last executing test programs:

10m16.564516956s ago: executing program 0 (id=2602):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})

10m16.33661635s ago: executing program 0 (id=2606):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x4, 0x90, [0x0, 0x0, 0x200000001280], 0x2, 0x0, &(0x7f0000001280)=[{}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x4}]}, 0x108)

10m16.255772071s ago: executing program 0 (id=2608):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPILUhcaModhzFTmlCD+mZKxKVOMGRP4BzT9y5IHrjUg5I/IhADRIHoxlPUje1m6hJ7Gz8+UijeW/e1N/vazrvxS+NXwBD62pE7EbEWETcjojp7HouO+KT9pHc93Tv/tL+3v2lXLRan/0zl7Yn16LjzySuZK9ZjIgffS/ip7kX4za2d9YWq9XKZlafbdY2ZhvbOzdWa4srlZXKerm8ML8w99HND8tn1td3amNZ6atP/rj7rZ8naU1lVzr7cZbaXS8cxkmMRsQPziPYAIxk/RkbdCK8knxEvBkR76bP/3SMpF9NAOAya7WmozXdWQcALrt8ugaWy5eytYCpyOdLpfYa3lsxma/WG83rd+pb68vttbKZKOTvrFYrc9la4UwUckl9Pi0/q5eP1G9GxBsR8cvxibReWqpXlwf5jQ8ADLErR+b//4y3538A4JIrDjoBAKDvzP8AMHzM/wAwfMz/ADB82vP/xKDTAAD6yPt/ABg+5n8AGCo//PTT5GjtZ59/vXx3e2utfvfGcqWxVqptLZWW6psbpZV6fSX9zJ7aca9Xrdc35j+IrXsz395oNGcb2zu3avWt9eat9HO9b1UK6V27fegZANDLG+88epxLZuSPJ9IjOvZyKAw0M+C85QedADAwI4NOABgYu33B8DrFe3zLA3BJdNmi9znFbr8g1Gq1WueXEnDOrn3J+j8Mq471f/8LGIaM9X8YXtb/YXi1WrmT7vkfJ70RALjYrPEDPX7+/2Z2/l32w4GfLB+94+F5ZgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX28H+v6VsL/CpyOdLpYjXImImCrk7q9XKXES8HhF/Hi+MJ/X5AecMAJxW/m+5bP+va9PvTz3X9PaVw+JYRPzs15/96t5is7n5p4ix3L/GD643H2bXy/3PHgA43sE8nZ473sg/3bu/dHD0M5+/fzciiu34+3tjsX8YfzRG03MxChEx+e9cVm/LdaxdnMbug4j4Yrf+52IqXQNp73x6NH4S+7W+xs8/Fz+ftrXPyd/FF84gFxg2j5Lx55Nuz18+rqbn7s9/MR2hTi8b/5KXWtpPx8Bn8Q/Gv5Ee49/Vk8b44A/fb5cmXmx7EPHl0YiD2Psd489B/FyP+O+fMP5fvvL2u73aWr+JuBbd43fGmm3WNmYb2zs3VmuLK5WVynq5vDC/MPfRzQ/Ls+ka9Wzv2eAfH19/vVdb0v/JHvGLx/T/6yfs/2//d/vHX3tJ/G++1y1+Pt56SfxkTvzGCeMvTv6+2Kstib/co//Hff2vnzD+k7/uvLBtOAAwOI3tnbXFarWy+TkqPE6+pxl8Ggr9LyT/ZC9AGl0L3+lXrLHo3vSL99rP9JGmVuuVYvUaMc5i1Q24CA4f+oj476CTAQAAAAAAAAAAAAAAuurHbywNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXv8PAAD//+a4zis=")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0x9d})

10m15.756261249s ago: executing program 0 (id=2616):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f0000000140)=ANY=[@ANYBLOB='decompose,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c747970653d69759d7b2c6e6f6465636f6d706f73652c706172743d3078303030303030303030303030303030352c6e6c733d63703835322c0003cbc07ba0a1136d4473bd2732cc9433380cd22dec53d0a6f1102a4eea5601100a9ad8b17df114bc4794e98d59b6e930d8b8f9647652dc225a077d8726a372a270"], 0x1, 0x6f8, &(0x7f0000002440)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

10m15.385774666s ago: executing program 0 (id=2622):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000794c02ef"], 0x56}}, 0x0)

10m14.966973913s ago: executing program 0 (id=2629):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xda)

10m14.55070368s ago: executing program 32 (id=2629):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xda)

5m58.086131142s ago: executing program 3 (id=6113):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)

5m57.805562097s ago: executing program 3 (id=6118):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x6, 0x5a1, 0x883d}, 0x9c)

5m57.479258182s ago: executing program 3 (id=6124):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
sendto$inet(r0, 0x0, 0xfffffffffffffe21, 0x20180, 0x0, 0x0)

5m57.317960425s ago: executing program 3 (id=6127):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f6465636f6d706f73652c6e6c733d63703733372c626172726965722c747970653df268d6512c706172743d307830303030303030303030302c00"], 0x3, 0x6bf, &(0x7f0000000a80)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

5m57.055623769s ago: executing program 3 (id=6132):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x2, 0x0, 0x2, @remote, @local, 0x80, 0x7800, 0x0, 0x6}})

5m56.532640288s ago: executing program 3 (id=6141):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r0, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

5m56.203823403s ago: executing program 33 (id=6141):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r0, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1m46.80226272s ago: executing program 6 (id=9406):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x4, 0x1000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x2, 0x200}, 0x4}}, @TCA_MPLS_LABEL={0xfffffffffffffcd4, 0x5, 0x94c8}]}, {0x4, 0x4}, {0xc}, {0xfffffffffffffff1}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

1m46.461972656s ago: executing program 6 (id=9410):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001040)={0xfc, {"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", 0xfffffdd2}}, 0x1006)

1m45.905448495s ago: executing program 6 (id=9416):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
times(&(0x7f00000004c0))

1m45.645610229s ago: executing program 6 (id=9420):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)={[{@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {}, {@umask}, {@namecase}]}, 0x4, 0x1510, &(0x7f00000037c0)="$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")
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x400, 0x0)

1m45.02395587s ago: executing program 6 (id=9431):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in=@loopback}}]}, 0x154}}, 0x0)

1m44.352179031s ago: executing program 6 (id=9440):
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x303500, 0x12f, 0x4}, 0x18)
process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0)

1m43.884554558s ago: executing program 34 (id=9440):
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x303500, 0x12f, 0x4}, 0x18)
process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0)

2.530859658s ago: executing program 4 (id=10651):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
symlinkat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.132858604s ago: executing program 7 (id=10655):
chdir(&(0x7f0000000540)='./cgroup\x00')
unshare(0x22020400)

1.948664317s ago: executing program 7 (id=10657):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x3)

1.74748247s ago: executing program 2 (id=10658):
r0 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f9}, [], {0x14, 0x3ed}}, 0x28}}, 0x0)

1.715423091s ago: executing program 7 (id=10659):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4ffffff}}]}, {0x59}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0)

1.714041491s ago: executing program 1 (id=10660):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x128, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x250, 0x20a, 0x278, 0x250, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xc}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)

1.585097503s ago: executing program 4 (id=10661):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000040))

1.520596584s ago: executing program 2 (id=10662):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffd}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0xfb, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80d4}, 0x0)

1.429097156s ago: executing program 7 (id=10663):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2)

1.304921047s ago: executing program 5 (id=10665):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
brk(0x20ffc000)

1.201832589s ago: executing program 5 (id=10666):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000006100)=ANY=[@ANYBLOB="240000003a0007010000fbffffffffff027c0000040000000c0001800600060006"], 0x24}}, 0x0)

1.132962181s ago: executing program 7 (id=10667):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x3a8, 0x118, 0x3a8, 0x2b8, 0x1e8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private1, [], [], 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@ipv4={'\x00', '\xff\xff', @private}, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv4=@loopback}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)

1.010670762s ago: executing program 2 (id=10668):
prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)

