last executing test programs:

3.614107258s ago: executing program 2 (id=12858):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a38000000030a030000000000000000000a0000090c00024000000000000000010900030073790400000000000900010073797a310000000014000000110001"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490)

3.535838029s ago: executing program 0 (id=12859):
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$revoke(0x3, r0)
keyctl$chown(0x4, r0, 0x0, 0x0)

3.393093335s ago: executing program 3 (id=12861):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)

3.336012095s ago: executing program 2 (id=12862):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000002dc0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x5, 0x150d, &(0x7f0000001540)="$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")
open(&(0x7f0000000100)='./file2\x00', 0x0, 0x0)
mount$nfs(&(0x7f0000000100)='@.\\', &(0x7f0000000140)='./file0\x00', 0x0, 0xe000, 0x0)

3.237248815s ago: executing program 0 (id=12863):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7)
write$apparmor_exec(r0, &(0x7f00000001c0)={'exec ', ':\x00'}, 0x7)

3.06684756s ago: executing program 4 (id=12866):
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000180)=ANY=[], 0x1, 0x5b7, &(0x7f0000000780)="$eJzs3MFv29YZAPDHxK4NBwsGFGvSNEDZtIfsEFeSFwdGBywaTdtsJVEg5cI5DcXiZMHsblg2YMmly6VDgQ077bz1utOO+6d62T/ggRLlybJTpWkTpcDvB8TvUfzI9z2C4QcRIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEKJks9FoRqGT9Xb34qdLNou8e7y0EKbXj/f3nxPNCYsTf0MUQlT9C8vL4fLoo8uv/z/2R9Wfa+HSaOlSWK6a5fD4whs//OD1hXPVhotRdCqLl+3ho8e//uTgYP9332Cbo6Ojz6rZvMC0XprttJeVedZtb6dxVubxxvp64/2drTLeyjppeaccpN04KdL2IC/i68ntEMLGWpyu3sl3e9ub7U4aX09+HDc3Nm7daDUa6/GHq/20XZR57/0PV8tkJ+t0st72MKZafaP1drhVnYgfZYN4kLa7cXzvwcH+2qwkq6DmswS1ZgW1Gq1Ws9lqNddvbty81Wgs12fr8QcLjSlhepOF+Z+0vHSv1SfKcGF8jXvtO7uIw3M6Sv427xQAAACAFywa3mOPhvflLw97W1knbZyIOYrmlh4AAADwHRh+tb9U3wAI4XKITn//BwAAAL7f/jnunPmMXYiiUPaXovGjKv2996LDdtVrH54ffXR+eo+DrSvRxXonw2Z9oV5K0qvRm6OgN8fRX9XNvac/6/fvUOURFcVi9OTbJRD+Eq6MYq7cHbV3x2tGs13ZyjrpapJ3PmiGdvviuUG6N/jDpw/+GEJRHJ3/ote9GIV7Dw72V3/5m4O7VS6jpxmfHNa/kDj1Q4mTuSyFiVx+f/zcYz3j2yeP/OLwRkw16y963ZXRuI3J+Z8bbX7uG8z/8/DWKOatlVG7cnL+y9WYzdUzZj+ZRbO/995SPdgzznwqi6ujmKvXhyfWu9frNYsTWbRmZdEaHosno+P/XMfiOIt3T2QxeSzWZmWx9i2zAJiXe9NV6FT9P1V3n+Mq9zXVvRqlKuEzq/uvZo7yeXhnFPPOlYW6Ip0PYeqK3ph1RW9MXtG/prqFcHYW/wrX/vH3EHbDtXHw02psNe5fT1TV6PDLaoMvT4/7p1FT/vf+zoWqs3T42/DGw0ePbzw4/OT+/v39T1uttfXGTxqNm62wOJxG3ag9AJwhLb6KVgZ/jooi6/+iubHRbA920rjIk4/iItvcTuOsN0iLZKfd207jfpEP8iTvVJ2Ps820jMvdfj+vKklexP28zPaGb36J61e/lGm33RtkSdnvpO0yjZO8N2gng3gzK5O4v/vzTlbupEW8lRdx2U+TbCtL2oMs78Vlvlsk6Wocl2k6EZhtpkefhZBV3V7cL7Juu7gTf5x3drtpvJlW1bI/yKNQ7XA8VtbbyovucLer8z7YAPCKeBjqN9gdv8ru4c/Gqx6dWnVmJyzPiJnzFAGAKdNVemneCQEAAAAAAAAAAAAAAKdMPq730/qVPs/22N8r27l94axVb88/sclOCGHhFUhD5xk7y69GGov1f9vn3U8UQpgd/IMqZp5XJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA42/8CAAD//+AlkH0=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

3.066712637s ago: executing program 3 (id=12867):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r1, 0x1}, 0x14}}, 0x8000)

2.994620283s ago: executing program 0 (id=12868):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x8, 0x4)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0)

2.90279003s ago: executing program 5 (id=12869):
setuid(0xee01)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth1_to_hsr\x00', &(0x7f0000000200)=@ethtool_dump={0x40, 0x45b, 0x6}})

2.682764175s ago: executing program 2 (id=12870):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x0)

2.664362462s ago: executing program 0 (id=12871):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x800}, @rumble={0x7, 0x5}})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

2.628410691s ago: executing program 3 (id=12872):
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000))

2.586946292s ago: executing program 5 (id=12873):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0xde03, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c, 0x0}}], 0x1, 0x24088058)

2.380437324s ago: executing program 4 (id=12875):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000016c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000a0000c8044000b800800090088ae5177080009007e18f94a08000a004ac8000008000a00a823000008000900bc4a0b5408000a0002c7000008000900cb1e381b08000a00520f000014000b8008000a002ac00000080009008213e77644000b8008000900f4f8b35908000d00d781144308000a002990000008000a003cae000008000a00f6e2000008000a001b5a000008000900647bd774080009006263dc1b08000200010000000800010000000000040008803400048005000300030000000500030001000000050003000100000005000300000000000500030001000000050003"], 0xfc}}, 0x0)

2.231007483s ago: executing program 0 (id=12876):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.10751923s ago: executing program 3 (id=12877):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001540)='t', 0x1)
setsockopt$inet6_int(r0, 0x29, 0x1a, 0x0, 0x0)

2.107329349s ago: executing program 5 (id=12878):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x46e8793c2f72cd60}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.057980567s ago: executing program 1 (id=12879):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0)

1.934423952s ago: executing program 4 (id=12880):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x0, 0xa3b}, 0x1c)

1.913560885s ago: executing program 0 (id=12881):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000a40)={[{@pquota}, {@sysvgroups}, {@nolargeio}, {@grpid}, {@nogrpid}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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")
r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)

1.706253359s ago: executing program 1 (id=12882):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe)
ioctl$TCSETS(r0, 0x5402, 0x0)

1.706018044s ago: executing program 5 (id=12883):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x20008c0, &(0x7f00000000c0)={[{@fat=@nfs_stale_rw}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}]}, 0x4, 0x388, &(0x7f0000000740)="$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")
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180), 0xfe, 0x59c, &(0x7f0000001840)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)

1.628748758s ago: executing program 4 (id=12884):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0)
ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000580))

1.48821953s ago: executing program 3 (id=12885):
r0 = socket$isdn(0x22, 0x2, 0x25)
r1 = socket$isdn(0x22, 0x2, 0x22)
dup3(r0, r1, 0x0)

1.343132997s ago: executing program 1 (id=12886):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x20002, 0x401, 0xfffffffd, 0xcc4, 0xff7, 0x5c952398, 0x1, 0x3ff, 0x6, 0x1602, 0x9, 0x1, 0xfffffffa, 0xe1cb, 0x9, 0x4, 0x20, 0x6, 0x8000008b, 0xfffffffe, 0xb, 0xfffffffe, 0xffffeadb, 0x400, 0x39, 0x0, 0x2000004, 0x2, 0xdffffffa]})

1.321018817s ago: executing program 4 (id=12887):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1={0xfc, 0x1, '\x00', 0xfd}}}}}}}, 0x0)

1.109170142s ago: executing program 3 (id=12888):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f00000004c0)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@autodefrag}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000780)={0x2, 0x7, {0x3ff, @struct={0xe, 0x3ff}, 0x0, 0x1, 0x5c6, 0x9, 0xffffffffffffff96, 0x6bd, 0x21, @usage=0x80000001, 0x0, 0xb83c, [0xfffffffffffffd6e, 0x20000000, 0x2, 0x0, 0x6, 0x7]}, {0x7fff, @usage=0x3, 0x0, 0x3, 0xffffffff, 0xcc, 0xb, 0x4, 0x20, @usage=0x4, 0x9, 0x372f2380, [0x4, 0x10001, 0xd, 0x1d52b6d3, 0x81, 0x5]}, {0x4000000000000, @struct={0x100, 0x4}, 0x0, 0x62c, 0x6, 0x0, 0x8, 0x20, 0x300, @usage, 0xb31, 0x3, [0xffffffffffffffd1, 0xa, 0x7, 0xe9, 0x9, 0x1]}, {0x2, 0x745, 0x9}})

1.034184044s ago: executing program 1 (id=12889):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000500000000000800060000020000080007"], 0x44}}, 0x0)

847.715593ms ago: executing program 1 (id=12890):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

787.993343ms ago: executing program 2 (id=12891):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x41}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

710.957903ms ago: executing program 5 (id=12892):
r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000300)='L\t\xdf\x92[\r|>\xeeZ:\xd5\x80\xe7\x1b*\x82\xb6z\xe8\xb4\xf6\x80\xb9\xa9RQ\a\x8e\x80\xd0W\x94\t\t\xc8f\x8e\x8b#&)A9\xdb\x05\a\xe8\xbe\xee@\xbc\xdb\x1d\"\xf6\x05\xac\xef\xdb\x18\xaa\x9a\xcb8q\xf63\x18d\xfbO\x8c\xf4\xc6\x14\xb4\xba_9\xcb\x059&\xda\xdf\x8d\x1d\xfe\xf6\xf3Ux\xc6w\x90\xd7\x882\xf0LO\x0f\xd4@KE\x9e\xecF\x9c\x1b\xa2\xbe\nL,\xcc\xfe}Q\xdc\xe9t\x9c\x89Z\xed\x12\xb6\xd1qj\x04\xae\x97\xe0\xbd\x88K\x9c\xb5SR\x18(\x90-]\xb6h\xb1\x11\x01\xa1\xc7\xc7\xd9;Q\xd4\xc7&Q\"\xad\xf7(\x80\x0f\xde>U\x98\x83H>\xd5\xb1Y\xb6T\xb4\xcf\xd2\x01\x1a\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='user\x00N\xbd]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0)

419.653581ms ago: executing program 5 (id=12893):
syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d038b400f7ffffffffffffffffffffff50505050505087000d0182624701010100000008021100000000380b002600000000000000014d0d000000ffffffffffff0300000001080211000001c5e800ff7f0000000000000800000004080211000001092c000004ffffffffffff010000007e150309630802110000004e7b000002"], 0x95)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x0, 0x41b}}}, 0x2)

380.075029ms ago: executing program 4 (id=12894):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

165.971565ms ago: executing program 2 (id=12895):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x8001}}, 0x10, 0x0}, 0x20000090)

46.564322ms ago: executing program 2 (id=12896):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x2000})

0s ago: executing program 1 (id=12897):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/bus/input/handlers\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002c80)={0x2020}, 0x1c93)
pread64(r0, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef)

kernel console output (not intermixed with test programs):

