][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.067077][    C0] vkms_vblank_simulate: vblank timer overrun
[  226.216926][ T8255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.256559][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.298410][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.340957][ T8255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.424220][ T8255] device hsr_slave_0 entered promiscuous mode
[  226.438019][ T8255] device hsr_slave_1 entered promiscuous mode
[  226.466129][ T8255] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.493032][ T8255] Cannot create hsr debugfs directory
[  226.871771][   T48] Bluetooth: hci1: command 0x0419 tx timeout
[  226.879478][ T8439] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  227.523451][ T8486] loop4: detected capacity change from 0 to 256
[  227.639445][ T8486] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  227.818307][ T8491] loop5: detected capacity change from 0 to 128
[  227.899893][ T8491] vxfs: WRONG superblock magic 7b3185b5 at 1
[  227.928290][ T8491] vxfs: WRONG superblock magic 7b318cb5 at 8
[  227.936090][ T8491] vxfs: can't find superblock.
[  227.993624][ T8255] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  228.039612][ T8255] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  228.079139][ T8491] loop5: detected capacity change from 0 to 256
[  228.085987][ T8255] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  228.116542][ T8491] exfat: Deprecated parameter 'debug'
[  228.123253][ T8255] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  228.150786][ T4267] Bluetooth: hci2: command 0x0c1a tx timeout
[  228.193098][ T8491] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  228.215344][ T8491] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  228.499807][ T8255] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.601311][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  228.639235][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  228.665706][ T8255] 8021q: adding VLAN 0 to HW filter on device team0
[  228.683463][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  228.735773][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  228.763048][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.770197][ T4304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.875015][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  228.894428][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  228.937337][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  228.977548][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.984806][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  229.031672][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  229.064589][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  229.092971][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  229.150739][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  229.159871][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  229.194660][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  229.222159][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  229.258533][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  229.276821][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  229.327867][ T8255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  229.328024][ T8535] loop4: detected capacity change from 0 to 4096
[  229.371649][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  229.420227][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  229.472029][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  229.480063][ T8543] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.532210][ T8535] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18158232222581129218, rec_len=65535, name_len=1
[  229.666171][ T8535] Remounting filesystem read-only
[  230.251381][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.258945][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  230.340041][ T8255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.560891][ T8575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1810'.
[  230.605534][ T8581] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1811'.
[  230.651221][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1811'.
[  231.140173][ T8590] loop2: detected capacity change from 0 to 8192
[  231.237462][ T8590] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  231.358066][ T8590] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  231.437500][ T8590] REISERFS (device loop2): using ordered data mode
[  231.455388][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  231.500449][ T8590] reiserfs: using flush barriers
[  231.511666][ T8590] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  231.542673][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  231.582112][ T8590] REISERFS (device loop2): checking transaction log (loop2)
[  231.641551][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  231.671042][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  231.695110][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  231.711261][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  231.733176][ T8255] device veth0_vlan entered promiscuous mode
[  231.796545][ T8255] device veth1_vlan entered promiscuous mode
[  231.854129][ T8590] REISERFS (device loop2): Using tea hash to sort names
[  231.878639][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  231.881878][ T8621] loop5: detected capacity change from 0 to 4096
[  231.909658][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  231.951224][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.969179][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  232.021724][ T8255] device veth0_macvtap entered promiscuous mode
[  232.031927][ T8628] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  232.076550][ T8621] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  232.076621][ T8255] device veth1_macvtap entered promiscuous mode
[  232.088449][ T8621] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12)
[  232.133040][ T8621] Remounting filesystem read-only
[  232.161952][ T8621] NILFS (loop5): error -5 truncating bmap (ino=12)
[  232.182959][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.226677][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.253263][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.301517][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.315680][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.333643][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.347138][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  232.379102][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.419540][ T7405] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  232.461937][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  232.469236][ T7405] NILFS (loop5): discard dirty page: offset=0, ino=2
[  232.485430][ T7405] NILFS (loop5): discard dirty block: blocknr=14, size=4096
[  232.498208][ T8633] device geneve2 entered promiscuous mode
[  232.517531][ T7405] NILFS (loop5): discard dirty page: offset=0, ino=6
[  232.530832][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  232.549398][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  232.550541][ T7405] NILFS (loop5): discard dirty block: blocknr=23, size=4096
[  232.590319][ T7405] NILFS (loop5): discard dirty page: offset=4096, ino=6
[  232.626084][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  232.626890][ T7405] NILFS (loop5): discard dirty block: blocknr=24, size=4096
[  232.654507][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  232.680721][ T7405] NILFS (loop5): discard dirty page: offset=8192, ino=6
[  232.687738][ T7405] NILFS (loop5): discard dirty block: blocknr=25, size=4096
[  232.703203][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.740495][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.782779][ T8645] netlink: 'syz.2.1830': attribute type 1 has an invalid length.
[  232.801239][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.858749][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.878869][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'.
[  232.887984][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.957474][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.018389][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  233.068602][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  233.140525][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.215830][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  233.226993][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  233.268822][ T8659] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  233.309047][ T8255] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.332514][ T8255] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.386234][ T8255] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.421201][ T8255] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  233.730030][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.771833][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.847061][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  233.896998][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.944227][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.012255][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  234.202747][ T8689] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1851'.
[  234.303432][ T8698] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1699'.
[  235.409154][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1868'.
[  235.619608][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1870'.
[  235.805673][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1873'.
[  235.890649][ T4293] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  236.080599][ T4293] usb 3-1: Using ep0 maxpacket: 16
[  236.093658][ T4293] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  236.123335][ T4293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.161597][ T4293] usb 3-1: Product: syz
[  236.165902][ T4293] usb 3-1: Manufacturer: syz
[  236.191382][ T4293] usb 3-1: SerialNumber: syz
[  236.225452][ T4293] usb 3-1: config 0 descriptor??
[  236.246390][ T4293] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  236.340801][ T8739] loop4: detected capacity change from 0 to 32768
[  236.376734][ T8739] (syz.4.1867,8739,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  236.454910][ T8739] (syz.4.1867,8739,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  236.558308][ T8739] JBD2: Ignoring recovery information on journal
[  236.662977][ T8739] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  236.663952][ T4293] ssu100: probe of 3-1:0.0 failed with error -71
[  236.741295][ T4293] usb 3-1: USB disconnect, device number 8
[  236.984651][ T4258] ocfs2: Unmounting device (7,4) on (node local)
[  237.450472][ T4293] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  237.654606][ T4293] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  237.691116][ T4293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.699175][ T4293] usb 7-1: Product: syz
[  237.740631][ T4293] usb 7-1: Manufacturer: syz
[  237.745297][ T4293] usb 7-1: SerialNumber: syz
[  237.776967][ T8819] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (31)
[  237.809659][ T4293] usb 7-1: config 0 descriptor??
[  238.055434][ T4293] hso 7-1:0.0: Can't find BULK IN endpoint
[  238.072100][ T4293] usb-storage 7-1:0.0: USB Mass Storage device detected
[  238.291200][ T4330] usb 7-1: USB disconnect, device number 2
[  238.320659][ T7479] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  238.522275][ T7479] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.550633][ T7479] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  238.602770][ T7479] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  238.662628][ T7479] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.680572][ T7479] usb 6-1: Product: syz
[  238.684787][ T7479] usb 6-1: Manufacturer: syz
[  238.689410][ T7479] usb 6-1: SerialNumber: syz
[  238.725159][ T7479] usb 6-1: config 0 descriptor??
[  238.745423][ T7479] snd-usb-audio: probe of 6-1:0.0 failed with error -22
[  238.994742][ T4330] usb 6-1: USB disconnect, device number 3
[  239.296526][ T4293] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  239.439152][ T8878] 9pnet_virtio: no channels available for device syz
[  239.491702][ T4293] usb 7-1: Using ep0 maxpacket: 32
[  239.507811][ T4293] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.566811][ T4293] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  239.613533][ T4293] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  239.649391][ T8884] loop2: detected capacity change from 0 to 16
[  239.688549][ T4293] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  239.712611][ T8884] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  239.729920][ T4293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  239.768919][ T4293] usb 7-1: SerialNumber: syz
[  239.794208][ T8862] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  239.817149][ T4293] cdc_acm 7-1:1.0: Control and data interfaces are not separated!
[  240.022055][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.050840][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.089331][ T4293] cdc_acm 7-1:1.0: ttyACM0: USB ACM device
[  240.114993][ T4293] usb 7-1: USB disconnect, device number 3
[  240.508937][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1933'.
[  240.559280][ T8917] xt_cgroup: invalid path, errno=-2
[  240.832961][ T8926] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  241.333638][ T4243] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  241.530965][ T8955] loop4: detected capacity change from 0 to 256
[  241.550821][ T4243] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[  241.572567][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.591722][ T4243] usb 3-1: Product: syz
[  241.596408][ T4243] usb 3-1: Manufacturer: syz
[  241.614868][ T4243] usb 3-1: SerialNumber: syz
[  241.649638][ T8955] FAT-fs (loop4): Directory bread(block 64) failed
[  241.658189][ T4243] usb 3-1: config 0 descriptor??
[  241.666402][ T4243] gspca_main: sonixb-2.14.0 probing 0c45:608f
[  241.689610][ T8955] FAT-fs (loop4): Directory bread(block 65) failed
[  241.725183][ T8955] FAT-fs (loop4): Directory bread(block 66) failed
[  241.758692][ T8955] FAT-fs (loop4): Directory bread(block 67) failed
[  241.778574][ T8955] FAT-fs (loop4): Directory bread(block 68) failed
[  241.809337][ T8955] FAT-fs (loop4): Directory bread(block 69) failed
[  241.811384][ T8959] loop1: detected capacity change from 0 to 1024
[  241.829118][ T8955] FAT-fs (loop4): Directory bread(block 70) failed
[  241.856326][ T8955] FAT-fs (loop4): Directory bread(block 71) failed
[  241.900894][ T8955] FAT-fs (loop4): Directory bread(block 72) failed
[  241.914648][ T8955] FAT-fs (loop4): Directory bread(block 73) failed
[  241.941824][ T8959] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  242.137255][   T26] usb 3-1: USB disconnect, device number 9
[  242.196033][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  242.818561][ T8985] loop4: detected capacity change from 0 to 16
[  242.840148][ T8985] erofs: (device loop4): mounted with root inode @ nid 36.
[  242.858723][ T8985] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  243.266000][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1969'.
[  243.701123][ T9012] loop2: detected capacity change from 0 to 256
[  243.756396][ T9012] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  244.200443][ T4330] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  244.406520][ T4330] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  244.455692][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.481200][ T4330] usb 5-1: Product: syz
[  244.485428][ T4330] usb 5-1: Manufacturer: syz
[  244.490078][ T4330] usb 5-1: SerialNumber: syz
[  244.561959][ T4330] usb 5-1: config 0 descriptor??
[  244.774628][ T4330] int51x1: probe of 5-1:0.0 failed with error -22
[  244.906546][ T9060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1997'.
[  244.931281][ T9060] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1997'.
[  244.978123][ T9060] netlink: 'syz.1.1997': attribute type 6 has an invalid length.