932.612074ms ago: executing program 5 (id=10669):
r0 = socket(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wlan1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x23}})

838.168445ms ago: executing program 1 (id=10670):
close(0xffffffffffffffff)
close(0xffffffffffffffff)

837.459646ms ago: executing program 7 (id=10671):
syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x800401, &(0x7f00000001c0)=ANY=[@ANYBLOB='errors=remount-ro,noacl,heartbeat=none,intr,user_xattr,data=writeback,coherency=full,dir_resv_level=18446744073709551615\x00data=ordered,errors=remount-ro,\x00'], 0x8, 0x446c, &(0x7f0000004780)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

837.197955ms ago: executing program 4 (id=10672):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x713, 0x0, 0x2, {{@in=@loopback, @in=@remote}, {@in6=@private2, 0x0, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0x1}, {0xfffffffc}, 0xfffffffd, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x4e20, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x154}}, 0x0)

742.849427ms ago: executing program 2 (id=10673):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)

615.977819ms ago: executing program 1 (id=10674):
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

615.245029ms ago: executing program 4 (id=10675):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, 0x0, 0x8, 0x3)

581.144609ms ago: executing program 5 (id=10676):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f)

484.588881ms ago: executing program 2 (id=10677):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

436.801532ms ago: executing program 1 (id=10678):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0)

325.476634ms ago: executing program 4 (id=10679):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

282.767874ms ago: executing program 5 (id=10680):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10)
write(r0, &(0x7f0000000040)="240000001a00df0214f9f407000904001f000000ff020002000200000800040001000000", 0x24)

252.488085ms ago: executing program 2 (id=10681):
syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x3, 0x2f1, &(0x7f0000001040)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00)

210.201596ms ago: executing program 1 (id=10682):
r0 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f0000000280)=0xc)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)={0x34, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0x1c, 0x0, 0x0, 0x1, [@nested={0x18, 0x131, 0x0, 0x1, [@typed={0x11, 0x11d, 0x0, 0x0, @str='}!#^#\\,/,)\'/\x00'}]}]}]}, 0x34}], 0x1}, 0x0)

94.352028ms ago: executing program 5 (id=10683):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@local=@item_012={0x2, 0x2, 0xa, "f8b8"}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x2, 0x1, 0x1, "ce0d"}]}}, 0x0}, 0x0)

293.18µs ago: executing program 1 (id=10684):
r0 = syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1208000, &(0x7f0000000040)=ANY=[], 0x0, 0x9e9b, &(0x7f000000a280)="$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")
fstat(r0, 0x0)

0s ago: executing program 4 (id=10685):
unshare(0x2c020400)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

