last executing test programs:

4.334976176s ago: executing program 4 (id=1576):
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000280))

4.180431435s ago: executing program 4 (id=1578):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x0)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0)

4.053977668s ago: executing program 4 (id=1580):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
read(r0, &(0x7f0000001a80)=""/4096, 0x12)

3.906657098s ago: executing program 4 (id=1582):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x2a10812, &(0x7f0000000580)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESDEC, @ANYRES32, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESOCT], 0x21, 0x1508, &(0x7f0000002080)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

3.51446674s ago: executing program 4 (id=1586):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x18, 0x25, 0x301, 0x670bd24, 0x25dfdbfd, {0x11}, [@nested={0x4, 0x135}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x24008002)

2.990124049s ago: executing program 1 (id=1593):
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

2.855528076s ago: executing program 2 (id=1596):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000000018000000000000008400000000000000ff0700000300000018"], 0x48}], 0x1, 0x4044040)

2.762153835s ago: executing program 1 (id=1598):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10)

2.695969313s ago: executing program 4 (id=1599):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4)

2.635469781s ago: executing program 2 (id=1600):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000)
ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000010c0)=""/60)

2.227375951s ago: executing program 32 (id=1599):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0), 0x4)

2.218638725s ago: executing program 0 (id=1602):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011809ed61b77d9f16a96c594a18344b265ba7f20e413597129961ed189d6343391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d080000000000004d0012"], 0xb4}}, 0x0)

2.217842438s ago: executing program 1 (id=1603):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001000000000000000000020000000000000000000000050019"], 0x24}}, 0x0)

2.216851209s ago: executing program 2 (id=1604):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1f40)

2.036527265s ago: executing program 0 (id=1606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0cac0f00"}, @typed={0x4, 0x1e}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

2.035767894s ago: executing program 1 (id=1607):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

1.908954591s ago: executing program 2 (id=1608):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x20008000)

1.50070808s ago: executing program 2 (id=1611):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0xd616})

1.436885759s ago: executing program 2 (id=1612):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000280)='./bus\x00', 0x90c40, 0x0, 0x4, 0x0, &(0x7f0000000000))

1.058005752s ago: executing program 3 (id=1613):
r0 = socket(0x1d, 0x2, 0x6)
bind$inet(r0, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10)

1.056649405s ago: executing program 0 (id=1614):
r0 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0xfffffffffffffe85, {0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, 0x24)

877.111568ms ago: executing program 3 (id=1615):
r0 = socket(0xa, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280))

855.906342ms ago: executing program 0 (id=1616):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2e04, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xed)

687.811576ms ago: executing program 0 (id=1617):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000100)=0x9, 0x4)

672.729782ms ago: executing program 3 (id=1618):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
ioctl$TUNGETIFF(r0, 0xb701, 0x0)

503.297884ms ago: executing program 0 (id=1619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r0, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x2000000)

463.947731ms ago: executing program 1 (id=1620):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000030000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000800)="86c87ad3d7e7f72864822fa23aeb", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

446.355ms ago: executing program 3 (id=1621):
r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x101c, 0x4, 0x0, 0x0, 0x5, 0x4}})

232.350858ms ago: executing program 1 (id=1622):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x2, 0x18a, &(0x7f00000001c0)="$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")
rmdir(&(0x7f0000000040)='./file0\x00')

179.444215ms ago: executing program 3 (id=1623):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x1, 0xec})

0s ago: executing program 3 (id=1624):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x10001, &(0x7f0000000440), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x102, 0x300, [], 0x0})

kernel console output (not intermixed with test programs):