[  244.998909][ T4293] usb 5-1: USB disconnect, device number 7
[  245.028040][ T9060] netlink: 'syz.1.1997': attribute type 5 has an invalid length.
[  245.070642][ T9060] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1997'.
[  245.252187][ T9072] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2003'.
[  245.976644][ T9092] loop4: detected capacity change from 0 to 1764
[  246.123729][   T27] audit: type=1326 audit(2000000073.570:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  246.220056][   T27] audit: type=1326 audit(2000000073.610:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  246.324729][   T27] audit: type=1326 audit(2000000073.610:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  246.363851][   T27] audit: type=1326 audit(2000000073.610:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9095 comm="syz.5.2014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  246.441938][ T9073] loop6: detected capacity change from 0 to 40427
[  246.456134][ T9080] loop2: detected capacity change from 0 to 32768
[  246.476212][ T9080] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2007 (9080)
[  246.511415][ T9073] F2FS-fs (loop6): project quota file already specified
[  246.570788][ T9080] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  246.628178][ T9080] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  246.706062][ T9080] BTRFS info (device loop2): using free space tree
[  246.852382][ T9109] loop5: detected capacity change from 0 to 1024
[  246.956871][ T9109] hfsplus: bad catalog entry type
[  246.967674][ T9080] BTRFS info (device loop2): enabling ssd optimizations
[  247.183384][ T4304] hfsplus: b-tree write err: -5, ino 4
[  247.264418][ T4260] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.429978][ T9139] xt_TCPMSS: Only works on TCP SYN packets
[  247.777932][ T9150] loop1: detected capacity change from 0 to 256
[  247.868878][ T9150] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d)
[  248.278865][ T9168] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.347619][ T9168] bond0: (slave rose0): Enslaving as an active interface with an up link
[  248.385241][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  248.624048][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2045'.
[  248.963405][ T9194] loop5: detected capacity change from 0 to 764
[  249.518575][ T9220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2061'.
[  249.561047][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2061'.
[  249.630519][ T4243] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  249.820710][ T4243] usb 7-1: Using ep0 maxpacket: 16
[  249.828482][ T4243] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 26195, setting to 1024
[  249.871322][ T4243] usb 7-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.942317][ T4243] usb 7-1: config 1 interface 0 has no altsetting 0
[  249.976594][ T4243] usb 7-1: string descriptor 0 read error: -22
[  249.996889][ T4243] usb 7-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice= 0.40
[  250.031604][ T4243] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.071863][ T9213] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  250.317449][ T9246] device gre0 entered promiscuous mode
[  250.518835][ T4243] appletouch 7-1:1.0: Failed to request geyser raw mode
[  250.527209][ T9250] netlink: 'syz.1.2073': attribute type 2 has an invalid length.
[  250.540184][ T4243] appletouch: probe of 7-1:1.0 failed with error -5
[  250.553294][ T9252] netlink: 194488 bytes leftover after parsing attributes in process `syz.5.2072'.
[  250.579484][ T4243] usb 7-1: USB disconnect, device number 4
[  250.946903][ T9232] loop4: detected capacity change from 0 to 32768
[  250.989136][ T9232] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2066 (9232)
[  251.034560][ T9232] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  251.076941][ T9232] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  251.140481][ T9232] BTRFS info (device loop4): using free space tree
[  251.168745][ T9271] loop2: detected capacity change from 0 to 128
[  251.250287][ T9271] befs: (loop2): invalid magic header
[  251.301787][ T4353] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  251.574505][ T9232] BTRFS info (device loop4): enabling ssd optimizations
[  251.642312][ T9293] device bond3 entered promiscuous mode
[  252.106152][ T4258] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  252.250927][ T9325] netlink: 'syz.2.2095': attribute type 49 has an invalid length.
[  252.301038][ T4243] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  252.488815][ T4243] usb 2-1: Using ep0 maxpacket: 32
[  252.498209][ T4243] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=88.ea
[  252.522868][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.543106][ T4243] usb 2-1: Product: syz
[  252.551005][ T4243] usb 2-1: Manufacturer: syz
[  252.565900][ T4243] usb 2-1: SerialNumber: syz
[  252.577942][ T4243] usb 2-1: config 0 descriptor??
[  252.599425][ T4243] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  252.801796][ T4343] usb 2-1: USB disconnect, device number 11
[  253.309947][ T9358] binder: BC_ATTEMPT_ACQUIRE not supported
[  253.363917][ T9358] binder: 9357:9358 ioctl c0306201 20000380 returned -22
[  253.579535][ T9365] loop6: detected capacity change from 0 to 256
[  253.693718][ T9365] FAT-fs (loop6): Directory bread(block 64) failed
[  253.726365][ T9365] FAT-fs (loop6): Directory bread(block 65) failed
[  253.748644][ T9365] FAT-fs (loop6): Directory bread(block 66) failed
[  253.770522][ T9365] FAT-fs (loop6): Directory bread(block 67) failed
[  253.797538][ T9365] FAT-fs (loop6): Directory bread(block 68) failed
[  253.830848][ T9365] FAT-fs (loop6): Directory bread(block 69) failed
[  253.847897][ T9365] FAT-fs (loop6): Directory bread(block 70) failed
[  253.875119][ T9365] FAT-fs (loop6): Directory bread(block 71) failed
[  253.926171][ T9365] FAT-fs (loop6): Directory bread(block 72) failed
[  253.951235][ T9365] FAT-fs (loop6): Directory bread(block 73) failed
[  254.203866][   T27] audit: type=1326 audit(2000000081.650:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  254.297478][   T27] audit: type=1326 audit(2000000081.650:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  254.384147][   T27] audit: type=1326 audit(2000000081.650:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  254.449585][ T9395] netlink: 'syz.5.2121': attribute type 21 has an invalid length.
[  254.469801][ T9395] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2121'.
[  254.500470][   T27] audit: type=1326 audit(2000000081.650:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9386 comm="syz.5.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  254.530581][ T9395] netlink: 'syz.5.2121': attribute type 1 has an invalid length.
[  255.116810][ T9372] loop1: detected capacity change from 0 to 32768
[  255.166634][ T9372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2112 (9372)
[  255.288689][ T9372] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  255.380685][ T9372] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  255.410800][ T9372] BTRFS info (device loop1): using free space tree
[  255.567029][ T9438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2135'.
[  255.676737][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  255.683192][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  255.737996][ T4429] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  255.830932][ T9372] BTRFS info (device loop1): enabling ssd optimizations
[  255.838220][ T9459] bond0: Error: Cannot enslave bond to itself.
[  255.960482][ T4429] usb 7-1: Using ep0 maxpacket: 8
[  255.973940][ T4429] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  256.020579][ T4429] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.049872][ T4429] usb 7-1: Product: syz
[  256.054406][ T4429] usb 7-1: Manufacturer: syz
[  256.090542][ T4429] usb 7-1: SerialNumber: syz
[  256.106101][ T4429] usb 7-1: config 0 descriptor??
[  256.202935][ T4252] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.339818][ T4429] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  256.570815][ T4429] usb write operation failed. (-71)
[  256.627234][ T9477] xt_l2tp: v2 doesn't support IP mode
[  256.663184][ T4429] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  256.730347][ T4429] dvbdev: DVB: registering new adapter (Terratec H7)
[  256.737479][ T4429] usb 7-1: media controller created
[  256.762588][ T4429] usb read operation failed. (-71)
[  256.801315][ T4429] usb write operation failed. (-71)
[  256.835801][ T4429] dvb_usb_az6007: probe of 7-1:0.0 failed with error -5
[  256.889139][ T4429] usb 7-1: USB disconnect, device number 5
[  257.192853][ T9463] loop2: detected capacity change from 0 to 32768
[  257.227178][ T9463] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2138 (9463)
[  257.242156][ T9490] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  257.331896][ T9463] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.375789][ T9463] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  257.415178][ T9463] BTRFS info (device loop2): using free space tree
[  257.925941][ T9463] BTRFS info (device loop2): enabling ssd optimizations
[  258.208220][ T4260] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.648595][ T9500] loop5: detected capacity change from 0 to 32768
[  258.719967][ T9500] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2154 (9500)
[  258.740988][ T9551] loop4: detected capacity change from 0 to 256
[  258.769955][ T9551] FAT-fs (loop4): Directory bread(block 257) failed
[  258.784560][ T9551] FAT-fs (loop4): Directory bread(block 257) failed
[  258.804489][ T9553] usb usb8: usbfs: process 9553 (syz.1.2165) did not claim interface 0 before use
[  258.827986][ T9500] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  258.890934][ T9500] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  258.899837][ T9551] FAT-fs (loop4): Directory bread(block 257) failed
[  258.916788][ T9551] FAT-fs (loop4): Directory bread(block 257) failed
[  258.934101][ T9500] BTRFS info (device loop5): using free space tree
[  259.271006][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  259.293244][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  259.354934][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  259.430504][ T9500] BTRFS info (device loop5): enabling ssd optimizations
[  259.444132][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  259.503473][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  259.600590][ T9578] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  259.720792][ T7405] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  260.195514][ T9609] loop1: detected capacity change from 0 to 64
[  260.289197][ T9609] syz.1.2180: attempt to access beyond end of device
[  260.289197][ T9609] loop1: rw=0, sector=2590, nr_sectors = 2 limit=64
[  260.332462][ T9613] binfmt_misc: register: failed to install interpreter file ./file0/../file0
[  260.367247][ T9609] Buffer I/O error on dev loop1, logical block 1295, async page read
[  260.430592][ T9609] syz.1.2180: attempt to access beyond end of device
[  260.430592][ T9609] loop1: rw=0, sector=2590, nr_sectors = 2 limit=64
[  260.460524][ T9609] Buffer I/O error on dev loop1, logical block 1295, async page read
[  260.502503][   T27] audit: type=1800 audit(2000000087.940:45): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2180" name="file2" dev="loop1" ino=6 res=0 errno=0
[  260.508067][ T9609] Trying to free block not in datazone
[  260.597331][ T9609] minix_free_block (loop1:21): bit already cleared
[  260.819019][ T9626] loop6: detected capacity change from 0 to 512
[  260.819960][ T9630] loop2: detected capacity change from 0 to 64
[  260.953214][ T9630] minix_free_block (loop2:21): bit already cleared
[  261.003353][ T9626] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  261.030765][ T9626] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  261.070528][ T9626] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz.6.2186: Failed to acquire dquot type 1
[  261.117946][ T9626] EXT4-fs (loop6): 1 truncate cleaned up
[  261.161275][ T9626] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  261.180627][ T9626] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.228353][ T9626] EXT4-fs (loop6): unmounting filesystem.
[  261.349479][ T9648] netlink: 'syz.2.2192': attribute type 10 has an invalid length.
[  261.358423][ T4453] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  261.441111][ T9648] team0: Device veth0_macvtap failed to register rx_handler
[  261.555731][ T9653] loop6: detected capacity change from 0 to 8
[  261.574207][ T4453] usb 5-1: Using ep0 maxpacket: 16
[  261.589064][ T4453] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  261.619054][ T4453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.657029][ T4453] usb 5-1: Product: syz
[  261.684684][ T4453] usb 5-1: Manufacturer: syz
[  261.689429][ T4453] usb 5-1: SerialNumber: syz
[  261.727853][ T4453] usb 5-1: config 0 descriptor??