85794][T26310] loop4: detected capacity change from 0 to 512
[  787.416679][T26310] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.9362: invalid block
[  787.495565][T26310] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.9362: invalid indirect mapped block 10 (level 1)
[  787.537282][T26310] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.9362: invalid indirect mapped block 8 (level 1)
[  787.581007][T26310] EXT4-fs (loop4): 1 truncate cleaned up
[  787.586765][T26310] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  787.661580][T26310] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.9362: unexpected EA_INODE flag
[  787.773157][T26330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9368'.
[  787.869807][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  787.884310][T26330] netlink: 4260 bytes leftover after parsing attributes in process `syz.2.9368'.
[  787.997182][T26334] cgroup: Unknown subsys name 'pcr'
[  788.226329][T26344] loop6: detected capacity change from 0 to 512
[  788.316238][T26344] EXT4-fs: Ignoring removed orlov option
[  788.344575][T26344] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  788.411181][T26347] loop5: detected capacity change from 0 to 2048
[  788.426205][T26344] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.9378: casefold flag without casefold feature
[  788.429553][T26352] netlink: 'syz.1.9381': attribute type 21 has an invalid length.
[  788.441022][T26347] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  788.447316][T26352] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9381'.
[  788.542393][T26344] EXT4-fs (loop6): Remounting filesystem read-only
[  788.549641][T26344] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.9378: couldn't read orphan inode 15 (err -117)
[  788.578567][T26357] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  788.581170][T26347] syz.5.9379: attempt to access beyond end of device
[  788.581170][T26347] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  788.612787][T26344] EXT4-fs (loop6): Remounting filesystem read-only
[  788.626182][T26344] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  788.636267][T26359] netlink: 268 bytes leftover after parsing attributes in process `syz.1.9385'.
[  788.656705][T26359] unsupported nla_type 65024
[  788.840906][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  788.852280][T18579] EXT4-fs (loop6): unmounting filesystem.
[  788.917222][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9387'.
[  788.918156][T26347] Remounting filesystem read-only
[  788.932402][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  788.952816][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  788.962780][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  788.973394][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  788.989204][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.033832][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.058696][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.087423][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.131979][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.167008][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.249692][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.251329][T26374] xt_CT: You must specify a L4 protocol and not use inversions on it
[  789.286712][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.308095][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.342982][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.399514][T26347] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  789.451642][   T27] audit: type=1800 audit(789.867:3716): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9379" name="file2" dev="loop5" ino=16 res=0 errno=0
[  789.585038][T26347] syz.5.9379 (26347) used greatest stack depth: 17744 bytes left
[  789.622789][T26384] loop2: detected capacity change from 0 to 1024
[  789.645589][T26384] hfsplus: failed to load root directory
[  789.951719][T26395] loop4: detected capacity change from 0 to 8
[  789.958545][T26395] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  790.007378][T26395] cramfs: Error -3 while decompressing!
[  790.018809][T26400] netlink: 'syz.1.9404': attribute type 10 has an invalid length.
[  790.040149][T26395] cramfs: ffffffff9754f548(18)->ffff888051729000(4096)
[  790.069750][T26395] cramfs: Error -3 while decompressing!
[  790.075451][T26395] cramfs: ffffffff9754f548(18)->ffff888051729000(4096)
[  790.109060][   T27] audit: type=1800 audit(790.517:3717): pid=26395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.9402" name="file1" dev="loop4" ino=324 res=0 errno=0
[  790.161023][T26403] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9406'.
[  790.290414][T26405] loop5: detected capacity change from 0 to 512
[  790.307734][T26407] loop1: detected capacity change from 0 to 16
[  790.360006][T26407] erofs: (device loop1): mounted with root inode @ nid 36.
[  790.414645][T26405] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  790.515118][T26405] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.9407: bg 0: block 18: invalid block bitmap
[  790.552647][T26405] Quota error (device loop5): write_blk: dquota write failed
[  790.553013][T26405] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  790.553087][T26405] EXT4-fs error (device loop5): ext4_acquire_dquot:6795: comm syz.5.9407: Failed to acquire dquot type 1
[  790.699142][T10377] EXT4-fs (loop5): unmounting filesystem.
[  791.167028][T26398] loop2: detected capacity change from 0 to 32768
[  791.302953][T26433] netlink: 'syz.1.9421': attribute type 6 has an invalid length.
[  791.323951][T26435] loop6: detected capacity change from 0 to 256
[  791.411171][T26435] exfat: Deprecated parameter 'namecase'
[  791.510184][T26435] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  791.999531][T26455] loop1: detected capacity change from 0 to 128
[  792.011147][T26457] xt_TPROXY: Can be used only with -p tcp or -p udp
[  792.023386][T26455] VFS: Found a Xenix FS (block size = 1024) on device loop1
[  792.052565][T18579] bridge0: port 3(syz_tun) entered disabled state
[  792.220176][ T4249] sysv_free_block: flc_count > flc_size
[  792.221787][T18579] device syz_tun left promiscuous mode
[  792.225834][ T4249] sysv_free_block: flc_count > flc_size
[  792.240143][T18579] bridge0: port 3(syz_tun) entered disabled state
[  792.262306][ T4249] sysv_free_block: flc_count > flc_size
[  792.279484][ T4249] sysv_free_block: flc_count > flc_size
[  792.307353][ T4249] sysv_free_block: flc_count > flc_size
[  792.313760][ T4249] sysv_free_block: flc_count > flc_size
[  792.340167][ T4249] sysv_free_block: flc_count > flc_size
[  792.346002][ T4249] sysv_free_block: flc_count > flc_size
[  792.364848][ T4249] sysv_free_block: flc_count > flc_size
[  792.390360][ T4249] sysv_free_block: flc_count > flc_size
[  792.431078][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  792.601006][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.632850][T26473] loop1: detected capacity change from 0 to 256
[  792.658503][T26473] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  792.858897][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.086351][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.121623][T26480] tc_dump_action: action bad kind
[  793.301409][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.751613][T26498] __nla_validate_parse: 2 callbacks suppressed
[  793.751633][T26498] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9455'.
[  793.832055][   T11] device 0 left promiscuous mode
[  794.132036][ T4259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  794.170523][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  794.182643][ T4259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  794.191404][ T4259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  794.199078][ T4259] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  794.207023][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  794.669677][ T4299] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  794.859516][ T4299] usb 3-1: Using ep0 maxpacket: 32
[  794.873273][ T4299] usb 3-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=b9.a0
[  794.903049][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.939165][ T4299] usb 3-1: Product: syz
[  794.947415][T26495] loop4: detected capacity change from 0 to 40427
[  794.949384][ T4299] usb 3-1: Manufacturer: syz
[  794.998129][ T4299] usb 3-1: SerialNumber: syz
[  795.015028][T26495] F2FS-fs (loop4): invalid crc value
[  795.022832][ T4299] usb 3-1: config 0 descriptor??
[  795.047144][ T4299] pwc: Visionite VCS-UC300 USB webcam detected.
[  795.112798][T26495] F2FS-fs (loop4): Found nat_bits in checkpoint
[  795.253297][ T4299] pwc: Failed to set LED on/off time (-71)
[  795.263197][ T4299] pwc: send_video_command error -71
[  795.279415][ T4299] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  795.299615][ T4299] Philips webcam: probe of 3-1:0.0 failed with error -71
[  795.326145][ T4299] usb 3-1: USB disconnect, device number 46
[  795.401554][T26495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  795.753909][T26525] loop5: detected capacity change from 0 to 32768
[  795.843123][T26525] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.9465 (26525)
[  795.910151][T26525] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  795.958038][T26508] chnl_net:caif_netlink_parms(): no params data found
[  795.970557][T26525] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  796.013838][T26525] BTRFS info (device loop5): force zlib compression, level 3
[  796.042385][T26525] BTRFS info (device loop5): force clearing of disk cache
[  796.090198][T26525] BTRFS info (device loop5): setting nodatasum
[  796.096498][T26525] BTRFS info (device loop5): allowing degraded mounts
[  796.129659][T26525] BTRFS info (device loop5): enabling disk space caching
[  796.189809][T26525] BTRFS info (device loop5): disk space caching is enabled
[  796.299610][ T4267] Bluetooth: hci3: command 0x0409 tx timeout
[  796.486260][T26525] BTRFS info (device loop5): rebuilding free space tree
[  796.617168][T26525] BTRFS info (device loop5): disabling free space tree
[  796.639624][T26525] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  796.679576][T26525] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  796.812041][   T11] bond0: (slave wlan1): Releasing backup interface