9aeb9 code=0x7ffc0000
[  114.983036][ T6635] loop4: detected capacity change from 0 to 32768
[  115.074557][ T6635] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.288770][ T6635] XFS (loop4): Ending clean mount
[  115.289992][ T6673] loop1: detected capacity change from 0 to 256
[  115.347923][ T6673] FAT-fs (loop1): Directory bread(block 64) failed
[  115.358462][ T6635] XFS (loop4): Quotacheck needed: Please wait.
[  115.368024][ T6673] FAT-fs (loop1): Directory bread(block 65) failed
[  115.384683][ T6673] FAT-fs (loop1): Directory bread(block 66) failed
[  115.403582][ T6673] FAT-fs (loop1): Directory bread(block 67) failed
[  115.436449][ T6673] FAT-fs (loop1): Directory bread(block 68) failed
[  115.443218][ T6673] FAT-fs (loop1): Directory bread(block 69) failed
[  115.477746][ T6673] FAT-fs (loop1): Directory bread(block 70) failed
[  115.491203][ T6673] FAT-fs (loop1): Directory bread(block 71) failed
[  115.498109][ T6673] FAT-fs (loop1): Directory bread(block 72) failed
[  115.506670][ T6673] FAT-fs (loop1): Directory bread(block 73) failed
[  115.530989][ T6635] XFS (loop4): Quotacheck: Done.
[  115.603403][ T6654] loop3: detected capacity change from 0 to 32768
[  115.721563][ T6654] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  115.758972][ T5830] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  116.023785][ T6693] loop0: detected capacity change from 0 to 2048
[  116.081895][ T6695] loop2: detected capacity change from 0 to 2048
[  116.094906][ T6654] XFS (loop3): Ending clean mount
[  116.103046][ T6693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.146316][ T6654] XFS (loop3): Quotacheck needed: Please wait.
[  116.240107][ T6654] XFS (loop3): Quotacheck: Done.
[  116.245960][ T6695] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  116.371351][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.462154][ T5826] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  116.666075][ T6714] netlink: 'syz.0.338': attribute type 10 has an invalid length.
[  116.695426][ T6714] netlink: 40 bytes leftover after parsing attributes in process `syz.0.338'.
[  116.741059][ T6714] dummy0: entered promiscuous mode
[  116.764994][ T6714] dummy0: entered allmulticast mode
[  116.788752][ T6714] bridge0: port 3(dummy0) entered blocking state
[  116.828230][ T6714] bridge0: port 3(dummy0) entered disabled state
[  116.860324][ T6714] bridge0: port 3(dummy0) entered blocking state
[  116.866967][ T6714] bridge0: port 3(dummy0) entered forwarding state
[  117.252714][ T6730] loop3: detected capacity change from 0 to 2048
[  117.285303][ T6730] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  117.397027][ T6730] syz.3.342: attempt to access beyond end of device
[  117.397027][ T6730] loop3: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  117.403497][ T6737] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.568673][ T6730] syz.3.342: attempt to access beyond end of device
[  117.568673][ T6730] loop3: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  117.636286][ T6730] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3)
[  117.908784][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'.
[  117.993139][ T6755] Cannot find add_set index 0 as target
[  118.154701][ T6757] loop3: detected capacity change from 0 to 256
[  118.223968][ T6757] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  118.367667][ T6732] loop2: detected capacity change from 0 to 32768
[  118.428384][ T6732] ERROR: (device loop2): diAllocBit: iag inconsistent
[  118.428384][ T6732] 
[  118.474068][ T6732] ialloc: diAlloc returned -5!
[  118.660049][ T6739] loop0: detected capacity change from 0 to 32768
[  118.794150][ T6774] loop2: detected capacity change from 0 to 256
[  118.803403][   T30] audit: type=1800 audit(1770285217.627:6): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.355" name="file1" dev="loop0" ino=4 res=0 errno=0
[  118.836051][ T6774] FAT-fs (loop2): Directory bread(block 1285) failed
[  118.907722][ T6774] FAT-fs (loop2): Directory bread(block 1285) failed
[  118.934782][ T6774] FAT-fs (loop2): Directory bread(block 1285) failed
[  118.977332][ T6774] FAT-fs (loop2): Directory bread(block 1285) failed
[  119.457273][ T6784] loop0: detected capacity change from 0 to 2048
[  119.475316][ T6784] EXT4-fs: Ignoring removed nobh option
[  119.480953][ T6784] EXT4-fs: quotafile must be on filesystem root
[  119.821748][ T6791] loop2: detected capacity change from 0 to 8
[  119.868784][ T5986] udevd[5986]: incorrect cramfs checksum on /dev/loop2
[  119.897269][ T6791] process 'syz.2.379' launched './file2' with NULL argv: empty string added
[  119.920991][ T6791] cramfs: Error -3 while decompressing!
[  119.927858][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  119.945964][ T6791] cramfs: ffffffff9a39fae8(26)->ffff88805937d000(4096)
[  119.948679][ T5986] udevd[5986]: incorrect cramfs checksum on /dev/loop2
[  119.956514][ T6791] cramfs: Error -3 while decompressing!
[  119.976994][ T6791] cramfs: ffffffff9a39fb02(26)->ffff888059623000(4096)
[  120.007238][ T6791] cramfs: Error -3 while decompressing!
[  120.021286][ T6791] cramfs: ffffffff9a39fb1c(16)->ffff888059622000(4096)
[  120.060939][ T5986] udevd[5986]: incorrect cramfs checksum on /dev/loop2
[  120.094587][ T6791] cramfs: Error -3 while decompressing!
[  120.105411][    T9] usb 1-1: Using ep0 maxpacket: 32
[  120.111267][ T6791] cramfs: ffffffff9a39fae8(26)->ffff88805937d000(4096)
[  120.124855][    T9] usb 1-1: config 1 has too many interfaces: 223, using maximum allowed: 32
[  120.137104][ T5986] udevd[5986]: incorrect cramfs checksum on /dev/loop2
[  120.163801][    T9] usb 1-1: config 1 has an invalid interface number: 236 but max is 222
[  120.194469][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 223
[  120.214067][    T9] usb 1-1: config 1 has no interface number 0
[  120.223722][    T9] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  120.226050][ T5986] udevd[5986]: incorrect cramfs checksum on /dev/loop2
[  120.274465][    T9] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  120.304480][    T9] usb 1-1: config 1 interface 236 has no altsetting 0
[  120.359814][    T9] usb 1-1: config 1 has too many interfaces: 223, using maximum allowed: 32
[  120.377703][    T9] usb 1-1: config 1 has an invalid interface number: 236 but max is 222
[  120.414844][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 223
[  120.428028][    T9] usb 1-1: config 1 has no interface number 0
[  120.437903][    T9] usb 1-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  120.451303][    T9] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0
[  120.461544][    T9] usb 1-1: config 1 interface 236 has no altsetting 0
[  120.472066][    T9] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a
[  120.481246][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.489403][    T9] usb 1-1: Product: syz
[  120.494698][    T9] usb 1-1: Manufacturer: syz
[  120.499341][    T9] usb 1-1: SerialNumber: syz
[  120.730619][    T9] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected
[  120.803218][    T9] usb 1-1: USB disconnect, device number 2
[  122.274673][ T6857] loop4: detected capacity change from 0 to 4096
[  122.322031][ T6865] xt_connbytes: Forcing CT accounting to be enabled
[  122.414542][ T5834] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  122.570725][ T6872] loop2: detected capacity change from 0 to 64
[  122.616123][ T5834] usb 1-1: config 0 has an invalid interface number: 207 but max is 0
[  122.631251][ T5834] usb 1-1: config 0 has no interface number 0
[  122.670247][ T5834] usb 1-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  122.694587][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.721088][ T5834] usb 1-1: Product: syz
[  122.763146][ T5834] usb 1-1: Manufacturer: syz
[  122.785052][ T5834] usb 1-1: SerialNumber: syz
[  122.815758][ T5834] usb 1-1: config 0 descriptor??
[  122.875035][ T5834] qmi_wwan 1-1:0.207: bogus CDC Union: master=0, slave=1
[  123.061476][ T5834] qmi_wwan 1-1:0.207: probe with driver qmi_wwan failed with error -22
[  123.184558][ T5920] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  123.275964][ T5834] usb 1-1: USB disconnect, device number 3
[  123.354492][ T5920] usb 4-1: Using ep0 maxpacket: 32
[  123.383644][ T5920] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  123.403930][ T5920] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  123.430273][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  123.459749][ T5920] usb 4-1: config 1 has no interface number 0
[  123.484513][ T5920] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  123.503452][ T6900] capability: warning: `syz.2.430' uses deprecated v2 capabilities in a way that may be insecure
[  123.525461][ T5920] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  123.555616][ T5920] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  123.584485][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.649119][ T5920] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  123.848809][ T5920] snd_usb_pod 4-1:1.1: invalid control EP
[  123.883406][ T5920] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  123.905619][ T5920] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  123.913522][ T5920] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22
[  124.065927][ T5939] usb 4-1: USB disconnect, device number 3
[  124.148719][ T6927] netlink: 68 bytes leftover after parsing attributes in process `syz.1.444'.
[  124.158100][ T6924] loop4: detected capacity change from 0 to 2048
[  124.181930][ T6928] loop2: detected capacity change from 0 to 64
[  124.188897][ T6927] netlink: 64 bytes leftover after parsing attributes in process `syz.1.444'.
[  124.204070][ T6924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.455424][ T6934] netlink: 80 bytes leftover after parsing attributes in process `syz.4.447'.
[  124.617619][ T6938] loop1: detected capacity change from 0 to 1024
[  124.656792][ T6940] geneve2: entered promiscuous mode
[  124.683305][ T6940] geneve2: entered allmulticast mode
[  124.735573][ T6938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.040397][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.172194][ T6930] loop0: detected capacity change from 0 to 32768
[  125.251056][ T6930] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.365016][ T6930] XFS (loop0): Ending clean mount
[  125.378675][ T6930] XFS (loop0): Quotacheck needed: Please wait.
[  125.455318][ T6930] XFS (loop0): Quotacheck: Done.
[  125.608008][ T5831] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.626575][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  125.802175][    T9] usb 5-1: Using ep0 maxpacket: 32
[  125.835296][    T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  125.843708][    T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  125.897014][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  125.897415][ T6985] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.467'.
[  125.914480][    T9] usb 5-1: config 1 has no interface number 0
[  125.922576][    T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  125.977656][    T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  126.010188][    T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  126.064672][    T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  126.073778][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.168292][    T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  126.195309][ T6993] loop2: detected capacity change from 0 to 64
[  126.287193][ T6998] ieee802154 phy0 wpan0: encryption failed: -22
[  126.358052][    T9] snd_usb_pod 5-1:1.1: cannot start listening: -90
[  126.384340][    T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  126.411152][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'.
[  126.417131][    T9] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -90
[  126.508801][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'.
[  126.550817][ T7005] openvswitch: netlink: Invalid VLAN frame
[  126.648613][ T5939] usb 5-1: USB disconnect, device number 4
[  126.730617][ T7013] loop1: detected capacity change from 0 to 512
[  126.797278][ T7013] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  126.842239][ T7013] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.480: inode has both inline data and extents flags
[  126.875508][ T7013] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  126.876003][ T7013] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.480: couldn't read orphan inode 15 (err -117)
[  126.881180][ T7015] loop2: detected capacity change from 0 to 4096
[  126.885478][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  126.885500][    C1] EXT4-fs (loop1): initial error at time 1770285225: ext4_orphan_get:1391: inode 15
[  126.885532][    C1] EXT4-fs (loop1): last error at time 1770285225: ext4_orphan_get:1391: inode 15
[  126.942975][ T7020] loop3: detected capacity change from 0 to 512
[  126.957925][ T7013] loop1: lost filesystem error report for type 5 error -117
[  126.961525][ T7013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.994530][ T7020] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  127.002588][ T7020] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  127.068660][ T7020] System zones: 0-1, 15-15, 18-18, 34-34
[  127.076702][ T7020] EXT4-fs (loop3): orphan cleanup on readonly fs
[  127.083188][ T7020] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  127.102999][ T7020] EXT4-fs warning (device loop3): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  127.164713][ T7020] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  127.189334][ T7020] EXT4-fs (loop3): 1 truncate cleaned up
[  127.235304][ T7020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  127.244308][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.382001][ T7020] fscrypt (loop3, inode 16): Error -61 getting encryption context
[  127.518891][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.537199][ T7037] loop4: detected capacity change from 0 to 256
[  127.553079][ T7037] exfat: Deprecated parameter 'utf8'
[  127.589147][ T7039] loop0: detected capacity change from 0 to 256
[  127.631232][ T7037] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  127.684238][ T7039] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x3594c60a, utbl_chksum : 0xe619d30d)
[  127.900513][ T7047] loop1: detected capacity change from 0 to 1024
[  127.911741][ T7047] hfsplus: unable to change nls mapping
[  128.952991][ T7094] binder: BC_ACQUIRE_RESULT not supported
[  128.974771][ T7094] binder: 7093:7094 ioctl c0306201 200000004a40 returned -22
[  129.184663][ T7104] netlink: 'syz.0.524': attribute type 46 has an invalid length.
[  129.256295][ T7106] loop2: detected capacity change from 0 to 256
[  129.372137][ T7106] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  129.471367][ T7106] exFAT-fs (loop2): error, in sector 160, dentry 9 should be unused, but 0x85
[  129.543288][ T7106] exFAT-fs (loop2): Filesystem has been set read-only
[  129.651947][ T7076] loop1: detected capacity change from 0 to 32768
[  129.688916][ T7076] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.511 (7076)
[  129.774701][ T7076] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  129.804556][ T7076] BTRFS info (device loop1): using sha256 checksum algorithm
[  129.834932][ T7126] bridge0: port 3(gretap0) entered blocking state
[  129.867439][ T7126] bridge0: port 3(gretap0) entered disabled state
[  129.885076][ T7126] gretap0: entered allmulticast mode
[  129.954249][ T7126] gretap0: entered promiscuous mode
[  130.007095][ T7126] bridge0: port 3(gretap0) entered blocking state
[  130.013797][ T7126] bridge0: port 3(gretap0) entered forwarding state
[  130.055397][ T7076] BTRFS info (device loop1): enabling ssd optimizations
[  130.062430][ T7076] BTRFS info (device loop1): turning on async discard
[  130.123249][ T7151] xt_TCPMSS: Only works on TCP SYN packets
[  130.140144][ T7076] BTRFS info (device loop1): enabling free space tree
[  130.410492][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.545'.
[  130.514110][ T5821] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  130.592918][ T7168] delete_channel: no stack
[  130.800173][ T7172] loop3: detected capacity change from 0 to 164
[  130.836681][ T7172] iso9660: Unknown parameter '0xffffffffffffffff'
[  131.023941][ T7174] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  131.084915][ T7174] netlink: 40 bytes leftover after parsing attributes in process `syz.0.553'.
[  131.116891][ T7174] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  131.173104][ T7176] netlink: 830 bytes leftover after parsing attributes in process `syz.4.554'.
[  132.418739][ T7183] loop2: detected capacity change from 0 to 40427
[  132.435537][ T7183] F2FS-fs: heap/no_heap options were deprecated
[  132.474459][ T7183] F2FS-fs (loop2): build fault injection rate: 19
[  132.480948][ T7183] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  132.515862][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  132.519174][ T7183] F2FS-fs (loop2): invalid crc value
[  132.586101][ T7237] warning: `syz.0.582' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  132.611629][ T7183] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  132.704931][   T24] usb 5-1: Using ep0 maxpacket: 8
[  132.713848][ T7241] netlink: 'syz.3.584': attribute type 10 has an invalid length.
[  132.759146][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  132.763797][ T7241] team0: Device veth1_macvtap failed to register rx_handler
[  132.782133][   T24] usb 5-1: config 1 interface 0 altsetting 156 bulk endpoint 0x82 has invalid maxpacket 8