dit(1772545341.280:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.4.11494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[  981.444919][T17503] BTRFS info (device loop5): enabling ssd optimizations
[  981.575491][T17503] BTRFS info (device loop5): turning on async discard
[  981.594700][T17503] BTRFS info (device loop5): enabling free space tree
[  981.608831][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11498'.
[  981.881127][ T6006] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  982.256246][T17634] loop4: detected capacity change from 0 to 1024
[  982.428001][T17634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  982.823783][ T6005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  982.875299][T17673] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  983.186300][T17689] netlink: 'syz.1.11524': attribute type 10 has an invalid length.
[  983.238479][T17695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11525'.
[  983.242811][T17689] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11524'.
[  983.527063][T17711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  983.656021][T17719] loop0: detected capacity change from 0 to 1024
[  983.932475][T17731] loop2: detected capacity change from 0 to 4096
[  984.015711][T17744] netlink: 'syz.0.11540': attribute type 1 has an invalid length.
[  984.324724][T17761] netlink: 'syz.1.11546': attribute type 3 has an invalid length.
[  984.355238][T17761] netlink: 666 bytes leftover after parsing attributes in process `syz.1.11546'.
[  984.774389][T17785] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  984.800688][T17785] bond5 (unregistering): Released all slaves
[  984.844576][T17852] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11560'.
[  984.861292][T17852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11560'.
[  984.876501][T17852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11560'.
[  984.941124][T17843] tc_dump_action: action bad kind
[  985.230106][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11566'.
[  985.457510][T17890] loop0: detected capacity change from 0 to 4096
[  985.632258][T17890] ntfs3(loop0): ino=1a, mi_enum_attr
[  985.642361][T17890] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  985.692593][T17916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11576'.
[  985.852912][T17923] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  985.868875][T17927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  985.976605][T17929] netlink: 'syz.4.11580': attribute type 11 has an invalid length.
[  985.984537][T17929] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11580'.
[  986.627140][T17970] loop5: detected capacity change from 0 to 4096
[  986.658134][T17970] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  986.715610][T17970] ntfs3(loop5): ino=19, mi_enum_attr
[  986.791164][T17970] ntfs3(loop5): failed to convert "c46c" to cp1255
[  986.805405][T17970] ntfs3(loop5): ino=20, mi_enum_attr
[  986.827692][T17989] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  986.852228][T17992] loop0: detected capacity change from 0 to 256
[  988.326670][T18069] loop0: detected capacity change from 0 to 4096
[  988.352810][T18069] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  988.463011][T18069] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  988.527703][T18069] ntfs3(loop0): ino=19, mi_enum_attr
[  988.548548][T18069] ntfs3(loop0): failed to convert "c46c" to cp861
[  988.567606][T18069] ntfs3(loop0): ino=20, mi_enum_attr
[  988.691116][T18046] loop3: detected capacity change from 0 to 32768
[  988.743171][T18046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.11618 (18046)
[  988.795208][T18101] loop2: detected capacity change from 0 to 16
[  988.827295][T18042] loop1: detected capacity change from 0 to 32768
[  988.840067][T18101] erofs (device loop2): mounted with root inode @ nid 36.
[  988.864560][T18046] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  988.908895][T18046] BTRFS info (device loop3): using sha256 checksum algorithm
[  988.928385][T18046] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  988.931014][T18101] syz.2.11633: attempt to access beyond end of device
[  988.931014][T18101] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16
[  988.997356][T18042] read_mapping_page failed!
[  989.001963][T18042] ERROR: (device loop1): txCommit: 
[  989.001963][T18042] 
[  989.020719][T18042] ERROR: (device loop1): remounting filesystem as read-only
[  989.046948][T18101] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  989.091173][T18101] erofs (device loop2): read error -117 @ 0 of nid 89
[  989.143486][   T30] audit: type=1800 audit(1772545349.626:472): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11633" name="file2" dev="loop2" ino=89 res=0 errno=0
[  989.245180][T18046] BTRFS info (device loop3): rebuilding free space tree
[  989.346084][T18046] BTRFS info (device loop3): disabling free space tree
[  989.367312][ T6007] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  989.388031][T18046] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  989.426428][T18151] xt_time: unknown flags 0xc
[  989.438879][T18046] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  989.512199][T18046] BTRFS info (device loop3): enabling ssd optimizations
[  989.549353][T18046] BTRFS info (device loop3): enabling disk space caching
[  989.567119][ T6007] usb 5-1: Using ep0 maxpacket: 16
[  989.605887][T18046] BTRFS info (device loop3): force clearing of disk cache
[  989.613043][T18046] BTRFS info (device loop3): enabling auto defrag
[  989.634196][ T6007] usb 5-1: unable to get BOS descriptor or descriptor too short
[  989.668338][ T6007] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  989.699900][T18046] BTRFS info (device loop3): max_inline set to 0
[  989.710222][ T6007] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  989.750156][ T6007] usb 5-1: config 1 interface 0 has no altsetting 0
[  989.789202][ T6007] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  989.825389][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.879166][ T6007] usb 5-1: Product: syz
[  989.890927][ T6007] usb 5-1: Manufacturer: syz
[  989.920108][ T6007] usb 5-1: SerialNumber: syz
[  989.968459][ T6007] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input77
[  990.011277][T18170] loop5: detected capacity change from 0 to 1024
[  990.114065][T18166] loop2: detected capacity change from 0 to 4096
[  990.148808][ T5168] bcm5974 5-1:1.0: could not read from device
[  990.193809][ T6007] bcm5974 5-1:1.0: could not read from device
[  990.198334][T18166] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  990.213217][ T5996] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  990.271316][ T5168] bcm5974 5-1:1.0: could not read from device
[  990.364884][T18166] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  990.429869][ T6007] input: failed to attach handler mousedev to device input77, error: -5
[  990.483350][ T5168] bcm5974 5-1:1.0: could not read from device
[  990.512254][ T6007] usb 5-1: USB disconnect, device number 105
[  990.600864][T18194] loop5: detected capacity change from 0 to 2048
[  990.768055][T18194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  990.904918][   T30] audit: type=1800 audit(1772545351.474:473): pid=18194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11651" name="file1" dev="loop5" ino=1367 res=0 errno=0
[  991.057527][T18217] __nla_validate_parse: 1 callbacks suppressed
[  991.057550][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11655'.
[  991.134067][T18221] loop4: detected capacity change from 0 to 128
[  991.160991][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11655'.
[  991.179586][T18227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11658'.
[  991.292664][T18221] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  991.314143][T18235] loop2: detected capacity change from 0 to 128
[  991.391920][T18221] ext4 filesystem being mounted at /1897/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  991.691279][ T6005] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  991.823342][T18263] loop1: detected capacity change from 0 to 1024
[  991.877344][T18263] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  991.979105][T18276] netlink: 'syz.5.11669': attribute type 2 has an invalid length.
[  992.161671][T18288] netlink: 'syz.3.11673': attribute type 10 has an invalid length.
[  992.364457][T18288] team0: Port device wlan1 added
[  993.980269][T18412] loop0: detected capacity change from 0 to 8
[  994.004462][T18412] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  994.107808][T18412] cramfs: Error -5 while decompressing!
[  994.129678][T12367] udevd[12367]: incorrect cramfs checksum on /dev/loop0
[  994.187385][T18412] cramfs: ffffffff9a3a8ca8(26)->ffff88804dd26000(4096)
[  994.194871][T18412] cramfs: Error -3 while decompressing!
[  994.217428][T18412] cramfs: ffffffff9a3a8cc2(26)->ffff88804dd27000(4096)
[  994.245675][T18412] cramfs: Error -3 while decompressing!
[  994.265458][T13004] udevd[13004]: incorrect cramfs checksum on /dev/loop0
[  994.280024][T18412] cramfs: ffffffff9a3a8cdc(16)->ffff88806bd9c000(4096)
[  994.302919][T18412] cramfs: Error -5 while decompressing!
[  994.326745][T18412] cramfs: ffffffff9a3a8ca8(26)->ffff88804dd26000(4096)
[  994.397502][T18438] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  994.404052][T18438] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  994.480475][T18434] loop3: detected capacity change from 0 to 4096
[  994.486709][T18438] vhci_hcd vhci_hcd.0: Device attached
[  994.534170][T18439] vhci_hcd: connection closed
[  994.539646][T18434] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  994.539674][   T13] vhci_hcd vhci_hcd.4: stop threads
[  994.596345][   T13] vhci_hcd vhci_hcd.4: release socket
[  994.619556][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  994.639602][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11725'.
[  994.674526][ T1160] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  994.700087][T18381] loop2: detected capacity change from 0 to 32768
[  995.983235][T18476] loop5: detected capacity change from 0 to 32768
[  996.046358][T18476] JBD2: Ignoring recovery information on journal
[  996.118182][T18476] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  996.273098][T18531] loop1: detected capacity change from 0 to 256
[  996.359322][T18531] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d)
[  996.587440][ T6006] ocfs2: Unmounting device (7,5) on (node local)
[  997.234717][T18594] netlink: 'syz.4.11767': attribute type 1 has an invalid length.
[  997.449479][T18602] loop3: detected capacity change from 0 to 2048
[  997.541794][T18602] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  997.978737][T18643] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request
[  998.045253][T18634] loop4: detected capacity change from 0 to 4096
[  998.395657][T18634] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB
[  998.713835][T18685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11798'.
[  998.912773][T18699] tmpfs: Bad value for 'mpol'
[  999.058139][   T30] audit: type=1326 audit(2000000002.173:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.3.11806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[  999.120201][   T30] audit: type=1326 audit(2000000002.173:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.3.11806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[  999.245892][   T30] audit: type=1326 audit(2000000002.204:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.3.11806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[  999.316214][T18729] loop5: detected capacity change from 0 to 64
[  999.361694][   T30] audit: type=1326 audit(2000000002.204:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.3.11806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[  999.436118][   T30] audit: type=1326 audit(2000000002.204:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.3.11806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[  999.521680][   T30] audit: type=1326 audit(2000000002.204:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.3.11806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[  999.595163][   T30] audit: type=1326 audit(2000000002.204:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.3.11806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[  999.663144][T18744] netlink: 292 bytes leftover after parsing attributes in process `syz.3.11818'.
[  999.663303][   T30] audit: type=1326 audit(2000000002.204:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.3.11806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[  999.676710][T18745] usb usb1: check_ctrlrecip: process 18745 (syz.5.11817) requesting ep 01 but needs 81
[  999.714751][   T30] audit: type=1326 audit(2000000002.204:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18709 comm="syz.3.11806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[  999.766322][T18752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  999.788728][T18745] usb usb1: usbfs: process 18745 (syz.5.11817) did not claim interface 0 before use
[  999.792213][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11820'.
[  999.884432][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11820'.
[  999.952437][T18754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11820'.
[ 1000.302850][T18781] netlink: 'syz.3.11829': attribute type 2 has an invalid length.
[ 1000.349992][T18728] loop2: detected capacity change from 0 to 32768
[ 1000.407794][T18728] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11812 (18728)
[ 1000.459995][T18789] kAFS: unable to lookup cell '/'
[ 1000.484659][T18728] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1000.496903][T18793] loop0: detected capacity change from 0 to 16
[ 1000.550857][T18728] BTRFS info (device loop2): using sha256 checksum algorithm
[ 1000.570087][T18793] erofs (device loop0): mounted with root inode @ nid 36.
[ 1000.885838][T18728] BTRFS info (device loop2): enabling ssd optimizations
[ 1000.914744][T18728] BTRFS info (device loop2): turning on async discard
[ 1000.921824][T18728] BTRFS info (device loop2): enabling free space tree
[ 1001.192434][ T6002] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1001.396683][T18858] loop1: detected capacity change from 0 to 8
[ 1001.442060][T18858] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 1001.444220][T18862] netlink: 148 bytes leftover after parsing attributes in process `syz.3.11849'.
[ 1001.469504][T12367] udevd[12367]: incorrect cramfs checksum on /dev/loop1
[ 1001.522722][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11849'.
[ 1001.570026][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11849'.
[ 1001.647038][T13245] udevd[13245]: incorrect cramfs checksum on /dev/loop1
[ 1001.697843][T18877] x_tables: unsorted underflow at hook 2
[ 1002.148752][T18906] netlink: 'syz.4.11860': attribute type 11 has an invalid length.
[ 1002.160655][    T9] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[ 1002.193359][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1002.314217][T18913] loop5: detected capacity change from 0 to 764
[ 1002.333512][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1002.398115][    T9] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 1002.419170][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.444345][    T9] usb 2-1: Product: syz
[ 1002.450728][T18913] rock: corrupted directory entry. extent=32, offset=2044, size=237
[ 1002.455422][    T9] usb 2-1: Manufacturer: syz
[ 1002.483724][    T9] usb 2-1: SerialNumber: syz
[ 1002.527823][    T9] usb 2-1: config 0 descriptor??
[ 1002.536099][T18928] loop4: detected capacity change from 0 to 512
[ 1002.555433][    T9] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1002.573224][    T9] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1002.636892][T18928] fscrypt (loop4, inode 2): Error -61 getting encryption context
[ 1002.644700][T18928] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[ 1002.674646][T18928] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.11867: iget: bad i_size value: 12154757448730
[ 1002.690266][    T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input78
[ 1002.758620][T18941] tmpfs: Bad value for 'mpol'
[ 1002.775579][T18928] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 1002.776114][T18928] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.11867: couldn't read orphan inode 13 (err -117)
[ 1002.785566][    C0] EXT4-fs (loop4): error count since last fsck: 1
[ 1002.785592][    C0] EXT4-fs (loop4): initial error at time 2000000006: ext4_orphan_get:1391: inode 13
[ 1002.785634][    C0] EXT4-fs (loop4): last error at time 2000000006: ext4_orphan_get:1391: inode 13
[ 1002.921565][T18928] loop4: lost filesystem error report for type 5 error -117
[ 1002.944912][T18928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1003.094321][    T9] input: failed to attach handler mousedev to device input78, error: -5
[ 1003.123546][    T9] usb 2-1: USB disconnect, device number 124
[ 1003.164704][ T6005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1003.190080][T18963] loop2: detected capacity change from 0 to 2048
[ 1003.285793][T18963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1003.372869][T18963] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a