[  796.950618][T10377] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  796.953300][T26508] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.985377][T26603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9482'.
[  796.987235][T26508] bridge0: port 1(bridge_slave_0) entered disabled state
[  797.002116][ T4299] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  797.114404][T26508] device bridge_slave_0 entered promiscuous mode
[  797.242737][ T4299] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  797.259487][ T4299] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  797.279619][ T4299] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  797.299298][ T4299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  797.324159][ T4299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  797.363318][ T4299] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  797.382877][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  797.399467][ T4299] usb 3-1: Product: syz
[  797.409191][ T4299] usb 3-1: Manufacturer: syz
[  797.442826][ T4299] cdc_wdm 3-1:1.0: skipping garbage
[  797.448091][ T4299] cdc_wdm 3-1:1.0: skipping garbage
[  797.509615][ T4299] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  797.525905][ T4299] cdc_wdm 3-1:1.0: Unknown control protocol
[  797.589117][T26594] loop1: detected capacity change from 0 to 32768
[  797.659877][T26594] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.9477 (26594)
[  797.686100][T26596] cdc_wdm 3-1:1.0: Error submitting int urb - -90
[  797.722980][ T4540] usb 3-1: USB disconnect, device number 47
[  797.839501][T26508] bridge0: port 2(bridge_slave_1) entered blocking state
[  797.846697][T26508] bridge0: port 2(bridge_slave_1) entered disabled state
[  797.855920][T26594] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  797.876515][T26594] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  797.880136][T26508] device bridge_slave_1 entered promiscuous mode
[  797.906956][T26594] BTRFS info (device loop1): force zlib compression, level 3
[  797.949744][T26594] BTRFS info (device loop1): force clearing of disk cache
[  797.978239][T26594] BTRFS info (device loop1): setting nodatasum
[  797.989507][T26594] BTRFS info (device loop1): enabling disk space caching
[  798.024803][T26594] BTRFS info (device loop1): disk space caching is enabled
[  798.340800][T26594] BTRFS info (device loop1): enabling ssd optimizations
[  798.369449][ T4267] Bluetooth: hci3: command 0x041b tx timeout
[  798.388819][T26594] BTRFS info (device loop1): rebuilding free space tree
[  798.416555][T26594] BTRFS info (device loop1): disabling free space tree
[  798.424230][T26594] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  798.434164][T26594] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  798.473992][T26508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  798.518757][   T11] device hsr_slave_0 left promiscuous mode
[  798.536982][T26645] loop5: detected capacity change from 0 to 64
[  798.549261][T26594] BTRFS info (device loop1): balance: start -f -sprofiles=data|system|raid1|raid5|raid1c3|0x3800,usage=1..9,devid=0,drange=9..1,vrange=2..1024,stripes=3..2145695905
[  798.566612][   T11] device hsr_slave_1 left promiscuous mode
[  798.589486][ T4569] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  798.613649][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  798.622625][T26594] BTRFS info (device loop1): balance: ended with status: 0
[  798.630186][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  798.646982][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  798.665395][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  798.693839][   T11] device bridge_slave_1 left promiscuous mode
[  798.699883][T26648] loop4: detected capacity change from 0 to 512
[  798.726275][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.739886][T26648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  798.773902][ T4249] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  798.789629][ T4569] usb 3-1: Using ep0 maxpacket: 8
[  798.796315][   T11] device bridge_slave_0 left promiscuous mode
[  798.804745][ T4569] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  798.805055][T26648] EXT4-fs (loop4): orphan cleanup on readonly fs
[  798.829581][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.853101][ T4569] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  798.878289][T26648] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.9492: bg 0: block 248: padding at end of block bitmap is not set
[  798.936477][ T4569] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  798.948034][T26648] Quota error (device loop4): write_blk: dquota write failed
[  798.961572][   T11] device veth1_macvtap left promiscuous mode
[  798.968567][   T11] device veth0_macvtap left promiscuous mode
[  798.982704][T26648] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  798.985575][   T11] device veth1_vlan left promiscuous mode
[  798.995021][ T4569] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  799.016842][   T11] device veth0_vlan left promiscuous mode
[  799.026022][ T4569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.039455][T26648] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.9492: Failed to acquire dquot type 1
[  799.043520][ T4569] usb 3-1: Product: syz
[  799.055586][ T4569] usb 3-1: Manufacturer: syz
[  799.070785][ T4569] usb 3-1: SerialNumber: syz
[  799.076050][T26648] EXT4-fs (loop4): 1 truncate cleaned up
[  799.391458][T26648] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  799.461767][T26648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  799.471222][T26648] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  799.496917][T26648] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  799.526529][ T4569] usb 3-1: 0:2 : does not exist
[  799.568553][ T4569] usb 3-1: USB disconnect, device number 48
[  799.581900][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  800.459449][ T4267] Bluetooth: hci3: command 0x040f tx timeout
[  801.162570][   T11] bond1 (unregistering): Released all slaves
[  801.853139][   T11] team0 (unregistering): Port device team_slave_1 removed
[  801.930489][ T4569] infiniband syz1: ib_query_port failed (-19)
[  801.939825][   T11] team0 (unregistering): Port device team_slave_0 removed
[  802.027193][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  802.103405][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  802.540285][ T4267] Bluetooth: hci3: command 0x0419 tx timeout
[  802.994793][   T11] bond0 (unregistering): Released all slaves
[  803.090497][T26508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  803.328372][T26508] team0: Port device team_slave_0 added
[  803.411502][T26508] team0: Port device team_slave_1 added
[  803.493121][T26508] batman_adv: batadv0: Adding interface: batadv_slave_0
[  803.539432][T26508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  803.581115][T26674] loop4: detected capacity change from 0 to 4096
[  803.673316][T26508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  803.715820][T26508] batman_adv: batadv0: Adding interface: batadv_slave_1
[  803.729279][T26508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  803.894960][T26508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  804.178027][T26697] loop4: detected capacity change from 0 to 512
[  804.200267][T26508] device hsr_slave_0 entered promiscuous mode
[  804.231854][T26508] device hsr_slave_1 entered promiscuous mode
[  804.262367][T26697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  804.286740][T26508] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  804.332267][T26508] Cannot create hsr debugfs directory
[  804.384121][T26697] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  804.407296][T26697] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.9511: invalid indirect mapped block 2683928664 (level 1)
[  804.453716][T26697] EXT4-fs (loop4): Remounting filesystem read-only
[  804.467581][T26697] EXT4-fs (loop4): 1 truncate cleaned up
[  804.507552][T26697] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  804.807048][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  804.847475][T26715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9517'.
[  804.998403][T26718] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  805.061410][T26690] loop5: detected capacity change from 0 to 32768
[  805.091489][T26690] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.9509 (26690)
[  805.150616][T26508] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  805.179632][T26690] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  805.229972][T26690] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  805.231436][T26508] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  805.239804][T26690] BTRFS info (device loop5): force zlib compression, level 3
[  805.330084][T26690] BTRFS info (device loop5): force clearing of disk cache
[  805.337294][T26690] BTRFS info (device loop5): setting nodatasum
[  805.373838][T26508] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  805.401575][T26690] BTRFS info (device loop5): use zlib compression, level 3
[  805.432201][T26690] BTRFS info (device loop5): allowing degraded mounts
[  805.438591][T26508] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  805.479443][T26690] BTRFS info (device loop5): enabling disk space caching
[  805.486572][T26690] BTRFS info (device loop5): disk space caching is enabled
[  805.645181][T26508] 8021q: adding VLAN 0 to HW filter on device bond0
[  805.671354][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  805.731056][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  805.798670][T26508] 8021q: adding VLAN 0 to HW filter on device team0
[  805.820097][T26690] BTRFS info (device loop5): enabling ssd optimizations
[  805.844184][T26690] BTRFS info (device loop5): rebuilding free space tree
[  805.861546][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  805.879076][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  805.918171][T26690] BTRFS info (device loop5): disabling free space tree
[  805.929196][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.936436][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state
[  805.967097][T26690] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  805.990048][T26756] netlink: 'syz.1.9526': attribute type 1 has an invalid length.