[  132.814796][   T24] usb 5-1: config 1 interface 0 altsetting 156 bulk endpoint 0x3 has invalid maxpacket 1023
[  132.835857][   T24] usb 5-1: config 1 interface 0 has no altsetting 0
[  132.848378][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  132.869193][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.886684][ T7245] netlink: 'syz.1.585': attribute type 2 has an invalid length.
[  132.894976][   T24] usb 5-1: Product: syz
[  132.899211][   T24] usb 5-1: Manufacturer: ⟅黺ﭵ��逸喊訆휇�爎治�䩣Ɉ뺞�Ⴠ繗⯼馥ؓ�厷賞ꢖ謷�牦쟰ထ쀺ꑧ�㈲ㇶ迩烈㩟꺱푒䣃쇪Ⓦ묧殱訊ᛑ땑숂ッ칳㨚乹�疟
[  132.924855][ T7245] netlink: 'syz.1.585': attribute type 8 has an invalid length.
[  132.932487][ T7183] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  132.954142][ T7245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.585'.
[  132.975633][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  132.982062][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  132.992818][ T7183] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.001826][   T24] usb 5-1: SerialNumber: syz
[  133.022779][ T7223] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  133.037608][ T7223] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  133.063997][ T7183] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  133.174584][ T7251] loop1: detected capacity change from 0 to 256
[  133.206161][ T7251] exfat: Deprecated parameter 'namecase'
[  133.213929][ T7251] exfat: Deprecated parameter 'utf8'
[  133.267412][ T7251] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  133.321746][   T24] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  133.355239][   T24] usb 5-1: USB disconnect, device number 5
[  133.831683][ T7267] loop0: detected capacity change from 0 to 512
[  133.856440][ T7267] EXT4-fs: Ignoring removed i_version option
[  133.879948][ T7267] EXT4-fs: Ignoring removed bh option
[  133.928314][ T7267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.984894][ T7267] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  134.239596][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.462806][ T7262] loop1: detected capacity change from 0 to 32768
[  134.555640][ T7262] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.685266][ T7262] XFS (loop1): Ending clean mount
[  134.923383][ T5821] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  135.444531][   T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  135.612875][   T24] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  135.642895][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.675134][   T24] usb 3-1: config 0 descriptor??
[  135.684745][ T7308] loop4: detected capacity change from 0 to 32768
[  135.704602][   T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  135.743070][ T7308] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  135.789584][ T7312] loop3: detected capacity change from 0 to 32768
[  135.854330][ T7312] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.959872][ T7308] XFS (loop4): Ending clean mount
[  136.006180][ T7308] XFS (loop4): Quotacheck needed: Please wait.
[  136.095376][ T7308] XFS (loop4): Quotacheck: Done.
[  136.101249][ T7312] XFS (loop3): Ending clean mount
[  136.113576][   T24] gp8psk: usb out operation failed.
[  136.141761][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  136.143067][ T7312] XFS (loop3): Quotacheck needed: Please wait.
[  136.228705][   T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  136.267368][   T24] usb 3-1: USB disconnect, device number 2
[  136.285868][ T7312] XFS (loop3): Quotacheck: Done.
[  136.296625][   T30] audit: type=1326 audit(1770285235.117:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e279aeb9 code=0x7ffc0000
[  136.342012][   T30] audit: type=1326 audit(1770285235.117:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e279aeb9 code=0x7ffc0000
[  136.411755][ T5830] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.432140][   T30] audit: type=1326 audit(1770285235.157:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f68e279aeb9 code=0x7ffc0000
[  136.456390][   T30] audit: type=1326 audit(1770285235.157:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e279aeb9 code=0x7ffc0000
[  136.481441][   T30] audit: type=1326 audit(1770285235.157:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e279aeb9 code=0x7ffc0000
[  136.687881][ T5826] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.104494][   T30] audit: type=1326 audit(1770285235.917:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68e279aeb9 code=0x7ffc0000
[  137.171557][   T30] audit: type=1326 audit(1770285235.927:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68e279c747 code=0x7ffc0000
[  137.294515][   T30] audit: type=1326 audit(1770285235.927:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f68e275b78e code=0x7ffc0000
[  137.384076][   T30] audit: type=1326 audit(1770285235.927:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f68e275b78e code=0x7ffc0000
[  137.464817][   T30] audit: type=1326 audit(1770285235.927:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7371 comm="syz.0.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f68e275b78e code=0x7ffc0000
[  137.622044][ T7385] loop3: detected capacity change from 0 to 4096
[  137.664546][ T7385] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  137.781306][ T7385] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  137.792814][ T7399] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  137.815499][ T7385] ntfs3(loop3): ino=19, mi_enum_attr
[  137.879150][ T7385] ntfs3(loop3): failed to convert "c46c" to cp852
[  137.903512][ T7385] ntfs3(loop3): ino=20, mi_enum_attr
[  138.134879][ T7408] netlink: 'syz.4.653': attribute type 11 has an invalid length.
[  138.187093][ T7408] netlink: 224 bytes leftover after parsing attributes in process `syz.4.653'.
[  138.658106][ T7432] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  139.059005][ T7413] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  139.074653][ T7413] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  139.246491][ T7413] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  139.283203][ T7413] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  139.401379][ T7413] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  139.429927][ T7459] loop0: detected capacity change from 0 to 64
[  139.444118][ T7413] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  139.483337][ T7413] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  139.494504][ T7413] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  139.632645][ T7413] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  139.644311][ T7413] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  139.707611][ T7434] loop4: detected capacity change from 0 to 32768
[  139.749174][ T7434] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.664 (7434)
[  139.759041][ T7469] loop1: detected capacity change from 0 to 2048
[  139.792886][ T7473] cgroup: No subsys list or none specified
[  139.830057][ T7434] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  139.861436][ T7469] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.882139][ T7434] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  139.997204][ T7479] loop3: detected capacity change from 0 to 1024
[  140.096845][ T7434] BTRFS info (device loop4): enabling ssd optimizations
[  140.198515][ T7434] BTRFS info (device loop4): turning on flush-on-commit
[  140.223329][ T7434] BTRFS info (device loop4): turning on async discard
[  140.246175][ T7434] BTRFS info (device loop4): enabling free space tree
[  140.284237][ T7434] BTRFS info (device loop4): force zlib compression, level 3
[  140.334618][ T7434] BTRFS info (device loop4): max_inline set to 4096
[  140.464253][ T7434] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same
[  140.519388][ T7502] SET target dimension over the limit!
[  140.566695][ T5830] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  141.641162][ T7500] loop3: detected capacity change from 0 to 32768
[  142.223624][ T7509] loop4: detected capacity change from 0 to 32768
[  142.341797][ T7509] syz.4.685: attempt to access beyond end of device
[  142.341797][ T7509] loop4: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768
[  142.391735][ T7549] netlink: 'syz.2.702': attribute type 21 has an invalid length.
[  142.423723][ T7509] metapage_write_end_io: I/O error
[  142.435126][ T7549] netlink: 'syz.2.702': attribute type 4 has an invalid length.
[  142.450888][ T7509] ERROR: (device loop4): release_metapage: metapage_write_one() failed
[  142.450888][ T7509] 
[  142.571144][ T7509] ERROR: (device loop4): remounting filesystem as read-only
[  142.621944][ T7509] blkno = 8ed2c, nblocks = 1
[  142.639699][ T7509] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  142.639699][ T7509] 
[  142.845420][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.707'.
[  142.921132][  T111] blkno = 8ed2c, nblocks = 4
[  142.936416][ T7569] libceph: resolve '0..' (ret=-3): failed
[  142.944475][  T111] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  142.944475][  T111] 
[  142.990558][ T5830] syz-executor: attempt to access beyond end of device
[  142.990558][ T5830] loop4: rw=8388609, sector=4680032, nr_sectors = 8 limit=32768
[  143.034707][ T5830] metapage_write_end_io: I/O error
[  143.042192][ T5830] JFS: metapage_get_blocks failed
[  143.075046][ T5830] JFS: metapage_get_blocks failed
[  143.080731][ T5830] JFS: metapage_get_blocks failed
[  143.114488][ T5830] JFS: metapage_get_blocks failed
[  143.229742][ T7578] loop2: detected capacity change from 0 to 1764
[  143.248802][ T7582] loop1: detected capacity change from 0 to 256
[  143.287975][ T7578] afs: Unexpected value for 'dyn'
[  144.239398][ T7615] netlink: 328 bytes leftover after parsing attributes in process `syz.0.726'.
[  144.277220][ T7617] loop2: detected capacity change from 0 to 1024
[  144.354923][ T7617] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  144.420266][ T7617] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  144.451973][ T7623] loop3: detected capacity change from 0 to 256
[  144.489341][ T7617] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  144.525750][ T7623] FAT-fs (loop3): Directory bread(block 64) failed
[  144.547984][ T7617] EXT4-fs (loop2): orphan cleanup on readonly fs
[  144.555978][ T7617] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.725: Inode bitmap for bg 0 marked uninitialized
[  144.572315][ T7617] loop2: lost filesystem error report for type 5 error -117
[  144.574445][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  144.588271][    C1] EXT4-fs (loop2): initial error at time 1770285243: ext4_read_inode_bitmap:167
[  144.597382][    C1] EXT4-fs (loop2): last error at time 1770285243: ext4_read_inode_bitmap:167
[  144.606598][ T7623] FAT-fs (loop3): Directory bread(block 65) failed
[  144.613231][ T7623] FAT-fs (loop3): Directory bread(block 66) failed
[  144.621108][ T7617] EXT4-fs (loop2): Remounting filesystem read-only
[  144.663634][ T7623] FAT-fs (loop3): Directory bread(block 67) failed
[  144.666613][ T7617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  144.700843][ T7623] FAT-fs (loop3): Directory bread(block 68) failed
[  144.713021][ T7623] FAT-fs (loop3): Directory bread(block 69) failed
[  144.722531][ T7623] FAT-fs (loop3): Directory bread(block 70) failed
[  144.742558][ T7623] FAT-fs (loop3): Directory bread(block 71) failed
[  144.749835][ T7623] FAT-fs (loop3): Directory bread(block 72) failed
[  144.764319][ T7623] FAT-fs (loop3): Directory bread(block 73) failed
[  144.871923][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.357277][ T7657] netlink: 'syz.1.742': attribute type 7 has an invalid length.
[  145.440244][ T7657] netlink: 'syz.1.742': attribute type 8 has an invalid length.
[  145.590700][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.3.745'.
[  145.620816][ T7667] loop0: detected capacity change from 0 to 512
[  145.708061][ T7667] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  145.738184][ T7667] System zones: 1-12
[  145.775136][ T7667] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.746: Directory hole found for htree index block 0
[  145.855116][ T7667] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  145.864448][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  145.880041][    C1] EXT4-fs (loop0): initial error at time 1770285244: dx_probe:791: inode 2
[  145.888728][    C1] EXT4-fs (loop0): last error at time 1770285244: dx_probe:791: inode 2
[  145.915031][ T7667] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117
[  145.923425][ T7667] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.746: Directory hole found for htree index block 0
[  145.974461][ T7667] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  145.985054][ T7667] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  146.081437][ T7667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.144677][ T7667] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.746: Directory hole found for htree index block 0
[  146.159213][ T7689] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  146.323169][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.415926][ T7644] loop4: detected capacity change from 0 to 32768
[  146.506926][ T7644] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.632296][ T7716] netlink: 'syz.1.760': attribute type 15 has an invalid length.
[  146.652952][ T7707] loop3: detected capacity change from 0 to 4096
[  146.667214][ T7707] EXT4-fs: Ignoring removed mblk_io_submit option
[  146.682128][ T7644] XFS (loop4): Ending clean mount
[  146.689109][ T7716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.760'.
[  146.741724][ T7707] EXT4-fs (loop3): Test dummy encryption mode enabled
[  146.820970][ T7707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.886501][ T7718] loop2: detected capacity change from 0 to 4096
[  146.949142][ T5830] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.970564][ T7718] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  147.244989][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.283878][ T7718] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead
[  147.283878][ T7718] 
[  147.934588][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  148.144848][   T24] usb 3-1: Using ep0 maxpacket: 32
[  148.154965][   T24] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[  148.159644][ T7764] bridge1: entered promiscuous mode
[  148.184339][   T24] usb 3-1: config 2 has no interface number 0
[  148.190700][   T24] usb 3-1: config 2 interface 88 has no altsetting 0
[  148.233697][   T24] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  148.266799][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.287485][   T24] usb 3-1: Product: syz
[  148.291713][   T24] usb 3-1: Manufacturer: syz
[  148.307813][   T24] usb 3-1: SerialNumber: syz
[  148.326626][ T5834] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  148.516532][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.565087][ T5834] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  148.594581][ T5834] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  148.603735][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.692827][ T5834] usb 2-1: config 0 descriptor??
[  148.743518][ T5834] gspca_main: spca501-2.14.0 probing 0000:0000
[  148.780083][   T24] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  148.830611][   T24] asix 3-1:2.88: probe with driver asix failed with error -71
[  148.869941][   T24] usb 3-1: USB disconnect, device number 3
[  149.082607][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'.
[  149.157032][ T5834] gspca_spca501: reg write: error -71
[  149.162475][ T5834] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00
[  149.220679][ T5834] spca501 2-1:0.0: probe with driver spca501 failed with error -22
[  149.267526][ T5834] usb 2-1: USB disconnect, device number 3
[  149.313124][ T7803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'.
[  149.327131][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.793'.
[  150.071782][ T7830] loop1: detected capacity change from 0 to 2048
[  150.139697][ T7830] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1376)
[  150.714249][ T7864] Cannot find add_set index 0 as target
[  150.780621][ T7859] bond1: option downdelay: invalid value (18446744073709551615)
[  150.812050][ T7859] bond1: option downdelay: allowed values 0 - 2147483647
[  150.823534][ T7862] Process accounting resumed
[  150.848636][ T7859] bond1 (unregistering): Released all slaves
[  151.248310][ T7882] loop1: detected capacity change from 0 to 1024
[  151.828229][ T7895] netlink: 180 bytes leftover after parsing attributes in process `syz.4.840'.
[  152.016492][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.843'.
[  152.109541][ T7906] loop1: detected capacity change from 0 to 1024
[  152.690393][ T7929] sit0: entered promiscuous mode
[  152.707425][ T7929] netlink: 1 bytes leftover after parsing attributes in process `syz.2.857'.
[  152.790625][ T7934] usb usb7: usbfs: process 7934 (syz.0.859) did not claim interface 0 before use
[  152.942325][ T7940] loop4: detected capacity change from 0 to 256
[  152.990110][ T7932] loop3: detected capacity change from 0 to 4096
[  153.004102][ T7940] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  153.041311][ T7932] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  153.049905][ T7940] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  153.080499][ T7940] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  153.124878][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  153.124898][   T30] audit: type=1800 audit(1770285251.947:21): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.862" name="file1" dev="loop4" ino=1048614 res=0 errno=0