[ 1003.389638][ T6141] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1003.438888][T18963] UDF-fs: error (device loop2): udf_rename: failed to find renamed entry again in directory (ino 1408)
[ 1003.599657][ T6141] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1003.627376][ T6141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1003.675062][ T6141] usb 1-1: config 0 descriptor??
[ 1003.700237][ T6141] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1003.740812][T19008] loop1: detected capacity change from 0 to 24
[ 1003.759129][T19008] MTD: Attempt to mount non-MTD device "/dev/loop1"
[ 1003.774314][T19008] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1003.993499][T19015] loop4: detected capacity change from 0 to 2048
[ 1004.075845][ T6141] gspca_cpia1: usb_control_msg 03, error -71
[ 1004.103676][ T6141] gspca_cpia1: usb_control_msg 01, error -71
[ 1004.110306][T19031] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1004.139696][ T6141] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[ 1004.161713][T19015] NILFS (loop4): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3)
[ 1004.175994][ T6141] usb 1-1: USB disconnect, device number 94
[ 1004.182213][T18964] loop3: detected capacity change from 0 to 32768
[ 1004.201606][T19015] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16)
[ 1004.286376][T19015] Remounting filesystem read-only
[ 1004.318118][T19015] NILFS (loop4): error -5 truncating bmap (ino=16)
[ 1004.342261][T19044] QAT: Invalid ioctl 21531
[ 1004.424740][T19046] loop1: detected capacity change from 0 to 2048
[ 1004.488790][T19046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1004.504247][ T6005] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[ 1004.637463][T19046] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #12: block 2: comm syz.1.11891: lblock 0 mapped to illegal pblock 2 (length 1)
[ 1004.817681][ T5995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1005.081034][T19093] loop5: detected capacity change from 0 to 16
[ 1005.129763][T19093] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 1005.366033][ T5134] Bluetooth: hci0: unexpected event for opcode 0x0411
[ 1005.653636][   T30] audit: type=1326 audit(2000000009.091:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19107 comm="syz.1.11909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a739c799 code=0x7ffc0000
[ 1005.728567][   T30] audit: type=1326 audit(2000000009.122:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19107 comm="syz.1.11909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a739c799 code=0x7ffc0000
[ 1005.837665][   T30] audit: type=1326 audit(2000000009.122:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19107 comm="syz.1.11909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a739c799 code=0x7ffc0000
[ 1005.930556][   T30] audit: type=1326 audit(2000000009.122:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19107 comm="syz.1.11909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fd5a739c799 code=0x7ffc0000
[ 1005.960383][T19120] xt_HMARK: spi-set and port-set can't be combined
[ 1006.012865][   T30] audit: type=1326 audit(2000000009.122:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19107 comm="syz.1.11909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a739c799 code=0x7ffc0000
[ 1006.074358][   T30] audit: type=1326 audit(2000000009.122:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19107 comm="syz.1.11909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a739c799 code=0x7ffc0000
[ 1006.112940][T19135] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1006.136759][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11916'.
[ 1006.145552][   T30] audit: type=1326 audit(2000000009.122:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19107 comm="syz.1.11909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd5a739c799 code=0x7ffc0000
[ 1006.238109][ T1160] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1006.261961][   T30] audit: type=1326 audit(2000000009.122:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19107 comm="syz.1.11909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd5a739c799 code=0x7ffc0000
[ 1006.421907][ T1160] usb 6-1: Using ep0 maxpacket: 32
[ 1006.464867][ T1160] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1006.497951][ T1160] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1006.578294][T19154] loop2: detected capacity change from 0 to 512
[ 1006.586410][ T1160] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1006.643181][ T1160] usb 6-1: config 1 has no interface number 0
[ 1006.653116][T19154] EXT4-fs (loop2): revision level too high, forcing read-only mode
[ 1006.677619][ T1160] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1006.696314][T19154] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[ 1006.716818][ T1160] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1006.727097][ T1160] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1006.740277][ T1160] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1006.749503][ T1160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1006.771692][T19154] System zones: 0-1, 15-15, 18-18, 34-34
[ 1006.777707][T19154] EXT4-fs (loop2): orphan cleanup on readonly fs
[ 1006.786119][ T1160] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[ 1006.794504][T19154] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[ 1006.807240][T19154] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1006.822144][T19154] EXT4-fs (loop2): Cannot turn on quotas: error -22
[ 1006.838372][T19154] EXT4-fs (loop2): 1 truncate cleaned up
[ 1006.857899][T19154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1006.955661][T19172] loop3: detected capacity change from 0 to 64
[ 1006.972028][T19173] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11927'.
[ 1006.972707][ T1160] snd_usb_pod 6-1:1.1: cannot start listening: -90
[ 1007.015102][ T1160] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[ 1007.023874][T19154] fscrypt (loop2, inode 16): Error -61 getting encryption context
[ 1007.032816][ T1160] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -90
[ 1007.168258][ T6002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1007.284707][ T1160] usb 6-1: USB disconnect, device number 6
[ 1007.970496][T19236] loop2: detected capacity change from 0 to 2048
[ 1008.071537][T19236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1008.513280][T19194] loop3: detected capacity change from 0 to 40427
[ 1008.528443][   T30] audit: type=1326 audit(2000000012.104:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19260 comm="syz.4.11951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1008.574785][T19194] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1008.618213][T19194] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1008.681407][T19194] F2FS-fs (loop3): invalid crc value
[ 1008.888070][T19232] loop1: detected capacity change from 0 to 32768
[ 1008.892331][T19280] usb usb8: usbfs: process 19280 (syz.5.11956) did not claim interface 0 before use
[ 1008.896912][T19237] loop0: detected capacity change from 0 to 32768
[ 1008.915161][T19232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.11942 (19232)
[ 1008.944710][T19237] (syz.0.11944,19237,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1008.977634][T19232] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1009.002269][T19237] (syz.0.11944,19237,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1009.030274][T19232] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1009.074305][T19194] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1009.161879][T19194] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1009.163464][T19237] JBD2: Ignoring recovery information on journal
[ 1009.169032][T19194] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1009.200031][ T5134] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1009.208974][ T5134] Bluetooth: hci0: Injecting HCI hardware error event
[ 1009.219555][ T5134] Bluetooth: hci0: hardware error 0x00
[ 1009.330145][T19313] loop5: detected capacity change from 0 to 164
[ 1009.395460][T19232] BTRFS info (device loop1): enabling ssd optimizations
[ 1009.417876][T19194] fscrypt (loop3, inode 3): Error -61 getting encryption context
[ 1009.429806][T19232] BTRFS info (device loop1): turning on async discard
[ 1009.436600][T19232] BTRFS info (device loop1): enabling free space tree
[ 1009.453230][T19237] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 1009.496564][T19313] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1009.600506][T19297] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1009.810727][ T5995] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1009.996500][ T5992] ocfs2: Unmounting device (7,0) on (node local)
[ 1010.101056][T19343] loop5: detected capacity change from 0 to 16
[ 1010.159187][T19343] erofs (device loop5): mounted with root inode @ nid 36.
[ 1010.278443][T19343] erofs (device loop5): invalid fast symlink size 39 @ nid 83
[ 1010.304817][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11965'.
[ 1010.671054][T19358] bond5 (unregistering): Released all slaves
[ 1010.760667][T19330] loop4: detected capacity change from 0 to 32768
[ 1010.806782][T19330] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.11964 (19330)
[ 1010.890634][T19330] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1010.949746][T19330] BTRFS info (device loop4): using sha256 checksum algorithm
[ 1011.076976][T19442] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1011.081294][T19457] loop3: detected capacity change from 0 to 512
[ 1011.100341][T19457] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1011.244312][T19330] BTRFS info (device loop4): enabling ssd optimizations
[ 1011.258216][ T5134] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1011.271143][T19457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1011.286162][T19330] BTRFS info (device loop4): turning on async discard
[ 1011.292965][T19330] BTRFS info (device loop4): enabling free space tree
[ 1011.303254][T19472] netlink: 'syz.0.11971': attribute type 1 has an invalid length.
[ 1011.316688][T19457] ext4 filesystem being mounted at /1983/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1011.465770][T19457] __quota_error: 4 callbacks suppressed
[ 1011.465792][T19457] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[ 1011.530568][T19457] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[ 1011.546135][T19479] loop5: detected capacity change from 0 to 2048
[ 1011.594107][ T6005] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1011.612476][T19457] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.11970: Failed to acquire dquot type 1
[ 1011.635641][T19479] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1011.907525][ T5996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1012.948216][T19569] loop3: detected capacity change from 0 to 512
[ 1012.982475][    T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1013.041419][T19569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[ 1013.070931][T19569] System zones: 1-12
[ 1013.075195][T19569] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.11990: Directory hole found for htree index block 0
[ 1013.098849][T19569] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[ 1013.113230][    C0] EXT4-fs (loop3): error count since last fsck: 1
[ 1013.128783][    C0] EXT4-fs (loop3): initial error at time 2000000016: dx_probe:791: inode 2
[ 1013.137451][    C0] EXT4-fs (loop3): last error at time 2000000016: dx_probe:791: inode 2
[ 1013.167451][T19569] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[ 1013.193238][    T9] usb 1-1: Using ep0 maxpacket: 8
[ 1013.217700][    T9] usb 1-1: config 6 has an invalid interface number: 64 but max is 0
[ 1013.226064][    T9] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 1013.231132][T19569] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.11990: Directory hole found for htree index block 0
[ 1013.246393][    T9] usb 1-1: config 6 has no interface number 0
[ 1013.273551][    T9] usb 1-1: too many endpoints for config 6 interface 64 altsetting 21: 207, using maximum allowed: 30
[ 1013.302355][T19569] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[ 1013.324669][T19569] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[ 1013.348354][    T9] usb 1-1: config 6 interface 64 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[ 1013.361997][    T9] usb 1-1: config 6 interface 64 has no altsetting 0
[ 1013.363977][T19569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1013.376037][    T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1013.399093][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1013.408247][    T9] usb 1-1: Product: syz
[ 1013.420827][    T9] usb 1-1: Manufacturer: syz
[ 1013.425443][    T9] usb 1-1: SerialNumber: syz
[ 1013.539047][T19569] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.11990: Directory hole found for htree index block 0
[ 1013.570693][T19587] loop4: detected capacity change from 0 to 4096
[ 1013.620118][T19587] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 1013.744051][ T6008] usb 1-1: USB disconnect, device number 95
[ 1013.747979][ T5996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1013.798727][T19587] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1013.832607][T19587] ntfs3(loop4): Failed to load $Extend (-22).
[ 1013.874003][T19587] ntfs3(loop4): Failed to initialize $Extend.
[ 1014.018622][T19619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12000'.
[ 1014.288597][T19633] loop1: detected capacity change from 0 to 64
[ 1014.388561][   T30] audit: type=1800 audit(2000000018.266:496): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12003" name=E91F7189591E9233614B dev="loop1" ino=22 res=0 errno=0
[ 1014.465740][T19638] ipip0: entered promiscuous mode
[ 1014.491293][T19638] ipip0: entered allmulticast mode
[ 1014.520843][T19645] program syz.0.12005 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1014.666666][T19593] loop2: detected capacity change from 0 to 32768
[ 1014.726057][T19593] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11996 (19593)
[ 1014.808337][T19593] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1014.865840][T19593] BTRFS info (device loop2): using crc32c checksum algorithm
[ 1014.919141][T19593] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1014.921758][T19598] loop5: detected capacity change from 0 to 32768
[ 1014.954295][T19662] loop3: detected capacity change from 0 to 2048
[ 1015.072646][T19662] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1015.123172][T19598] ERROR: (device loop5): dbFindCtl: Corrupt dmapctl page
[ 1015.123172][T19598] 
[ 1015.159699][T19598] ERROR: (device loop5): remounting filesystem as read-only
[ 1015.182241][T19598] ialloc: diAlloc returned -5!
[ 1015.188854][T19693] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1015.262766][T19593] BTRFS info (device loop2): rebuilding free space tree
[ 1015.353883][T19699] netlink: 'syz.0.12010': attribute type 4 has an invalid length.
[ 1015.409932][T19593] BTRFS info (device loop2): disabling free space tree
[ 1015.422090][T19593] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1015.494045][T19593] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1015.620455][T19707] netlink: 756 bytes leftover after parsing attributes in process `syz.4.12014'.
[ 1015.639717][T19593] BTRFS info (device loop2): enabling ssd optimizations
[ 1015.646727][T19593] BTRFS info (device loop2): enabling disk space caching
[ 1015.706198][T19593] BTRFS info (device loop2): force clearing of disk cache
[ 1015.895059][T19715] loop0: detected capacity change from 0 to 4096
[ 1015.934571][T19728] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12019'.
[ 1015.974620][T19715] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[ 1016.176716][T19715] ntfs3(loop0): ino=19, mi_enum_attr
[ 1016.230491][T19715] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 1016.320169][ T6002] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1017.769260][T19824] loop1: detected capacity change from 0 to 512
[ 1017.859324][T19824] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1017.955604][T19824] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.12044: corrupted in-inode xattr: e_value out of bounds
[ 1018.087317][T19824] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1018.089281][T19824] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.12044: couldn't read orphan inode 15 (err -117)
[ 1018.098501][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1018.098525][    C0] EXT4-fs (loop1): initial error at time 2000000022: ext4_iget_extra_inode:5025: inode 15
[ 1018.098566][    C0] EXT4-fs (loop1): last error at time 2000000022: ext4_iget_extra_inode:5025: inode 15
[ 1018.163443][ T6007] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1018.171266][T19824] loop1: lost filesystem error report for type 5 error -117
[ 1018.205269][T19824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1018.356549][T19848] bond0: entered promiscuous mode
[ 1018.361622][T19848] bond0: entered allmulticast mode
[ 1018.362274][T19852] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 1018.376375][T19848] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1018.387955][ T6007] usb 3-1: Using ep0 maxpacket: 32
[ 1018.405636][ T6007] usb 3-1: config 0 has an invalid interface number: 146 but max is 0
[ 1018.414283][ T5995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1018.420718][ T6007] usb 3-1: config 0 has no interface number 0