[  806.009759][T26690] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  806.038867][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  806.073891][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  806.127756][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  806.169976][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.177150][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  806.208754][T26690] BTRFS error (device loop5): target device  is invalid!
[  806.216437][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  806.257938][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  806.340921][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  806.374651][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  806.396575][T10377] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  806.407420][T26775] tmpfs: Bad value for 'mpol'
[  806.415801][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  806.461058][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  806.500112][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  806.540307][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  806.580358][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  806.622656][T26508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  806.629943][T26778] loop1: detected capacity change from 0 to 128
[  806.671720][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  806.694918][T10485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  806.963523][T26785] loop2: detected capacity change from 0 to 1764
[  806.982363][T26787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9536'.
[  807.444413][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  807.490620][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  807.536629][T26508] 8021q: adding VLAN 0 to HW filter on device batadv0
[  807.897665][T26816] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9543'.
[  808.373166][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  808.379604][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  808.489663][T26837] netlink: 'syz.1.9551': attribute type 13 has an invalid length.
[  808.497554][T26838] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9550'.
[  808.762349][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  808.772371][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  808.860551][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  808.893090][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  808.941586][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  808.970355][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  809.006950][T26508] device veth0_vlan entered promiscuous mode
[  809.015530][T26854] netlink: 1392 bytes leftover after parsing attributes in process `syz.1.9558'.
[  809.032018][T26857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9557'.
[  809.056448][T26857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9557'.
[  809.115149][T26508] device veth1_vlan entered promiscuous mode
[  809.251825][T26508] device veth0_macvtap entered promiscuous mode
[  809.283846][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  809.298945][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  809.328783][T26865] loop4: detected capacity change from 0 to 256
[  809.334395][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  809.366770][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  809.413396][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  809.449085][T26865] FAT-fs (loop4): Directory bread(block 64) failed
[  809.478578][T26865] FAT-fs (loop4): Directory bread(block 65) failed
[  809.514619][T26865] FAT-fs (loop4): Directory bread(block 66) failed
[  809.546193][T26865] FAT-fs (loop4): Directory bread(block 67) failed
[  809.573490][T26865] FAT-fs (loop4): Directory bread(block 68) failed
[  809.592398][T26865] FAT-fs (loop4): Directory bread(block 69) failed
[  809.608183][T26865] FAT-fs (loop4): Directory bread(block 70) failed
[  809.622932][T26865] FAT-fs (loop4): Directory bread(block 71) failed
[  809.637869][T26865] FAT-fs (loop4): Directory bread(block 72) failed
[  809.652976][T26865] FAT-fs (loop4): Directory bread(block 73) failed
[  809.752183][   T27] audit: type=1800 audit(810.167:3718): pid=26865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9562" name="file1" dev="loop4" ino=1048767 res=0 errno=0
[  809.858110][T26508] device veth1_macvtap entered promiscuous mode
[  809.894633][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  809.970000][T26508] batman_adv: batadv0: Interface activated: batadv_slave_0
[  810.009690][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  810.050521][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  810.112445][T26508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  810.150532][T26508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  810.211074][T26508] batman_adv: batadv0: Interface activated: batadv_slave_1
[  810.260075][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  810.278639][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  810.304796][T26508] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  810.324467][T26508] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  810.361387][T26508] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  810.417682][T26508] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  810.460652][T26894] netlink: 'syz.2.9571': attribute type 10 has an invalid length.
[  810.621650][T26898] device bond3 entered promiscuous mode
[  810.874917][ T4561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  810.930770][ T4561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  810.992523][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  811.028573][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9577'.
[  811.073764][ T4561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  811.117719][ T4561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  811.214718][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  811.589778][T26922] loop2: detected capacity change from 0 to 4096
[  811.669465][T26922] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  812.732373][   T27] audit: type=1326 audit(813.147:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26975 comm="syz.7.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac38d169 code=0x7ffc0000
[  812.832991][T26980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9604'.
[  812.838509][   T27] audit: type=1326 audit(813.157:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26975 comm="syz.7.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7efcac38d169 code=0x7ffc0000
[  812.904457][T26972] loop5: detected capacity change from 0 to 4096
[  812.958108][T26982] loop1: detected capacity change from 0 to 16
[  812.974593][T26972] ntfs: (device loop5): is_boot_sector_ntfs(): Invalid end of sector marker.
[  812.974774][T26982] erofs: (device loop1): mounted with root inode @ nid 36.
[  813.002513][   T27] audit: type=1326 audit(813.157:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26975 comm="syz.7.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac38d169 code=0x7ffc0000
[  813.101050][   T27] audit: type=1326 audit(813.157:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26975 comm="syz.7.9602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac38d169 code=0x7ffc0000
[  813.127583][T26972] ntfs: volume version 3.1.
[  813.212301][T26972] ntfs: (device loop5): parse_options(): Unrecognized mount option ¯ý‹ü×�ÿ÷ÌÿpCýÃõ·Ôù¯ÿ‹üבÿ÷ÌÿpCýÃõ·Ôùoü‹ü7þ±ù¹…üO3ÌÿpCýÃõ·ÔùoF¯uŸL’ç?•ôˆäþ¬ü¿¿söŸ
[  813.212301][T26972] ó?ÜPÿpCýÃ-uþ[ÈÿÁü7Ô?ÜPÿpK�ÿ6ò?D0ÿÃõ7Ô?ÜR翃üÌÿpCýÃõ·Ôùï"ÿCó?ÜPÿpCýÃ-uþ{ÈÿÁü7Ô?ÜPÿpK�ÿ>ò?D0ÿÃõ7Ô?ÜRç€üÌÿpCýÃõ·ÔùOE>ÿG.
[  814.037869][T27014] loop7: detected capacity change from 0 to 256
[  814.054663][T27016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9618'.
[  814.098391][T27016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9618'.
[  814.662370][T27027] loop4: detected capacity change from 0 to 4096
[  814.681594][T27027] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker.
[  814.757499][T27027] ntfs: volume version 3.1.
[  814.849382][T27027] ntfs: (device loop4): parse_options(): Unrecognized mount option ¯ý‹ü×�ÿ÷ÌÿpCýÃõ·Ôù¯ÿ‹üבÿ÷ÌÿpCýÃõ·Ôùoü‹ü7þ±ù¹…üO3ÌÿpCýÃõ·ÔùoF¯uŸL’ç?•ôˆäþ¬ü¿¿söŸ
[  814.849382][T27027] ó?ÜPÿpCýÃ-uþ[ÈÿÁü7Ô?ÜPÿpK�ÿ6ò?D0ÿÃõ7Ô?ÜR翃üÌÿpCýÃõ·Ôùï"ÿCó?ÜPÿpCýÃ-uþ{ÈÿÁü7Ô?ÜPÿpK�ÿ>ò?D0ÿÃõ7Ô?ÜRç€üÌÿpCýÃõ·ÔùOE>ÿG.
[  815.292780][T27015] loop2: detected capacity change from 0 to 32768
[  815.340755][T27015] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.9619 (27015)
[  815.442582][T27015] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  815.490355][T27015] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  815.539537][T27015] BTRFS info (device loop2): force zlib compression, level 3
[  815.547003][T27015] BTRFS info (device loop2): force clearing of disk cache
[  815.619684][T27015] BTRFS info (device loop2): setting nodatasum
[  815.639289][T27015] BTRFS info (device loop2): allowing degraded mounts
[  815.668050][T27015] BTRFS info (device loop2): enabling disk space caching
[  815.690958][T27015] BTRFS info (device loop2): disk space caching is enabled
[  815.880243][T27077] netlink: 'syz.5.9641': attribute type 1 has an invalid length.
[  816.122125][T27015] BTRFS info (device loop2): rebuilding free space tree
[  816.133552][T27089] loop1: detected capacity change from 0 to 4096
[  816.179901][T27089] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid end of sector marker.
[  816.190101][T27015] BTRFS info (device loop2): disabling free space tree
[  816.199151][T27015] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  816.249575][T27015] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  816.251689][T27102] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9646'.
[  816.288875][T27089] ntfs: volume version 3.1.
[  816.343311][T27102] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9646'.
[  816.370305][T27089] ntfs: (device loop1): parse_options(): Unrecognized mount option ¯ý‹ü×�ÿ÷ÌÿpCýÃõ·Ôù¯ÿ‹üבÿ÷ÌÿpCýÃõ·Ôùoü‹ü7þ±ù¹…üO3ÌÿpCýÃõ·ÔùoF¯uŸL’ç?•ôˆäþ¬ü¿¿söŸ
[  816.370305][T27089] ó?ÜPÿpCýÃ-uþ[ÈÿÁü7Ô?ÜPÿpK�ÿ6ò?D0ÿÃõ7Ô?ÜR翃üÌÿpCýÃõ·Ôùï"ÿCó?ÜPÿpCýÃ-uþ{ÈÿÁü7Ô?ÜPÿpK�ÿ>ò?D0ÿÃõ7Ô?ÜRç€üÌÿpCýÃõ·ÔùOE>ÿG.
[  816.409700][T27102] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9646'.
[  816.570252][ T4252] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  816.683793][T27109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9651'.
[  817.446042][T27133] loop1: detected capacity change from 0 to 128
[  817.453770][T27099] loop7: detected capacity change from 0 to 32768