[  261.762672][ T4453] ums-onetouch 5-1:0.0: USB Mass Storage device detected
[  261.778612][ T9648] syz.2.2192 (9648) used greatest stack depth: 19216 bytes left
[  261.997446][ T4330] usb 5-1: USB disconnect, device number 8
[  262.118256][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2202'.
[  262.150634][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2202'.
[  263.097364][ T9664] loop2: detected capacity change from 0 to 32768
[  263.318065][ T9714] loop4: detected capacity change from 0 to 128
[  263.422050][ T9714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  263.556553][ T9714] ext4 filesystem being mounted at /451/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  263.745053][ T9714] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 1029 (only 1 groups)
[  263.943175][ T4258] EXT4-fs (loop4): unmounting filesystem.
[  264.549029][ T9760] netlink: 'syz.2.2231': attribute type 12 has an invalid length.
[  264.582207][ T9740] could not allocate digest TFM handle sha256-arm64-neon
[  264.660321][ T9762] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2232'.
[  264.835147][ T9768] netlink: 'syz.5.2234': attribute type 10 has an invalid length.
[  264.961618][ T9768] team0: Device veth0_macvtap failed to register rx_handler
[  265.182791][ T9775] libceph: resolve '40.' (ret=-3): failed
[  265.395074][   T27] audit: type=1326 audit(2000000092.840:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  265.510846][   T27] audit: type=1326 audit(2000000092.890:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  265.610515][   T27] audit: type=1326 audit(2000000092.890:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  265.685668][   T27] audit: type=1326 audit(2000000092.890:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9783 comm="syz.5.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  265.929795][   T27] audit: type=1326 audit(2000000093.370:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  266.071635][   T27] audit: type=1326 audit(2000000093.430:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  266.396467][   T27] audit: type=1326 audit(2000000093.840:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  266.540532][   T27] audit: type=1326 audit(2000000093.940:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9802 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  266.634336][ T9819] overlayfs: conflicting options: userxattr,redirect_dir=follow
[  266.646077][ T9818] netlink: 'syz.1.2252': attribute type 10 has an invalid length.
[  266.650732][   T27] audit: type=1326 audit(2000000093.940:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9814 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f03b9fbf665 code=0x7ffc0000
[  266.685898][ T9785] loop4: detected capacity change from 0 to 32768
[  266.725348][ T9792] loop6: detected capacity change from 0 to 32768
[  266.753140][   T27] audit: type=1326 audit(2000000094.080:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9814 comm="syz.5.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  266.766903][ T9818] team0: Device veth0_macvtap failed to register rx_handler
[  266.778331][ T9785] ERROR: (device loop4): diWrite: ixpxd invalid
[  266.778331][ T9785] 
[  266.796676][ T9792] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.2243 (9792)
[  266.835458][ T9792] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  266.847240][ T9785] ERROR: (device loop4): remounting filesystem as read-only
[  266.863939][ T9785] ERROR: (device loop4): txCommit: 
[  266.863939][ T9785] 
[  266.874121][ T9792] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  266.906238][ T9792] BTRFS info (device loop6): force zlib compression, level 3
[  266.940687][ T9792] BTRFS info (device loop6): force clearing of disk cache
[  266.988479][ T9792] BTRFS info (device loop6): setting nodatasum
[  267.061288][ T9792] BTRFS info (device loop6): use zlib compression, level 3
[  267.068573][ T9792] BTRFS info (device loop6): allowing degraded mounts
[  267.109764][ T9792] BTRFS info (device loop6): enabling disk space caching
[  267.168076][ T9792] BTRFS info (device loop6): disk space caching is enabled
[  267.738404][ T9792] BTRFS info (device loop6): enabling ssd optimizations
[  267.779235][ T9792] BTRFS info (device loop6): rebuilding free space tree
[  267.841976][ T9792] BTRFS info (device loop6): disabling free space tree
[  267.866433][ T9792] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  267.930314][ T9863] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  267.931172][ T9792] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  268.001534][ T9863] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  268.060836][ T9863] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  268.105833][ T9863] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready
[  268.169452][ T9863] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  268.230770][ T9863] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  268.263448][ T9863] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  268.422030][ T9792] BTRFS info (device loop6): balance: start -f -ssoft,usage=9223372041149743104,usage=0..2147483649,devid=0,vrange=5..4294967296,stripes=1831..0
[  268.568072][ T9792] BTRFS info (device loop6): balance: ended with status: 0
[  268.734754][ T8255] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  268.850258][ T9889] netlink: 'syz.5.2278': attribute type 4 has an invalid length.
[  268.887324][ T9888] loop1: detected capacity change from 0 to 8
[  268.917846][ T9889] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.2278'.
[  269.533164][ T9904] netlink: 'syz.6.2268': attribute type 10 has an invalid length.
[  269.596459][ T9904] team0: Device veth0_macvtap failed to register rx_handler
[  270.671998][ T9940] No such timeout policy "syz1"
[  270.843546][ T9920] loop4: detected capacity change from 0 to 32768
[  270.885166][ T9920] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2283 (9920)
[  270.917352][ T9946] loop6: detected capacity change from 0 to 64
[  270.947435][ T9920] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.981125][ T9920] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  271.024884][ T9920] BTRFS info (device loop4): using free space tree
[  271.153185][ T9949] loop2: detected capacity change from 0 to 4096
[  271.256731][ T9949] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  271.404935][ T9928] loop5: detected capacity change from 0 to 40427
[  271.427977][ T9949] ntfs3: loop2: ino=1e, "file1" encrypted i/o not supported
[  271.457222][   T27] audit: type=1800 audit(2000000098.900:56): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2297" name="file1" dev="loop2" ino=30 res=0 errno=0
[  271.490690][ T9928] F2FS-fs (loop5): invalid crc value
[  271.503429][ T9928] F2FS-fs (loop5): Found nat_bits in checkpoint
[  271.508317][ T9920] BTRFS info (device loop4): enabling ssd optimizations
[  271.612076][ T9920] BTRFS warning (device loop4): can't clear the compress_lzo,compress_zstd feature bits while mounted
[  271.683489][ T9928] F2FS-fs (loop5): recover fsync data on readonly fs
[  271.734193][ T9928] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  271.826769][ T4258] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  271.966557][ T9928] F2FS-fs (loop5): Corrupted max_depth of 3: 1025
[  272.061083][ T9928] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  272.424552][ T9991] netlink: 'syz.6.2310': attribute type 1 has an invalid length.
[  272.481434][ T9991] netlink: 'syz.6.2310': attribute type 3 has an invalid length.
[  272.540561][ T9991] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2310'.
[  272.899808][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2316'.
[  272.920793][T10004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2316'.
[  273.054764][T10005] loop1: detected capacity change from 0 to 4096
[  273.091822][T10005] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  273.302307][T10013] device ip6gretap1 entered promiscuous mode
[  273.582132][T10020] loop1: detected capacity change from 0 to 1024
[  273.843677][T10028] loop4: detected capacity change from 0 to 1024
[  273.909884][T10028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  274.017502][T10001] loop6: detected capacity change from 0 to 32768
[  274.029523][T10001] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.2314 (10001)
[  274.133180][T10001] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  274.175302][T10001] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  274.221143][ T4258] EXT4-fs (loop4): unmounting filesystem.
[  274.227476][T10001] BTRFS info (device loop6): force zlib compression, level 3
[  274.256072][T10001] BTRFS info (device loop6): force clearing of disk cache
[  274.276624][T10001] BTRFS info (device loop6): setting nodatasum
[  274.310552][T10001] BTRFS info (device loop6): allowing degraded mounts
[  274.350540][T10001] BTRFS info (device loop6): enabling disk space caching
[  274.357675][T10001] BTRFS info (device loop6): disk space caching is enabled
[  274.394728][T10046] loop2: detected capacity change from 0 to 256
[  274.446072][T10046] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  274.589234][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.647068][T10046] FAT-fs (loop2): Filesystem has been set read-only
[  274.701475][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.710971][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.753338][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.764278][T10052] loop5: detected capacity change from 0 to 8192
[  274.779568][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.803288][T10052] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  274.820696][T10001] BTRFS info (device loop6): rebuilding free space tree
[  274.860733][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.868285][T10052] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  274.886769][T10001] BTRFS info (device loop6): disabling free space tree
[  274.896368][T10001] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  274.910554][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.927277][T10075] netlink: 'syz.4.2339': attribute type 10 has an invalid length.
[  274.929123][T10001] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  274.938740][T10052] REISERFS (device loop5): using ordered data mode
[  274.948923][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.982617][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.997726][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  274.997865][T10075] team0: Device veth0_macvtap failed to register rx_handler
[  275.006897][T10052] reiserfs: using flush barriers
[  275.050657][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.076971][T10052] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  275.098188][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.117292][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.127014][T10052] REISERFS (device loop5): checking transaction log (loop5)
[  275.152043][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.169426][T10001] BTRFS info (device loop6): balance: start -sprofiles=NONE,usage=43..0,devid=0,drange=0..0,vrange=0..0,limit=0,limit=0..0,stripes=0..4294967293
[  275.200785][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.244029][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.266179][T10001] BTRFS info (device loop6): balance: ended with status: 0
[  275.350658][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.446783][ T8255] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  275.455042][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.482281][T10052] REISERFS (device loop5): Using tea hash to sort names
[  275.489875][T10052] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  275.548321][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.557719][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.573995][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.585724][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.632203][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.660669][T10046] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  275.669645][   T27] audit: type=1800 audit(2000000103.110:57): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2333" name="file1" dev="loop2" ino=1048642 res=0 errno=0
[  275.906191][T10091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2348'.
[  276.348504][T10104] netlink: 'syz.1.2351': attribute type 2 has an invalid length.
[  276.428385][T10106] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2347'.
[  276.839231][T10123] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008
[  276.863772][   T27] audit: type=1326 audit(2000000104.310:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  276.931281][   T27] audit: type=1326 audit(2000000104.310:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  277.047524][   T27] audit: type=1326 audit(2000000104.310:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  277.139757][   T27] audit: type=1326 audit(2000000104.310:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03b9f8cda9 code=0x7ffc0000
[  277.240466][   T27] audit: type=1400 audit(2000000104.580:62): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=10130 comm="syz.2.2365"
[  277.715620][T10153] loop5: detected capacity change from 0 to 256
[  277.768588][T10153] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d16cac, utbl_chksum : 0xe619d30d)
[  277.878338][T10153] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000)
[  277.938541][T10153] exFAT-fs (loop5): Filesystem has been set read-only
[  277.961088][T10153] exFAT-fs (loop5): error, failed to bmap (inode : ffff888072333560 iblock : 1, err : -5)
[  277.974747][T10166] loop1: detected capacity change from 0 to 64
[  278.708499][T10181] loop4: detected capacity change from 0 to 4096
[  278.715537][T10187] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  278.761239][T10187] Error parsing options; rc = [-22]
[  278.828474][T10181] ntfs: volume version 3.1.