[  153.162445][ T7946] xt_CT: You must specify a L4 protocol and not use inversions on it
[  153.263056][ T7932] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  153.274486][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  153.474489][   T10] usb 1-1: Using ep0 maxpacket: 16
[  153.489405][   T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  153.509300][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.536523][   T10] usb 1-1: Product: syz
[  153.546260][   T10] usb 1-1: Manufacturer: syz
[  153.550913][   T10] usb 1-1: SerialNumber: syz
[  153.606859][   T10] r8152-cfgselector 1-1: Unknown version 0x0000
[  153.616121][   T10] r8152-cfgselector 1-1: config 0 descriptor??
[  153.816173][ T7969] loop3: detected capacity change from 0 to 16
[  153.860283][ T7969] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  154.100690][ T5920] r8152-cfgselector 1-1: USB disconnect, device number 4
[  154.294815][ T5834] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  154.485928][ T5834] usb 3-1: Using ep0 maxpacket: 16
[  154.495311][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024
[  154.519057][ T5834] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[  154.533111][ T5834] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  154.557184][ T5834] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  154.574636][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.582860][ T5834] usb 3-1: Product: syz
[  154.597411][ T5834] usb 3-1: Manufacturer: syz
[  154.607526][ T5834] usb 3-1: SerialNumber: syz
[  154.636392][ T5834] usb 3-1: config 0 descriptor??
[  154.655328][ T7980] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  154.665259][ T7980] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  154.698076][    C1] port100 3-1:0.0: NFC: Urb failure (status -71)
[  154.706840][    C1] port100 3-1:0.0: NFC: Urb failure (status -71)
[  154.726441][ T5834] port100 3-1:0.0: NFC: Could not get supported command types
[  154.869107][ T8005] netlink: 3 bytes leftover after parsing attributes in process `syz.1.893'.
[  154.898881][ T8005] 0ªX¹¦À: renamed from caif0
[  154.939358][ T8005] 0ªX¹¦À: entered allmulticast mode
[  154.952180][ T5834] usb 3-1: USB disconnect, device number 4
[  154.962470][ T8005] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  155.017862][ T7991] loop4: detected capacity change from 0 to 32768
[  155.033077][ T7991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.886 (7991)
[  155.108242][ T7991] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.144518][ T7991] BTRFS info (device loop4): using sha256 checksum algorithm
[  155.215175][ T8016] netlink: 'syz.0.896': attribute type 10 has an invalid length.
[  155.311704][ T7991] BTRFS info (device loop4): enabling ssd optimizations
[  155.344495][ T7991] BTRFS info (device loop4): turning on async discard
[  155.351436][ T7991] BTRFS info (device loop4): enabling free space tree
[  155.422633][ T7999] loop3: detected capacity change from 0 to 32768
[  155.469678][ T7999] (syz.3.890,7999,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  155.514582][ T7999] (syz.3.890,7999,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  155.529316][ T5830] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.592718][ T7999] JBD2: Ignoring recovery information on journal
[  155.817258][ T7999] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  156.270479][ T5826] ocfs2: Unmounting device (7,3) on (node local)
[  156.695815][ T8063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.914'.
[  156.975842][ T8038] loop2: detected capacity change from 0 to 32768
[  157.031794][ T8038] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.339909][ T8061] loop0: detected capacity change from 0 to 32768
[  157.348406][ T8055] loop1: detected capacity change from 0 to 32768
[  157.365264][ T8038] XFS (loop2): Ending clean mount
[  157.391134][ T8038] XFS (loop2): Quotacheck needed: Please wait.
[  157.407608][ T8055] xfs: Deprecated parameter 'attr2'
[  157.426830][ T8055] XFS: attr2 mount option is deprecated.
[  157.534319][ T8038] XFS (loop2): Quotacheck: Done.
[  157.551024][ T8055] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.657567][ T8055] XFS (loop1): Ending clean mount
[  157.719405][ T5825] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.764231][ T8055] XFS (loop1): Quotacheck needed: Please wait.
[  157.796682][ T8085] loop3: detected capacity change from 0 to 4096
[  157.910381][ T8055] XFS (loop1): Quotacheck: Done.
[  157.932575][ T8085] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  157.993497][ T8085] ntfs3(loop3): Failed to load $Extend (-22).
[  158.001123][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'.
[  158.039936][ T8085] ntfs3(loop3): Failed to initialize $Extend.
[  158.182076][ T8103] netlink: 'syz.0.926': attribute type 2 has an invalid length.
[  158.204532][ T8103] netlink: 'syz.0.926': attribute type 1 has an invalid length.
[  158.259342][ T5821] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  159.108694][ T8137] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  159.332068][ T8149] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  159.412415][ T8142] veth3: entered promiscuous mode
[  159.434157][ T8142] veth3: entered allmulticast mode
[  160.853608][ T8216] overlayfs: workdir and upperdir must be separate subtrees
[  161.370408][ T8237] loop3: detected capacity change from 0 to 256
[  161.451505][ T8242] loop4: detected capacity change from 0 to 256
[  161.488112][ T8237] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xecfd5def, utbl_chksum : 0xe619d30d)
[  161.584466][ T8237] CIFS mount error: No usable UNC path provided in device string!
[  161.584466][ T8237] 
[  161.604694][ T8237] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  162.127929][ T8227] loop2: detected capacity change from 0 to 32768
[  162.150059][ T8227] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.985 (8227)
[  162.201461][ T8227] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  162.236170][ T8227] BTRFS info (device loop2): using blake2b checksum algorithm
[  162.351776][ T8275] netlink: 'syz.3.1004': attribute type 21 has an invalid length.
[  162.389211][ T8275] netlink: 'syz.3.1004': attribute type 20 has an invalid length.
[  162.466941][ T8227] BTRFS info (device loop2): enabling ssd optimizations
[  162.503698][ T8227] BTRFS info (device loop2): turning on async discard
[  162.565656][ T8227] BTRFS info (device loop2): enabling free space tree
[  162.758749][ T5825] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  162.832582][ T8255] loop4: detected capacity change from 0 to 32768
[  162.912035][ T8255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1000 (8255)
[  162.991627][ T8255] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.035883][ T8255] BTRFS info (device loop4): using sha256 checksum algorithm
[  163.296984][ T8255] BTRFS info (device loop4): enabling ssd optimizations
[  163.320780][ T8288] loop3: detected capacity change from 0 to 32768
[  163.345565][ T8255] BTRFS info (device loop4): turning on async discard
[  163.352408][ T8255] BTRFS info (device loop4): enabling free space tree
[  163.492482][ T8288] JBD2: Ignoring recovery information on journal
[  163.626769][ T5830] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.662307][ T8288] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  163.996739][ T5826] ocfs2: Unmounting device (7,3) on (node local)
[  164.404693][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  164.614735][ T5920] usb 1-1: Using ep0 maxpacket: 8
[  164.628296][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short
[  164.657913][ T5920] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  164.684715][ T5920] usb 1-1: config 1 has no interface number 1
[  164.702309][ T8320] loop1: detected capacity change from 0 to 32768
[  164.703206][ T5920] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  164.759572][ T5920] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 61, changing to 7
[  164.831001][ T5920] usb 1-1: string descriptor 0 read error: -22
[  164.837710][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.863119][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.931822][ T5920] usb 1-1: 2:1 : sample bitwidth 64 in over sample bytes 5
[  164.952081][ T5920] usb 1-1: 2:1 : unsupported sample bitwidth 64 in 5 bytes
[  165.366879][ T5920] usb 1-1: USB disconnect, device number 5
[  165.848457][ T8357] loop4: detected capacity change from 0 to 32768
[  165.885832][ T8357] (syz.4.1034,8357,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  165.902601][ T8357] (syz.4.1034,8357,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  166.022890][ T8357] JBD2: Ignoring recovery information on journal
[  166.063583][ T8385] netlink: 'syz.0.1047': attribute type 3 has an invalid length.
[  166.273491][ T8357] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  166.292295][ T8359] loop3: detected capacity change from 0 to 40427
[  166.384818][ T8359] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  166.404529][ T8359] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  166.448944][ T8359] F2FS-fs (loop3): invalid crc_offset: 33558524
[  166.483851][ T8396] loop1: detected capacity change from 0 to 512
[  166.541777][ T8396] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1053: inode has both inline data and extents flags
[  166.583775][ T8359] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  166.609347][ T5830] ocfs2: Unmounting device (7,4) on (node local)
[  166.699987][ T8396] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  166.700377][ T8396] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1053: couldn't read orphan inode 15 (err -117)
[  166.709650][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  166.709673][    C0] EXT4-fs (loop1): initial error at time 1770285265: ext4_orphan_get:1391: inode 15
[  166.709701][    C0] EXT4-fs (loop1): last error at time 1770285265: ext4_orphan_get:1391: inode 15
[  166.753759][ T8359] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  166.782109][ T8359] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  166.809215][ T8396] loop1: lost filesystem error report for type 5 error -117
[  166.812624][ T8396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.154763][   T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  167.321360][   T24] usb 2-1: Using ep0 maxpacket: 16
[  167.340513][   T24] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  167.354776][   T24] usb 2-1: config 0 has no interface number 0
[  167.376499][   T24] usb 2-1: config 0 interface 214 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  167.417859][   T24] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x8D has invalid maxpacket 26389, setting to 1024
[  167.464792][   T24] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  167.475996][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.498657][ T8424] tmpfs: Bad value for 'mpol'
[  167.504464][   T24] usb 2-1: Product: syz
[  167.508787][   T24] usb 2-1: Manufacturer: syz
[  167.513411][   T24] usb 2-1: SerialNumber: syz
[  167.532324][   T24] usb 2-1: config 0 descriptor??
[  167.555521][ T8396] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  167.668130][ T8411] loop0: detected capacity change from 0 to 32768
[  167.794626][   T24] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71
[  167.801856][   T24] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71
[  167.865352][   T24] usb 2-1: USB disconnect, device number 4
[  168.159326][ T8419] loop2: detected capacity change from 0 to 32768
[  168.219586][ T8419] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  168.343821][ T8419] XFS (loop2): Ending clean mount
[  168.350953][ T8450] loop3: detected capacity change from 0 to 16
[  168.469206][ T8450] erofs (device loop3): mounted with root inode @ nid 36.
[  168.496267][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.534930][ T5825] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  168.552805][ T8450] erofs (device loop3): unknown algorithm 7 @ pos 8192 for nid 89, please upgrade kernel
[  168.602348][ T8450] erofs (device loop3): readahead error at folio 2 @ nid 89
[  168.625371][ T8450] syz.3.1073: attempt to access beyond end of device
[  168.625371][ T8450] loop3: rw=524288, sector=256, nr_sectors = 8 limit=16
[  168.668531][ T8450] syz.3.1073: attempt to access beyond end of device
[  168.668531][ T8450] loop3: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  168.689411][ T8450] syz.3.1073: attempt to access beyond end of device
[  168.689411][ T8450] loop3: rw=524288, sector=6144, nr_sectors = 8 limit=16
[  168.775900][ T8450] syz.3.1073: attempt to access beyond end of device
[  168.775900][ T8450] loop3: rw=0, sector=256, nr_sectors = 8 limit=16
[  168.846636][ T8450] erofs (device loop3): read error -5 @ 1 of nid 89
[  168.875709][   T30] audit: type=1800 audit(1770285267.687:22): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1073" name="file2" dev="loop3" ino=89 res=0 errno=0
[  169.056335][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1080'.
[  169.090022][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1080'.
[  169.576236][ T8488] loop1: detected capacity change from 0 to 1024
[  169.584673][ T8491] loop4: detected capacity change from 0 to 512
[  169.592566][ T8491] EXT4-fs: Ignoring removed nomblk_io_submit option
[  169.656182][ T8491] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  169.664234][ T8491] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  169.694512][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  169.723305][ T8491] EXT4-fs (loop4): orphan cleanup on readonly fs
[  169.763908][ T8491] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  169.774624][ T8491] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  169.790737][ T8491] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  169.799407][ T8491] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1093: bg 0: block 40: padding at end of block bitmap is not set
[  169.826732][ T1332] hfsplus: b-tree write err: -5, ino 4
[  169.851925][ T8491] loop4: lost filesystem error report for type 5 error -117
[  169.854998][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  169.869225][    C0] EXT4-fs (loop4): initial error at time 1770285268: ext4_validate_block_bitmap:441
[  169.878695][    C0] EXT4-fs (loop4): last error at time 1770285268: ext4_validate_block_bitmap:441
[  169.889955][    T9] usb 3-1: Using ep0 maxpacket: 32
[  169.909423][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  169.926121][ T8491] EXT4-fs (loop4): Remounting filesystem read-only
[  169.932820][ T8491] EXT4-fs (loop4): 1 truncate cleaned up
[  169.940363][    T9] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[  169.949011][    T9] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  169.961730][ T8491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  169.981616][    T9] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[  170.007758][    T9] usb 3-1: config 128 has no interface number 0
[  170.024625][    T9] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  170.067679][    T9] usb 3-1: config 128 interface 127 has no altsetting 0
[  170.093781][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.109744][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  170.127949][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.147941][    T9] usb 3-1: Product: syz
[  170.152181][    T9] usb 3-1: Manufacturer: syz
[  170.172340][    T9] usb 3-1: SerialNumber: syz
[  170.202025][ T8484] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  170.254698][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  170.413259][ T8513] loop4: detected capacity change from 0 to 2048
[  170.424532][   T24] usb 2-1: Using ep0 maxpacket: 32
[  170.446613][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  170.466097][ T8516] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.490132][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  170.523605][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  170.563265][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  170.600937][    T9] usb 3-1: USB disconnect, device number 5
[  170.604434][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  170.646687][ T5939] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  170.647137][   T24] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  170.669010][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.683844][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.706216][   T24] usb 2-1: Product: syz
[  170.718471][   T24] usb 2-1: Manufacturer: syz
[  170.723135][   T24] usb 2-1: SerialNumber: syz
[  170.737736][   T24] usb 2-1: config 0 descriptor??
[  170.753920][ T8503] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  170.773512][   T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7
[  170.817655][ T5176] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  170.856085][ T5939] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  170.880940][ T8507] loop0: detected capacity change from 0 to 32768
[  170.884604][    C0] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1
[  170.896250][ T5939] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  170.911393][ T5939] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  170.927023][ T5176] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  170.942319][ T5939] usb 4-1: config 220 has no interface number 2
[  170.944160][   T30] audit: type=1800 audit(1770285269.767:23): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1100" name="file1" dev="loop0" ino=4 res=0 errno=0
[  170.948974][ T5939] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  170.949007][ T5939] usb 4-1: config 220 interface 0 has no altsetting 0