[  817.513606][T27099] find_entry called with index >= next_index
[  817.588412][T27133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  817.657144][T27099] find_entry called with index >= next_index
[  817.665635][T27099] find_entry called with index >= next_index
[  817.677966][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  818.145483][T27157] netlink: 'syz.4.9667': attribute type 16 has an invalid length.
[  818.155243][T27157] netlink: 'syz.4.9667': attribute type 3 has an invalid length.
[  818.179517][T27157] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9667'.
[  818.409653][T27166] snd_dummy snd_dummy.0: control 0:0:1073741821:syz1:0 is already present
[  819.066052][T27191] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  819.105136][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  819.266789][T27194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9685'.
[  819.353745][T27197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9686'.
[  819.389485][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9686'.
[  819.403256][T27197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9686'.
[  819.437977][T27199] loop1: detected capacity change from 0 to 1024
[  819.527008][T27199] syz.1.9687: attempt to access beyond end of device
[  819.527008][T27199] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  819.851472][T27207] loop4: detected capacity change from 0 to 2048
[  819.885874][T27207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  821.085985][T27247] loop5: detected capacity change from 0 to 2048
[  821.147438][T27250] loop4: detected capacity change from 0 to 2048
[  821.161683][T27247] EXT4-fs: Ignoring removed bh option
[  821.260822][T27250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  821.295011][T27247] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  821.347775][T27256] loop7: detected capacity change from 0 to 2048
[  821.425117][T27256] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  821.466520][T27256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  821.526651][T10377] EXT4-fs (loop5): unmounting filesystem.
[  821.731934][T27226] loop2: detected capacity change from 0 to 32768
[  821.801509][T27265] loop1: detected capacity change from 0 to 4096
[  821.826695][T27268] loop5: detected capacity change from 0 to 4096
[  821.856909][T27265] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  821.875504][T27265] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  821.892722][T27265] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  821.929962][T27265] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  821.945922][T27226] XFS (loop2): Mounting V5 Filesystem
[  822.021320][T27265] ntfs: volume version 3.1.
[  822.097751][ T5411] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  822.166793][T27226] XFS (loop2): Ending clean mount
[  822.212685][T27226] XFS (loop2): Quotacheck needed: Please wait.
[  822.343114][T27226] XFS (loop2): Quotacheck: Done.
[  822.497214][T27295] loop4: detected capacity change from 0 to 2048
[  822.562230][T27295] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  822.583898][ T4252] XFS (loop2): Unmounting Filesystem
[  822.619548][T27295] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0
[  822.706400][T27301] loop7: detected capacity change from 0 to 4096
[  822.746541][T27301] ntfs: volume version 3.1.
[  822.754339][T27303] loop5: detected capacity change from 0 to 1024
[  822.794514][T27301] ntfs: (device loop7): ntfs_is_extended_system_file(): Unindexed file name. You should run chkdsk.
[  822.818501][T27301] ntfs: (device loop7): ntfs_read_locked_inode(): $DATA attribute is missing.
[  822.844097][T27301] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x18 as bad.  Run chkdsk.
[  822.879866][T27301] ntfs: (device loop7): load_and_init_quota(): Failed to load $Quota.
[  822.913702][T27301] ntfs: (device loop7): load_system_files(): Failed to load $Quota.  Mounting read-only.  Run chkdsk.
[  823.007929][   T41] hfsplus: b-tree write err: -5, ino 4
[  823.115658][   T26] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  823.341926][   T26] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  823.357660][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.418659][   T26] usb 5-1: config 0 descriptor??
[  823.439659][   T26] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  823.452133][T27320] loop1: detected capacity change from 0 to 64
[  823.493135][T27320] hfs: request for non-existent node 16777216 in B*Tree
[  823.523800][T27320] hfs: request for non-existent node 16777216 in B*Tree
[  823.554835][T27320] hfs: request for non-existent node 16777216 in B*Tree
[  823.570415][T27318] loop5: detected capacity change from 0 to 4096
[  823.585473][T27320] hfs: request for non-existent node 16777216 in B*Tree
[  823.614663][T27318] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  823.678606][T27318] ntfs: volume version 3.1.
[  823.688126][T27324] netlink: 'syz.2.9731': attribute type 2 has an invalid length.
[  823.697177][T27324] netlink: 'syz.2.9731': attribute type 1 has an invalid length.
[  823.837652][   T26] gspca_sn9c2028: read1 error -71
[  823.848567][   T26] gspca_sn9c2028: read1 error -71
[  823.874369][   T26] sn9c2028: probe of 5-1:0.0 failed with error -71
[  823.890544][   T26] usb 5-1: USB disconnect, device number 34
[  823.925485][ T4797] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  824.072059][T27330] loop5: detected capacity change from 0 to 512
[  824.108485][T27330] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  824.141432][ T4797] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  824.153499][ T4797] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  824.167415][ T4797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  824.179056][ T4797] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  824.204003][ T4797] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  824.218307][T27330] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.9741: invalid indirect mapped block 83886080 (level 1)
[  824.242735][ T4797] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.252003][ T4797] usb 8-1: Product: syz
[  824.256232][T27330] EXT4-fs (loop5): Remounting filesystem read-only
[  824.263501][ T4797] usb 8-1: Manufacturer: syz
[  824.268621][T27330] EXT4-fs (loop5): 1 orphan inode deleted
[  824.274959][ T4797] usb 8-1: SerialNumber: syz
[  824.281169][T27330] EXT4-fs (loop5): 1 truncate cleaned up
[  824.287940][ T4797] usb 8-1: config 0 descriptor??
[  824.293557][T27330] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  824.314050][ T4797] garmin_gps 8-1:0.0: Garmin GPS usb/tty converter detected
[  824.324691][ T4797] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  824.352427][ T4797] garmin_gps: probe of ttyUSB0 failed with error -8
[  824.511937][T10377] EXT4-fs (loop5): unmounting filesystem.
[  824.577603][ T4797] usb 8-1: USB disconnect, device number 2
[  824.595058][ T4797] garmin_gps 8-1:0.0: device disconnected
[  824.602982][T27344] autofs4:pid:27344:autofs_fill_super: called with bogus options
[  825.450425][T27369] loop1: detected capacity change from 0 to 2048
[  825.524032][T27373] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  826.491072][T27408] loop5: detected capacity change from 0 to 128
[  826.569916][T27408] befs: (loop5): invalid magic header
[  827.027474][T27429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9789'.
[  827.092584][T27429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9789'.
[  827.133683][T27427] loop1: detected capacity change from 0 to 4096
[  827.165054][T27427] ntfs3: Unknown parameter '0xffffffffffffffff0x0000000000000000'
[  827.198080][T27437] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  827.975935][T27464] loop5: detected capacity change from 0 to 2048
[  828.006680][T27467] loop4: detected capacity change from 0 to 8
[  828.097128][T27471] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  828.162801][T27472] 9pnet_fd: p9_fd_create_tcp (27472): problem connecting socket to 127.0.0.1
[  828.178888][T27476] loop7: detected capacity change from 0 to 512
[  828.226804][T27471] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  828.266201][T27471] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  828.281130][T27476] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  828.351081][T27471] Remounting filesystem read-only
[  828.380652][T27481] 9pnet: Found fid 0 not clunked
[  828.477866][T27476] EXT4-fs error (device loop7): ext4_get_first_dir_block:3583: inode #12: comm syz.7.9807: Attempting to read directory block (0) that is past i_size (3)
[  828.529495][T27485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9808'.
[  828.553473][T10377] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  828.814206][T27493] loop1: detected capacity change from 0 to 256
[  828.825634][T26508] EXT4-fs (loop7): unmounting filesystem.
[  828.927912][T27493] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  829.095655][T27495] loop4: detected capacity change from 0 to 4096
[  829.155552][T27495] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  829.390184][T27495] ntfs3: loop4: failed to convert "c46c" to koi8-r
[  829.472460][T27515] loop2: detected capacity change from 0 to 256
[  829.644049][T27522] netlink: 160 bytes leftover after parsing attributes in process `syz.7.9825'.
[  829.772914][T27526] netlink: 19 bytes leftover after parsing attributes in process `syz.4.9826'.
[  829.809504][T27526] netlink: 19 bytes leftover after parsing attributes in process `syz.4.9826'.
[  829.908703][T27530] loop1: detected capacity change from 0 to 256
[  829.937944][T27530] exfat: Deprecated parameter 'namecase'
[  829.969174][T27530] exfat: Deprecated parameter 'namecase'
[  830.021694][T27530] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d)
[  830.876070][T27557] loop7: detected capacity change from 0 to 8192
[  831.374748][T27585] loop4: detected capacity change from 0 to 512
[  831.424223][T27585] EXT4-fs: Ignoring removed bh option
[  831.474320][T27585] EXT4-fs: Ignoring removed mblk_io_submit option
[  831.501382][T27585] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  831.577138][T27593] can0: slcan on ptm0.
[  831.580975][T27585] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  831.605409][T27585] EXT4-fs (loop4): orphan cleanup on readonly fs
[  831.641806][T27585] __quota_error: 15 callbacks suppressed