[ 1018.429316][ T6007] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1018.449274][ T6007] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1018.467320][ T6007] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1018.515667][ T6007] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1018.565770][ T6007] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1018.628134][ T6007] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1018.642819][T19810] loop4: detected capacity change from 0 to 32768
[ 1018.678206][ T6007] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1018.692933][T19901] loop1: detected capacity change from 0 to 1024
[ 1018.729259][ T6007] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1018.752702][T19901] hfsplus: invalid length 32517 has been corrected to 255
[ 1018.768651][ T6007] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1018.834545][T19901] hfsplus: invalid length 32517 has been corrected to 255
[ 1018.846025][T19810] JBD2: Ignoring recovery information on journal
[ 1018.894449][ T6007] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1018.954503][ T6007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1018.989931][T19810] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1019.007907][ T6007] usb 3-1: Product: syz
[ 1019.043855][ T6007] usb 3-1: Manufacturer: syz
[ 1019.048502][ T6007] usb 3-1: SerialNumber: syz
[ 1019.107778][ T6007] usb 3-1: config 0 descriptor??
[ 1019.116874][T19832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1019.156019][ T6007] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk.
[ 1019.203096][ T6007] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out.
[ 1019.377378][ T6007] usb 3-1: USB disconnect, device number 113
[ 1019.429272][ T6005] ocfs2: Unmounting device (7,4) on (node local)
[ 1019.537467][T19958] loop3: detected capacity change from 0 to 128
[ 1019.546081][T19959] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[ 1019.569576][T19958] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1019.660080][T19958] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1019.766649][T19958] ext4 filesystem being mounted at /2002/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1019.864875][T19972] loop4: detected capacity change from 0 to 256
[ 1020.082429][ T5996] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1020.549853][T20003] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12077'.
[ 1021.132313][T19953] loop1: detected capacity change from 0 to 32768
[ 1021.245641][T20043] loop0: detected capacity change from 0 to 1024
[ 1021.424605][T20043] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[ 1021.432667][T20054] netlink: 'syz.4.12083': attribute type 4 has an invalid length.
[ 1021.491643][T20043] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[ 1021.568535][T19971] loop5: detected capacity change from 0 to 32768
[ 1021.669709][T19971] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1021.747129][   T12] hfsplus: b-tree write err: -5, ino 25
[ 1021.752916][   T12] hfsplus: b-tree write err: -5, ino 4
[ 1021.858054][   T12] hfsplus: b-tree write err: -5, ino 2
[ 1021.892584][T20082] x_tables: duplicate entry at hook 3
[ 1022.030526][T19971] XFS (loop5): Ending clean mount
[ 1022.327899][ T6006] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1022.702002][T20116] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12097'.
[ 1022.782598][T20116] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1022.810411][T20055] loop3: detected capacity change from 0 to 32768
[ 1022.872440][T20055] ERROR: (device loop3): dbAlloc: the hint is outside the map
[ 1022.872440][T20055] 
[ 1022.940566][T20055] ialloc: diAlloc returned -5!
[ 1023.422312][T20145] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1023.731140][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12114'.
[ 1023.732549][T20187] loop2: detected capacity change from 0 to 256
[ 1023.846370][T20187] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d)
[ 1023.902467][T20187] exFAT-fs (loop2): error, data size is invalid(150994954)
[ 1023.946018][T20187] exFAT-fs (loop2): Filesystem has been set read-only
[ 1023.978329][T20187] exFAT-fs (loop2): error, data size is invalid(150994954)
[ 1024.010483][T20201] loop5: detected capacity change from 0 to 256
[ 1024.536134][    T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1024.622039][T20242] netlink: 'syz.3.12129': attribute type 20 has an invalid length.
[ 1024.714928][T20248] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12132'.
[ 1024.729217][    T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1024.751017][    T9] usb 3-1: config 220 has an invalid descriptor of length 95, skipping remainder of the config
[ 1024.796645][    T9] usb 3-1: config 220 has no interface number 2
[ 1024.826188][    T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1024.907568][    T9] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1024.914384][    T9] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1024.964889][    T9] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1024.977562][T20264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12138'.
[ 1024.988865][    T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1025.023148][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.052309][    T9] usb 3-1: Product: syz
[ 1025.056501][    T9] usb 3-1: Manufacturer: syz
[ 1025.087378][    T9] usb 3-1: SerialNumber: syz
[ 1025.318281][   T30] audit: type=1326 audit(2000000029.740:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20284 comm="syz.0.12145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1025.354522][T20289] loop3: detected capacity change from 0 to 256
[ 1025.368600][T20286] futex_wake_op: syz.0.12145 tries to shift op by 32; fix this program
[ 1025.399180][    T9] usb 3-1: selecting invalid altsetting 0
[ 1025.412814][    T9] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1025.414076][T20289] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1025.447491][    T9] uvcvideo 3-1:220.0: No valid video chain found.
[ 1025.459426][   T30] audit: type=1326 audit(2000000029.740:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20284 comm="syz.0.12145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1025.506863][    T9] usb 3-1: selecting invalid altsetting 0
[ 1025.530080][    T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[ 1025.539190][   T30] audit: type=1326 audit(2000000029.793:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20284 comm="syz.0.12145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1025.584521][    T9] usb 3-1: USB disconnect, device number 114
[ 1025.592493][T20289] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[ 1025.636509][   T30] audit: type=1326 audit(2000000029.887:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20284 comm="syz.0.12145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1025.704605][T20315] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[ 1025.716010][   T30] audit: type=1326 audit(2000000029.887:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20284 comm="syz.0.12145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1025.751512][T20315] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[ 1025.945597][T20317] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1025.997757][T20317] bond1 (unregistering): Released all slaves
[ 1026.279969][T20407] loop3: detected capacity change from 0 to 8
[ 1026.317897][T20407] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1026.357725][T20407] SQUASHFS error: Failed to read block 0x9b: -5
[ 1026.391378][T20407] SQUASHFS error: Unable to read metadata cache entry [99]
[ 1026.425862][T20407] SQUASHFS error: Unable to read inode 0x104
[ 1026.589219][T20436] Non-string source
[ 1026.724132][T20440] loop1: detected capacity change from 0 to 512
[ 1026.741766][    T9] usb 4-1: new full-speed USB device number 112 using dummy_hcd
[ 1026.801356][T20440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1026.805777][T20451] netlink: 'syz.0.12168': attribute type 21 has an invalid length.
[ 1026.850928][T20440] ext4 filesystem being mounted at /2055/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1026.888760][T20451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12168'.
[ 1026.940735][    T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[ 1026.968320][    T9] usb 4-1: config 0 has no interface number 0
[ 1026.994000][    T9] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[ 1027.007555][ T5995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1027.053766][    T9] usb 4-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0x6D, changing to 0xD
[ 1027.091614][    T9] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0xD has invalid maxpacket 14309, setting to 64
[ 1027.117437][    T9] usb 4-1: config 0 interface 2 has no altsetting 0
[ 1027.138509][    T9] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[ 1027.168140][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.192500][    T9] usb 4-1: Product: syz
[ 1027.226707][    T9] usb 4-1: Manufacturer: syz
[ 1027.231341][    T9] usb 4-1: SerialNumber: syz
[ 1027.278120][    T9] usb 4-1: config 0 descriptor??
[ 1027.321725][T20407] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1027.331535][T20407] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1027.571807][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1027.599585][T20420] loop2: detected capacity change from 0 to 32768
[ 1027.614135][    T9] usb 4-1: invalid MIDI in EP 0
[ 1027.630325][T20492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12177'.
[ 1027.640259][T20420] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12161 (20420)
[ 1027.643718][T20492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12177'.
[ 1027.733426][T20420] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1027.775726][T20420] BTRFS info (device loop2): using crc32c checksum algorithm
[ 1027.841734][ T6007] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1027.853633][    T9] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22
[ 1027.891444][    T9] usb 4-1: USB disconnect, device number 112
[ 1027.940024][T20453] loop4: detected capacity change from 0 to 32768
[ 1027.979469][T20420] BTRFS info (device loop2): setting nodatasum
[ 1028.003658][ T6007] usb 2-1: Using ep0 maxpacket: 16
[ 1028.029022][T12734] udevd[12734]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1028.045622][ T6007] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1028.065669][T20420] BTRFS info (device loop2): setting nodatacow
[ 1028.076288][ T6007] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024
[ 1028.102985][T20420] BTRFS info (device loop2): enabling ssd optimizations
[ 1028.118579][ T6007] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1028.141327][T20420] BTRFS info (device loop2): turning on sync discard
[ 1028.173086][ T6007] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1028.183692][T20420] BTRFS info (device loop2): enabling free space tree
[ 1028.191979][T20420] BTRFS info (device loop2): enabling auto defrag
[ 1028.218705][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1028.250876][T20420] BTRFS info (device loop2): max_inline set to 0
[ 1028.260329][ T6007] usb 2-1: SerialNumber: syz
[ 1028.319958][T20482] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1028.343718][T20482] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1028.357720][T20552] ipt_REJECT: TCP_RESET invalid for non-tcp
[ 1028.375460][T20420] BTRFS info (device loop2 state M): max_inline set to 0
[ 1028.405186][   T30] audit: type=1326 audit(2000000032.974:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.3.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[ 1028.501004][   T30] audit: type=1326 audit(2000000032.974:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.3.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f416619c799 code=0x7ffc0000
[ 1028.537203][ T6002] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1028.591637][   T30] audit: type=1326 audit(2000000032.984:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.3.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f416615cfce code=0x7ffc0000
[ 1028.622419][ T6007] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[ 1028.680120][ T6008] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1028.692727][   T30] audit: type=1326 audit(2000000032.984:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.3.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f416619c42b code=0x7ffc0000
[ 1028.768448][ T6007] usb 2-1: USB disconnect, device number 125
[ 1028.820795][   T30] audit: type=1326 audit(2000000032.995:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20555 comm="syz.3.12184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f416619c42b code=0x7ffc0000
[ 1028.899105][ T6008] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1028.908267][ T6008] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.972705][ T6008] usb 4-1: Product: syz
[ 1028.990210][ T6008] usb 4-1: Manufacturer: syz
[ 1029.006348][ T6008] usb 4-1: SerialNumber: syz
[ 1029.278876][ T6008] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1029.326193][ T6008] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1029.355098][ T6008] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1029.395549][T20609] loop4: detected capacity change from 0 to 1024
[ 1029.413011][ T6008] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[ 1029.533149][ T6008] usb 4-1: USB disconnect, device number 113
[ 1029.647479][T20507] hfsplus: b-tree write err: -5, ino 25
[ 1029.684639][T20507] hfsplus: b-tree write err: -5, ino 4
[ 1029.717969][T20507] hfsplus: b-tree write err: -5, ino 2
[ 1029.726593][T20560] loop0: detected capacity change from 0 to 32768
[ 1029.837554][T20560] find_entry called with index >= next_index
[ 1029.862132][T20560] find_entry called with index >= next_index
[ 1029.888378][T20560] find_entry called with index >= next_index
[ 1030.249040][T20652] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1030.455466][T20601] loop5: detected capacity change from 0 to 32768
[ 1030.508917][T20601] (syz.5.12191,20601,1):ocfs2_verify_volume:2308 ERROR: bad block number on superblock: found 0, should be 2
[ 1030.538590][T20601] (syz.5.12191,20601,1):ocfs2_verify_volume:2331 ERROR: status = -22
[ 1030.556016][T20601] (syz.5.12191,20601,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1030.600186][T20601] (syz.5.12191,20601,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 1030.682902][T20601] EXT4-fs (loop5): VFS: Can't find ext4 filesystem
[ 1030.972309][T20693] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[ 1031.508900][ T6008] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[ 1031.594855][ T1160] usb 5-1: new full-speed USB device number 106 using dummy_hcd
[ 1031.597174][T20739] loop0: detected capacity change from 0 to 512
[ 1031.614628][T20739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0022]
[ 1031.616550][T20738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12230'.
[ 1031.691957][T20739] System zones: 1-12
[ 1031.703203][T20739] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.12229: Directory hole found for htree index block 0
[ 1031.724516][T20739] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[ 1031.726347][T20739] EXT4-fs (loop0): Remounting filesystem read-only
[ 1031.727034][ T6008] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1031.735480][    C0] EXT4-fs (loop0): error count since last fsck: 1
[ 1031.744668][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1031.751090][    C0] EXT4-fs (loop0): initial error at time 2000000036: dx_probe:791
[ 1031.761059][ T6008] usb 6-1: config 0 descriptor??
[ 1031.765466][    C0] : inode 2
[ 1031.777215][ T6008] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1031.778250][    C0] 
[ 1031.791789][    C0] EXT4-fs (loop0): last error at time 2000000036: dx_probe:791: inode 2
[ 1031.825275][ T1160] usb 5-1: config 2 has an invalid interface number: 211 but max is 0
[ 1031.839179][ T1160] usb 5-1: config 2 has no interface number 0
[ 1031.852202][ T1160] usb 5-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[ 1031.852364][T20739] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[ 1031.863730][ T1160] usb 5-1: config 2 interface 211 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1031.922644][T20739] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[ 1031.945764][ T1160] usb 5-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95
[ 1031.966784][ T1160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1031.981528][T20758] loop2: detected capacity change from 0 to 164
[ 1031.988300][ T1160] usb 5-1: Product: syz
[ 1031.992038][T20739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1031.992459][ T1160] usb 5-1: Manufacturer: syz
[ 1031.992480][ T1160] usb 5-1: SerialNumber: syz
[ 1032.051917][T20758] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1032.082868][T20718] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1032.117818][ T1160] em28xx 5-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211)
[ 1032.168026][T20739] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[ 1032.173303][ T1160] em28xx 5-1:2.211: Device initialization failed.
[ 1032.176467][ T6008] gp8psk: usb in 137 operation failed.
[ 1032.185085][ T1160] em28xx 5-1:2.211: Device must be connected to a high-speed USB 2.0 port.