[  278.890462][T10189] loop6: detected capacity change from 0 to 4096
[  278.920869][T10189] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  280.236962][   T27] audit: type=1326 audit(2000000107.680:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.6.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ca98cda9 code=0x7ffc0000
[  280.260796][T10242] xt_NFQUEUE: number of total queues is 0
[  280.322846][   T27] audit: type=1326 audit(2000000107.710:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.6.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ca98cda9 code=0x7ffc0000
[  280.412817][   T27] audit: type=1326 audit(2000000107.710:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.6.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f28ca98cda9 code=0x7ffc0000
[  280.467581][   T27] audit: type=1326 audit(2000000107.710:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.6.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ca98cda9 code=0x7ffc0000
[  280.534588][   T27] audit: type=1326 audit(2000000107.710:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.6.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28ca98cda9 code=0x7ffc0000
[  280.664489][T10255] netlink: 'syz.4.2423': attribute type 1 has an invalid length.
[  280.697754][T10255] netlink: 'syz.4.2423': attribute type 2 has an invalid length.
[  280.716004][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2423'.
[  280.841021][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2427'.
[  281.964921][T10308] loop2: detected capacity change from 0 to 64
[  282.110781][T10315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2447'.
[  282.315306][T10322] loop5: detected capacity change from 0 to 256
[  282.360841][T10316] loop6: detected capacity change from 0 to 4096
[  282.372355][T10324] loop2: detected capacity change from 0 to 512
[  282.394355][T10325] loop1: detected capacity change from 0 to 64
[  282.450197][T10324] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  282.530596][T10324] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c019, mo2=0002]
[  282.538752][T10324] System zones: 0-2, 18-18, 34-35
[  282.604088][T10324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  282.660591][T10324] EXT4-fs (loop2): shut down requested (0)
[  282.773275][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  283.456559][T10355] loop6: detected capacity change from 0 to 2048
[  283.525189][T10355] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.824360][T10335] loop4: detected capacity change from 0 to 32768
[  283.890228][T10335] 
[  283.890228][T10335]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  283.890228][T10335] 
[  283.972577][T10335] jfs_lookup: dtSearch returned -5
[  284.138174][ T4258] 
[  284.138174][ T4258]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  284.138174][ T4258] 
[  284.168842][ T4258] 
[  284.168842][ T4258]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  284.168842][ T4258] 
[  284.220221][T10344] loop1: detected capacity change from 0 to 32768
[  284.282338][T10344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2459 (10344)
[  284.365200][T10344] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  284.404960][T10344] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  284.434181][T10344] BTRFS info (device loop1): metadata ratio 2
[  284.444269][T10344] BTRFS info (device loop1): force zlib compression, level 3
[  284.468486][T10344] BTRFS info (device loop1): use zlib compression, level 3
[  284.490497][T10344] BTRFS info (device loop1): turning on async discard
[  284.497495][T10344] BTRFS info (device loop1): enabling ssd optimizations
[  284.520557][T10344] BTRFS info (device loop1): using spread ssd allocation scheme
[  284.532856][T10344] BTRFS info (device loop1): using free space tree
[  284.580346][T10383] loop4: detected capacity change from 0 to 256
[  284.618967][T10383] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  285.160081][T10409] loop4: detected capacity change from 0 to 4096
[  285.166778][T10415] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2486'.
[  285.208041][T10409] __ntfs_warning: 4 callbacks suppressed
[  285.208058][T10409] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  285.354698][T10409] ntfs: volume version 3.1.
[  285.465149][ T4252] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  285.647538][T10427] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2492'.
[  286.343906][T10447] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2501'.
[  286.434957][T10451] loop4: detected capacity change from 0 to 256
[  286.865232][T10443] infiniband syz1: set active
[  286.896259][T10443] infiniband syz1: added syz_tun
[  287.017635][T10470] bridge0: port 3(netdevsim0) entered blocking state
[  287.113490][T10470] bridge0: port 3(netdevsim0) entered disabled state
[  287.142494][T10443] RDS/IB: syz1: added
[  287.147906][T10443] smc: adding ib device syz1 with port count 1
[  287.158394][T10470] device netdevsim0 entered promiscuous mode
[  287.167237][T10476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2515'.
[  287.177479][T10443] smc:    ib device syz1 port 1 has pnetid 
[  287.201616][T10470] bridge0: port 3(netdevsim0) entered blocking state
[  287.205174][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'.
[  287.208946][T10470] bridge0: port 3(netdevsim0) entered forwarding state
[  287.630740][ T7784] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  287.830583][ T7784] usb 3-1: Using ep0 maxpacket: 8
[  287.840931][ T7784] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.886681][ T7784] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  287.917001][ T7784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.941647][ T7784] usb 3-1: Product: syz
[  287.945876][ T7784] usb 3-1: Manufacturer: syz
[  287.995648][ T7784] usb 3-1: SerialNumber: syz
[  288.053373][ T7784] usb 3-1: config 0 descriptor??
[  288.075035][ T7784] gspca_main: stk014-2.14.0 probing 05e1:0893
[  288.101735][ T7784] usb 3-1: selecting invalid altsetting 1
[  288.274358][ T7784] gspca_stk014: init reg: 0x00
[  288.280503][ T7784] stk014: probe of 3-1:0.0 failed with error -5
[  288.515407][ T4455] usb 3-1: USB disconnect, device number 10
[  288.795077][T10517] loop4: detected capacity change from 0 to 4096
[  288.831233][T10517] ntfs: (device loop4): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  288.862928][T10517] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  288.946370][T10517] ntfs: volume version 3.1.
[  288.971750][T10517] ntfs: (device loop4): map_mft_record_page(): Mft record 0x2 is corrupt.  Run chkdsk.
[  288.999062][T10517] ntfs: (device loop4): map_mft_record(): Failed with error code 5.
[  289.008982][T10517] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  289.023354][T10517] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  289.137553][T10517] ntfs: (device loop4): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported.  Sorry.
[  289.218687][   T27] audit: type=1326 audit(2000000116.660:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.1.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aebf8cda9 code=0x7ffc0000
[  289.266045][T10517] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -95.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  289.717028][T10520] loop5: detected capacity change from 0 to 32768
[  289.790618][T10520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2537 (10520)
[  289.840898][T10520] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  289.860505][T10520] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  289.890557][T10520] BTRFS info (device loop5): metadata ratio 2
[  289.896872][T10520] BTRFS info (device loop5): force zlib compression, level 3
[  289.915230][T10540] bridge0: port 3(netdevsim0) entered blocking state
[  289.930490][T10520] BTRFS info (device loop5): use zlib compression, level 3
[  289.938607][T10540] bridge0: port 3(netdevsim0) entered disabled state
[  289.951808][T10520] BTRFS info (device loop5): turning on async discard
[  289.965485][T10540] device netdevsim0 entered promiscuous mode
[  289.981417][T10520] BTRFS info (device loop5): enabling ssd optimizations
[  289.990886][T10520] BTRFS info (device loop5): using spread ssd allocation scheme
[  290.006859][T10520] BTRFS info (device loop5): using free space tree
[  290.010636][T10540] bridge0: port 3(netdevsim0) entered blocking state
[  290.020458][T10540] bridge0: port 3(netdevsim0) entered forwarding state
[  290.489138][T10571] loop1: detected capacity change from 0 to 512
[  290.531061][T10571] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  290.649582][ T7405] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  290.688035][T10532] loop4: detected capacity change from 0 to 32768
[  290.726312][T10571] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #17: comm syz.1.2554: iget: bad i_size value: -6917529027641081756
[  290.749951][T10579] No such timeout policy "syz1"
[  290.831648][T10532] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  290.852117][T10571] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2554: couldn't read orphan inode 17 (err -117)
[  290.922700][T10571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  291.089107][T10586] loop2: detected capacity change from 0 to 128
[  291.131014][T10586] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  291.190079][T10588] loop6: detected capacity change from 0 to 1764
[  291.231600][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  291.320654][T10588] iso9660: Corrupted directory entry in block 2 of inode 1920
[  291.410801][   T33] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  291.424873][ T4258] ocfs2: Unmounting device (7,4) on (node local)
[  291.620911][T10590] loop5: detected capacity change from 0 to 4096
[  291.656511][T10590] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  291.800869][T10590] ntfs3: loop5: ino=1e, "file1" encrypted i/o not supported
[  291.808372][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  291.808386][   T27] audit: type=1800 audit(2000000119.250:76): pid=10590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2555" name="file1" dev="loop5" ino=30 res=0 errno=0
[  292.233010][T10616] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2572'.
[  292.705824][T10634] netlink: 'syz.2.2581': attribute type 6 has an invalid length.
[  292.730801][T10629] loop4: detected capacity change from 0 to 4096
[  292.835463][T10637] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  292.837907][T10636] xt_TPROXY: Can be used only with -p tcp or -p udp
[  292.884325][T10629] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.'
[  292.920808][T10629] Remounting filesystem read-only
[  293.482540][T10651] loop6: detected capacity change from 0 to 8192
[  293.513867][T10663] loop2: detected capacity change from 0 to 256
[  293.538593][T10651] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  293.560671][T10651] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  293.609596][T10651] REISERFS (device loop6): using ordered data mode
[  293.667214][T10651] reiserfs: using flush barriers
[  293.705716][T10651] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  293.780288][T10651] REISERFS (device loop6): checking transaction log (loop6)
[  293.821467][T10651] REISERFS (device loop6): Using tea hash to sort names
[  293.821826][T10651] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  294.155014][T10680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2603'.
[  294.801296][T10696] loop2: detected capacity change from 0 to 8192
[  294.867680][T10698] loop6: detected capacity change from 0 to 4096
[  294.875237][T10696] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  294.941629][T10696] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  295.018243][T10698] ntfs: (device loop6): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  295.040562][T10696] REISERFS (device loop2): using ordered data mode
[  295.067623][T10696] reiserfs: using flush barriers
[  295.072833][T10698] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  295.092003][T10696] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  295.149412][T10698] ntfs: volume version 3.1.
[  295.156941][T10698] ntfs: (device loop6): map_mft_record_page(): Mft record 0x2 is corrupt.  Run chkdsk.
[  295.171284][T10696] REISERFS (device loop2): checking transaction log (loop2)
[  295.188923][T10698] ntfs: (device loop6): map_mft_record(): Failed with error code 5.
[  295.219356][T10698] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  295.253309][T10698] ntfs: (device loop6): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  295.415410][T10698] ntfs: (device loop6): ntfs_read_locked_inode(): Index block size (0) < NTFS_BLOCK_SIZE (512) is not supported.  Sorry.