[  831.641828][T27585] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4
[  831.745289][T27585] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota
[  831.790360][T27585] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.9850: Failed to acquire dquot type 1
[  831.814818][T27585] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.9850: Invalid block bitmap block 0 in block_group 0
[  831.831889][T27592] can0 (unregistered): slcan off ptm0.
[  831.860905][T27585] Quota error (device loop4): write_blk: dquota write failed
[  831.875108][T27585] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  831.906347][T27585] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.9850: Failed to acquire dquot type 1
[  831.999065][T27585] Quota error (device loop4): write_blk: dquota write failed
[  832.039648][T27585] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  832.076782][T27585] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.9850: Failed to acquire dquot type 1
[  832.115882][T27585] EXT4-fs (loop4): 1 orphan inode deleted
[  832.137000][T27585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  832.307695][T27621] loop5: detected capacity change from 0 to 764
[  832.347032][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  832.361459][T27623] netlink: 'syz.2.9864': attribute type 10 has an invalid length.
[  832.400337][T27623] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  832.696851][T27632] netlink: 'syz.2.9867': attribute type 3 has an invalid length.
[  833.242790][T27649] loop7: detected capacity change from 0 to 4096
[  833.279531][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9876'.
[  833.391075][T27649] ntfs: volume version 3.1.
[  833.609576][T27664] netlink: 'syz.1.9878': attribute type 10 has an invalid length.
[  833.626000][T27664] team0: Device ipvlan1 failed to register rx_handler
[  834.312936][T27682] loop7: detected capacity change from 0 to 1024
[  834.423325][T27682] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  834.439599][T27682] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  834.633765][T27689] loop2: detected capacity change from 0 to 1024
[  834.713920][T27689] hfsplus: request for non-existent node 65280 in B*Tree
[  834.751740][T27689] hfsplus: request for non-existent node 65280 in B*Tree
[  834.826975][T27651] loop4: detected capacity change from 0 to 32768
[  834.870322][T27651] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  834.878601][T27651] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  834.982734][T27651] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  835.011063][ T4538] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  835.017897][ T4538] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  835.140036][ T4301] hfsplus: b-tree write err: -5, ino 4
[  835.240605][ T4538] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 222ms
[  835.266777][T27703] netlink: 'syz.2.9893': attribute type 10 has an invalid length.
[  835.290725][T27703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9893'.
[  835.292074][ T4538] gfs2: fsid=syz:syz.0: jid=0: Done
[  835.316865][T27651] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  835.318049][T27635] loop5: detected capacity change from 0 to 65536
[  835.347336][T27703] bridge0: port 1(dummy0) entered blocking state
[  835.354304][T27703] bridge0: port 1(dummy0) entered disabled state
[  835.373268][T27703] bridge0: port 1(dummy0) entered blocking state
[  835.379795][T27703] bridge0: port 1(dummy0) entered forwarding state
[  835.398046][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  835.427962][T27635] XFS (loop5): Mounting V5 Filesystem
[  835.626760][T27635] XFS (loop5): Ending clean mount
[  835.840343][T10377] XFS (loop5): Unmounting Filesystem
[  836.209758][T27734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9902'.
[  836.253086][T27734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9902'.
[  836.319495][T27734] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9902'.
[  836.905164][T27759] netlink: 'syz.7.9910': attribute type 1 has an invalid length.
[  836.959672][T27759] netlink: 220 bytes leftover after parsing attributes in process `syz.7.9910'.
[  837.105879][T27765] loop2: detected capacity change from 0 to 256
[  837.198870][T27765] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  837.420414][T27779] loop1: detected capacity change from 0 to 1024
[  837.680101][ T4306] hfsplus: b-tree write err: -5, ino 4
[  837.817605][T27792] loop2: detected capacity change from 0 to 256
[  837.860247][T27792] exfat: Deprecated parameter 'namecase'
[  837.865982][T27792] exfat: Deprecated parameter 'namecase'
[  837.905224][T27792] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5c96c44, utbl_chksum : 0xe619d30d)
[  838.282896][T27806] loop2: detected capacity change from 0 to 512
[  838.315163][T27806] EXT4-fs (loop2): Test dummy encryption mode enabled
[  838.369943][T27806] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  838.480453][T27806] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  838.488200][T27806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  838.600655][T27806] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  838.835145][ T4252] EXT4-fs (loop2): unmounting filesystem.
[  838.848280][T27773] loop4: detected capacity change from 0 to 40427
[  838.904169][T27773] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  838.931767][T27831] netlink: 'syz.1.9938': attribute type 10 has an invalid length.
[  838.950138][T27773] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  838.958917][T27831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9938'.
[  838.980423][T27831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  839.017987][T27831] bridge0: port 1(batadv0) entered blocking state
[  839.031771][T27773] F2FS-fs (loop4): Found nat_bits in checkpoint
[  839.040066][T27831] bridge0: port 1(batadv0) entered disabled state
[  839.075012][T27831] bridge0: port 1(batadv0) entered blocking state
[  839.081637][T27831] bridge0: port 1(batadv0) entered forwarding state
[  839.240446][T27773] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  839.247551][T27773] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  839.344313][T27844] loop2: detected capacity change from 0 to 256
[  839.398068][T27844] exfat: Deprecated parameter 'utf8'
[  839.428744][T27844] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  839.442118][T27850] loop1: detected capacity change from 0 to 256
[  839.520833][   T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  839.531220][   T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  839.679825][ T4797] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  839.763517][T27854] x_tables: duplicate underflow at hook 4
[  839.784477][T27856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9946'.
[  839.886967][ T4797] usb 8-1: Using ep0 maxpacket: 32
[  839.894281][ T4797] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  839.945924][ T4797] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  839.996544][ T4797] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  840.029526][ T4797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.039115][T27826] loop5: detected capacity change from 0 to 32768
[  840.067024][ T4797] hub 8-1:4.0: USB hub found
[  840.231866][T27826] XFS (loop5): Mounting V5 Filesystem
[  840.259447][ T4797] hub 8-1:4.0: config failed, can't read hub descriptor (err -90)
[  840.337378][T27826] XFS (loop5): Ending clean mount
[  840.418060][T10377] XFS (loop5): Unmounting Filesystem
[  840.472535][T27882] loop1: detected capacity change from 0 to 8
[  840.660164][ T4569] usb 8-1: USB disconnect, device number 3
[  840.928937][T27895] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9958'.
[  840.969828][T27895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9958'.
[  840.978853][T27895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9958'.
[  841.188073][   T52] block nbd1: Attempted send on invalid socket
[  841.194806][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  841.389623][T27914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9963'.
[  841.408597][T27914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9963'.
[  841.849492][T27933] usb usb8: usbfs: process 27933 (syz.1.9970) did not claim interface 0 before use
[  842.026726][T27937] qrtr: Invalid version 0
[  842.296003][T27947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9976'.
[  842.661401][   T27] audit: type=1326 audit(843.077:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27964 comm="syz.2.9983" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f396e78d169 code=0x0
[  842.843450][T27970] loop1: detected capacity change from 0 to 128
[  843.152156][T27938] loop5: detected capacity change from 0 to 32768
[  843.229101][T27938] ERROR: (device loop5): diWrite: ixpxd invalid
[  843.229101][T27938] 
[  843.269827][T27938] ERROR: (device loop5): remounting filesystem as read-only
[  843.277196][T27938] ERROR: (device loop5): txCommit: 
[  843.277196][T27938] 
[  843.363519][T27938] ea_get: invalid extended attribute
[  843.379628][T27938] ffff888073f11ef0: 04 00 00 00                                      ....
[  843.789649][T27998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10000'.
[  843.807594][T27998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10000'.
[  844.018870][T28002] netlink: 'syz.4.10002': attribute type 1 has an invalid length.
[  844.058503][T28002] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10002'.
[  844.201599][T27978] loop2: detected capacity change from 0 to 32768
[  844.285861][T27978] jfs_strtoUCS: char2uni returned -22.
[  844.329523][T27978] charset = ascii, char = 0xb2
[  844.361207][T28011] xt_time: invalid argument - start or stop time greater than 23:59:59
[  844.654872][T28018] loop4: detected capacity change from 0 to 256
[  844.678744][T28021] loop1: detected capacity change from 0 to 256
[  844.721785][T28018] exfat: Deprecated parameter 'namecase'
[  844.729019][T28021] exfat: Deprecated parameter 'utf8'
[  844.757170][T28021] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  844.811453][T28018] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  845.641497][T28047] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10024'.
[  845.948984][T28028] loop2: detected capacity change from 0 to 32768
[  845.989979][ T4328] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  846.041784][T28028] ERROR: (device loop2): diNewExt: no free extents