[ 1032.209884][ T6008] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1032.261672][ T6008] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1032.312079][ T5992] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1032.318972][ T6008] usb 6-1: USB disconnect, device number 7
[ 1032.420529][T20785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1032.464904][ T6007] usb 5-1: USB disconnect, device number 106
[ 1032.660491][T20807] netlink: 'syz.1.12244': attribute type 4 has an invalid length.
[ 1032.670442][T20807] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12244'.
[ 1032.695127][T20808] netlink: 'syz.3.12243': attribute type 5 has an invalid length.
[ 1032.880496][T20818] netlink: 'syz.0.12247': attribute type 2 has an invalid length.
[ 1032.979627][T20825] netlink: 'syz.1.12249': attribute type 16 has an invalid length.
[ 1033.000444][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12250'.
[ 1033.072442][T20825] netlink: 'syz.1.12249': attribute type 17 has an invalid length.
[ 1033.293182][T20844] netlink: zone id is out of range
[ 1033.370476][T20825] bridge0: left allmulticast mode
[ 1033.390942][T20825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1033.816466][    T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1033.976581][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1033.987987][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[ 1034.003206][T20894] loop0: detected capacity change from 0 to 256
[ 1034.038094][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[ 1034.077102][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1034.154183][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1034.187305][    T9] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1034.231498][    T9] usb 3-1: Product: syz
[ 1034.248852][    T9] usb 3-1: Manufacturer: syz
[ 1034.253554][    T9] usb 3-1: SerialNumber: syz
[ 1034.297429][    T9] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input79
[ 1034.395362][T20576] usb 5-1: new full-speed USB device number 107 using dummy_hcd
[ 1034.408835][   T30] kauditd_printk_skb: 31 callbacks suppressed
[ 1034.408855][   T30] audit: type=1326 audit(2000000039.283:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20926 comm="syz.5.12278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8ff9c799 code=0x7ffc0000
[ 1034.527501][   T30] audit: type=1326 audit(2000000039.325:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20926 comm="syz.5.12278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f7b8ff9c799 code=0x7ffc0000
[ 1034.553706][   T30] audit: type=1326 audit(2000000039.325:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20926 comm="syz.5.12278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8ff9c799 code=0x7ffc0000
[ 1034.576773][   T30] audit: type=1326 audit(2000000039.325:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20926 comm="syz.5.12278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b8ff9c799 code=0x7ffc0000
[ 1034.646200][T20576] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3
[ 1034.690870][T20576] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.708903][   T30] audit: type=1326 audit(2000000039.598:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1034.720000][T20576] usb 5-1: Product: syz
[ 1034.738312][ T6008] usb 3-1: USB disconnect, device number 115
[ 1034.738349][    C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19
[ 1034.775892][T20576] usb 5-1: Manufacturer: syz
[ 1034.810219][T20576] usb 5-1: SerialNumber: syz
[ 1034.813557][   T30] audit: type=1326 audit(2000000039.598:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1034.866528][T20576] usb 5-1: config 0 descriptor??
[ 1034.889440][   T30] audit: type=1326 audit(2000000039.598:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1034.892160][ T6008] appletouch 3-1:1.0: input: appletouch disconnected
[ 1034.953598][T20576] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now attached
[ 1034.978047][   T30] audit: type=1326 audit(2000000039.598:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1035.038232][T20964] netlink: 'syz.1.12286': attribute type 1 has an invalid length.
[ 1035.047791][T20965] usb usb8: usbfs: process 20965 (syz.3.12287) did not claim interface 0 before use
[ 1035.062059][T20964] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12286'.
[ 1035.078791][   T30] audit: type=1326 audit(2000000039.598:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.12280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1035.120624][T20970] QAT: failed to copy from user cfg_data.
[ 1035.195640][T20576] usb 5-1: USB disconnect, device number 107
[ 1035.202482][T20576] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now disconnected
[ 1035.427055][T20995] loop0: detected capacity change from 0 to 128
[ 1035.472479][T20995] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 1035.497610][T20995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[ 1035.510703][T20995] System zones: 1-3, 19-19, 35-36
[ 1035.568143][T20995] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1035.608363][T20995] ext4 filesystem being mounted at /2068/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1035.630306][T21010] /dev/nullb0: Can't open blockdev
[ 1035.775144][ T5992] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1035.814712][T27933] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1035.989096][T27933] usb 3-1: Using ep0 maxpacket: 16
[ 1036.016251][T27933] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.052432][T27933] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1036.094043][T27933] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1036.138040][T27933] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1036.181428][T27933] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1036.204933][T27933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.235290][T27933] usb 3-1: Product: syz
[ 1036.239579][T27933] usb 3-1: Manufacturer: syz
[ 1036.270964][T27933] usb 3-1: SerialNumber: syz
[ 1036.358882][T21040] loop1: detected capacity change from 0 to 4096
[ 1036.711782][T27933] usb 3-1: 0:2 : does not exist
[ 1036.878777][T27933] usb 3-1: USB disconnect, device number 116
[ 1036.971732][   T30] audit: type=1326 audit(2000000041.971:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.0.12319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094159c799 code=0x7ffc0000
[ 1037.057140][T13004] udevd[13004]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1037.097663][T21034] loop3: detected capacity change from 0 to 32768
[ 1037.160883][T21034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.12305 (21034)
[ 1037.208304][T21112] loop1: detected capacity change from 0 to 128
[ 1037.241749][T21112] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 1037.299206][T21034] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1037.347851][T21034] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1037.366776][T21119] ip6t_REJECT: ECHOREPLY is not supported
[ 1037.516012][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12326'.
[ 1037.546958][T21034] BTRFS info (device loop3): enabling ssd optimizations
[ 1037.605519][T21034] BTRFS info (device loop3): turning on async discard
[ 1037.628832][T21034] BTRFS info (device loop3): enabling free space tree
[ 1037.643495][T21150] netlink: 'syz.2.12332': attribute type 21 has an invalid length.
[ 1037.660458][T21150] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1037.677267][T21153] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12328'.
[ 1037.679127][T21150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1037.693640][T21150] IPv6: NLM_F_CREATE should be set when creating new route
[ 1037.700925][T21150] IPv6: NLM_F_CREATE should be set when creating new route
[ 1037.708248][T21150] IPv6: NLM_F_CREATE should be set when creating new route
[ 1037.777801][T21153] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[ 1037.917597][ T5996] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1038.227311][T21185] loop4: detected capacity change from 0 to 512
[ 1038.307302][T21185] EXT4-fs: Ignoring removed oldalloc option
[ 1038.370640][T21180] loop0: detected capacity change from 0 to 4096
[ 1038.412875][T21185] EXT4-fs: quotafile must be on filesystem root
[ 1038.529247][T21180] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[ 1038.596430][T21199] kernel read not supported for file / 
  (pid: 21199 comm: syz.3.12344)
[ 1038.953044][T21215] xt_SECMARK: invalid mode: 2
[ 1039.185566][T21228] loop3: detected capacity change from 0 to 8
[ 1039.240282][T21228] SQUASHFS error: Unable to read inode 0x87
[ 1039.542877][T21253] netlink: 'syz.3.12359': attribute type 1 has an invalid length.
[ 1039.584039][T21245] loop1: detected capacity change from 0 to 4096
[ 1039.670667][T21176] loop2: detected capacity change from 0 to 32768
[ 1039.707201][T21245] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[ 1039.708743][T21176] xfs: Deprecated parameter 'attr2'
[ 1039.733170][T21245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1039.752821][T21176] XFS: attr2 mount option is deprecated.
[ 1039.754659][T21257] loop0: detected capacity change from 0 to 1024
[ 1040.050969][T21176] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1040.065712][ T5995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1040.418627][T21176] XFS (loop2): Ending clean mount
[ 1040.439225][T21282] dvmrp0: entered allmulticast mode
[ 1040.475414][T21176] XFS (loop2): Quotacheck needed: Please wait.
[ 1040.570685][T21176] XFS (loop2): Quotacheck: Done.
[ 1040.654697][T21298] xfrm0: left allmulticast mode
[ 1040.697306][T21240] syz.5.12357 (21240): drop_caches: 2
[ 1040.937125][ T6002] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1041.232813][ T5134] Bluetooth: hci5: unexpected event for opcode 0x2016
[ 1041.254494][T21334] trusted_key: encrypted_key: insufficient parameters specified
[ 1041.441095][T21330] loop1: detected capacity change from 0 to 4096
[ 1041.533226][T21330] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1041.567159][T21344] usb usb8: usbfs: process 21344 (syz.0.12386) did not claim interface 1 before use
[ 1041.584056][T21330] ntfs3(loop1): Failed to load $Extend (-22).
[ 1041.608230][T21330] ntfs3(loop1): Failed to initialize $Extend.
[ 1042.366924][T21387] loop0: detected capacity change from 0 to 1764
[ 1042.421528][T21328] loop4: detected capacity change from 0 to 32768
[ 1042.441516][T21393] loop1: detected capacity change from 0 to 1024
[ 1042.461896][T21328] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.12380 (21328)
[ 1042.542528][T21328] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1042.560609][T21328] BTRFS info (device loop4): using sha256 checksum algorithm
[ 1042.710605][T20507] hfsplus: b-tree write err: -5, ino 25
[ 1042.760354][T20507] hfsplus: b-tree write err: -5, ino 4
[ 1042.779268][T21328] BTRFS info (device loop4): enabling ssd optimizations
[ 1042.792036][T20507] hfsplus: b-tree write err: -5, ino 2
[ 1042.807910][T21424] wlan0 speed is unknown, defaulting to 1000
[ 1042.814530][T21424] wlan0 speed is unknown, defaulting to 1000
[ 1042.826277][T21328] BTRFS info (device loop4): turning on async discard
[ 1042.833072][T21328] BTRFS info (device loop4): enabling free space tree
[ 1042.844857][T21424] wlan0 speed is unknown, defaulting to 1000
[ 1042.937605][T21424] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1042.981433][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12407'.
[ 1043.037334][T21424] wlan0 speed is unknown, defaulting to 1000
[ 1043.060736][ T6005] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1043.073784][T21424] wlan0 speed is unknown, defaulting to 1000
[ 1043.092960][T21424] wlan0 speed is unknown, defaulting to 1000
[ 1043.127061][T21424] wlan0 speed is unknown, defaulting to 1000
[ 1043.141854][T21424] wlan0 speed is unknown, defaulting to 1000
[ 1043.160773][T21424] wlan0 speed is unknown, defaulting to 1000
[ 1043.591777][   T30] kauditd_printk_skb: 5 callbacks suppressed
[ 1043.591798][   T30] audit: type=1326 audit(2000000048.920:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.2.12415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9519c799 code=0x7ffc0000
[ 1043.673945][   T30] audit: type=1326 audit(2000000048.920:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.2.12415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9519c799 code=0x7ffc0000
[ 1043.740740][   T30] audit: type=1326 audit(2000000048.920:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.2.12415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9519c799 code=0x7ffc0000
[ 1043.849980][   T30] audit: type=1326 audit(2000000048.920:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.2.12415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9519c799 code=0x7ffc0000
[ 1043.918819][   T30] audit: type=1326 audit(2000000048.973:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.2.12415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fbc9519c799 code=0x7ffc0000
[ 1043.991811][   T30] audit: type=1326 audit(2000000048.973:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.2.12415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9519c799 code=0x7ffc0000
[ 1044.028138][   T30] audit: type=1326 audit(2000000048.973:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.2.12415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc9519c799 code=0x7ffc0000
[ 1044.051889][   T30] audit: type=1326 audit(2000000048.983:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.2.12415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbc9519c799 code=0x7ffc0000
[ 1044.074969][   T30] audit: type=1326 audit(2000000048.983:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21460 comm="syz.2.12415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbc9519c799 code=0x7ffc0000
[ 1044.289500][T21488] loop2: detected capacity change from 0 to 4096
[ 1044.357811][T21488] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[ 1044.836519][T27933] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1044.838302][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12433'.
[ 1044.883390][T21524] 0ªX¹¦À: left allmulticast mode
[ 1044.912155][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12433'.
[ 1044.968720][T21524] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[ 1045.035294][T27933] usb 6-1: Using ep0 maxpacket: 16
[ 1045.055930][T27933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1045.092404][ T5134] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[ 1045.092418][T27933] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 1045.117978][T27933] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[ 1045.121050][ T5134] Bluetooth: hci5: Injecting HCI hardware error event
[ 1045.136808][T19310] Bluetooth: hci5: hardware error 0x00
[ 1045.147118][T27933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.216982][T27933] usb 6-1: Product: syz
[ 1045.221185][T27933] usb 6-1: Manufacturer: syz
[ 1045.242460][T27933] usb 6-1: SerialNumber: syz
[ 1045.249587][T21533] loop2: detected capacity change from 0 to 1024
[ 1045.275433][T21536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12437'.
[ 1045.290257][T27933] usb 6-1: config 0 descriptor??
[ 1045.297645][T21533] EXT4-fs: Ignoring removed bh option
[ 1045.364026][T27933] mcba_usb 6-1:0.0 can0: couldn't setup read URBs
[ 1045.381440][T27933] mcba_usb 6-1:0.0 can0: couldn't start device: -90
[ 1045.409201][T21533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1045.462982][T21551] loop1: detected capacity change from 0 to 2048
[ 1045.524091][T21551]  loop1: p1 p3 p4
[ 1045.524091][T21551]  p1: <solaris: [s0] p5 >
[ 1045.540505][T27933] mcba_usb 6-1:0.0: probe with driver mcba_usb failed with error -90
[ 1045.588195][T21551] loop1: p4 size 589824 extends beyond EOD, truncated
[ 1045.606327][T27933] usb 6-1: USB disconnect, device number 8
[ 1045.679101][ T6002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1045.819790][T12637] udevd[12637]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[ 1045.827723][T13245] udevd[13245]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[ 1045.833448][T12402] udevd[12402]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[ 1045.843389][T14096] udevd[14096]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[ 1046.055702][T21590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12444'.
[ 1046.056555][T21588] loop2: detected capacity change from 0 to 2048
[ 1046.102823][T21590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12444'.
[ 1046.113047][T21588] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1046.207793][T21499] loop4: detected capacity change from 0 to 32768
[ 1046.285290][T21499] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1046.312061][T21499] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1046.454447][T21499] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 1046.506895][T27933] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1046.515373][T27933] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1046.624805][T27933] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 114ms
[ 1046.676777][T27933] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1046.682064][T21499] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1046.850134][T21499] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 1046.906290][T21632] delete_channel: no stack
[ 1047.099031][T21642] loop1: detected capacity change from 0 to 512