[  170.949027][ T5939] usb 4-1: config 220 interface 76 has no altsetting 0
[  170.949046][ T5939] usb 4-1: config 220 interface 1 has no altsetting 0
[  170.951813][ T5939] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  170.988385][ T8503] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  171.044186][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.063186][ T5176] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  171.127128][ T5939] usb 4-1: Product: syz
[  171.131457][ T5939] usb 4-1: Manufacturer: syz
[  171.144587][ T5939] usb 4-1: SerialNumber: syz
[  171.148911][   T24] usb 2-1: USB disconnect, device number 5
[  171.405369][ T5939] usb 4-1: selecting invalid altsetting 0
[  171.444337][ T5939] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  171.464490][ T5939] uvcvideo 4-1:220.0: No valid video chain found.
[  171.505329][ T5913] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  171.521210][ T5939] usb 4-1: selecting invalid altsetting 0
[  171.532487][ T8532] loop2: detected capacity change from 0 to 256
[  171.535568][ T5939] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  171.593446][ T5939] usb 4-1: USB disconnect, device number 4
[  171.618544][ T8532] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d)
[  171.693826][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  171.739000][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  171.762317][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 128, setting to 64
[  171.796769][ T5913] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  171.810441][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.819223][ T8536] overlayfs: missing 'lowerdir'
[  171.824308][ T5913] usb 1-1: Product: syz
[  171.829731][ T5913] usb 1-1: Manufacturer: syz
[  171.836677][ T5913] usb 1-1: SerialNumber: syz
[  171.873586][ T5913] usb 1-1: config 0 descriptor??
[  171.882885][ T8522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  172.036259][ T5913] rc_core: IR keymap rc-streamzap not found
[  172.042438][ T5913] Registered IR keymap rc-empty
[  172.075823][ T5913] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  172.113654][ T5913] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  172.189806][ T5913] usb 1-1: USB disconnect, device number 6
[  172.255288][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  172.451066][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 53407, setting to 1024
[  172.482036][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  172.517588][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  172.534743][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  172.544030][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  172.553427][   T10] usb 3-1: SerialNumber: syz
[  172.582841][ T8541] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  172.832487][   T10] usbtest 3-1:1.0: Linux user mode ISO test driver
[  172.851349][   T10] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  172.892355][   T10] usb 3-1: USB disconnect, device number 6
[  173.018260][ T8571] loop4: detected capacity change from 0 to 4096
[  173.019947][ T8571] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  173.038790][ T8576] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1131'.
[  173.282048][ T8580] loop0: detected capacity change from 0 to 8
[  173.311054][ T8580] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  173.330351][ T5986] udevd[5986]: incorrect cramfs checksum on /dev/loop0
[  173.369535][ T8580] cramfs: Error -3 while decompressing!
[  173.396203][ T8580] cramfs: ffffffff9a39fae8(26)->ffff888052518000(4096)
[  173.426083][ T8580] cramfs: Error -3 while decompressing!
[  173.454688][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  173.458939][ T8580] cramfs: ffffffff9a39fb02(26)->ffff888077a02000(4096)
[  173.494091][ T8580] cramfs: Error -3 while decompressing!
[  173.512408][ T8580] cramfs: ffffffff9a39fb1c(16)->ffff888054cce000(4096)
[  173.529792][ T8580] cramfs: Error -3 while decompressing!
[  173.545389][ T8580] cramfs: ffffffff9a39fae8(26)->ffff888052518000(4096)
[  173.588611][ T8558] loop1: detected capacity change from 0 to 32768
[  173.628649][   T24] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  173.649340][   T24] usb 4-1: config 0 has no interface number 0
[  173.698273][ T8558] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  173.715624][ T8558] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  173.723188][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  173.742533][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.761157][   T24] usb 4-1: Product: syz
[  173.766632][   T24] usb 4-1: Manufacturer: syz
[  173.776766][   T24] usb 4-1: SerialNumber: syz
[  173.803474][   T24] usb 4-1: config 0 descriptor??
[  173.890277][ T8558] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms
[  173.920937][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  173.939911][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  174.040750][   T24] uvcvideo 4-1:0.64: Found UVC 0.08 device syz (046d:0823)
[  174.062568][   T24] uvcvideo 4-1:0.64: No valid video chain found.
[  174.064106][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms
[  174.078785][   T24] usb 4-1: USB disconnect, device number 5
[  174.109191][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  174.138634][ T8558] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  174.287387][ T8606] loop4: detected capacity change from 0 to 1024
[  174.357369][ T8606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.403144][ T8558] gfs2: fsid=syz:syz.0: found 1 quota changes
[  174.479207][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.542086][ T8558] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398
[  174.568156][ T8558] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  174.600857][ T8558] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:8558 [syz.1.1123] gfs2_quota_sync+0x370/0x470
[  174.649174][ T8558] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  174.663855][ T8558] CPU: 1 UID: 0 PID: 8558 Comm: syz.1.1123 Not tainted syzkaller #0 PREEMPT(full) 
[  174.663885][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  174.663897][ T8558] Call Trace:
[  174.663905][ T8558]  <TASK>
[  174.663915][ T8558]  dump_stack_lvl+0xe8/0x150
[  174.663949][ T8558]  gfs2_withdraw+0xc3/0x1b0
[  174.663975][ T8558]  inode_go_instantiate+0xab4/0x1220
[  174.663996][ T8558]  ? __pfx_bit_wait+0x10/0x10
[  174.664028][ T8558]  ? __pfx_bit_wait+0x10/0x10
[  174.664051][ T8558]  ? __pfx_inode_go_instantiate+0x10/0x10
[  174.664088][ T8558]  ? __pfx_wake_bit_function+0x10/0x10
[  174.664120][ T8558]  gfs2_instantiate+0x168/0x220
[  174.664148][ T8558]  gfs2_glock_wait+0x1d4/0x2a0
[  174.664177][ T8558]  do_sync+0x49a/0xcb0
[  174.664205][ T8558]  ? _raw_spin_unlock+0x28/0x50
[  174.664225][ T8558]  ? gfs2_quota_sync+0x370/0x470
[  174.664264][ T8558]  ? __pfx_do_sync+0x10/0x10
[  174.664305][ T8558]  ? gfs2_quota_sync+0x370/0x470
[  174.664331][ T8558]  ? preempt_schedule_thunk+0x16/0x30
[  174.664368][ T8558]  gfs2_quota_sync+0x370/0x470
[  174.664405][ T8558]  gfs2_sync_fs+0x4c/0xb0
[  174.664430][ T8558]  sync_filesystem+0xee/0x230
[  174.664462][ T8558]  gfs2_reconfigure+0xbb/0xb20
[  174.664483][ T8558]  ? _raw_spin_unlock+0x28/0x50
[  174.664500][ T8558]  ? sb_prepare_remount_readonly+0x471/0x4b0
[  174.664531][ T8558]  reconfigure_super+0x227/0x8a0
[  174.664575][ T8558]  path_mount+0xdc5/0x10e0
[  174.664610][ T8558]  ? user_path_at+0xd4/0x160
[  174.664644][ T8558]  __se_sys_mount+0x31d/0x420
[  174.664680][ T8558]  ? __pfx___se_sys_mount+0x10/0x10
[  174.664716][ T8558]  ? __x64_sys_mount+0x20/0xc0
[  174.664747][ T8558]  do_syscall_64+0x14d/0xf80
[  174.664770][ T8558]  ? trace_irq_disable+0x3b/0x150
[  174.664798][ T8558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.664819][ T8558]  ? clear_bhb_loop+0x40/0x90
[  174.664845][ T8558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.664865][ T8558] RIP: 0033:0x7f4c0cd9aeb9
[  174.664886][ T8558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.664901][ T8558] RSP: 002b:00007f4c0dd30028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  174.664923][ T8558] RAX: ffffffffffffffda RBX: 00007f4c0d015fa0 RCX: 00007f4c0cd9aeb9
[  174.664938][ T8558] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000
[  174.664950][ T8558] RBP: 00007f4c0ce08c1f R08: 0000000000000000 R09: 0000000000000000
[  174.664962][ T8558] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000000
[  174.664974][ T8558] R13: 00007f4c0d016038 R14: 00007f4c0d015fa0 R15: 00007fffaa8b2b68
[  174.665010][ T8558]  </TASK>
[  174.689243][ T8620] loop4: detected capacity change from 0 to 2048
[  174.715477][ T8558] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  174.949488][ T8622] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.970516][ T5920] gfs2: fsid=syz:syz.0: file system withdrawn
[  175.112360][ T8622] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  175.153802][ T8633] openvswitch: netlink: IP tunnel dst address not specified
[  175.157492][ T8622] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  175.214485][ T8622] Remounting filesystem read-only
[  175.225745][ T5830] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  175.784316][ T8651] comedi comedi1: pcl724: I/O port conflict (0x7,4)
[  175.858838][ T8653] netlink: 'syz.3.1166': attribute type 16 has an invalid length.
[  175.904463][ T8653] netlink: 'syz.3.1166': attribute type 3 has an invalid length.
[  175.932838][ T8653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1166'.
[  176.097344][ T8659] loop1: detected capacity change from 0 to 64
[  176.189470][ T8632] loop0: detected capacity change from 0 to 32768
[  176.260025][ T8632] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  176.287004][ T8632] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.414505][ T8632] XFS (loop0): Ending clean mount
[  176.468927][ T8632] XFS (loop0): Quotacheck needed: Please wait.
[  176.483929][ T8641] loop4: detected capacity change from 0 to 32768
[  176.566223][ T8641] (syz.4.1161,8641,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  176.568957][ T8663] loop2: detected capacity change from 0 to 8192
[  176.610979][ T8632] XFS (loop0): Quotacheck: Done.
[  176.614831][ T8641] (syz.4.1161,8641,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  176.651526][ T8663] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.740541][ T8663] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  176.785863][ T8641] JBD2: Ignoring recovery information on journal
[  176.803809][ T8663] FAT-fs (loop2): Filesystem has been set read-only
[  176.821055][ T5831] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.906104][ T8641] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  177.343556][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'.
[  177.354116][ T5830] ocfs2: Unmounting device (7,4) on (node local)
[  178.001488][ T8718] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1193'.
[  178.335349][ T8729] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  178.343032][ T8729] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  178.540423][ T8737] infiniband: Added to hash: ib_dev=ffff888031b28000 (0)() ndev=ffff88807546c000 (28)(bond0)
[  178.606495][ T8737] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  178.665471][ T8737] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  178.739734][ T8746] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  179.003330][ T8705] loop0: detected capacity change from 0 to 40427
[  179.051206][ T8705] F2FS-fs (loop0): invalid crc value
[  179.357783][ T8705] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  179.381599][ T8770] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1216'.
[  179.414022][ T8705] F2FS-fs (loop0): Start checkpoint disabled!
[  179.458981][ T8705] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  179.497379][ T8705] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  179.625909][ T8705] F2FS-fs (loop0): disabling checkpoint not compatible with read-only
[  179.725317][ T8785] netlink: 'syz.3.1224': attribute type 2 has an invalid length.
[  179.782315][ T8785] �9þ: entered promiscuous mode
[  179.939870][ T8789] netlink: 'syz.2.1227': attribute type 21 has an invalid length.
[  180.544132][ T8783] loop1: detected capacity change from 0 to 32768
[  180.561783][ T8783] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1223 (8783)
[  180.637372][ T8783] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  180.647891][ T8783] BTRFS info (device loop1): using xxhash64 checksum algorithm
[  180.659939][ T8783] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  180.804906][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1240'.
[  180.876422][ T8783] BTRFS info (device loop1): rebuilding free space tree
[  180.922788][ T8783] BTRFS info (device loop1): disabling free space tree
[  180.957285][ T8783] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  181.008168][   T30] audit: type=1326 audit(1770285279.787:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26e79aeb9 code=0x7ffc0000
[  181.035380][   T30] audit: type=1326 audit(1770285279.857:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26e79aeb9 code=0x7ffc0000
[  181.066400][ T8840] loop2: detected capacity change from 0 to 512
[  181.070127][ T8783] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  181.127708][   T30] audit: type=1326 audit(1770285279.867:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26e79aeb9 code=0x7ffc0000
[  181.135334][ T8783] BTRFS info (device loop1): setting nodatasum
[  181.194573][   T30] audit: type=1326 audit(1770285279.867:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa26e79aeb9 code=0x7ffc0000
[  181.224529][   T30] audit: type=1326 audit(1770285279.867:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26e79aeb9 code=0x7ffc0000
[  181.246544][ T8840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.246958][   T30] audit: type=1326 audit(1770285279.867:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26e79aeb9 code=0x7ffc0000
[  181.281806][   T30] audit: type=1326 audit(1770285279.867:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa26e79aeb9 code=0x7ffc0000
[  181.300021][ T8783] BTRFS info (device loop1): allowing degraded mounts
[  181.304597][ T8840] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.370410][ T8783] BTRFS info (device loop1): turning on async discard
[  181.370516][   T30] audit: type=1326 audit(1770285279.867:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa26e79aeb9 code=0x7ffc0000
[  181.404717][ T8845] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  181.434636][ T8783] BTRFS info (device loop1): enabling disk space caching
[  181.464973][ T8783] BTRFS info (device loop1): force clearing of disk cache
[  181.469206][   T30] audit: type=1326 audit(1770285279.867:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.3.1244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa26e79aeb9 code=0x7ffc0000
[  181.472236][ T8783] BTRFS info (device loop1): force zlib compression, level 3
[  181.585089][ T8840] Quota error (device loop2): write_blk: dquota write failed
[  181.624777][ T8840] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.1243: Failed to acquire dquot type 0
[  181.746099][ T8857] ubi31: attaching mtd0
[  181.781279][ T5821] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  181.796757][ T8857] ubi31: scanning is finished
[  181.801503][ T8857] ubi31: empty MTD device detected
[  181.828115][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.844040][ T8861] loop4: detected capacity change from 0 to 2048
[  181.901575][ T8861] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.075259][ T8857] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  182.111273][ T8857] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  182.154509][ T8857] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  182.161650][ T8857] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  182.232190][ T8857] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  182.263513][ T8857] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  182.304507][ T8857] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1084301767
[  182.398770][ T8857] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  182.506216][ T8866] ubi31: background thread "ubi_bgt31d" started, PID 8866
[  183.019437][ T8890] nftables ruleset with unbound chain
[  183.046050][ T8892] loop3: detected capacity change from 0 to 512
[  183.169255][ T8892] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1266: couldn't read orphan inode 26 (err -116)
[  183.271586][ T8892] loop3: lost filesystem error report for type 5 error -116
[  183.274420][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  183.288289][    C0] EXT4-fs (loop3): initial error at time 1770285282: ext4_orphan_get:1396
[  183.296907][    C0] EXT4-fs (loop3): last error at time 1770285282: ext4_orphan_get:1396
[  183.300692][ T8899] loop2: detected capacity change from 0 to 4096
[  183.315942][ T8892] EXT4-fs (loop3): Remounting filesystem read-only
[  183.338884][ T8892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.373188][ T8899] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  183.400532][ T8892] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.438419][ T8899] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  183.461275][ T8899] ntfs3(loop2): ino=19, mi_enum_attr
[  183.542303][ T8899] ntfs3(loop2): failed to convert "c46c" to macromanian
[  183.598281][ T8899] ntfs3(loop2): ino=20, mi_enum_attr
[  183.607446][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.804981][ T8910] loop1: detected capacity change from 0 to 764