[  295.430249][T10696] REISERFS (device loop2): Using tea hash to sort names
[  295.439419][T10713] netlink: zone id is out of range
[  295.450817][T10696] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  295.456984][T10686] loop4: detected capacity change from 0 to 32768
[  295.460633][T10698] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -95.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  295.477668][T10713] netlink: zone id is out of range
[  295.511154][T10713] netlink: zone id is out of range
[  295.516315][T10713] netlink: zone id is out of range
[  295.545139][T10686] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2608 (10686)
[  295.577759][T10713] netlink: zone id is out of range
[  295.600707][T10713] netlink: zone id is out of range
[  295.609243][T10713] netlink: zone id is out of range
[  295.630057][T10713] netlink: zone id is out of range
[  295.635625][T10713] netlink: zone id is out of range
[  295.645770][T10686] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  295.675904][T10713] netlink: zone id is out of range
[  295.687821][T10686] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  295.728099][T10686] BTRFS info (device loop4): force zlib compression, level 3
[  295.746650][T10686] BTRFS info (device loop4): force clearing of disk cache
[  295.766756][T10686] BTRFS info (device loop4): setting nodatasum
[  295.794628][T10686] BTRFS info (device loop4): use zlib compression, level 3
[  295.810579][T10686] BTRFS info (device loop4): allowing degraded mounts
[  295.827678][T10686] BTRFS info (device loop4): enabling disk space caching
[  295.870462][T10686] BTRFS info (device loop4): disk space caching is enabled
[  295.908562][T10709] loop5: detected capacity change from 0 to 32768
[  296.072521][T10709] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  296.100615][ T4346] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  296.148899][T10709] XFS (loop5): Quotacheck needed: Please wait.
[  296.169792][T10686] BTRFS info (device loop4): enabling ssd optimizations
[  296.194084][T10686] BTRFS info (device loop4): rebuilding free space tree
[  296.215084][   T46] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  296.267987][T10686] BTRFS info (device loop4): disabling free space tree
[  296.279529][   T46] XFS (loop5): Unmount and run xfs_repair
[  296.286277][   T46] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  296.294090][ T4346] usb 7-1: Using ep0 maxpacket: 32
[  296.310764][T10686] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  296.327412][ T4346] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.349768][   T46] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  296.359133][T10686] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  296.371671][ T4346] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  296.385418][   T46] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  296.398244][ T4346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.410761][   T46] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  296.420008][ T4346] usb 7-1: Product: syz
[  296.424541][ T4346] usb 7-1: Manufacturer: syz
[  296.429973][ T4346] usb 7-1: SerialNumber: syz
[  296.435175][   T46] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  296.447857][   T46] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  296.458248][ T4346] usb 7-1: config 0 descriptor??
[  296.481409][ T4346] cdc_ether 7-1:0.0: skipping garbage
[  296.487681][ T4346] usb 7-1: bad CDC descriptors
[  296.509472][   T46] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  296.525663][ T4346] usb 7-1: unsupported MDLM descriptors
[  296.545633][   T46] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  296.559368][T10686] BTRFS info (device loop4): balance: start -f -ssoft,usage=9223372041149743104,usage=0..2147483649,devid=0,vrange=5..4294967296,stripes=1831..0
[  296.580561][   T46] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  296.600635][T10686] BTRFS info (device loop4): balance: ended with status: 0
[  296.608274][   T46] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  296.675225][   T46] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  296.720650][ T7479] usb 7-1: USB disconnect, device number 6
[  296.744659][   T46] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  296.774391][T10709] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  296.822032][ T4258] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  297.290582][ T7405] XFS (loop5): Unmounting Filesystem
[  297.424286][T10770] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  297.649491][T10778] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2640'.
[  297.753174][ T4346] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  297.963916][ T4346] usb 3-1: Using ep0 maxpacket: 32
[  297.977254][ T4346] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  298.011022][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.019079][ T4346] usb 3-1: Product: syz
[  298.036594][ T4346] usb 3-1: Manufacturer: syz
[  298.046710][ T4346] usb 3-1: SerialNumber: syz
[  298.060063][ T4346] usb 3-1: config 0 descriptor??
[  298.068785][T10792] netlink: 'syz.5.2633': attribute type 21 has an invalid length.
[  298.113867][T10792] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2633'.
[  298.520337][ T4346] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a
[  298.544124][ T4346] airspy 3-1:0.0: Could not detect board
[  298.549987][ T4346] airspy: probe of 3-1:0.0 failed with error -71
[  298.552590][T10808] netlink: 'syz.6.2654': attribute type 10 has an invalid length.
[  298.590526][ T4346] usb 3-1: USB disconnect, device number 11
[  298.650202][T10808] team0: Device macvtap0 failed to register rx_handler
[  299.011038][T10818] block device autoloading is deprecated and will be removed.
[  299.248040][T10829] rdma_rxe: rxe_register_device failed with error -23
[  299.278577][T10829] rdma_rxe: failed to add syz_tun
[  299.496469][T10838] loop6: detected capacity change from 0 to 65
[  299.649457][T10838] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway
[  300.049342][T10844] loop2: detected capacity change from 0 to 32768
[  300.070294][T10844] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2671 (10844)
[  300.137112][T10844] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  300.167825][T10844] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  300.190700][ T4346] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  300.219503][T10844] BTRFS info (device loop2): force zlib compression, level 3
[  300.248411][T10844] BTRFS info (device loop2): force clearing of disk cache
[  300.268673][T10844] BTRFS info (device loop2): setting nodatasum
[  300.306435][T10844] BTRFS info (device loop2): use zlib compression, level 3
[  300.324212][T10844] BTRFS info (device loop2): allowing degraded mounts
[  300.341404][T10844] BTRFS info (device loop2): enabling disk space caching
[  300.363329][T10844] BTRFS info (device loop2): disk space caching is enabled
[  300.394740][ T4346] usb 6-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=21.1f
[  300.445397][ T4346] usb 6-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3
[  300.503159][ T4346] usb 6-1: Product: syz
[  300.530843][ T4346] usb 6-1: Manufacturer: syz
[  300.535504][ T4346] usb 6-1: SerialNumber: syz
[  300.610857][ T4346] usb 6-1: config 0 descriptor??
[  300.647874][ T4346] gspca_main: pac7311-2.14.0 probing 093a:2601
[  300.776201][T10844] BTRFS info (device loop2): enabling ssd optimizations
[  300.801168][T10844] BTRFS info (device loop2): rebuilding free space tree
[  300.838733][T10844] BTRFS info (device loop2): disabling free space tree
[  300.855059][T10844] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  300.887259][T10844] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  301.041519][ T4346] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  301.049487][ T4346] pac7311: probe of 6-1:0.0 failed with error -71
[  301.060284][T10844] BTRFS info (device loop2): balance: start -f -ssoft,usage=9223372041149743104,usage=0..2147483649,devid=0,vrange=5..4294967296,stripes=1831..0
[  301.111401][ T4346] usb 6-1: USB disconnect, device number 4
[  301.118362][T10844] BTRFS info (device loop2): balance: ended with status: 0
[  301.277937][ T4260] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  301.499277][T10889] loop1: detected capacity change from 0 to 32768
[  301.574098][T10889] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2685 (10889)
[  301.728864][T10889] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  301.771321][T10889] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  301.839498][T10889] BTRFS info (device loop1): force zlib compression, level 3
[  301.852378][T10889] BTRFS info (device loop1): force clearing of disk cache
[  301.859554][T10889] BTRFS info (device loop1): setting nodatasum
[  301.930701][T10889] BTRFS info (device loop1): allowing degraded mounts
[  301.937635][T10889] BTRFS info (device loop1): enabling disk space caching
[  302.006395][T10889] BTRFS info (device loop1): disk space caching is enabled
[  302.361517][T10937] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2700'.
[  302.425702][T10889] BTRFS info (device loop1): rebuilding free space tree
[  302.452051][T10889] BTRFS info (device loop1): disabling free space tree
[  302.474542][T10943] loop6: detected capacity change from 0 to 256
[  302.491821][T10889] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  302.548836][T10889] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  302.746608][T10889] BTRFS info (device loop1): balance: start -sprofiles=NONE,usage=43..0,devid=0,drange=0..0,vrange=0..0,limit=0,limit=0..0,stripes=0..4294967293
[  302.830959][T10889] BTRFS info (device loop1): balance: ended with status: 0
[  302.996845][ T4252] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  303.334481][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2713'.
[  303.380523][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2713'.
[  303.438637][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2713'.
[  303.691087][T10977] x_tables: ip_tables: osf match: only valid for protocol 6
[  303.985285][T10987] loop1: detected capacity change from 0 to 16
[  304.009758][T10987] erofs: (device loop1): mounted with root inode @ nid 36.
[  304.060170][T10987] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  304.090843][T10987] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851]
[  304.142795][T10987] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[  304.586020][T11006] loop6: detected capacity change from 0 to 512
[  304.633577][T11006] EXT4-fs: Ignoring removed orlov option
[  304.721646][T11006] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.2730: Attempting to read directory block (0) that is past i_size (256)
[  304.836365][T10974] loop2: detected capacity change from 0 to 32768
[  304.847125][T11006] EXT4-fs (loop6): Remounting filesystem read-only
[  304.875735][T11006] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  304.897533][T11006] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  304.978161][T11006] EXT4-fs (loop6): unmounting filesystem.
[  305.020267][T10974] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  305.057611][T10974] XFS (loop2): Quotacheck needed: Please wait.
[  305.100686][T10993] loop5: detected capacity change from 0 to 32768
[  305.125026][   T33] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  305.159074][T10993] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  305.186195][   T22] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  305.215353][   T33] XFS (loop2): Unmount and run xfs_repair
[  305.222874][   T33] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  305.230291][   T33] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  305.239834][   T33] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  305.249509][   T33] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  305.284135][   T33] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  305.294626][   T33] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  305.308426][ T7405] ocfs2: Unmounting device (7,5) on (node local)
[  305.356119][   T33] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  305.384834][   T33] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  305.390427][   T22] usb 5-1: Using ep0 maxpacket: 8
[  305.407882][   T22] usb 5-1: New USB device found, idVendor=1737, idProduct=0039, bcdDevice=af.02
[  305.415118][   T33] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  305.438971][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.454795][   T33] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  305.475375][   T22] usb 5-1: config 0 descriptor??
[  305.514357][   T33] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x6a5/0xb80 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  305.550651][   T33] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  305.603783][T10974] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  305.712976][   T22] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  305.765770][ T4260] XFS (loop2): Unmounting Filesystem
[  305.924028][   T22] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  305.954628][   T22] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  305.987802][   T22] asix: probe of 5-1:0.0 failed with error -71
[  306.024960][T11048] netlink: 'syz.1.2746': attribute type 21 has an invalid length.
[  306.039980][   T22] usb 5-1: USB disconnect, device number 9
[  306.048109][T11048] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2746'.
[  306.065884][T11049] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2745'.
[  306.260566][T11051] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2747'.