[ 1047.157140][T19310] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[ 1047.195826][T21642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1047.209255][T21646] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12459'.
[ 1047.226028][T21646] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12459'.
[ 1047.237758][T21642] ext4 filesystem being mounted at /2115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1047.250316][T21655] netlink: 'syz.0.12458': attribute type 8 has an invalid length.
[ 1047.257617][ T6005] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[ 1047.273307][ T6005] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 1047.282542][ T6005] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:6005 [syz-executor] gfs2_quota_sync+0x370/0x470
[ 1047.295389][ T6005] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[ 1047.304137][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1047.304174][ T6005] Tainted: [L]=SOFTLOCKUP
[ 1047.304183][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1047.304199][ T6005] Call Trace:
[ 1047.304209][ T6005]  <TASK>
[ 1047.304219][ T6005]  dump_stack_lvl+0xe8/0x150
[ 1047.304261][ T6005]  gfs2_withdraw+0xc3/0x1b0
[ 1047.304304][ T6005]  inode_go_instantiate+0xdd8/0x1220
[ 1047.304341][ T6005]  ? __pfx_bit_wait+0x10/0x10
[ 1047.304375][ T6005]  ? __pfx_bit_wait+0x10/0x10
[ 1047.304399][ T6005]  ? __pfx_inode_go_instantiate+0x10/0x10
[ 1047.304440][ T6005]  ? __pfx_wake_bit_function+0x10/0x10
[ 1047.304476][ T6005]  gfs2_instantiate+0x168/0x220
[ 1047.304520][ T6005]  gfs2_glock_wait+0x1d4/0x2a0
[ 1047.304549][ T6005]  do_sync+0x49a/0xcb0
[ 1047.304578][ T6005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1047.304609][ T6005]  ? _raw_spin_unlock+0x28/0x50
[ 1047.304644][ T6005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1047.304673][ T6005]  ? gfs2_quota_sync+0x370/0x470
[ 1047.304717][ T6005]  ? __pfx_do_sync+0x10/0x10
[ 1047.304759][ T6005]  ? gfs2_quota_sync+0x370/0x470
[ 1047.304789][ T6005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1047.304824][ T6005]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1047.304854][ T6005]  ? do_raw_spin_unlock+0xf5/0x210
[ 1047.304885][ T6005]  gfs2_quota_sync+0x370/0x470
[ 1047.304930][ T6005]  gfs2_sync_fs+0x4c/0xb0
[ 1047.304968][ T6005]  sync_filesystem+0xee/0x230
[ 1047.304998][ T6005]  generic_shutdown_super+0x77/0x2d0
[ 1047.305044][ T6005]  kill_block_super+0x44/0x90
[ 1047.305073][ T6005]  deactivate_locked_super+0xbc/0x130
[ 1047.305114][ T6005]  cleanup_mnt+0x437/0x4d0
[ 1047.305141][ T6005]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1047.305183][ T6005]  task_work_run+0x1d9/0x270
[ 1047.305215][ T6005]  ? __pfx_task_work_run+0x10/0x10
[ 1047.305255][ T6005]  exit_to_user_mode_loop+0xed/0x480
[ 1047.305285][ T6005]  ? rcu_is_watching+0x15/0xb0
[ 1047.305328][ T6005]  do_syscall_64+0x32d/0xf80
[ 1047.305352][ T6005]  ? trace_irq_disable+0x3b/0x150
[ 1047.305390][ T6005]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.305423][ T6005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.305450][ T6005] RIP: 0033:0x7f023ff9d9d7
[ 1047.305473][ T6005] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1047.305495][ T6005] RSP: 002b:00007ffdc91ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1047.305520][ T6005] RAX: 0000000000000000 RBX: 00007f0240031f90 RCX: 00007f023ff9d9d7
[ 1047.305538][ T6005] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc91ee0f0
[ 1047.305555][ T6005] RBP: 00007ffdc91ee0f0 R08: 00007ffdc91ef0f0 R09: 00000000ffffffff
[ 1047.305574][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdc91ef180
[ 1047.305590][ T6005] R13: 00007f0240031f90 R14: 00000000000fdc0c R15: 00007ffdc91ef1c0
[ 1047.305630][ T6005]  </TASK>
[ 1047.305640][ T6005] gfs2: fsid=syz:syz.0: about to withdraw this file system
[ 1047.655972][T21642] EXT4-fs error (device loop1): __ext4_remount:6804: comm syz.1.12455: Abort forced by user
[ 1047.667297][T21662] loop2: detected capacity change from 0 to 1024
[ 1047.676980][T21665] loop0: detected capacity change from 0 to 128
[ 1047.694022][T21642] EXT4-fs (loop1): Remounting filesystem read-only
[ 1047.724711][T21642] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1047.869111][T21662] hfsplus: keylen 65060 too large
[ 1047.894700][ T5995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1047.903703][T21662] hfsplus: xattr search failed
[ 1048.446933][T21699] netlink: 'syz.0.12469': attribute type 1 has an invalid length.
[ 1048.454792][T21699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12469'.
[ 1048.802991][T21666] loop5: detected capacity change from 0 to 32768
[ 1048.943696][T21728] loop0: detected capacity change from 0 to 8
[ 1049.039150][T21728] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1049.131415][T21728] SQUASHFS error: Failed to read block 0x28d: -5
[ 1049.147737][T21728] SQUASHFS error: Unable to read metadata cache entry [28b]
[ 1049.195517][T21728] SQUASHFS error: Unable to read inode 0x11f
[ 1049.266177][T21742] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1049.464639][T21741] loop1: detected capacity change from 0 to 4096
[ 1049.502764][T21741] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[ 1049.616523][T21770] MPI: mpi too large (107144 bits)
[ 1049.635339][T21741] ntfs3(loop1): ino=19, mi_enum_attr
[ 1049.655451][T21741] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1049.731450][T21741] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[ 1050.007471][   T30] audit: type=1326 audit(2000000055.639:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21789 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1050.117878][   T30] audit: type=1326 audit(2000000055.639:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21789 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1050.205272][   T30] audit: type=1326 audit(2000000055.639:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21789 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1050.303269][   T30] audit: type=1326 audit(2000000055.639:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21789 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1050.407872][   T30] audit: type=1326 audit(2000000055.639:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21789 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1050.518883][   T30] audit: type=1326 audit(2000000055.639:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21789 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1050.650568][   T30] audit: type=1326 audit(2000000055.639:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21789 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1050.760212][   T30] audit: type=1326 audit(2000000055.639:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21789 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1050.845532][   T30] audit: type=1326 audit(2000000055.639:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21789 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1050.958852][   T30] audit: type=1326 audit(2000000055.639:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21789 comm="syz.4.12498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f023ff9c799 code=0x7ffc0000
[ 1051.007854][    T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1051.179128][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1051.190110][    T9] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[ 1051.217408][    T9] usb 2-1: config 0 has no interface number 0
[ 1051.230372][    T9] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[ 1051.251445][    T9] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 1051.294421][    T9] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[ 1051.309621][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.350591][    T9] usb 2-1: Product: syz
[ 1051.364865][    T9] usb 2-1: Manufacturer: syz
[ 1051.378878][    T9] usb 2-1: SerialNumber: syz
[ 1051.424863][    T9] usb 2-1: config 0 descriptor??
[ 1051.438323][T21807] loop3: detected capacity change from 0 to 32768
[ 1051.471759][    T9] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected
[ 1051.471973][T21807] 
[ 1051.471973][T21807]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1051.471973][T21807] 
[ 1051.542869][T21807] jfs_rename: dtInsert returned -EIO
[ 1051.559474][T21882] netlink: 'syz.0.12524': attribute type 3 has an invalid length.
[ 1051.602407][T21882] netlink: 'syz.0.12524': attribute type 3 has an invalid length.
[ 1051.686245][ T5996] 
[ 1051.686245][ T5996]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1051.686245][ T5996] 
[ 1051.697613][    T9] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0
[ 1051.706336][ T5996] 
[ 1051.706336][ T5996]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1051.706336][ T5996] 
[ 1051.748477][T21889] loop4: detected capacity change from 0 to 64
[ 1051.853307][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12529'.
[ 1051.879333][T27933] usb 2-1: USB disconnect, device number 126
[ 1051.947279][T27933] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0
[ 1051.969723][    T9] usb 3-1: new full-speed USB device number 117 using dummy_hcd
[ 1051.996216][T27933] cypress_m8 2-1:0.35: device disconnected
[ 1052.154255][T21928] netlink: 'syz.5.12533': attribute type 1 has an invalid length.
[ 1052.177872][    T9] usb 3-1: config 1 has an invalid interface descriptor of length 8, skipping
[ 1052.214360][T21928] netlink: 'syz.5.12533': attribute type 1 has an invalid length.
[ 1052.217720][    T9] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1052.252046][    T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1052.273470][    T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping
[ 1052.301326][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1052.333443][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1052.377077][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1052.388718][    T9] usb 3-1: SerialNumber: syz
[ 1052.444438][T21942] batadv0: entered promiscuous mode
[ 1052.456080][    T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[ 1052.463918][    T9] cdc_acm 3-1:1.0: This needs exactly 3 endpoints
[ 1052.522371][    T9] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22
[ 1052.567110][T21949] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[ 1052.697852][ T1160] usb 3-1: USB disconnect, device number 117
[ 1053.108299][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12551'.
[ 1053.163262][T21997] netlink: zone id is out of range
[ 1053.193731][T21997] netlink: zone id is out of range
[ 1053.225809][T21997] netlink: zone id is out of range
[ 1053.262916][T21997] netlink: zone id is out of range
[ 1053.534915][T22023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12558'.
[ 1053.559725][T22023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12558'.
[ 1053.608233][T22023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12558'.
[ 1053.782468][T22039] netlink: 'syz.5.12565': attribute type 10 has an invalid length.
[ 1053.800713][T22038] xt_l2tp: v2 tid > 0xffff: 262144
[ 1053.887780][T22049] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1053.937053][T22047] loop1: detected capacity change from 0 to 1764
[ 1053.993266][T22039] veth0_vlan: left promiscuous mode
[ 1054.009195][T22039] veth0_vlan: entered promiscuous mode
[ 1054.045201][T22039] team0: Device veth0_vlan failed to register rx_handler
[ 1054.322440][T22074] loop0: detected capacity change from 0 to 256
[ 1054.397541][T22074] FAT-fs (loop0): Directory bread(block 64) failed
[ 1054.433706][T22074] FAT-fs (loop0): Directory bread(block 65) failed
[ 1054.464001][T22074] FAT-fs (loop0): Directory bread(block 66) failed
[ 1054.486329][T22074] FAT-fs (loop0): Directory bread(block 67) failed
[ 1054.505990][T22074] FAT-fs (loop0): Directory bread(block 68) failed
[ 1054.512545][T22074] FAT-fs (loop0): Directory bread(block 69) failed
[ 1054.567295][T22074] FAT-fs (loop0): Directory bread(block 70) failed
[ 1054.587013][T22074] FAT-fs (loop0): Directory bread(block 71) failed
[ 1054.617859][T22074] FAT-fs (loop0): Directory bread(block 72) failed
[ 1054.624444][T22074] FAT-fs (loop0): Directory bread(block 73) failed
[ 1054.637295][T22094] netlink: 96 bytes leftover after parsing attributes in process `syz.5.12582'.
[ 1054.827605][T22109] netlink: 'syz.2.12586': attribute type 1 has an invalid length.
[ 1054.942526][ T6008] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1055.061948][T22123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1055.132426][ T6008] usb 5-1: Using ep0 maxpacket: 8
[ 1055.149073][ T6008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1055.190329][ T6008] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1055.230247][ T6008] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e004, bcdDevice=b5.2e
[ 1055.257645][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1055.265670][ T6008] usb 5-1: Product: syz
[ 1055.282262][ T6008] usb 5-1: Manufacturer: syz
[ 1055.307745][ T6008] usb 5-1: SerialNumber: syz
[ 1055.354848][ T6008] usb 5-1: config 0 descriptor??
[ 1055.582260][    T9] usb 5-1: USB disconnect, device number 108
[ 1055.899006][T22181] loop3: detected capacity change from 0 to 8
[ 1055.999610][T22181] SQUASHFS error: Unable to read inode 0xe3
[ 1056.131478][T22195] sg_write: data in/out 196864/5 bytes for SCSI command 0x0-- guessing data in;
[ 1056.131478][T22195]    program syz.5.12611 not setting count and/or reply_len properly
[ 1056.567303][T22211] xt_CT: No such helper "pptp"
[ 1056.596551][T22225] loop4: detected capacity change from 0 to 128
[ 1056.676425][T22225] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1056.742324][T22225] ext4 filesystem being mounted at /2055/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1056.976280][ T6005] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1057.295301][T22269] netlink: 'syz.0.12632': attribute type 10 has an invalid length.
[ 1057.408905][    T9] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1057.430183][T22269] team0: Device veth0_vlan failed to register rx_handler
[ 1057.543278][T22280] loop4: detected capacity change from 0 to 8
[ 1057.590664][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1057.624783][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1057.649632][    T9] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1057.691421][    T9] usb 4-1: Product: syz
[ 1057.704648][    T9] usb 4-1: Manufacturer: syz
[ 1057.732794][    T9] usb 4-1: SerialNumber: syz
[ 1057.761436][    T9] usb 4-1: config 0 descriptor??
[ 1057.789303][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1058.033770][T22307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12643'.
[ 1058.074981][T22237] loop5: detected capacity change from 0 to 32768
[ 1058.154279][T22237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12624 (22237)
[ 1058.158837][    T9] gspca_zc3xx: reg_r err -71
[ 1058.199702][    T9] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1058.249430][    T9] usb 4-1: USB disconnect, device number 114
[ 1058.333894][T22237] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1058.368225][T22326] [U] ^C
[ 1058.390858][T22237] BTRFS info (device loop5): using sha256 checksum algorithm
[ 1058.467365][T22336] netlink: 'syz.4.12649': attribute type 2 has an invalid length.
[ 1058.510131][T22336] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12649'.
[ 1058.904855][T22362] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[ 1059.034546][T22237] BTRFS info (device loop5): enabling ssd optimizations
[ 1059.069222][T22368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12655'.
[ 1059.133024][T22237] BTRFS info (device loop5): turning on async discard
[ 1059.139834][T22237] BTRFS info (device loop5): enabling free space tree
[ 1059.179367][T22375] loop3: detected capacity change from 0 to 512
[ 1059.246824][T22375] EXT4-fs (loop3): revision level too high, forcing read-only mode
[ 1059.300094][T22375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[ 1059.380537][T22380] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1059.388224][T22380] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1059.397354][T22384] loop4: detected capacity change from 0 to 8
[ 1059.411547][T22375] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1059.418005][T22375] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.12657: iget: bad i_size value: 12154761577498
[ 1059.499677][T22384] SQUASHFS error: Failed to read block 0x2d7: -5
[ 1059.516839][T22375] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 1059.517357][T22375] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.12657: couldn't read orphan inode 13 (err -117)
[ 1059.526605][    C0] EXT4-fs (loop3): error count since last fsck: 1
[ 1059.526630][    C0] EXT4-fs (loop3): initial error at time 2000000065: ext4_orphan_get:1391: inode 13
[ 1059.526671][    C0] EXT4-fs (loop3): last error at time 2000000065: ext4_orphan_get:1391: inode 13
[ 1059.571204][T22384] SQUASHFS error: Unable to read metadata cache entry [2d5]
[ 1059.581094][T22375] loop3: lost filesystem error report for type 5 error -117
[ 1059.591411][T22375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1059.704906][T22375] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.12657: dx entry: limit 65535 != root limit 120
[ 1059.753788][T22346] loop1: detected capacity change from 0 to 32768
[ 1059.781294][ T6006] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1059.781909][T22375] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.12657: Corrupt directory, running e2fsck is recommended