[  183.924958][ T8918] netlink: 'syz.2.1276': attribute type 21 has an invalid length.
[  183.932918][ T8918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1276'.
[  184.059056][ T8918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1276'.
[  184.313943][ T8934] QAT: failed to copy from user cfg_data.
[  184.621471][ T8942] loop3: detected capacity change from 0 to 2048
[  184.653804][ T8946] libceph: resolve '400' (ret=-3): failed
[  184.669415][ T8942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.720183][ T8942] UDF-fs: incorrect filename length (10)
[  184.823045][ T8954] netlink: 'syz.1.1294': attribute type 12 has an invalid length.
[  184.878409][ T8954] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1294'.
[  185.623477][ T8989] x_tables: ip_tables: icmp match: only valid for protocol 1
[  185.646855][ T8987] loop3: detected capacity change from 0 to 1764
[  185.680677][ T8991] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1312'.
[  185.714608][ T8991] openvswitch: netlink: Missing key (keys=40, expected=100)
[  185.941844][ T8995] loop1: detected capacity change from 0 to 4096
[  186.006393][ T8995] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  186.115264][ T8995] ntfs3(loop1): Inode r=19 is not in use!
[  186.124447][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  186.124466][   T30] audit: type=1326 audit(1770285284.947:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f59aeb9 code=0x7ffc0000
[  186.153033][ T8995] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  186.188801][ T8995] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  186.239809][   T30] audit: type=1326 audit(1770285284.947:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f59aeb9 code=0x7ffc0000
[  186.267281][ T8995] ntfs3(loop1): ino=1b, mi_enum_attr
[  186.272971][ T8995] ntfs3(loop1): ino=1b, mi_enum_attr
[  186.344714][   T30] audit: type=1326 audit(1770285284.947:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f59aeb9 code=0x7ffc0000
[  186.422269][   T30] audit: type=1326 audit(1770285284.957:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f426f59aeb9 code=0x7ffc0000
[  186.494735][   T30] audit: type=1326 audit(1770285284.957:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f59aeb9 code=0x7ffc0000
[  186.586445][   T30] audit: type=1326 audit(1770285284.957:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f59aeb9 code=0x7ffc0000
[  186.656826][ T9029] tmpfs: Bad value for 'mpol'
[  186.674916][   T30] audit: type=1326 audit(1770285284.957:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f426f59aeb9 code=0x7ffc0000
[  186.764904][   T30] audit: type=1326 audit(1770285284.957:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f426f59aeb9 code=0x7ffc0000
[  186.859722][   T30] audit: type=1326 audit(1770285284.957:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9008 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f426f59aeb9 code=0x7ffc0000
[  187.431774][ T9027] loop1: detected capacity change from 0 to 32768
[  187.465503][ T9027] JBD2: Ignoring recovery information on journal
[  187.514243][ T9027] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  187.749872][ T9027] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[  187.800331][ T9027] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  187.852672][ T9027] OCFS2: File system is now read-only.
[  187.867351][ T9027] (syz.1.1327,9027,1):ocfs2_search_chain:1888 ERROR: status = -30
[  187.924554][ T9027] (syz.1.1327,9027,0):ocfs2_search_chain:2011 ERROR: status = -30
[  187.950320][ T9027] (syz.1.1327,9027,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30
[  187.970748][ T9061] loop3: detected capacity change from 0 to 4096
[  188.001552][ T9061] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  188.017226][ T9027] (syz.1.1327,9027,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30
[  188.047201][ T9051] loop2: detected capacity change from 0 to 32768
[  188.074506][ T9027] (syz.1.1327,9027,1):ocfs2_claim_metadata:2176 ERROR: status = -30
[  188.094560][ T9027] (syz.1.1327,9027,1):ocfs2_claim_metadata:2189 ERROR: status = -30
[  188.103334][ T9027] (syz.1.1327,9027,1):ocfs2_dx_dir_attach_index:2357 ERROR: status = -30
[  188.112146][ T9027] (syz.1.1327,9027,1):ocfs2_expand_inline_dir:3050 ERROR: status = -30
[  188.120930][ T9027] (syz.1.1327,9027,1):ocfs2_extend_dir:3232 ERROR: status = -30
[  188.147689][ T9027] (syz.1.1327,9027,1):ocfs2_prepare_dir_for_insert:4350 ERROR: status = -30
[  188.170128][ T9051] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt
[  188.170128][ T9051] 
[  188.188873][ T9027] (syz.1.1327,9027,1):ocfs2_mknod:302 ERROR: status = -30
[  188.209394][ T9027] (syz.1.1327,9027,1):ocfs2_mknod:506 ERROR: status = -30
[  188.226368][ T9051] ERROR: (device loop2): remounting filesystem as read-only
[  188.230606][ T9027] (syz.1.1327,9027,1):ocfs2_mkdir:662 ERROR: status = -30
[  188.294845][ T9051] jfs_lookup: dtSearch returned -5
[  188.373204][ T5821] __find_get_block_slow() failed. block=1008806316530991136, b_blocknr=32, b_state=0x00620019, b_size=512, device loop1 blocksize: 512
[  188.406474][ T5821] grow_buffers: requested out-of-range block 1008806316530991136 for device loop1
[  188.464436][ T5821] (syz-executor,5821,0):ocfs2_read_blocks:239 ERROR: status = -12
[  188.472486][ T5821] (syz-executor,5821,0):_ocfs2_free_suballoc_bits:2866 ERROR: status = -12
[  188.502797][ T5821] (syz-executor,5821,0):_ocfs2_free_clusters:2977 ERROR: status = -12
[  188.511983][ T5821] (syz-executor,5821,0):ocfs2_sync_local_to_main:994 ERROR: status = -12
[  188.544441][ T5821] (syz-executor,5821,0):ocfs2_sync_local_to_main:1007 ERROR: status = -12
[  188.611068][ T5821] (syz-executor,5821,0):ocfs2_shutdown_local_alloc:450 ERROR: status = -12
[  188.711032][ T5821] ocfs2: Unmounting device (7,1) on (node local)
[  190.414105][ T9126] loop3: detected capacity change from 0 to 64
[  190.478328][ T9126] hfs: keylen 40 too large
[  190.564628][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  190.734487][   T24] usb 3-1: Using ep0 maxpacket: 32
[  190.744227][ T9112] loop1: detected capacity change from 0 to 40427
[  190.749407][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 40
[  190.751626][ T9130] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1380'.
[  190.780617][   T24] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  190.815022][   T24] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  190.844304][   T24] usb 3-1: Product: syz
[  190.865828][   T24] usb 3-1: Manufacturer: syz
[  190.871157][   T24] usb 3-1: SerialNumber: syz
[  190.893412][   T24] usb 3-1: config 0 descriptor??
[  190.916868][ T9124] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  190.942322][   T24] hub 3-1:0.0: bad descriptor, ignoring hub
[  190.945656][ T9112] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  190.963400][   T24] hub 3-1:0.0: probe with driver hub failed with error -5
[  190.970784][ T9112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  191.213090][ T9140] netlink: 'syz.3.1383': attribute type 4 has an invalid length.
[  191.270680][ T5821] syz-executor: attempt to access beyond end of device
[  191.270680][ T5821] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  191.302009][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  191.302041][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  191.302054][ T5821] Call Trace:
[  191.302063][ T5821]  <TASK>
[  191.302072][ T5821]  dump_stack_lvl+0xe8/0x150
[  191.302105][ T5821]  f2fs_handle_critical_error+0x37c/0x540
[  191.302142][ T5821]  f2fs_write_end_io+0xcdb/0xff0
[  191.302191][ T5821]  __submit_merged_bio+0x256/0x700
[  191.302226][ T5821]  __submit_merged_write_cond+0x3c3/0x4e0
[  191.302262][ T5821]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  191.302317][ T5821]  f2fs_write_data_pages+0x2975/0x35e0
[  191.302398][ T5821]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  191.302440][ T5821]  ? unwind_get_return_address+0x4d/0x90
[  191.302468][ T5821]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  191.302521][ T5821]  ? check_noncircular+0xda/0x150
[  191.302559][ T5821]  ? lockdep_unlock+0x5d/0xd0
[  191.302578][ T5821]  ? __lock_acquire+0x146e/0x2cf0
[  191.302614][ T5821]  ? irqentry_exit+0x59e/0x620
[  191.302636][ T5821]  ? trace_irq_disable+0x3b/0x150
[  191.302677][ T5821]  ? do_raw_spin_lock+0x12b/0x2f0
[  191.302710][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  191.302729][ T5821]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  191.302756][ T5821]  do_writepages+0x32e/0x550
[  191.302797][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  191.302823][ T5821]  filemap_fdatawrite+0x1e9/0x2f0
[  191.302854][ T5821]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  191.302937][ T5821]  ? do_raw_spin_unlock+0xf5/0x210
[  191.302966][ T5821]  f2fs_sync_dirty_inodes+0x30e/0x860
[  191.303015][ T5821]  f2fs_write_checkpoint+0x9cf/0x2680
[  191.303087][ T5821]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  191.303170][ T5821]  kill_f2fs_super+0x314/0x720
[  191.303201][ T5821]  ? __pfx_kill_f2fs_super+0x10/0x10
[  191.303238][ T5821]  ? lockdep_hardirqs_on+0x7a/0x110
[  191.303271][ T5821]  deactivate_locked_super+0xbc/0x130
[  191.303299][ T5821]  cleanup_mnt+0x437/0x4d0
[  191.303315][ T5821]  ? _raw_spin_unlock_irq+0x23/0x50
[  191.303337][ T5821]  task_work_run+0x1d9/0x270
[  191.303372][ T5821]  ? __pfx_task_work_run+0x10/0x10
[  191.303406][ T5821]  exit_to_user_mode_loop+0xed/0x480
[  191.303427][ T5821]  ? rcu_is_watching+0x15/0xb0
[  191.303459][ T5821]  do_syscall_64+0x32d/0xf80
[  191.303480][ T5821]  ? trace_irq_disable+0x3b/0x150
[  191.303503][ T5821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.303524][ T5821]  ? clear_bhb_loop+0x40/0x90
[  191.303549][ T5821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  191.303569][ T5821] RIP: 0033:0x7f4c0cd9c117
[  191.303589][ T5821] Code: a2 c7 05 7c a4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  191.303605][ T5821] RSP: 002b:00007fffaa8b1dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  191.303627][ T5821] RAX: 0000000000000000 RBX: 00007f4c0ce0471f RCX: 00007f4c0cd9c117
[  191.303640][ T5821] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffaa8b1e90
[  191.303652][ T5821] RBP: 00007fffaa8b1e90 R08: 00007fffaa8b2e90 R09: 00000000ffffffff
[  191.303665][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffaa8b2f20
[  191.303678][ T5821] R13: 00007f4c0ce0471f R14: 000000000002eaba R15: 00007fffaa8b2f60
[  191.303714][ T5821]  </TASK>
[  191.303722][ T5821] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  191.367810][   T24] usb 3-1: USB disconnect, device number 7
[  192.334536][   T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  192.516135][   T10] usb 4-1: config 0 has an invalid interface number: 147 but max is 0
[  192.534437][   T10] usb 4-1: config 0 has no interface number 0
[  192.540640][   T10] usb 4-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  192.565235][ T9173] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  192.603407][   T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03
[  192.624426][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.643833][   T10] usb 4-1: Product: syz
[  192.654480][   T10] usb 4-1: Manufacturer: syz
[  192.659339][   T10] usb 4-1: SerialNumber: syz
[  192.692050][   T10] usb 4-1: config 0 descriptor??
[  192.734909][ T9157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  192.811125][   T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  192.896072][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1403'.
[  192.975980][ T3555] usb 4-1: Failed to submit usb control message: -71
[  192.976554][   T10] usb 4-1: USB disconnect, device number 6
[  192.983116][ T3555] usb 4-1: unable to send the bmi data to the device: -71
[  193.017971][ T3555] usb 4-1: unable to get target info from device
[  193.027529][ T3555] usb 4-1: could not get target info (-71)
[  193.033729][ T3555] usb 4-1: could not probe fw (-71)
[  193.183779][ T9192] xt_CT: You must specify a L4 protocol and not use inversions on it
[  193.285110][ T9196] binder: 9195:9196 ioctl 400c620e 0 returned -14
[  193.482448][ T9203] loop0: detected capacity change from 0 to 16
[  193.534170][ T9203] erofs (device loop0): mounted with root inode @ nid 36.
[  193.605945][ T9203] erofs (device loop0): inline data across blocks @ nid 86
[  193.613557][ T9203] erofs (device loop0): inline data across blocks @ nid 86
[  193.665644][   T30] audit: type=1800 audit(1770285292.497:42): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1412" name="file1" dev="loop0" ino=86 res=0 errno=0
[  194.073836][ T9220] geneve3: entered promiscuous mode
[  194.415475][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  194.422154][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  194.553884][ T9206] loop2: detected capacity change from 0 to 32768
[  194.581356][ T9206] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1413 (9206)
[  194.607703][ T9206] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  194.624471][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  194.657716][ T9206] BTRFS info (device loop2): using xxhash64 checksum algorithm
[  194.684483][ T9206] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  194.794448][    T9] usb 2-1: Using ep0 maxpacket: 32
[  194.827358][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  194.862550][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.881196][    T9] usb 2-1: Product: syz
[  194.894420][    T9] usb 2-1: Manufacturer: syz
[  194.899075][    T9] usb 2-1: SerialNumber: syz
[  194.905799][ T9206] BTRFS info (device loop2): rebuilding free space tree
[  194.949488][    T9] usb 2-1: config 0 descriptor??
[  194.980099][ T9206] BTRFS info (device loop2): disabling free space tree
[  195.007422][ T9206] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  195.030450][ T9206] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  195.101275][ T9206] BTRFS info (device loop2): allowing degraded mounts
[  195.121415][ T9206] BTRFS info (device loop2): turning on async discard
[  195.144543][ T9206] BTRFS info (device loop2): enabling disk space caching
[  195.155257][ T9206] BTRFS info (device loop2): force clearing of disk cache
[  195.172681][ T9206] BTRFS info (device loop2): force zlib compression, level 3
[  195.181004][    T9] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device:
[  195.207512][    T9] b3 c1 69 eb 50 3d 29 15 
[  195.224463][    T9] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  195.345266][ T9206] BTRFS info (device loop2): balance: start -sprofiles=system|metadata|metadata-remap|remapped|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffeffffffffe000,usage=4294901761..6,devid=0
[  195.394058][    T9] usb 2-1: USB disconnect, device number 6
[  195.408915][ T9206] BTRFS info (device loop2): balance: ended with status: 0
[  195.576661][ T5825] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  195.868608][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'.
[  195.910102][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'.
[  195.984922][ T9255] loop3: detected capacity change from 0 to 32768
[  196.024232][ T9255] 
[  196.024232][ T9255]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.024232][ T9255] 
[  196.252781][ T5826] 
[  196.252781][ T5826]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.252781][ T5826] 
[  196.317030][ T9282] loop2: detected capacity change from 0 to 512
[  196.323658][ T5826] 
[  196.323658][ T5826]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.323658][ T5826] 
[  196.340363][ T9284] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1444'.
[  196.357541][ T9282] EXT4-fs: Ignoring removed i_version option
[  196.363710][ T9282] EXT4-fs: Ignoring removed oldalloc option
[  196.436501][ T9282] EXT4-fs (loop2): Test dummy encryption mode enabled
[  196.462853][ T9286] loop0: detected capacity change from 0 to 1764
[  196.488541][ T9282] EXT4-fs (loop2): 1 truncate cleaned up
[  196.497170][ T9282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.680826][ T9294] loop1: detected capacity change from 0 to 8
[  196.854863][   T30] audit: type=1800 audit(1770285295.667:43): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1448" name="file1" dev="loop1" ino=5 res=0 errno=0
[  196.884550][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.577038][ T9329] delete_channel: no stack
[  197.724865][ T9335] tmpfs: Bad value for 'mpol'
[  198.113108][ T9354] loop0: detected capacity change from 0 to 764
[  198.161007][ T9356] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  198.176730][ T9349] xt_connbytes: Forcing CT accounting to be enabled
[  198.184152][ T9349] xt_NFQUEUE: number of total queues is 0
[  198.189917][ T9354] rock: directory entry would overflow storage
[  198.218318][ T9354] rock: sig=0x4654, size=5, remaining=4
[  198.234992][ T5834] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  198.418804][ T5834] usb 3-1: too many configurations: 68, using maximum allowed: 8
[  198.449222][ T5834] usb 3-1: config index 0 descriptor too short (expected 72, got 56)
[  198.474886][ T5834] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  198.520683][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  198.597120][ T5834] usb 3-1: config index 1 descriptor too short (expected 72, got 56)
[  198.614897][ T5834] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  198.653874][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  198.724908][ T5834] usb 3-1: config index 2 descriptor too short (expected 72, got 56)