[  306.976551][T11045] loop6: detected capacity change from 0 to 32768
[  307.079177][T11045] JBD2: Ignoring recovery information on journal
[  307.181627][T11045] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  307.256891][T11082] loop5: detected capacity change from 0 to 1024
[  307.356169][T11082] hfsplus: bad catalog entry type
[  307.445180][ T8255] ocfs2: Unmounting device (7,6) on (node local)
[  307.467796][ T4369] hfsplus: b-tree write err: -5, ino 4
[  308.119719][T11104] IPv6: NLM_F_CREATE should be specified when creating new route
[  308.404037][   T27] audit: type=1326 audit(2000000135.850:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd934f8cda9 code=0x7ffc0000
[  308.476670][   T27] audit: type=1326 audit(2000000135.850:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd934f8cda9 code=0x7ffc0000
[  308.560842][   T27] audit: type=1326 audit(2000000135.890:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fd934f8cda9 code=0x7ffc0000
[  308.655368][   T27] audit: type=1326 audit(2000000135.890:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd934f8cda9 code=0x7ffc0000
[  308.724743][T11116] loop1: detected capacity change from 0 to 4096
[  308.740535][   T27] audit: type=1326 audit(2000000135.890:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.2.2775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd934f8cda9 code=0x7ffc0000
[  308.850607][T11121] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  308.880924][T11116] NILFS error (device loop1): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  308.906120][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2779'.
[  308.953744][T11116] Remounting filesystem read-only
[  309.270681][T11107] loop6: detected capacity change from 0 to 32768
[  309.447013][T11107] XFS (loop6): Mounting V5 Filesystem
[  309.739760][T11107] XFS (loop6): Ending clean mount
[  309.781815][T11107] XFS (loop6): Quotacheck needed: Please wait.
[  309.921431][T11107] XFS (loop6): Quotacheck: Done.
[  310.087708][ T8255] XFS (loop6): Unmounting Filesystem
[  310.195910][T11172] loop4: detected capacity change from 0 to 256
[  310.203717][T11172] exFAT-fs (loop4): bogus fat length
[  310.222077][T11172] exFAT-fs (loop4): failed to read boot sector
[  310.228300][T11172] exFAT-fs (loop4): failed to recognize exfat type
[  310.367842][T11175] loop2: detected capacity change from 0 to 512
[  310.412740][T11175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  310.492851][T11175] EXT4-fs (loop2): 1 truncate cleaned up
[  310.500725][T11175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  310.772093][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  310.829891][T11165] loop5: detected capacity change from 0 to 32768
[  310.897033][T11165] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2796 (11165)
[  310.942380][T11190] netlink: 'syz.2.2807': attribute type 1 has an invalid length.
[  310.955937][T11191] loop4: detected capacity change from 0 to 128
[  310.966962][T11165] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  311.016402][T11191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  311.026463][T11165] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  311.046676][T11165] BTRFS info (device loop5): enabling auto defrag
[  311.057253][T11165] BTRFS info (device loop5): doing ref verification
[  311.068545][T11191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.138975][T11165] BTRFS info (device loop5): use no compression
[  311.164564][T11165] BTRFS info (device loop5): force clearing of disk cache
[  311.201980][T11196] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  311.210530][T11165] BTRFS info (device loop5): max_inline at 4096
[  311.216841][T11165] BTRFS info (device loop5): disabling free space tree
[  311.269921][T11199] SET target dimension over the limit!
[  311.578507][T11165] BTRFS info (device loop5): enabling ssd optimizations
[  311.609077][T11165] BTRFS info (device loop5): rebuilding free space tree
[  311.665551][T11165] BTRFS info (device loop5): disabling free space tree
[  311.682925][T11165] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  311.710640][T11165] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  311.754812][T11229] netlink: 'syz.4.2818': attribute type 4 has an invalid length.
[  311.773134][T11165] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  312.034468][T11237] loop4: detected capacity change from 0 to 256
[  312.068573][T11237] exfat: Deprecated parameter 'utf8'
[  312.099234][T11237] exfat: Deprecated parameter 'namecase'
[  312.120143][T11237] exfat: Deprecated parameter 'namecase'
[  312.137996][T11237] exfat: Deprecated parameter 'utf8'
[  312.192770][T11237] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6bdff97b, utbl_chksum : 0xe619d30d)
[  312.561914][T11249] loop4: detected capacity change from 0 to 128
[  312.865687][T11249] loop4: detected capacity change from 0 to 4096
[  312.891352][T11255] loop2: detected capacity change from 0 to 64
[  312.911726][T11249] ntfs: (device loop4): parse_options(): Unrecognized mount option numtail.
[  312.941205][T11249] ntfs: (device loop4): parse_options(): Unrecognized mount option uni_xlate.
[  312.986281][T11249] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  313.015574][T11258] net_ratelimit: 5 callbacks suppressed
[  313.015596][T11258] openvswitch: netlink: EtherType 0 is less than min 600
[  313.058957][T11249] ntfs: (device loop4): parse_options(): Unrecognized mount option uni_xlate.
[  313.112844][T11249] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  313.575384][T11269] loop4: detected capacity change from 0 to 764
[  313.595132][T11245] loop1: detected capacity change from 0 to 32768
[  313.622972][T11245] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2825 (11245)
[  313.654214][T11245] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  313.715998][T11245] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  313.751561][T11245] BTRFS info (device loop1): force zlib compression, level 3
[  313.800440][T11245] BTRFS info (device loop1): force clearing of disk cache
[  313.822019][T11245] BTRFS info (device loop1): setting nodatasum
[  313.828248][T11245] BTRFS info (device loop1): use zlib compression, level 3
[  313.881940][T11277] loop6: detected capacity change from 0 to 128
[  313.909504][T11245] BTRFS info (device loop1): allowing degraded mounts
[  313.916929][T11245] BTRFS info (device loop1): enabling disk space caching
[  313.957063][T11245] BTRFS info (device loop1): disk space caching is enabled
[  313.982018][T11277] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  314.024002][T11277] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  314.070522][   T48] Bluetooth: hci5: command 0x0406 tx timeout
[  314.256601][T11245] BTRFS info (device loop1): enabling ssd optimizations
[  314.281049][T11245] BTRFS info (device loop1): rebuilding free space tree
[  314.281725][T11304] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  314.351796][T11245] BTRFS info (device loop1): disabling free space tree
[  314.358804][T11245] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  314.416455][T11245] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  314.592571][T11245] BTRFS info (device loop1): balance: start -f -ssoft,usage=9223372041149743104,usage=0..2147483649,devid=0,vrange=5..4294967296,stripes=1831..0
[  314.631182][T11245] BTRFS info (device loop1): balance: ended with status: 0
[  314.867724][ T4252] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  315.414564][   T27] kauditd_printk_skb: 7 callbacks suppressed
[  315.414581][   T27] audit: type=1326 audit(2000000142.860:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11337 comm="syz.4.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3878cda9 code=0x7ffc0000
[  315.544141][   T27] audit: type=1326 audit(2000000142.860:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11337 comm="syz.4.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3878cda9 code=0x7ffc0000
[  315.626341][   T27] audit: type=1326 audit(2000000142.890:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11337 comm="syz.4.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7d3878cda9 code=0x7ffc0000
[  315.781511][   T27] audit: type=1326 audit(2000000142.900:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11337 comm="syz.4.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3878cda9 code=0x7ffc0000
[  315.824936][T11346] loop2: detected capacity change from 0 to 256
[  315.850420][   T27] audit: type=1326 audit(2000000142.900:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11337 comm="syz.4.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d3878cda9 code=0x7ffc0000
[  315.919089][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'.
[  315.939490][T11346] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  315.979870][T11350] loop1: detected capacity change from 0 to 512
[  315.987866][T11350] EXT4-fs: Ignoring removed orlov option
[  316.106736][T11350] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  316.156212][T11350] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it
[  316.166459][T11350] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.2866: Corrupt directory, running e2fsck is recommended
[  316.285656][T11350] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  316.321074][T11350] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.2866: corrupted in-inode xattr
[  316.336028][T11327] loop6: detected capacity change from 0 to 32768
[  316.375886][T11350] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2866: couldn't read orphan inode 15 (err -117)
[  316.412461][T11327] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  316.430453][T11350] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  316.499923][T11352] loop5: detected capacity change from 0 to 32768
[  316.552589][T11327] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  316.600770][T11352] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.2868 (11352)
[  316.659507][T11352] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  316.679972][T11352] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  316.705473][T11352] BTRFS info (device loop5): force zlib compression, level 3
[  316.714560][T11350] EXT4-fs error (device loop1): ext4_xattr_set_entry:1619: inode #2: comm syz.1.2866: corrupted xattr entries
[  316.729613][T11352] BTRFS info (device loop5): force clearing of disk cache
[  316.750657][T11352] BTRFS info (device loop5): setting nodatasum
[  316.756926][T11352] BTRFS info (device loop5): use zlib compression, level 3
[  316.784337][ T8255] ocfs2: Unmounting device (7,6) on (node local)
[  316.808836][T11352] BTRFS info (device loop5): allowing degraded mounts
[  316.870234][T11352] BTRFS info (device loop5): enabling disk space caching
[  316.919415][T11352] BTRFS info (device loop5): disk space caching is enabled
[  316.924631][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  317.124807][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  317.140643][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  317.414087][T11352] BTRFS info (device loop5): enabling ssd optimizations
[  317.442065][T11352] BTRFS info (device loop5): rebuilding free space tree
[  317.494743][T11352] BTRFS info (device loop5): disabling free space tree
[  317.520473][T11352] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  317.560758][T11352] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  317.705130][T11352] BTRFS info (device loop5): balance: start -f -ssoft,usage=9223372041149743104,usage=0..2147483649,devid=0,vrange=5..4294967296,stripes=1831..0
[  317.806328][T11352] BTRFS info (device loop5): balance: ended with status: 0
[  317.939655][T11408] loop6: detected capacity change from 0 to 4096
[  317.943000][T11373] loop2: detected capacity change from 0 to 32768
[  317.951030][ T7405] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  317.973493][T11373] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.2877 (11373)
[  317.994755][T11408] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  318.035708][ T4329] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4329)
[  318.304115][T11414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2889'.
[  318.340527][T11414] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2889'.
[  318.349455][T11414] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2889'.
[  318.399625][T11414] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  318.506043][T11408] ntfs3: loop6: failed to convert "c46c" to koi8-r
[  318.574131][T11402] loop1: detected capacity change from 0 to 32768
[  320.308859][T11432] loop4: detected capacity change from 0 to 32768
[  320.376238][T11432] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2897 (11432)
[  320.438905][T11432] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  320.495983][T11432] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  320.532771][T11432] BTRFS info (device loop4): using free space tree
[  320.990595][T11432] BTRFS info (device loop4): enabling ssd optimizations
[  321.246721][ T4258] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  322.063496][T11546] loop4: detected capacity change from 0 to 512
[  322.127933][T11546] EXT4-fs: Ignoring removed orlov option
[  322.209430][T11546] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  322.221302][T11546] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  322.236480][T11546] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2925: Corrupt directory, running e2fsck is recommended
[  322.318729][T11546] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  322.387338][T11546] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.2925: corrupted in-inode xattr
[  322.466547][T11546] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2925: couldn't read orphan inode 15 (err -117)
[  322.499615][T11546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  322.523099][T11514] loop1: detected capacity change from 0 to 32768
[  322.619889][T11514] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  322.646424][T11546] EXT4-fs error (device loop4): ext4_xattr_set_entry:1619: inode #2: comm syz.4.2925: corrupted xattr entries
[  322.708769][ T4258] EXT4-fs (loop4): unmounting filesystem.