[ 1059.821882][T22346] BTRFS info: device /dev/loop1 (7:1) using temp-fsid ae99d076-eabf-4ad9-a79c-45f764a5e76c
[ 1059.852302][T22346] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12650 (22346)
[ 1059.926094][T22346] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1059.987939][T22346] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1060.126654][ T5996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1060.331089][T22346] BTRFS info (device loop1): enabling ssd optimizations
[ 1060.380773][T22346] BTRFS info (device loop1): turning on async discard
[ 1060.387671][T22346] BTRFS info (device loop1): enabling free space tree
[ 1060.530640][T22444] netlink: 'syz.4.12672': attribute type 10 has an invalid length.
[ 1060.544507][T22444] macvlan0: entered promiscuous mode
[ 1060.549822][T22444] macvlan0: entered allmulticast mode
[ 1060.581462][T22444] veth1_vlan: entered allmulticast mode
[ 1060.649782][T22444] team0: Port device macvlan0 added
[ 1060.688075][ T5995] BTRFS info (device loop1): last unmount of filesystem ae99d076-eabf-4ad9-a79c-45f764a5e76c
[ 1060.720708][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1060.752467][T22453] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.12673'.
[ 1060.780181][T22455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12674'.
[ 1060.800875][    T9] usb 1-1: new full-speed USB device number 96 using dummy_hcd
[ 1060.990505][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1061.042395][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1061.071915][    T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 1061.116168][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.197394][    T9] usb 1-1: config 0 descriptor??
[ 1061.337892][T22479] use of bytesused == 0 is deprecated and will be removed in the future,
[ 1061.385727][T22479] use the actual size instead.
[ 1061.677883][    T9] lenovo 0003:17EF:6047.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[ 1061.678737][T22493] loop1: detected capacity change from 0 to 256
[ 1061.776609][T22493] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[ 1061.830002][ T6008] usb 1-1: USB disconnect, device number 96
[ 1061.860723][T22503] loop2: detected capacity change from 0 to 2048
[ 1061.937188][T22493] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[ 1061.949626][T22503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1062.035923][T22511] fido_id[22511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1062.064113][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1062.064134][   T30] audit: type=1800 audit(2000000068.310:581): pid=22503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12687" name="file1" dev="loop2" ino=1415 res=0 errno=0
[ 1062.381809][    T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1062.401237][T22546] loop1: detected capacity change from 0 to 512
[ 1062.544472][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1062.560222][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1062.579700][    T9] usb 4-1: config index 0 descriptor too short (expected 45, got 18)
[ 1062.601028][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1062.641378][    T9] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice= 0.00
[ 1062.667042][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.695816][    T9] usb 4-1: Product: syz
[ 1062.715222][    T9] usb 4-1: Manufacturer: syz
[ 1062.732686][    T9] usb 4-1: SerialNumber: syz
[ 1062.778621][    T9] esd_usb 4-1:1.0: sending version message failed
[ 1062.795740][    T9] esd_usb 4-1:1.0: probe with driver esd_usb failed with error -22
[ 1062.961973][T22572] netlink: 'syz.1.12698': attribute type 10 has an invalid length.
[ 1062.974781][   T10] usb 4-1: USB disconnect, device number 115
[ 1063.132203][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12702'.
[ 1063.158182][T22584] loop2: detected capacity change from 0 to 512
[ 1063.247158][T22595] tipc: Started in network mode
[ 1063.259582][T22584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1063.275263][T22595] tipc: Node identity , cluster identity 4711
[ 1063.312329][T22595] tipc: Failed to set node id, please configure manually
[ 1063.312535][T22584] ext4 filesystem being mounted at /2049/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1063.348555][T22584] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.12701: unexpected EA_INODE flag
[ 1063.360413][T22595] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1063.531876][ T6002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1063.708015][T22621] loop3: detected capacity change from 0 to 1024
[ 1063.737761][T22621] EXT4-fs: Ignoring removed bh option
[ 1063.789341][T22621] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[ 1064.125234][T22621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1064.268345][T22621] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.12710: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[ 1064.382530][T22621] EXT4-fs (loop3): Remounting filesystem read-only
[ 1064.486709][T22658] tipc: Failed to obtain node identity
[ 1064.492252][T22658] tipc: Enabling of bearer <ib:team_slave_1> rejected, failed to enable media
[ 1064.528406][ T5996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1064.836924][T22679] loop5: detected capacity change from 0 to 64
[ 1065.122331][T22691] loop0: detected capacity change from 0 to 512
[ 1065.200487][T22691] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.12731: iget: bad i_size value: 12154757448730
[ 1065.275895][T22691] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[ 1065.277125][T22691] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.12731: couldn't read orphan inode 13 (err -117)
[ 1065.286457][    C0] EXT4-fs (loop0): error count since last fsck: 1
[ 1065.286482][    C0] EXT4-fs (loop0): initial error at time 2000000071: ext4_orphan_get:1391: inode 13
[ 1065.286521][    C0] EXT4-fs (loop0): last error at time 2000000071: ext4_orphan_get:1391: inode 13
[ 1065.328706][T22691] loop0: lost filesystem error report for type 5 error -117
[ 1065.331173][T22691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1065.486975][T22708] loop3: detected capacity change from 0 to 16
[ 1065.502896][ T5992] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1065.545405][T22708] erofs (device loop3): mounted with root inode @ nid 36.
[ 1065.598320][T22718] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12738'.
[ 1065.628237][T19310] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[ 1065.640865][T22708] erofs (device loop3): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192
[ 1065.675834][T22708] erofs (device loop3): read error -117 @ 1 of nid 89
[ 1065.715309][T22718] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12738'.
[ 1065.744075][   T30] audit: type=1800 audit(2000000072.173:582): pid=22708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12735" name="file2" dev="loop3" ino=89 res=0 errno=0
[ 1065.981337][T22666] loop2: detected capacity change from 0 to 32768
[ 1066.104132][T22666] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1066.338336][T22666] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 1066.424634][T22666] XFS (loop2): Starting recovery (logdev: internal)
[ 1066.434953][T22765] loop1: detected capacity change from 0 to 256
[ 1066.485676][T22765] exfat: Deprecated parameter 'utf8'
[ 1066.520220][T22769] loop3: detected capacity change from 0 to 1024
[ 1066.527785][T22765] exfat: Deprecated parameter 'namecase'
[ 1066.533962][T22666] XFS (loop2): Ending recovery (logdev: internal)
[ 1066.571588][T22769] hfsplus: request for non-existent node 211 in B*Tree
[ 1066.580026][T22765] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1066.607203][T22771] sp0: Synchronizing with TNC
[ 1066.612969][T22769] hfsplus: request for non-existent node 211 in B*Tree
[ 1066.772951][ T6002] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1066.817632][T22793] netlink: 'syz.5.12754': attribute type 16 has an invalid length.
[ 1066.888253][T22793] netlink: 'syz.5.12754': attribute type 2 has an invalid length.
[ 1066.903425][T22796] loop3: detected capacity change from 0 to 512
[ 1066.926181][    T9] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1066.972533][T22793] netlink: 64110 bytes leftover after parsing attributes in process `syz.5.12754'.
[ 1066.996954][   T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1067.035476][   T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1067.054687][T22796] EXT4-fs (loop3): 1 truncate cleaned up
[ 1067.115561][    T9] usb 5-1: Using ep0 maxpacket: 16
[ 1067.128655][T22812] loop0: detected capacity change from 0 to 256
[ 1067.138908][T22796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1067.151192][   T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1067.194268][    T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1067.206339][T22812] exfat: Deprecated parameter 'namecase'
[ 1067.223803][   T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1067.243384][    T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1067.257463][T22812] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d)
[ 1067.315650][    T9] usb 5-1: Product: syz
[ 1067.330283][    T9] usb 5-1: Manufacturer: syz
[ 1067.336243][T22812] exFAT-fs (loop0): error, in sector 160, dentry 5 should be unused, but 0xc1
[ 1067.355526][    T9] usb 5-1: SerialNumber: syz
[ 1067.359808][ T5996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1067.367176][T22812] exFAT-fs (loop0): error, in sector 160, dentry 5 should be unused, but 0xc1
[ 1067.383520][T22823] loop5: detected capacity change from 0 to 16
[ 1067.390799][T22823] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 1067.410489][    T9] usb 5-1: config 0 descriptor??
[ 1067.750310][    T9] usb 5-1: USB disconnect, device number 109
[ 1068.100052][T22873] loop2: detected capacity change from 0 to 8192
[ 1068.133177][T22873] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1068.384382][ T6008] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 1068.395918][T22901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12772'.
[ 1068.544620][ T6008] usb 2-1: Using ep0 maxpacket: 8
[ 1068.559302][ T6008] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1068.574864][ T5927] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1068.594546][ T6008] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1068.625074][ T6008] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1068.655743][ T6008] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1068.688480][ T6008] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1068.718640][ T6008] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1068.734869][ T6008] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1068.757233][ T6008] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1068.769362][ T5927] usb 3-1: Using ep0 maxpacket: 16
[ 1068.793506][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1068.810859][ T6008] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1068.829787][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1068.843761][ T6008] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1068.877676][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[ 1068.914049][ T6008] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1068.935289][ T5927] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[ 1068.948834][ T6008] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1068.973382][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.981484][ T6008] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1069.005017][ T5927] usb 3-1: config 0 descriptor??
[ 1069.024685][ T6008] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1069.058469][ T6008] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1069.101097][ T6008] usb 2-1: string descriptor 0 read error: -22
[ 1069.115931][ T6008] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1069.144357][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.207205][T22891] loop3: detected capacity change from 0 to 40427
[ 1069.208354][ T6008] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1069.239224][T22891] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1069.267236][T22891] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1069.307549][T22891] F2FS-fs (loop3): invalid crc value
[ 1069.419067][ T5927] hid_parser_main: 8 callbacks suppressed
[ 1069.419092][ T5927] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[ 1069.450327][ T5927] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[ 1069.457239][ T5927] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[ 1069.472821][    T9] usb 2-1: USB disconnect, device number 127
[ 1069.478994][ T5927] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[ 1069.479026][ T5927] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[ 1069.479053][ T5927] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[ 1069.479079][ T5927] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[ 1069.479105][ T5927] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[ 1069.479131][ T5927] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[ 1069.587374][T22891] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1069.601356][ T5927] apple 0003:05AC:027D.0003: unknown main item tag 0x0
[ 1069.624317][T22891] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1069.646255][T22891] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1069.655095][ T5927] apple 0003:05AC:027D.0003: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0
[ 1069.694736][ T5927] usb 3-1: USB disconnect, device number 118
[ 1069.752337][T22963] fido_id[22963]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 1070.030658][T22984] sock: sock_set_timeout: `syz.4.12784' (pid 22984) tries to set negative timeout
[ 1070.280287][ T6141] kernel write not supported for file /input/event2 (pid: 6141 comm: kworker/1:6)
[ 1070.409119][T23003] loop4: detected capacity change from 0 to 64
[ 1070.564836][T23010] loop2: detected capacity change from 0 to 1024
[ 1070.701768][   T49] hfsplus: b-tree write err: -5, ino 25
[ 1070.710432][   T49] hfsplus: b-tree write err: -5, ino 4
[ 1070.728016][   T49] hfsplus: b-tree write err: -5, ino 2
[ 1071.223665][T23048] loop5: detected capacity change from 0 to 512
[ 1071.291589][T23048] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1071.326088][T23048] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[ 1071.376792][T23048] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[ 1071.444364][T23048] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01d, mo2=0006]
[ 1071.458472][T23061] loop1: detected capacity change from 0 to 512
[ 1071.495776][T23048] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1071.553891][T23061] EXT4-fs (loop1): 1 truncate cleaned up
[ 1071.586786][T23048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1071.637248][T23069] Bluetooth: MGMT ver 1.23
[ 1071.644384][T23061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1071.719043][T23078] loop3: detected capacity change from 0 to 256
[ 1071.748024][T23078] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[ 1071.759700][   T30] audit: type=1800 audit(2000000078.493:583): pid=23061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12804" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1071.815096][T23078] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[ 1071.868634][T23078] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[ 1071.876403][T23078] UDF-fs: Scanning with blocksize 512 failed
[ 1071.896666][ T5995] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1071.918210][T23078] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[ 1071.978288][T23078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1072.007231][T23092] fuse: Bad value for 'fd'
[ 1072.196522][T23103] netlink: 'syz.5.12814': attribute type 29 has an invalid length.
[ 1072.227970][T23103] netlink: 'syz.5.12814': attribute type 29 has an invalid length.
[ 1072.333785][T23115] loop1: detected capacity change from 0 to 256
[ 1072.366437][T23115] exfat: Deprecated parameter 'namecase'
[ 1072.366486][T23115] exfat: Deprecated parameter 'namecase'
[ 1072.428324][T23115] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[ 1072.438445][T23115] exFAT-fs (loop1): start_clu is invalid cluster(0xff000008)
[ 1072.712253][T23133] loop2: detected capacity change from 0 to 512
[ 1072.719775][T23133] EXT4-fs: Ignoring removed nobh option
[ 1072.789770][T23144] loop5: detected capacity change from 0 to 64
[ 1072.812500][T23133] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.12823: corrupted inode contents
[ 1072.873797][T23133] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1072.874212][T23133] EXT4-fs (loop2): Remounting filesystem read-only
[ 1072.883488][    C1] EXT4-fs (loop2): error count since last fsck: 1
[ 1072.883514][    C1] EXT4-fs (loop2): initial error at time 2000000079: ext4_do_update_inode:5569: inode 16
[ 1072.883553][    C1] EXT4-fs (loop2): last error at time 2000000079: ext4_do_update_inode:5569: inode 16
[ 1073.023841][T23133] EXT4-fs (loop2): 1 truncate cleaned up
[ 1073.042676][T14626] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[ 1073.062392][T23133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1073.068871][T14626] Quota error (device loop2): write_blk: dquota write failed