[  198.745084][ T5834] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  198.772669][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  198.794638][ T5834] usb 3-1: config index 3 descriptor too short (expected 72, got 56)
[  198.803079][ T5834] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  198.833656][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  198.892450][ T5834] usb 3-1: config index 4 descriptor too short (expected 72, got 56)
[  198.914157][ T5834] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  198.934923][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  198.994119][ T5834] usb 3-1: config index 5 descriptor too short (expected 72, got 56)
[  199.012583][ T5834] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  199.064490][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  199.108849][ T5834] usb 3-1: config index 6 descriptor too short (expected 72, got 56)
[  199.122657][ T5834] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  199.137636][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  199.155268][ T5834] usb 3-1: config index 7 descriptor too short (expected 72, got 56)
[  199.168363][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'.
[  199.177973][ T5834] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  199.219587][ T5834] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  199.285223][ T5834] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  199.305933][ T9380] loop1: detected capacity change from 0 to 1764
[  199.321422][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.345050][ T5834] usb 3-1: Product: syz
[  199.354491][ T5834] usb 3-1: Manufacturer: syz
[  199.359156][ T5834] usb 3-1: SerialNumber: syz
[  199.371526][ T9380] iso9660: Corrupted directory entry in block 2 of inode 1920
[  199.415313][ T5834] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  199.458213][   T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  199.590939][ T9391] loop1: detected capacity change from 0 to 1024
[  199.614895][ T9392] loop4: detected capacity change from 0 to 512
[  199.630356][ T9391] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  199.660786][ T9392] FAT-fs (loop4): Invalid FSINFO signature: 0x00000001, 0x61417272 (sector = 1)
[  199.678142][ T9391] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  199.719554][ T9391] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52321!=20869)
[  199.762271][ T9391] EXT4-fs (loop1): filesystem has both journal inode and journal device!
[  199.984303][ T9398] xt_time: invalid argument - start or stop time greater than 23:59:59
[  199.999932][ T5913] usb 3-1: USB disconnect, device number 8
[  200.242101][ T9408] Invalid ELF header magic: != ELF
[  200.441879][ T9416] loop0: detected capacity change from 0 to 512
[  200.496722][ T9416] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  200.509325][ T9416] EXT4-fs (loop0): orphan cleanup on readonly fs
[  200.545109][ T9416] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (4398046510080 > 6144).
[  200.559279][ T9416] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  200.574458][   T24] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  200.581688][   T24] ath9k_htc: Failed to initialize the device
[  200.591692][ T9416] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  200.598630][ T5913] usb 3-1: ath9k_htc: USB layer deinitialized
[  200.606193][ T9420] loop4: detected capacity change from 0 to 1024
[  200.672442][ T9416] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1506: corrupted inode contents
[  200.714631][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  200.718254][ T9416] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  200.724416][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  200.740074][    C1] EXT4-fs (loop0): initial error at time 1770285299: ext4_do_update_inode:5569: inode 16
[  200.749988][    C1] EXT4-fs (loop0): last error at time 1770285299: ext4_do_update_inode:5569: inode 16
[  200.768664][ T9416] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.1506: mark_inode_dirty error
[  200.784434][ T9416] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  200.786500][ T9416] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1506: corrupted inode contents
[  200.854899][ T9416] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  200.861567][ T9416] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1506: mark_inode_dirty error
[  200.897725][    T9] usb 4-1: config 0 has an invalid interface number: 10 but max is 0
[  200.914559][    T9] usb 4-1: config 0 has no interface number 0
[  200.926353][    T9] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6
[  200.934532][ T9416] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  200.937527][ T9416] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1506: corrupted inode contents
[  200.937970][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.959757][ T9416] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  200.993800][ T9416] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  201.019377][    T9] usb 4-1: config 0 descriptor??
[  201.034591][ T9416] loop0: lost filesystem error report for type 5 error -117
[  201.042840][ T9416] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1506: corrupted inode contents
[  201.094551][ T9416] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  201.102211][ T9416] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.1506: mark_inode_dirty error
[  201.154434][ T9416] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  201.154937][ T9416] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  201.214476][ T9416] loop0: lost filesystem error report for type 5 error -117
[  201.221324][ T9416] EXT4-fs (loop0): 1 truncate cleaned up
[  201.255476][ T9435] loop2: detected capacity change from 0 to 128
[  201.264704][    T9] pegasus 4-1:0.10: probe with driver pegasus failed with error -71
[  201.273796][ T9416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  201.301787][    T9] usb 4-1: USB disconnect, device number 7
[  201.344747][ T9435] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  201.380970][ T9435] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.481117][ T9416] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  201.600236][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.675127][ T9441] loop4: detected capacity change from 0 to 512
[  201.764069][ T9441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.850835][ T9441] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.974638][ T9441] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #12: block 32: comm syz.4.1517: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[  202.044244][ T9456] loop0: detected capacity change from 0 to 128
[  202.070841][ T9456] FAT-fs (loop0): bogus number of reserved sectors
[  202.084967][ T9441] EXT4-fs (loop4): Remounting filesystem read-only
[  202.099721][ T9456] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  202.154470][ T9456] FAT-fs (loop0): Can't find a valid FAT filesystem
[  202.228744][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.604788][ T9467] loop0: detected capacity change from 0 to 256
[  202.693202][ T9467] FAT-fs (loop0): Directory bread(block 64) failed
[  202.714920][ T9467] FAT-fs (loop0): Directory bread(block 65) failed
[  202.722302][ T9467] FAT-fs (loop0): Directory bread(block 66) failed
[  202.759017][ T9467] FAT-fs (loop0): Directory bread(block 67) failed
[  202.796486][ T9467] FAT-fs (loop0): Directory bread(block 68) failed
[  202.803173][ T9467] FAT-fs (loop0): Directory bread(block 69) failed
[  202.850274][ T9467] FAT-fs (loop0): Directory bread(block 70) failed
[  202.874742][ T9467] FAT-fs (loop0): Directory bread(block 71) failed
[  202.881442][ T9467] FAT-fs (loop0): Directory bread(block 72) failed
[  202.914774][ T9467] FAT-fs (loop0): Directory bread(block 73) failed
[  203.019057][ T9454] loop2: detected capacity change from 0 to 32768
[  203.074110][ T9454] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.305053][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'.
[  203.387597][ T9454] XFS (loop2): Ending clean mount
[  203.459434][ T9454] XFS (loop2): Quotacheck needed: Please wait.
[  203.573485][ T9454] XFS (loop2): Quotacheck: Done.
[  203.730762][ T9506] netlink: 'syz.3.1543': attribute type 13 has an invalid length.
[  203.754764][ T5825] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.332932][ T9528] libceph: resolve '4' (ret=-3): failed
[  204.396241][ T9530] loop2: detected capacity change from 0 to 256
[  204.425934][ T9530] exfat: Deprecated parameter 'utf8'
[  204.431341][ T9530] exfat: Deprecated parameter 'namecase'
[  204.485621][ T9530] exfat: Deprecated parameter 'namecase'
[  204.527280][ T9530] exfat: Deprecated parameter 'utf8'
[  204.609049][ T9530] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  204.654693][ T9530] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[  204.716901][   T30] audit: type=1800 audit(1770285303.547:44): pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1546" name="file2" dev="loop2" ino=1048621 res=0 errno=0
[  204.768473][ T5913] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  204.921190][ T9551] loop1: detected capacity change from 0 to 512
[  204.954450][ T5913] usb 1-1: Using ep0 maxpacket: 32
[  204.964753][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short
[  204.974268][ T5913] usb 1-1: config 7 has an invalid interface number: 187 but max is 0
[  204.995801][ T9551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.008671][ T5913] usb 1-1: config 7 has no interface number 0
[  205.044110][ T5913] usb 1-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  205.074589][ T9551] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.091421][ T5913] usb 1-1: config 7 interface 187 has no altsetting 0
[  205.132118][ T5913] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  205.171024][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.195087][ T5913] usb 1-1: Product: syz
[  205.199325][ T5913] usb 1-1: Manufacturer: syz
[  205.240907][ T5913] usb 1-1: SerialNumber: syz
[  205.271539][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.549820][ T5913] usb 1-1: Unknown endpoint type found, address 0x07
[  205.574468][ T5875] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  205.583556][ T5913] usb 1-1: Unknown endpoint type found, address 0x03
[  205.610003][ T5913] usb 1-1: Not enough endpoints found in device, aborting!
[  205.733341][ T5875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.764152][ T5913] usb 1-1: USB disconnect, device number 7
[  205.770494][ T5875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  205.782852][ T5875] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  205.804241][ T5875] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.817274][ T5875] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  205.875156][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.921740][ T5875] hub 3-1:1.0: bad descriptor, ignoring hub
[  205.941004][ T5875] hub 3-1:1.0: probe with driver hub failed with error -5
[  205.970170][ T5875] cdc_wdm 3-1:1.0: skipping garbage
[  205.995474][ T5875] cdc_wdm 3-1:1.0: skipping garbage
[  206.024816][ T5875] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  206.054536][ T5875] cdc_wdm 3-1:1.0: Unknown control protocol
[  206.115420][ T5875] usb 3-1: USB disconnect, device number 9
[  206.269806][ T9585] loop4: detected capacity change from 0 to 256
[  206.289012][ T9585] exfat: Deprecated parameter 'utf8'
[  206.303543][ T9585] exfat: Deprecated parameter 'namecase'
[  206.334594][ T9585] exfat: Deprecated parameter 'namecase'
[  206.354551][ T9585] exfat: Deprecated parameter 'utf8'
[  206.390973][ T9585] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  206.455145][ T9585] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  206.498604][ T9585] exFAT-fs (loop4): start_clu is invalid cluster(0x400)
[  206.749594][ T9595] loop2: detected capacity change from 0 to 256
[  206.795017][ T9546] syz.3.1564 (9546): drop_caches: 2
[  207.370049][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'.
[  207.397547][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'.
[  207.470142][ T9609] loop3: detected capacity change from 0 to 4096
[  207.478054][ T9615] dvmrp0: entered allmulticast mode
[  207.499658][ T9609] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  207.608519][ T9609] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  207.647687][ T9609] ntfs3(loop3): ino=19, mi_enum_attr
[  207.662200][ T3499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.727098][ T9609] ntfs3(loop3): failed to convert "c46c" to iso8859-5
[  207.766162][ T9609] ntfs3(loop3): ino=20, mi_enum_attr
[  207.859067][ T3499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.057980][ T3499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.161015][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  208.172270][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  208.181427][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  208.189520][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  208.199870][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  208.215032][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  208.237135][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  208.238004][ T9632] syz.1.1607: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/
[  208.258897][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  208.272790][ T9632] ,mems_allowed=0-1
[  208.290875][ T9632] CPU: 0 UID: 0 PID: 9632 Comm: syz.1.1607 Not tainted syzkaller #0 PREEMPT(full) 
[  208.290907][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  208.290919][ T9632] Call Trace:
[  208.290928][ T9632]  <TASK>
[  208.290938][ T9632]  dump_stack_lvl+0xe8/0x150
[  208.290974][ T9632]  warn_alloc+0x249/0x340
[  208.291000][ T9632]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  208.291027][ T9632]  ? __pfx_warn_alloc+0x10/0x10
[  208.291058][ T9632]  ? kasan_save_track+0x4f/0x80
[  208.291077][ T9632]  ? kasan_save_track+0x3e/0x80
[  208.291093][ T9632]  ? __kasan_kmalloc+0x93/0xb0
[  208.291110][ T9632]  ? __kmalloc_cache_noprof+0x31c/0x660
[  208.291127][ T9632]  ? xskq_create+0x56/0x170
[  208.291145][ T9632]  ? xsk_setsockopt+0x54c/0x990
[  208.291170][ T9632]  ? do_sock_setsockopt+0x17c/0x1b0
[  208.291187][ T9632]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  208.291204][ T9632]  ? do_syscall_64+0x14d/0xf80
[  208.291231][ T9632]  __vmalloc_node_range_noprof+0x132/0x1730
[  208.291290][ T9632]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  208.291331][ T9632]  ? __kasan_kmalloc+0x93/0xb0
[  208.291368][ T9632]  vmalloc_user_noprof+0xad/0xe0
[  208.291388][ T9632]  ? xskq_create+0xbf/0x170
[  208.291408][ T9632]  xskq_create+0xbf/0x170
[  208.291429][ T9632]  xsk_init_queue+0x8a/0xe0
[  208.291452][ T9632]  xsk_setsockopt+0x54c/0x990
[  208.291486][ T9632]  ? __pfx_xsk_setsockopt+0x10/0x10
[  208.291516][ T9632]  ? __pfx_aa_sk_perm+0x10/0x10
[  208.291548][ T9632]  ? aa_sock_opt_perm+0xff/0x1a0
[  208.291579][ T9632]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  208.291599][ T9632]  ? __pfx_xsk_setsockopt+0x10/0x10
[  208.291630][ T9632]  do_sock_setsockopt+0x17c/0x1b0
[  208.291655][ T9632]  __x64_sys_setsockopt+0x13d/0x1b0
[  208.291681][ T9632]  do_syscall_64+0x14d/0xf80
[  208.291703][ T9632]  ? trace_irq_disable+0x3b/0x150
[  208.291730][ T9632]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.291749][ T9632]  ? clear_bhb_loop+0x40/0x90
[  208.291775][ T9632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.291794][ T9632] RIP: 0033:0x7f4c0cd9aeb9
[  208.291815][ T9632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  208.291832][ T9632] RSP: 002b:00007f4c0dd30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  208.291855][ T9632] RAX: ffffffffffffffda RBX: 00007f4c0d015fa0 RCX: 00007f4c0cd9aeb9
[  208.291868][ T9632] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  208.291879][ T9632] RBP: 00007f4c0ce08c1f R08: 0000000000000004 R09: 0000000000000000
[  208.291890][ T9632] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  208.291902][ T9632] R13: 00007f4c0d016038 R14: 00007f4c0d015fa0 R15: 00007fffaa8b2b68
[  208.291932][ T9632]  </TASK>
[  208.291939][ T9632] Mem-Info:
[  208.400093][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  208.407396][ T9632] active_anon:6418 inactive_anon:0 isolated_anon:0
[  208.407396][ T9632]  active_file:3440 inactive_file:40034 isolated_file:0
[  208.407396][ T9632]  unevictable:768 dirty:569 writeback:0
[  208.407396][ T9632]  slab_reclaimable:11017 slab_unreclaimable:94885
[  208.407396][ T9632]  mapped:30046 shmem:1393 pagetables:1389
[  208.407396][ T9632]  sec_pagetables:0 bounce:0
[  208.407396][ T9632]  kernel_misc_reclaimable:0
[  208.407396][ T9632]  free:1327704 free_pcp:12168 free_cma:0
[  208.416628][ T3499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.419048][ T9632] Node 0 active_anon:25672kB inactive_anon:0kB active_file:13760kB inactive_file:159936kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120184kB dirty:2276kB writeback:0kB shmem:4036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12232kB pagetables:5408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  208.438404][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  208.442945][ T9632] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  208.734414][ T9632] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  208.786411][ T9632] lowmem_reserve[]: 0 2485 2485 2485 2485
[  208.803947][ T9632] Node 0 DMA32 free:1359280kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25572kB inactive_anon:0kB active_file:13760kB inactive_file:159936kB unevictable:1536kB writepending:2276kB zspages:0kB present:3129332kB managed:2545216kB mlocked:0kB bounce:0kB free_pcp:48592kB local_pcp:25088kB free_cma:0kB