[  322.774390][T11514] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  322.983373][ T4252] ocfs2: Unmounting device (7,1) on (node local)
[  323.028251][T11568] loop2: detected capacity change from 0 to 512
[  323.168605][T11568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  323.183813][T11568] ext4 filesystem being mounted at /629/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.271278][   T93] block nbd6: Attempted send on invalid socket
[  323.278073][   T93] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  323.288232][T11576] hfs: can't find a HFS filesystem on dev nbd6
[  323.360890][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  323.898521][T11561] loop5: detected capacity change from 0 to 32768
[  323.939310][T11561] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2936 (11561)
[  324.023284][T11561] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  324.064925][T11592] loop6: detected capacity change from 0 to 4096
[  324.077909][T11561] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  324.120651][T11561] BTRFS info (device loop5): using free space tree
[  324.200110][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2955'.
[  324.492149][T11561] BTRFS info (device loop5): enabling ssd optimizations
[  324.672464][ T7405] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  325.288253][T11596] loop4: detected capacity change from 0 to 32768
[  325.297732][T11643] loop6: detected capacity change from 0 to 256
[  325.362447][T11643] MINIX-fs: mounting file system with errors, running fsck is recommended
[  325.446533][T11596] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  325.569580][T11596] (syz.4.2952,11596,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=0, inode=18446744073708961857, rec_len=65535, name_len=1
[  325.685277][T11596] (syz.4.2952,11596,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2
[  325.740446][T11596] (syz.4.2952,11596,1):ocfs2_mknod:298 ERROR: status = -2
[  325.780489][T11596] (syz.4.2952,11596,1):ocfs2_mknod:502 ERROR: status = -2
[  325.787720][T11596] (syz.4.2952,11596,1):ocfs2_create:676 ERROR: status = -2
[  325.906253][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2976'.
[  325.934964][ T4258] ocfs2: Unmounting device (7,4) on (node local)
[  326.132682][T11668] loop1: detected capacity change from 0 to 1024
[  326.195161][T11668] hfsplus: failed to load root directory
[  326.407516][T11674] [U] 
[  327.303491][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3000'.
[  327.361600][T11713] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3000'.
[  327.745925][T11728] loop6: detected capacity change from 0 to 256
[  327.838529][T11728] FAT-fs (loop6): Directory bread(block 64) failed
[  327.863441][T11728] FAT-fs (loop6): Directory bread(block 65) failed
[  327.870809][T11728] FAT-fs (loop6): Directory bread(block 66) failed
[  327.912836][T11728] FAT-fs (loop6): Directory bread(block 67) failed
[  327.950717][T11728] FAT-fs (loop6): Directory bread(block 68) failed
[  327.961077][T11728] FAT-fs (loop6): Directory bread(block 69) failed
[  327.967749][T11728] FAT-fs (loop6): Directory bread(block 70) failed
[  328.026989][T11728] FAT-fs (loop6): Directory bread(block 71) failed
[  328.070648][T11728] FAT-fs (loop6): Directory bread(block 72) failed
[  328.077394][T11728] FAT-fs (loop6): Directory bread(block 73) failed
[  328.333729][T11744] loop1: detected capacity change from 0 to 512
[  328.361188][T11744] EXT4-fs: Ignoring removed mblk_io_submit option
[  328.434878][T11749] loop5: detected capacity change from 0 to 16
[  328.455552][T11750] device ip6gre1 entered promiscuous mode
[  328.469578][T11749] erofs: (device loop5): mounted with root inode @ nid 36.
[  328.483066][T11744] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3016: invalid indirect mapped block 10 (level 1)
[  328.550284][T11744] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3016: invalid indirect mapped block 8 (level 1)
[  328.606598][T11744] EXT4-fs (loop1): 1 truncate cleaned up
[  328.618979][T11744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  328.686835][T11744] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.3016: unexpected EA_INODE flag
[  328.854351][ T4252] EXT4-fs (loop1): unmounting filesystem.
[  329.049403][T11767] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3026'.
[  329.057088][T11766] loop5: detected capacity change from 0 to 512
[  329.092248][T11766] EXT4-fs: Ignoring removed orlov option
[  329.171238][T11766] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  329.240491][T11766] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it
[  329.298238][T11766] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3025: Corrupt directory, running e2fsck is recommended
[  329.408482][T11780] xt_TCPMSS: Only works on TCP SYN packets
[  329.429896][T11766] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  329.465940][T11766] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.3025: corrupted in-inode xattr
[  329.507424][T11766] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3025: couldn't read orphan inode 15 (err -117)
[  329.577123][T11766] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  329.757745][T11766] EXT4-fs error (device loop5): ext4_xattr_set_entry:1619: inode #2: comm syz.5.3025: corrupted xattr entries
[  329.889244][ T7405] EXT4-fs (loop5): unmounting filesystem.
[  329.970613][   T22] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  330.083555][T11802] loop2: detected capacity change from 0 to 1024
[  330.112895][T11802] EXT4-fs: Ignoring removed nobh option
[  330.158133][T11802] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #11: comm syz.2.3043: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  330.206787][T11808] loop4: detected capacity change from 0 to 256
[  330.218519][T11802] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3043: couldn't read orphan inode 11 (err -117)
[  330.244648][T11802] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  330.255497][   T22] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  330.270448][   T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.280947][T11808] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  330.288857][   T22] usb 7-1: Product: syz
[  330.298997][   T22] usb 7-1: Manufacturer: syz
[  330.304231][   T22] usb 7-1: SerialNumber: syz
[  330.319795][   T22] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  330.357559][   T22] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  330.420561][T11808] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  330.458255][T11808] exFAT-fs (loop4): Filesystem has been set read-only
[  330.497262][T11802] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.3043: Invalid block bitmap block 0 in block_group 0
[  330.571416][T11802] Quota error (device loop2): write_blk: dquota write failed
[  330.610228][T11802] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  330.679078][T11802] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.3043: Failed to acquire dquot type 0
[  330.823776][ T4293] usb 7-1: USB disconnect, device number 7
[  330.894865][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  331.052469][T11829] loop2: detected capacity change from 0 to 512
[  331.063510][T11829] EXT4-fs: Ignoring removed orlov option
[  331.089922][T11829] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  331.127250][T11829] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[  331.166783][T11829] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.3052: Corrupt directory, running e2fsck is recommended
[  331.262077][T11829] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  331.287259][T11829] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.3052: corrupted in-inode xattr
[  331.313403][T11829] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3052: couldn't read orphan inode 15 (err -117)
[  331.370820][T11829] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  331.430704][   T22] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  331.437794][   T22] ath9k_htc: Failed to initialize the device
[  331.461115][ T4293] usb 7-1: ath9k_htc: USB layer deinitialized
[  331.530861][T11829] EXT4-fs error (device loop2): ext4_xattr_set_entry:1619: inode #2: comm syz.2.3052: corrupted xattr entries
[  331.737746][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  331.981348][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3067'.
[  332.454807][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3077'.
[  332.523059][T11883] loop1: detected capacity change from 0 to 2048
[  332.581366][T11883]  loop1: p2 < >
[  332.604984][ T3622]  loop1: p2 < >
[  332.753013][ T4329] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  332.802103][ T4329] udevd[4329]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  332.830116][T11889] x_tables: eb_tables: nfacct.0 match: invalid size 40 (kernel) != (user) 31
[  332.996279][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3085'.
[  333.047242][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3085'.
[  333.066717][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3085'.
[  333.577264][T11887] loop6: detected capacity change from 0 to 32768
[  333.648707][T11887] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.3080 (11887)
[  333.688902][T11887] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  333.724591][T11887] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  333.755049][T11887] BTRFS info (device loop6): enabling auto defrag
[  333.781131][T11887] BTRFS info (device loop6): doing ref verification
[  333.818707][T11887] BTRFS info (device loop6): use no compression
[  333.850950][T11887] BTRFS info (device loop6): force clearing of disk cache
[  333.858156][T11887] BTRFS info (device loop6): max_inline at 4096
[  333.920496][T11887] BTRFS info (device loop6): disabling free space tree
[  333.953810][T11930] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  334.059511][T11940] netlink: 'syz.5.3102': attribute type 15 has an invalid length.
[  334.122448][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3103'.
[  334.246362][T11887] BTRFS info (device loop6): enabling ssd optimizations
[  334.266063][T11887] BTRFS info (device loop6): rebuilding free space tree
[  334.315309][T11887] BTRFS info (device loop6): disabling free space tree
[  334.343551][T11887] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  334.385194][T11887] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  334.448240][T11887] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  334.988584][T11978] loop2: detected capacity change from 0 to 128
[  335.037947][T11978] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  335.115796][T11978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  335.230800][T11978] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535)
[  335.344430][T11991] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  335.453276][T11991] CIFS mount error: No usable UNC path provided in device string!
[  335.453276][T11991] 
[  335.469841][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  335.526936][T11991] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  335.618993][T11997] mmap: syz.2.3125 (11997): VmData 37470208 exceed data ulimit 1023. Update limits or use boot option ignore_rlimit_data.
[  335.763920][T12001] loop5: detected capacity change from 0 to 512
[  335.839172][T12001] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  335.855904][T12001] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002]
[  335.885169][T12001] System zones: 0-2, 18-18, 34-35
[  335.897634][T12001] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  336.101538][ T7405] EXT4-fs (loop5): unmounting filesystem.
[  336.310570][   T28] INFO: task syz-executor:4263 blocked for more than 143 seconds.