[ 1073.093034][T23133] ext4 filesystem being mounted at /2068/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1073.107346][T14626] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[ 1073.134990][T14626] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[ 1073.178191][T14626] Quota error (device loop2): write_blk: dquota write failed
[ 1073.219965][T14626] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[ 1073.239870][T14626] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[ 1073.291621][ T6002] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1073.301171][T14626] Quota error (device loop2): v2_write_file_info: Can't write info structure
[ 1073.325206][T14626] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[ 1073.574957][T23182] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1073.769072][T23139] loop4: detected capacity change from 0 to 32768
[ 1074.260257][T23171] loop1: detected capacity change from 0 to 32768
[ 1074.281467][T23171] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12833 (23171)
[ 1074.334251][T23171] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1074.393360][T23171] BTRFS info (device loop1): using crc32c checksum algorithm
[ 1074.586645][   T49] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[ 1074.689391][T23171] BTRFS warning (device loop1): couldn't read tree root
[ 1074.702184][T23253] loop5: detected capacity change from 0 to 8
[ 1074.716929][T23171] BTRFS warning (device loop1): try to load backup roots slot 1
[ 1074.759528][   T12] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[ 1074.835416][T23171] BTRFS warning (device loop1): couldn't read tree root
[ 1074.869841][T23171] BTRFS warning (device loop1): try to load backup roots slot 2
[ 1074.885235][   T12] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1074.933907][T23171] BTRFS warning (device loop1): couldn't read tree root
[ 1074.946262][T23171] BTRFS warning (device loop1): try to load backup roots slot 3
[ 1075.009262][T23171] BTRFS info (device loop1): checking UUID tree
[ 1075.032107][T23171] BTRFS info (device loop1): setting nodatasum
[ 1075.065316][T23171] BTRFS info (device loop1): enabling ssd optimizations
[ 1075.098909][T23171] BTRFS info (device loop1): turning on flush-on-commit
[ 1075.129264][T23171] BTRFS info (device loop1): turning on async discard
[ 1075.158625][T23171] BTRFS info (device loop1): enabling free space tree
[ 1075.202464][T23171] BTRFS info (device loop1): trying to use backup root at mount time
[ 1075.241418][T23171] BTRFS info (device loop1): max_inline set to 0
[ 1075.608843][T23306] loop2: detected capacity change from 0 to 256
[ 1075.710458][ T5995] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1075.737004][T23306] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[ 1075.848530][T23306] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff)
[ 1075.874033][T23319] loop4: detected capacity change from 0 to 736
[ 1076.260189][T23319] rock: directory entry would overflow storage
[ 1076.298498][T23319] rock: sig=0x3b10, size=4, remaining=3
[ 1076.495216][T23352] No memory to map
[ 1077.289259][T23390] loop5: detected capacity change from 0 to 256
[ 1077.468259][T23390] FAT-fs (loop5): Directory bread(block 64) failed
[ 1077.504703][T23390] FAT-fs (loop5): Directory bread(block 65) failed
[ 1077.508454][T23398] delete_channel: no stack
[ 1077.557245][T23397] delete_channel: no stack
[ 1077.559173][T23390] FAT-fs (loop5): Directory bread(block 66) failed
[ 1077.584637][T23390] FAT-fs (loop5): Directory bread(block 67) failed
[ 1077.602758][T23405] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1077.615050][T23390] FAT-fs (loop5): Directory bread(block 68) failed
[ 1077.638614][T23406] xt_hashlimit: size too large, truncated to 1048576
[ 1077.652001][T23390] FAT-fs (loop5): Directory bread(block 69) failed
[ 1077.677238][T23390] FAT-fs (loop5): Directory bread(block 70) failed
[ 1077.706051][T23390] FAT-fs (loop5): Directory bread(block 71) failed
[ 1077.734225][T23390] FAT-fs (loop5): Directory bread(block 72) failed
[ 1077.768436][T23390] FAT-fs (loop5): Directory bread(block 73) failed
[ 1078.177024][T23422] loop1: detected capacity change from 0 to 2048
[ 1078.269935][T23422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1078.336537][T23382] loop0: detected capacity change from 0 to 32768
[ 1078.350860][T23382] xfs: Deprecated parameter 'attr2'
[ 1078.391930][T23382] XFS: attr2 mount option is deprecated.
[ 1078.540992][T23382] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1078.573869][T23443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1078.601100][T23449] macsec1: entered promiscuous mode
[ 1078.709048][T23449] dummy0: entered promiscuous mode
[ 1078.748612][T23449] macsec1: entered allmulticast mode
[ 1078.753956][T23449] dummy0: entered allmulticast mode
[ 1078.821236][T23449] dummy0: left allmulticast mode
[ 1078.831289][T23382] XFS (loop0): Ending clean mount
[ 1078.836566][T23449] dummy0: left promiscuous mode
[ 1078.843165][   T13] 
[ 1078.845494][   T13] ======================================================
[ 1078.852508][   T13] WARNING: possible circular locking dependency detected
[ 1078.859528][   T13] syzkaller #0 Tainted: G             L     
[ 1078.865505][   T13] ------------------------------------------------------
[ 1078.872519][   T13] kworker/u8:1/13 is trying to acquire lock:
[ 1078.878490][   T13] ffff888055eeb0c0 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0
[ 1078.888277][   T13] 
[ 1078.888277][   T13] but task is already holding lock:
[ 1078.895631][   T13] ffff888021eeab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[ 1078.905654][   T13] 
[ 1078.905654][   T13] which lock already depends on the new lock.
[ 1078.905654][   T13] 
[ 1078.916045][   T13] 
[ 1078.916045][   T13] the existing dependency chain (in reverse order) is:
[ 1078.925049][   T13] 
[ 1078.925049][   T13] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[ 1078.933568][   T13]        percpu_down_read_internal+0x48/0x1c0
[ 1078.939637][   T13]        ext4_writepages+0x205/0x3b0
[ 1078.944918][   T13]        do_writepages+0x32e/0x550
[ 1078.950039][   T13]        __writeback_single_inode+0x133/0x11a0
[ 1078.956193][   T13]        writeback_single_inode+0x4ac/0xdc0
[ 1078.962079][   T13]        write_inode_now+0x1c2/0x290
[ 1078.967354][   T13]        iput+0x8c1/0xe80
[ 1078.971683][   T13]        ext4_xattr_block_set+0x1fd4/0x2ad0
[ 1078.977572][   T13]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[ 1078.983991][   T13]        __ext4_expand_extra_isize+0x30d/0x400
[ 1078.990142][   T13]        __ext4_mark_inode_dirty+0x45c/0x730
[ 1078.996240][   T13]        ext4_evict_inode+0x7a1/0xeb0
[ 1079.001615][   T13]        evict+0x61e/0xb10
[ 1079.006022][   T13]        ext4_orphan_cleanup+0xc38/0x1470
[ 1079.011745][   T13]        ext4_fill_super+0x59ff/0x6320
[ 1079.017550][   T13]        get_tree_bdev_flags+0x431/0x4f0
[ 1079.023184][   T13]        vfs_get_tree+0x92/0x2a0
[ 1079.028120][   T13]        do_new_mount+0x341/0xd30
[ 1079.033144][   T13]        __se_sys_mount+0x31d/0x420
[ 1079.038345][   T13]        do_syscall_64+0x14d/0xf80
[ 1079.043446][   T13]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.049852][   T13] 
[ 1079.049852][   T13] -> #0 (&ei->xattr_sem){++++}-{4:4}:
[ 1079.057413][   T13]        __lock_acquire+0x15a5/0x2cf0
[ 1079.062786][   T13]        lock_acquire+0xf0/0x2e0
[ 1079.067720][   T13]        down_write+0x96/0x200
[ 1079.072480][   T13]        ext4_destroy_inline_data+0x28/0xe0
[ 1079.078375][   T13]        ext4_do_writepages+0x51e/0x46e0
[ 1079.083994][   T13]        ext4_writepages+0x241/0x3b0
[ 1079.089276][   T13]        do_writepages+0x32e/0x550
[ 1079.094400][   T13]        __writeback_single_inode+0x133/0x11a0
[ 1079.100551][   T13]        writeback_sb_inodes+0x992/0x1a20
[ 1079.106267][   T13]        wb_writeback+0x456/0xb70
[ 1079.111286][   T13]        wb_workfn+0x414/0xf50
[ 1079.116040][   T13]        process_scheduled_works+0xb02/0x1830
[ 1079.122099][   T13]        worker_thread+0xa50/0xfc0
[ 1079.127210][   T13]        kthread+0x388/0x470
[ 1079.131795][   T13]        ret_from_fork+0x51e/0xb90
[ 1079.136905][   T13]        ret_from_fork_asm+0x1a/0x30
[ 1079.142285][   T13] 
[ 1079.142285][   T13] other info that might help us debug this:
[ 1079.142285][   T13] 
[ 1079.152502][   T13]  Possible unsafe locking scenario:
[ 1079.152502][   T13] 
[ 1079.159962][   T13]        CPU0                    CPU1
[ 1079.165316][   T13]        ----                    ----
[ 1079.170665][   T13]   rlock(&sbi->s_writepages_rwsem);
[ 1079.175974][   T13]                                lock(&ei->xattr_sem);
[ 1079.182815][   T13]                                lock(&sbi->s_writepages_rwsem);
[ 1079.190528][   T13]   lock(&ei->xattr_sem);
[ 1079.194855][   T13] 
[ 1079.194855][   T13]  *** DEADLOCK ***
[ 1079.194855][   T13] 
[ 1079.202984][   T13] 3 locks held by kworker/u8:1/13:
[ 1079.208083][   T13]  #0: ffff88801fac7148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 1079.219345][   T13]  #1: ffffc90000127c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 1079.231807][   T13]  #2: ffff888021eeab98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[ 1079.242275][   T13] 
[ 1079.242275][   T13] stack backtrace:
[ 1079.248150][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1079.248183][   T13] Tainted: [L]=SOFTLOCKUP
[ 1079.248192][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1079.248209][   T13] Workqueue: writeback wb_workfn (flush-7:1)
[ 1079.248242][   T13] Call Trace:
[ 1079.248252][   T13]  <TASK>
[ 1079.248262][   T13]  dump_stack_lvl+0xe8/0x150
[ 1079.248294][   T13]  print_circular_bug+0x2e1/0x300
[ 1079.248332][   T13]  check_noncircular+0x12e/0x150
[ 1079.248369][   T13]  __lock_acquire+0x15a5/0x2cf0
[ 1079.248402][   T13]  ? unwind_next_frame+0xa5/0x23c0
[ 1079.248439][   T13]  ? unwind_next_frame+0xa5/0x23c0
[ 1079.248475][   T13]  lock_acquire+0xf0/0x2e0
[ 1079.248501][   T13]  ? ext4_destroy_inline_data+0x28/0xe0
[ 1079.248535][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.248567][   T13]  down_write+0x96/0x200
[ 1079.248591][   T13]  ? ext4_destroy_inline_data+0x28/0xe0
[ 1079.248623][   T13]  ? __pfx_down_write+0x10/0x10
[ 1079.248648][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.248678][   T13]  ext4_destroy_inline_data+0x28/0xe0
[ 1079.248712][   T13]  ext4_do_writepages+0x51e/0x46e0
[ 1079.248735][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.248761][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[ 1079.248791][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.248827][   T13]  ? __skb_flow_dissect+0x423/0x6d20
[ 1079.248862][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.248892][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.248918][   T13]  ? look_up_lock_class+0x57/0x110
[ 1079.248947][   T13]  ? __pfx_ext4_do_writepages+0x10/0x10
[ 1079.248968][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.248997][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249022][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[ 1079.249052][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249081][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249106][   T13]  ? update_load_avg+0x1b0/0x1ec0
[ 1079.249138][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249168][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249197][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249226][   T13]  ext4_writepages+0x241/0x3b0
[ 1079.249254][   T13]  ? sched_clock+0x3f/0x60
[ 1079.249280][   T13]  ? __pfx_ext4_writepages+0x10/0x10
[ 1079.249316][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249343][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249370][   T13]  ? do_raw_spin_unlock+0xf5/0x210
[ 1079.249392][   T13]  ? __pfx_ext4_writepages+0x10/0x10
[ 1079.249422][   T13]  do_writepages+0x32e/0x550
[ 1079.249456][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249483][   T13]  ? reacquire_held_locks+0x104/0x190
[ 1079.249515][   T13]  ? writeback_sb_inodes+0x477/0x1a20
[ 1079.249547][   T13]  __writeback_single_inode+0x133/0x11a0
[ 1079.249578][   T13]  ? do_raw_spin_unlock+0xf5/0x210
[ 1079.249603][   T13]  writeback_sb_inodes+0x992/0x1a20
[ 1079.249646][   T13]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1079.249674][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1079.249715][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249741][   T13]  ? rcu_is_watching+0x15/0xb0
[ 1079.249772][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.249803][   T13]  wb_writeback+0x456/0xb70
[ 1079.249832][   T13]  ? queue_io+0x1e1/0x4a0
[ 1079.249864][   T13]  ? __pfx_wb_writeback+0x10/0x10
[ 1079.249890][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1079.249921][   T13]  wb_workfn+0x414/0xf50
[ 1079.249950][   T13]  ? look_up_lock_class+0x57/0x110
[ 1079.249977][   T13]  ? __pfx_wb_workfn+0x10/0x10
[ 1079.250001][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.250027][   T13]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1079.250050][   T13]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1079.250072][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.250102][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.250130][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.250156][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.250184][   T13]  ? process_scheduled_works+0xa25/0x1830
[ 1079.250213][   T13]  ? process_scheduled_works+0xa25/0x1830
[ 1079.250243][   T13]  process_scheduled_works+0xb02/0x1830
[ 1079.250285][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1079.250317][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.250343][   T13]  ? assign_work+0x3d5/0x5e0
[ 1079.250373][   T13]  worker_thread+0xa50/0xfc0
[ 1079.250411][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.250442][   T13]  kthread+0x388/0x470
[ 1079.250464][   T13]  ? __pfx_worker_thread+0x10/0x10
[ 1079.250492][   T13]  ? __pfx_kthread+0x10/0x10
[ 1079.250513][   T13]  ret_from_fork+0x51e/0xb90
[ 1079.250544][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[ 1079.250571][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1079.250597][   T13]  ? __switch_to+0xc7d/0x1450
[ 1079.250624][   T13]  ? __pfx_kthread+0x10/0x10
[ 1079.250644][   T13]  ret_from_fork_asm+0x1a/0x30
[ 1079.250685][   T13]  </TASK>
[ 1079.252696][T23412] loop3: detected capacity change from 0 to 32768
[ 1079.285916][T23382] XFS (loop0): Quotacheck needed: Please wait.
[ 1079.306320][   T13] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, 
[ 1079.312108][T23412] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.12888 (23412)
[ 1079.313958][   T13] block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 1079.386669][T23382] XFS (loop0): Quotacheck: Done.
[ 1079.390441][   T13] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1079.409220][T23412] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1079.429131][   T13] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1079.429131][   T13] 
[ 1079.470743][T23412] BTRFS info (device loop3): using sha256 checksum algorithm
[ 1079.536631][   T30] audit: type=1800 audit(2000000086.619:584): pid=23382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12881" name="bus" dev="loop0" ino=4426 res=0 errno=0
[ 1079.727229][   T13] EXT4-fs (loop1): Total free blocks count 0
[ 1079.856892][ T5992] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1079.865768][   T13] EXT4-fs (loop1): Free/Dirty block details
[ 1079.877484][   T13] EXT4-fs (loop1): free_blocks=4096
[ 1079.889353][   T13] EXT4-fs (loop1): dirty_blocks=928
[ 1079.894616][   T13] EXT4-fs (loop1): Block reservation details
[ 1079.900749][   T13] EXT4-fs (loop1): i_reserved_data_blocks=58
[ 1079.909299][   T13] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 896 with error 28
[ 1079.950947][T23412] BTRFS info (device loop3): rebuilding free space tree
[ 1080.015228][T23412] BTRFS info (device loop3): turning off barriers
[ 1080.032451][T23412] BTRFS info (device loop3): turning on sync discard
[ 1080.039164][T23412] BTRFS info (device loop3): enabling free space tree
[ 1080.046672][T23412] BTRFS info (device loop3): force clearing of disk cache
[ 1080.054231][T23412] BTRFS info (device loop3): enabling auto defrag
[ 1080.081618][   T30] audit: type=1800 audit(2000000087.228:585): pid=23412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12888" name="file1" dev="loop3" ino=260 res=0 errno=0
[ 1080.109175][T23412] BTRFS info (device loop3): balance: start -sconvert=dup,soft
[ 1080.116876][T23412] BTRFS info (device loop3): left=0, need=98304, flags=34
[ 1080.126838][T23412] BTRFS info (device loop3): space_info SYSTEM (sub-group id 0) has 0 free, is not full
[ 1080.137063][T23412] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[ 1080.151041][T23412] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792
[ 1080.160112][T23412] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[ 1080.167940][T23412] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[ 1080.176080][T23412] BTRFS info (device loop3): remap_block_rsv: size 0 reserved 0
[ 1080.183928][T23412] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0
[ 1080.192082][T23412] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0
[ 1080.202772][T23412] BTRFS info (device loop3): relocating block group 1048576 flags system
[ 1080.225207][T23412] BTRFS info (device loop3): balance: ended with status: 0
[ 1080.254614][ T5996] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d