[  208.870661][ T9632] lowmem_reserve[]: 0 0 0 0 0
[  208.880475][ T9632] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  208.956436][ T9632] lowmem_reserve[]: 0 0 0 0 0
[  208.977703][ T9632] Node 1 Normal free:3936176kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB
[  209.020469][ T9632] lowmem_reserve[]: 0 0 0 0 0
[  209.044535][ T9632] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  209.079330][ T9632] Node 0 DMA32: 2718*4kB (UM) 1879*8kB (UME) 964*16kB (UM) 650*32kB (UME) 180*64kB (UME) 161*128kB (UME) 128*256kB (UME) 84*512kB (UM) 56*1024kB (UM) 28*2048kB (UM) 263*4096kB (UM) = 1361968kB
[  209.195854][ T9632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  209.253532][ T9632] Node 1 Normal: 2*4kB (UE) 3*8kB (UME) 13*16kB (UME) 12*32kB (UME) 7*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 1*1024kB (M) 3*2048kB (ME) 958*4096kB (UM) = 3936176kB
[  209.299773][ T3499] bridge_slave_1: left allmulticast mode
[  209.322465][ T3499] bridge_slave_1: left promiscuous mode
[  209.330973][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.334522][ T9632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  209.359807][ T9632] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  209.370486][ T3499] bridge_slave_0: left allmulticast mode
[  209.377301][ T3499] bridge_slave_0: left promiscuous mode
[  209.383222][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.438250][ T9632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  209.454268][ T9632] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  209.464066][ T9632] 48239 total pagecache pages
[  209.469559][ T9632] 0 pages in swap cache
[  209.473749][ T9632] Free swap  = 124996kB
[  209.479342][ T9632] Total swap = 124996kB
[  209.483674][ T9632] 2097051 pages RAM
[  209.487754][ T9632] 0 pages HighMem/MovableOnly
[  209.492749][ T9632] 429132 pages reserved
[  209.497271][ T9632] 0 pages cma reserved
[  209.599005][ T9640] loop2: detected capacity change from 0 to 32768
[  209.646384][ T9640] (syz.2.1612,9640,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  209.732030][ T9640] (syz.2.1612,9640,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  209.868170][ T9640] JBD2: Ignoring recovery information on journal
[  209.982316][ T9640] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  210.074149][ T9674] loop1: detected capacity change from 0 to 64
[  210.147224][ T9640] 
[  210.149637][ T9640] ======================================================
[  210.156768][ T9640] WARNING: possible circular locking dependency detected
[  210.163974][ T9640] syzkaller #0 Not tainted
[  210.168392][ T9640] ------------------------------------------------------
[  210.175416][ T9640] syz.2.1612/9640 is trying to acquire lock:
[  210.181391][ T9640] ffff88805bd5d100 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1da/0x290
[  210.193953][ T9640] 
[  210.193953][ T9640] but task is already holding lock:
[  210.201433][ T9640] ffff88805c4700e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[  210.211719][ T9640] 
[  210.211719][ T9640] which lock already depends on the new lock.
[  210.211719][ T9640] 
[  210.222212][ T9640] 
[  210.222212][ T9640] the existing dependency chain (in reverse order) is:
[  210.231225][ T9640] 
[  210.231225][ T9640] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  210.239743][ T9640]        down_read+0x47/0x2e0
[  210.244430][ T9640]        ocfs2_start_trans+0x3ab/0x700
[  210.249896][ T9640]        ocfs2_reserve_suballoc_bits+0x7ae/0x4940
[  210.256313][ T9640]        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  210.263164][ T9640]        ocfs2_extend_dir+0xcd3/0x4a70
[  210.268622][ T9640]        ocfs2_prepare_dir_for_insert+0x34af/0x5370
[  210.275207][ T9640]        ocfs2_mknod+0xa1b/0x2290
[  210.280326][ T9640]        ocfs2_create+0x195/0x490
[  210.285377][ T9640]        vfs_create+0x2d1/0x460
[  210.290240][ T9640]        filename_mknodat+0x3e8/0x660
[  210.295708][ T9640]        __se_sys_mknod+0x3a/0x150
[  210.300828][ T9640]        do_syscall_64+0x14d/0xf80
[  210.306064][ T9640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.312570][ T9640] 
[  210.312570][ T9640] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  210.320070][ T9640]        ocfs2_start_trans+0x2ac/0x700
[  210.325572][ T9640]        ocfs2_write_info+0x118/0x360
[  210.330950][ T9640]        quota_setinfo+0x316/0x320
[  210.336071][ T9640]        __se_sys_quotactl+0x2cd/0x9e0
[  210.341536][ T9640]        do_syscall_64+0x14d/0xf80
[  210.346655][ T9640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.353184][ T9640] 
[  210.353184][ T9640] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  210.362078][ T9640]        down_write+0x96/0x200
[  210.367048][ T9640]        ocfs2_lock_global_qf+0x201/0x290
[  210.372802][ T9640]        ocfs2_write_info+0xd1/0x360
[  210.378111][ T9640]        quota_setinfo+0x316/0x320
[  210.383324][ T9640]        __se_sys_quotactl+0x2cd/0x9e0
[  210.388802][ T9640]        do_syscall_64+0x14d/0xf80
[  210.393951][ T9640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.400391][ T9640] 
[  210.400391][ T9640] -> #0 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}:
[  210.410913][ T9640]        __lock_acquire+0x15a5/0x2cf0
[  210.416302][ T9640]        lock_acquire+0xf0/0x2e0
[  210.421246][ T9640]        down_write+0x96/0x200
[  210.426017][ T9640]        ocfs2_lock_global_qf+0x1da/0x290
[  210.431743][ T9640]        ocfs2_acquire_dquot+0x3fa/0xb30
[  210.437389][ T9640]        dqget+0x7b1/0xf10
[  210.441808][ T9640]        __dquot_initialize+0x3ba/0xd30
[  210.447355][ T9640]        ocfs2_get_init_inode+0x147/0x1c0
[  210.453082][ T9640]        ocfs2_mknod+0xa67/0x2290
[  210.458197][ T9640]        ocfs2_mkdir+0x181/0x490
[  210.463227][ T9640]        vfs_mkdir+0x413/0x630
[  210.467988][ T9640]        filename_mkdirat+0x285/0x510
[  210.473360][ T9640]        __se_sys_mkdirat+0x35/0x150
[  210.478675][ T9640]        do_syscall_64+0x14d/0xf80
[  210.483792][ T9640]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.490296][ T9640] 
[  210.490296][ T9640] other info that might help us debug this:
[  210.490296][ T9640] 
[  210.500612][ T9640] Chain exists of:
[  210.500612][ T9640]   &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> sb_internal#3 --> &journal->j_trans_barrier
[  210.500612][ T9640] 
[  210.517228][ T9640]  Possible unsafe locking scenario:
[  210.517228][ T9640] 
[  210.524682][ T9640]        CPU0                    CPU1
[  210.530134][ T9640]        ----                    ----
[  210.535494][ T9640]   rlock(&journal->j_trans_barrier);
[  210.540871][ T9640]                                lock(sb_internal#3);
[  210.547650][ T9640]                                lock(&journal->j_trans_barrier);
[  210.555547][ T9640]   lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]);
[  210.562837][ T9640] 
[  210.562837][ T9640]  *** DEADLOCK ***
[  210.562837][ T9640] 
[  210.570975][ T9640] 7 locks held by syz.2.1612/9640:
[  210.576080][ T9640]  #0: ffff88802a18c420 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  210.585323][ T9640]  #1: ffff88805a7f42c0 (&type->i_mutex_dir_key#14/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  210.596136][ T9640]  #2: ffff88805bd59800 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  210.609989][ T9640]  #3: ffff88805a5976a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x271/0xb30
[  210.620024][ T9640]  #4: ffff88802a18c610 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x3d5/0xb30
[  210.630135][ T9640]  #5: ffff88805c4700e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[  210.640842][ T9640]  #6: ffff88802ad2c950 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x2054/0x2290
[  210.650693][ T9640] 
[  210.650693][ T9640] stack backtrace:
[  210.656700][ T9640] CPU: 0 UID: 0 PID: 9640 Comm: syz.2.1612 Not tainted syzkaller #0 PREEMPT(full) 
[  210.656719][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  210.656729][ T9640] Call Trace:
[  210.656735][ T9640]  <TASK>
[  210.656741][ T9640]  dump_stack_lvl+0xe8/0x150
[  210.656763][ T9640]  print_circular_bug+0x2e1/0x300
[  210.656787][ T9640]  check_noncircular+0x12e/0x150
[  210.656810][ T9640]  __lock_acquire+0x15a5/0x2cf0
[  210.656837][ T9640]  lock_acquire+0xf0/0x2e0
[  210.656854][ T9640]  ? ocfs2_lock_global_qf+0x1da/0x290
[  210.656877][ T9640]  down_write+0x96/0x200
[  210.656896][ T9640]  ? ocfs2_lock_global_qf+0x1da/0x290
[  210.656914][ T9640]  ? __pfx_down_write+0x10/0x10
[  210.656933][ T9640]  ? do_raw_spin_unlock+0xf5/0x210
[  210.656949][ T9640]  ocfs2_lock_global_qf+0x1da/0x290
[  210.656968][ T9640]  ? __pfx_ocfs2_lock_global_qf+0x10/0x10
[  210.656988][ T9640]  ? dqget+0x732/0xf10
[  210.657004][ T9640]  ocfs2_acquire_dquot+0x3fa/0xb30
[  210.657026][ T9640]  ? __pfx_ocfs2_acquire_dquot+0x10/0x10
[  210.657049][ T9640]  dqget+0x7b1/0xf10
[  210.657066][ T9640]  __dquot_initialize+0x3ba/0xd30
[  210.657083][ T9640]  ? __pfx___dquot_initialize+0x10/0x10
[  210.657098][ T9640]  ? do_raw_spin_unlock+0xf5/0x210
[  210.657112][ T9640]  ? from_vfsgid+0x72/0xa0
[  210.657128][ T9640]  ? inode_init_owner+0x1ed/0x390
[  210.657146][ T9640]  ocfs2_get_init_inode+0x147/0x1c0
[  210.657163][ T9640]  ? __pfx_ocfs2_get_init_inode+0x10/0x10
[  210.657182][ T9640]  ocfs2_mknod+0xa67/0x2290
[  210.657198][ T9640]  ? kasan_save_track+0x4f/0x80
[  210.657213][ T9640]  ? kfree+0x1c1/0x630
[  210.657232][ T9640]  ? tomoyo_path_number_perm+0x501/0x630
[  210.657252][ T9640]  ? __pfx_ocfs2_mknod+0x10/0x10
[  210.657270][ T9640]  ? do_raw_spin_unlock+0xf5/0x210
[  210.657285][ T9640]  ? _raw_spin_unlock+0x28/0x50
[  210.657298][ T9640]  ? ocfs2_inode_lock_full_nested+0xaec/0x1bd0
[  210.657319][ T9640]  ? __lock_acquire+0x6b5/0x2cf0
[  210.657339][ T9640]  ? kasan_quarantine_put+0xbb/0x1f0
[  210.657363][ T9640]  ? __lock_acquire+0x6b5/0x2cf0
[  210.657390][ T9640]  ? do_raw_spin_unlock+0xf5/0x210
[  210.657406][ T9640]  ? do_raw_spin_lock+0x12b/0x2f0
[  210.657423][ T9640]  ? do_raw_spin_unlock+0xf5/0x210
[  210.657451][ T9640]  ? put_pid+0xe9/0x130
[  210.657472][ T9640]  ocfs2_mkdir+0x181/0x490
[  210.657488][ T9640]  ? __pfx_from_kgid+0x10/0x10
[  210.657510][ T9640]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  210.657527][ T9640]  ? inode_permission+0x346/0x5f0
[  210.657546][ T9640]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  210.657562][ T9640]  vfs_mkdir+0x413/0x630
[  210.657579][ T9640]  filename_mkdirat+0x285/0x510
[  210.657597][ T9640]  ? __pfx_filename_mkdirat+0x10/0x10
[  210.657614][ T9640]  ? do_getname+0x151/0x250
[  210.657631][ T9640]  __se_sys_mkdirat+0x35/0x150
[  210.657648][ T9640]  do_syscall_64+0x14d/0xf80
[  210.657664][ T9640]  ? trace_irq_disable+0x3b/0x150
[  210.657684][ T9640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.657699][ T9640]  ? clear_bhb_loop+0x40/0x90
[  210.657714][ T9640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.657729][ T9640] RIP: 0033:0x7ff059199d97
[  210.657743][ T9640] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  210.657757][ T9640] RSP: 002b:00007ff059fe9e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  210.657773][ T9640] RAX: ffffffffffffffda RBX: 00007ff059fe9ee0 RCX: 00007ff059199d97
[  210.657784][ T9640] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c
[  210.657794][ T9640] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000
[  210.657803][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000280
[  210.657812][ T9640] R13: 00007ff059fe9ea0 R14: 0000000000000000 R15: 0000000000000000
[  210.657828][ T9640]  </TASK>
[  211.093560][ T5832] Bluetooth: hci3: command tx timeout
[  211.129110][ T9640] (syz.2.1612,9640,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xe37077ba. Applying ECC.
[  211.143155][ T9640] (syz.2.1612,9640,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0xe37077ba
[  211.155767][ T9640] (syz.2.1612,9640,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  211.164224][ T9640] (syz.2.1612,9640,0):ocfs2_quota_read:201 ERROR: status = -5
[  211.171814][ T9640] Quota error (device loop2): find_block_dqentry: Can't read quota tree block 6
[  211.181038][ T9640] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  211.190510][ T9640] (syz.2.1612,9640,0):ocfs2_acquire_dquot:895 ERROR: status = -5
[  211.198411][ T9640] (syz.2.1612,9640,0):ocfs2_mknod:318 ERROR: status = -5
[  211.205908][ T9640] (syz.2.1612,9640,0):ocfs2_mknod:506 ERROR: status = -5
[  211.212976][ T9640] (syz.2.1612,9640,0):ocfs2_mkdir:662 ERROR: status = -5
[  211.292017][ T5825] ocfs2: Unmounting device (7,2) on (node local)
[  211.537819][ T9676] loop3: detected capacity change from 0 to 32768
[  211.555303][ T9676] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1624 (9676)
[  211.598127][ T9676] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.609603][ T9676] BTRFS info (device loop3): using sha256 checksum algorithm
[  211.630759][ T3499] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  211.680320][ T3499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.680351][ T9676] BTRFS info (device loop3): enabling ssd optimizations
[  211.696302][ T9676] BTRFS info (device loop3): turning on async discard
[  211.703198][ T9676] BTRFS info (device loop3): enabling free space tree
[  211.713634][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.755787][ T3499] bond0 (unregistering): Released all slaves
[  211.829901][ T5826] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.968129][ T9629] chnl_net:caif_netlink_parms(): no params data found
[  212.096952][ T3499] hsr_slave_0: left promiscuous mode
[  212.103081][ T3499] hsr_slave_1: left promiscuous mode
[  212.109675][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.118219][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.126485][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.133967][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.145990][ T3499] veth1_macvtap: left promiscuous mode
[  212.151604][ T3499] veth0_macvtap: left promiscuous mode
[  212.159545][ T3499] veth1_vlan: left promiscuous mode
[  212.165039][ T3499] veth0_vlan: left promiscuous mode
[  212.351965][ T3499] team0 (unregistering): Port device team_slave_1 removed
[  212.382609][ T3499] team0 (unregistering): Port device team_slave_0 removed
[  212.506227][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.513493][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.520842][ T9629] bridge_slave_0: entered allmulticast mode
[  212.527952][ T9629] bridge_slave_0: entered promiscuous mode
[  212.536273][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.543650][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.551030][ T9629] bridge_slave_1: entered allmulticast mode
[  212.559381][ T9629] bridge_slave_1: entered promiscuous mode
[  212.596634][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.615543][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.669189][ T9629] team0: Port device team_slave_0 added
[  212.696630][ T9629] team0: Port device team_slave_1 added
[  212.740424][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  212.747652][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.773880][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.787243][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.795750][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  212.830505][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.891121][ T9629] hsr_slave_0: entered promiscuous mode
[  212.898561][ T9629] hsr_slave_1: entered promiscuous mode
[  212.906801][ T9629] debugfs: 'hsr0' already exists in 'hsr'
[  212.912572][ T9629] Cannot create hsr debugfs directory
[  213.073173][ T9629] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  213.083341][ T9629] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  213.094729][ T9629] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  213.108147][ T9629] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  213.124740][ T5832] Bluetooth: hci3: command tx timeout
[  213.214151][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.239099][ T9629] 8021q: adding VLAN 0 to HW filter on device team0
[  213.251862][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.259000][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.276334][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.283523][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.496276][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.717715][ T9629] veth0_vlan: entered promiscuous mode
[  213.731294][ T9629] veth1_vlan: entered promiscuous mode
[  213.760604][ T9629] veth0_macvtap: entered promiscuous mode
[  213.770964][ T9629] veth1_macvtap: entered promiscuous mode
[  213.791872][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  213.807343][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.821832][ T1332] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.831722][ T1332] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.848267][ T1332] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.861739][ T1332] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.891305][ T9629] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht'
[  213.914026][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.915724][ T9629] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  213.935370][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.955247][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.963192][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.204790][ T5832] Bluetooth: hci3: command tx timeout
[  217.294800][ T5832] Bluetooth: hci3: command tx timeout