[  336.318444][   T28]       Not tainted 6.1.128-syzkaller #0
[  336.386828][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  336.415092][   T28] task:syz-executor    state:D stack:21144 pid:4263  ppid:1      flags:0x00004004
[  336.446789][   T28] Call Trace:
[  336.463589][   T28]  <TASK>
[  336.472381][   T28]  __schedule+0x143f/0x4570
[  336.481804][   T28]  ? release_firmware_map_entry+0x186/0x186
[  336.494977][T12031] loop5: detected capacity change from 0 to 256
[  336.498640][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  336.511915][   T28]  ? print_irqtrace_events+0x210/0x210
[  336.528091][   T28]  ? _raw_spin_lock_irq+0xdb/0x110
[  336.543725][   T28]  schedule+0xbf/0x180
[  336.554726][   T28]  io_schedule+0x88/0x100
[  336.560533][T12031] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  336.568704][   T28]  folio_wait_bit_common+0x878/0x1290
[  336.588394][T12031] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  336.592524][   T28]  ? folio_wait_bit+0x20/0x20
[  336.611854][   T28]  ? find_get_entries+0x188/0x710
[  336.621667][   T28]  ? migration_entry_wait_on_locked+0x1160/0x1160
[  336.638445][   T28]  ? preempt_schedule_thunk+0x16/0x18
[  336.648687][   T28]  truncate_inode_pages_range+0xbb5/0x1340
[  336.649957][T12031] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  336.660395][   T28]  ? read_lock_is_recursive+0x10/0x10
[  336.695435][   T28]  ? mapping_evict_folio+0x5b0/0x5b0
[  336.706621][   T28]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  336.719689][   T28]  ? _raw_spin_unlock_irq+0x1f/0x40
[  336.730752][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  336.740848][   T28]  evict+0x53c/0x930
[  336.744930][   T28]  ? proc_nr_inodes+0x310/0x310
[  336.749975][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  336.756444][   T28]  evict_inodes+0x668/0x700
[  336.761462][   T28]  ? clear_inode+0x150/0x150
[  336.766210][   T28]  ? sync_filesystem+0x103/0x220
[  336.771737][   T28]  generic_shutdown_super+0x94/0x340
[  336.777202][   T28]  kill_block_super+0x7a/0xe0
[  336.782452][   T28]  deactivate_locked_super+0xa0/0x110
[  336.788039][   T28]  cleanup_mnt+0x490/0x520
[  336.793134][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  336.798987][   T28]  task_work_run+0x246/0x300
[  336.804395][   T28]  ? task_work_cancel+0x2e0/0x2e0
[  336.809628][   T28]  ? exit_to_user_mode_loop+0x39/0x100
[  336.815788][   T28]  exit_to_user_mode_loop+0xde/0x100
[  336.821716][   T28]  exit_to_user_mode_prepare+0xb1/0x140
[  336.827569][   T28]  syscall_exit_to_user_mode+0x60/0x270
[  336.834343][   T28]  do_syscall_64+0x47/0xb0
[  336.839090][   T28]  ? clear_bhb_loop+0x45/0xa0
[  336.844465][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  336.851028][   T28] RIP: 0033:0x7f853b78e0d7
[  336.855691][   T28] RSP: 002b:00007ffd9bb0a438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  336.864806][   T28] RAX: 0000000000000000 RBX: 00007f853b80e08c RCX: 00007f853b78e0d7
[  336.873374][   T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9bb0a4f0
[  336.886040][   T28] RBP: 00007ffd9bb0a4f0 R08: 0000000000000000 R09: 0000000000000000
[  336.896435][   T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9bb0b580
[  336.910822][   T28] R13: 00007f853b80e08c R14: 000000000002a1c0 R15: 00007ffd9bb0b5c0
[  336.918866][   T28]  </TASK>
[  336.920412][T12022] loop2: detected capacity change from 0 to 32768
[  336.933108][   T28] 
[  336.933108][   T28] Showing all locks held in the system:
[  336.945021][T12022] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3137 (12022)
[  336.990780][   T28] 2 locks held by kworker/u4:1/11:
[  336.995958][   T28] 1 lock held by rcu_tasks_kthre/12:
[  337.011544][   T28]  #0: ffffffff8d32b290 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  337.041418][T12022] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  337.042109][   T28] 1 lock held by rcu_tasks_trace/13:
[  337.060647][   T28]  #0: ffffffff8d32ba90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  337.091071][T12022] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  337.100284][T12022] BTRFS info (device loop2): enabling auto defrag
[  337.100405][   T28] 1 lock held by khungtaskd/28:
[  337.109466][T12022] BTRFS info (device loop2): doing ref verification
[  337.120398][   T28]  #0: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  337.127839][T12022] BTRFS info (device loop2): use no compression
[  337.137031][T12022] BTRFS info (device loop2): force clearing of disk cache
[  337.140471][   T28] 2 locks held by getty/4014:
[  337.145693][T12022] BTRFS info (device loop2): max_inline at 4096
[  337.155612][T12022] BTRFS info (device loop2): disabling free space tree
[  337.160522][   T28]  #0: ffff888030af4098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  337.172737][   T28]  #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  337.183258][   T28] 1 lock held by syz-executor/4263:
[  337.188556][   T28]  #0: ffff8880745ca0e0 (&type->s_umount_key#93){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0
[  337.199574][   T28] 1 lock held by syz.2.3137/12022:
[  337.205037][   T28] 3 locks held by udevadm/12032:
[  337.210166][   T28] 
[  337.213251][   T28] =============================================
[  337.213251][   T28] 
[  337.222244][   T28] NMI backtrace for cpu 0
[  337.226613][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.128-syzkaller #0
[  337.234541][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  337.244715][   T28] Call Trace:
[  337.248039][   T28]  <TASK>
[  337.250994][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  337.255703][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  337.261204][   T28]  ? panic+0x764/0x764
[  337.265304][   T28]  ? vprintk_emit+0x622/0x740
[  337.270023][   T28]  ? printk_sprint+0x490/0x490
[  337.274834][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  337.279980][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  337.284959][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  337.291155][   T28]  ? _printk+0xd1/0x111
[  337.295357][   T28]  ? panic+0x764/0x764
[  337.299459][   T28]  ? __wake_up_klogd+0xcc/0x100
[  337.304341][   T28]  ? panic+0x764/0x764
[  337.308445][   T28]  ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0
[  337.314549][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  337.320651][   T28]  nmi_trigger_cpumask_backtrace+0x1ae/0x3f0
[  337.326669][   T28]  watchdog+0xf88/0xfd0
[  337.330865][   T28]  ? watchdog+0x1f8/0xfd0
[  337.335226][   T28]  kthread+0x28d/0x320
[  337.339303][   T28]  ? hungtask_pm_notify+0x50/0x50
[  337.344342][   T28]  ? kthread_blkcg+0xd0/0xd0
[  337.348950][   T28]  ret_from_fork+0x1f/0x30
[  337.353413][   T28]  </TASK>
[  337.356516][    C0] vkms_vblank_simulate: vblank timer overrun
[  337.363881][   T28] Sending NMI from CPU 0 to CPUs 1:
[  337.369136][    C1] NMI backtrace for cpu 1
[  337.369157][    C1] CPU: 1 PID: 3611 Comm: klogd Not tainted 6.1.128-syzkaller #0
[  337.369175][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  337.369185][    C1] RIP: 0010:sk_filter_trim_cap+0x1/0x990
[  337.369208][    C1] Code: ff be 08 00 00 00 4c 89 e7 e8 4b b7 32 f9 48 8b 54 24 08 e9 4f fe ff ff e8 8c 5c 03 02 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec e0 00 00
[  337.369222][    C1] RSP: 0018:ffffc90003287af0 EFLAGS: 00000293
[  337.369237][    C1] RAX: ffffffff89696588 RBX: ffff88807e092000 RCX: ffff88807c090000
[  337.369250][    C1] RDX: 0000000000000001 RSI: ffff88804dc1a8c0 RDI: ffff88807e092000
[  337.369262][    C1] RBP: ffffc90003287cb0 R08: ffffffff8969657b R09: ffffed100b025e0c
[  337.369275][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90003287c00
[  337.369287][    C1] R13: dffffc0000000000 R14: ffff88807e093668 R15: 000000000000005c
[  337.369299][    C1] FS:  00007f6331dee380(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  337.369314][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.369326][    C1] CR2: 0000557595157c28 CR3: 000000007e4af000 CR4: 00000000003506e0
[  337.369340][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  337.369366][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  337.369376][    C1] Call Trace:
[  337.369380][    C1]  <NMI>
[  337.369386][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  337.369402][    C1]  ? read_lock_is_recursive+0x10/0x10
[  337.369452][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  337.369470][    C1]  ? nmi_handle+0x25/0x440
[  337.369504][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  337.369520][    C1]  ? nmi_handle+0x12e/0x440
[  337.369545][    C1]  ? nmi_handle+0x25/0x440
[  337.369571][    C1]  ? sk_filter_trim_cap+0x1/0x990
[  337.369587][    C1]  ? default_do_nmi+0x62/0x150
[  337.369605][    C1]  ? exc_nmi+0xa8/0x100
[  337.369621][    C1]  ? end_repeat_nmi+0x16/0x31
[  337.369641][    C1]  ? unix_dgram_sendmsg+0xb7b/0x2050
[  337.369659][    C1]  ? unix_dgram_sendmsg+0xb88/0x2050
[  337.369678][    C1]  ? sk_filter_trim_cap+0x1/0x990
[  337.369699][    C1]  ? sk_filter_trim_cap+0x1/0x990
[  337.369715][    C1]  ? sk_filter_trim_cap+0x1/0x990
[  337.369732][    C1]  </NMI>
[  337.369736][    C1]  <TASK>
[  337.369741][    C1]  unix_dgram_sendmsg+0xc4e/0x2050
[  337.369770][    C1]  ? unix_dgram_poll+0x650/0x650
[  337.369790][    C1]  ? aa_sock_msg_perm+0x91/0x150
[  337.369825][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  337.369847][    C1]  ? security_socket_sendmsg+0x7d/0xa0
[  337.369868][    C1]  ? unix_dgram_poll+0x650/0x650
[  337.369885][    C1]  __sys_sendto+0x480/0x600
[  337.369907][    C1]  ? apparmor_capable+0x12e/0x190
[  337.369927][    C1]  ? __ia32_sys_getpeername+0x80/0x80
[  337.369957][    C1]  ? log_buf_vmcoreinfo_setup+0x450/0x450
[  337.369990][    C1]  ? print_irqtrace_events+0x210/0x210
[  337.370019][    C1]  __x64_sys_sendto+0xda/0xf0
[  337.370043][    C1]  do_syscall_64+0x3b/0xb0
[  337.370056][    C1]  ? clear_bhb_loop+0x45/0xa0
[  337.370072][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  337.370098][    C1] RIP: 0033:0x7f6331f509b5
[  337.370110][    C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83
[  337.370124][    C1] RSP: 002b:00007fffbc3cb888 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  337.370139][    C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6331f509b5
[  337.370150][    C1] RDX: 000000000000005c RSI: 000056485e3a3d10 RDI: 0000000000000003
[  337.370160][    C1] RBP: 000056485e39c910 R08: 0000000000000000 R09: 0000000000000000
[  337.370170][    C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013
[  337.370181][    C1] R13: 00007f63320de212 R14: 00007fffbc3cb988 R15: 0000000000000000
[  337.370200][    C1]  </TASK>
[  337.759744][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  337.766731][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.128-syzkaller #0
[  337.774660][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  337.784718][   T28] Call Trace:
[  337.788015][   T28]  <TASK>
[  337.790946][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  337.795628][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  337.801111][   T28]  ? panic+0x764/0x764
[  337.805212][   T28]  ? llist_add_batch+0x160/0x1d0
[  337.810158][   T28]  ? vscnprintf+0x59/0x80
[  337.814505][   T28]  panic+0x318/0x764
[  337.818409][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  337.824573][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  337.829976][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  337.836133][   T28]  ? nmi_trigger_cpumask_backtrace+0x338/0x3f0
[  337.842290][   T28]  ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0
[  337.848468][   T28]  watchdog+0xfc7/0xfd0
[  337.852632][   T28]  ? watchdog+0x1f8/0xfd0
[  337.856990][   T28]  kthread+0x28d/0x320
[  337.861061][   T28]  ? hungtask_pm_notify+0x50/0x50
[  337.866088][   T28]  ? kthread_blkcg+0xd0/0xd0
[  337.870680][   T28]  ret_from_fork+0x1f/0x30
[  337.875110][   T28]  </TASK>
[  337.878467][   T28] Kernel Offset: disabled
[  337.882792][   T28] Rebooting in 86400 seconds..