[  846.041784][T28028] 
[  846.063145][T28028] ERROR: (device loop2): remounting filesystem as read-only
[  846.098184][T28028] ialloc: diAlloc returned -5!
[  846.191567][ T4328] usb 2-1: Using ep0 maxpacket: 32
[  846.199620][ T4328] usb 2-1: unable to get BOS descriptor or descriptor too short
[  846.240213][ T4328] usb 2-1: config 7 has an invalid interface number: 187 but max is 0
[  846.264567][ T4328] usb 2-1: config 7 has no interface number 0
[  846.281156][ T4328] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947
[  846.312678][ T4328] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  846.359465][ T4328] usb 2-1: config 7 interface 187 has no altsetting 0
[  846.385134][ T4328] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  846.414670][ T4328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.439500][ T4328] usb 2-1: Product: syz
[  846.443729][ T4328] usb 2-1: Manufacturer: syz
[  846.486932][ T4328] usb 2-1: SerialNumber: syz
[  846.517154][T28050] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  846.553570][T28050] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  846.786881][ T4328] usb 2-1: Limiting number of CPorts to U8_MAX
[  846.798555][ T4328] usb 2-1: Unknown endpoint type found, address 0x07
[  846.832580][ T4328] usb 2-1: Unused bulk OUT endpoint found: 0x03
[  846.849275][ T4328] usb 2-1: Not enough endpoints found in device, aborting!
[  847.029805][ T4569] usb 2-1: USB disconnect, device number 44
[  847.220791][T28087] loop2: detected capacity change from 0 to 4096
[  847.238417][T28087] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  847.276809][T28093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10047'.
[  847.316014][T28087] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  847.366709][T28087] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  847.401387][T28087] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  847.423860][T28087] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  847.495061][T28087] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.  deltaxcn = 0x1, max_cluster = 0x0
[  847.528045][T28087] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  847.586774][T28087] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  847.657667][T28087] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr.
[  847.670167][T28087] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  847.715320][T28087] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  847.754690][T28087] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  847.819696][T28087] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  847.849888][T28087] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  847.920065][T28087] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  847.941393][T28085] loop4: detected capacity change from 0 to 32768
[  847.960759][T28087] ntfs: volume version 3.1.
[  847.965987][T28087] ntfs: (device loop2): ntfs_check_logfile(): $LogFile is too small.
[  848.031249][T28087] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  848.069395][T28087] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x0 is corrupt.  Corrupt inode 0x5.  Run chkdsk.
[  848.096608][T28085] XFS (loop4): Mounting V5 Filesystem
[  848.100127][T28087] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  848.164124][T28095] loop7: detected capacity change from 0 to 32768
[  848.198422][T28095] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  848.256023][T28097] loop5: detected capacity change from 0 to 32768
[  848.273929][T28085] XFS (loop4): Ending clean mount
[  848.309254][T28095] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  848.323624][T28097] XFS (loop5): Mounting V5 Filesystem
[  848.392469][T28123] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  848.466313][T28097] XFS (loop5): Ending clean mount
[  848.472072][T26508] ocfs2: Unmounting device (7,7) on (node local)
[  848.484759][T28125] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  848.532508][T28125] overlayfs: missing 'lowerdir'
[  848.571001][ T4250] XFS (loop4): Unmounting Filesystem
[  848.692455][T10377] XFS (loop5): Unmounting Filesystem
[  848.969565][ T4569] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  849.159663][ T4569] usb 2-1: Using ep0 maxpacket: 8
[  849.168916][ T4569] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  849.188824][ T4569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.214037][T17354] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  849.229617][ T4569] usb 2-1: Product: syz
[  849.240167][ T4569] usb 2-1: Manufacturer: syz
[  849.252985][ T4569] usb 2-1: SerialNumber: syz
[  849.307392][ T4569] usb 2-1: config 0 descriptor??
[  849.319837][T28137] netlink: 'syz.4.10055': attribute type 2 has an invalid length.
[  849.322551][ T4569] gspca_main: vc032x-2.14.0 probing 046d:0896
[  849.378227][T28139] loop7: detected capacity change from 0 to 64
[  849.422624][T17354] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  849.459503][T17354] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  849.479403][T17354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  849.511581][T28129] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  849.547299][T28141] loop5: detected capacity change from 0 to 764
[  849.556395][T28143] overlayfs: missing 'lowerdir'
[  849.601239][T28141] rock: directory entry would overflow storage
[  849.608032][T28141] rock: sig=0x4654, size=5, remaining=4
[  849.729740][ T4569] gspca_vc032x: reg_w err -71
[  849.734660][ T4569] vc032x: probe of 2-1:0.0 failed with error -71
[  849.783516][ T4569] usb 2-1: USB disconnect, device number 45
[  849.915519][T28151] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10066'.
[  850.070848][ T4797] usb 3-1: USB disconnect, device number 49
[  850.078287][T28153] netlink: 'syz.5.10065': attribute type 1 has an invalid length.
[  850.167888][T28157] loop5: detected capacity change from 0 to 1024
[  850.503693][T28165] netlink: 'syz.4.10072': attribute type 16 has an invalid length.
[  850.522342][T28165] netlink: 'syz.4.10072': attribute type 17 has an invalid length.
[  850.554721][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  850.610537][T28165] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  851.079075][T28155] loop7: detected capacity change from 0 to 32768
[  851.179863][T28155] jfs_strtoUCS: char2uni returned -22.
[  851.206854][T28155] charset = cp936, char = 0xd4
[  851.403028][T28162] loop1: detected capacity change from 0 to 32768
[  851.520440][T28162] XFS (loop1): Mounting V5 Filesystem
[  851.656102][T28162] XFS (loop1): Ending clean mount
[  851.676346][T28162] XFS (loop1): Quotacheck needed: Please wait.
[  851.875804][T28162] XFS (loop1): Quotacheck: Done.
[  851.959537][T28205] netlink: 'syz.7.10082': attribute type 1 has an invalid length.
[  851.992128][ T4249] XFS (loop1): Unmounting Filesystem
[  851.998820][T28205] netlink: 220 bytes leftover after parsing attributes in process `syz.7.10082'.
[  852.155578][T28196] loop2: detected capacity change from 0 to 32768
[  852.205102][T28209] loop4: detected capacity change from 0 to 256
[  852.288743][T28196] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  852.360852][T28209] FAT-fs (loop4): Directory bread(block 64) failed
[  852.407078][T28201] loop5: detected capacity change from 0 to 32768
[  852.408278][T28196] (syz.2.10086,28196,0):ocfs2_find_entry:1075 ERROR: status = -117
[  852.429474][T28209] FAT-fs (loop4): Directory bread(block 65) failed
[  852.489628][T28209] FAT-fs (loop4): Directory bread(block 66) failed
[  852.497134][T28196] (syz.2.10086,28196,0):ocfs2_find_entry:1075 ERROR: status = -117
[  852.497240][T28201] XFS (loop5): Mounting V5 Filesystem
[  852.529591][T28209] FAT-fs (loop4): Directory bread(block 67) failed
[  852.536433][T28209] FAT-fs (loop4): Directory bread(block 68) failed
[  852.544032][T28209] FAT-fs (loop4): Directory bread(block 69) failed
[  852.551261][T28209] FAT-fs (loop4): Directory bread(block 70) failed
[  852.557835][T28209] FAT-fs (loop4): Directory bread(block 71) failed
[  852.564917][T28209] FAT-fs (loop4): Directory bread(block 72) failed
[  852.572225][T28209] FAT-fs (loop4): Directory bread(block 73) failed
[  852.586700][T28196] (syz.2.10086,28196,0):ocfs2_symlink:2065 ERROR: status = -117
[  852.687168][ T4252] ocfs2: Unmounting device (7,2) on (node local)
[  852.695635][T28201] XFS (loop5): Ending clean mount
[  852.804748][T28201] XFS (loop5): Quotacheck needed: Please wait.
[  852.983814][T28201] XFS (loop5): Quotacheck: Done.
[  853.218282][T10377] XFS (loop5): Unmounting Filesystem
[  853.819624][T28250] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10107'.
[  854.313938][T28268] device lo left promiscuous mode
[  854.351558][T28268] device tunl0 left promiscuous mode
[  854.368505][T28268] device gre0 left promiscuous mode
[  854.386109][T28268] device gretap0 left promiscuous mode
[  854.396408][T28268] device erspan0 left promiscuous mode
[  854.409168][T28268] device ip_vti0 left promiscuous mode
[  854.419021][T28268] device ip6_vti0 left promiscuous mode
[  854.435670][T28268] device sit0 left promiscuous mode
[  854.446648][T28268] device ip6tnl0 left promiscuous mode
[  854.464839][T28268] device ip6gre0 left promiscuous mode
[  854.488468][T28268] device ip6gretap0 left promiscuous mode
[  854.513260][T28268] device vcan0 left promiscuous mode
[  854.525590][T28268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  854.549590][T28268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  854.557595][T28268] device bond0 left promiscuous mode
[  854.573593][T28268] device team0 left promiscuous mode
[  854.579018][T28268] device syz_tun left promiscuous mode
[  854.598521][T28268] device dummy0 left promiscuous mode
[  854.609153][T28268] device nlmon0 left promiscuous mode
[  854.623337][T28268] device caif0 left promiscuous mode
[  854.636350][T28268] device batadv_slave_0 left promiscuous mode
[  854.646778][T28268] device macvlan1 left promiscuous mode
[  854.663224][T28268] device netdevsim0 left promiscuous mode
[  854.678120][T28268] device geneve2 left promiscuous mode
[  854.687279][T28268] device bridge4 left promiscuous mode
[  854.703966][T28268] device bridge5 left promiscuous mode
[  854.722079][T28268] device vti0 left promiscuous mode
[  855.238191][T28289] netlink: 'syz.5.10122': attribute type 16 has an invalid length.
[  855.269664][T28289] netlink: 'syz.5.10122': attribute type 17 has an invalid length.
[  855.302927][T28274] loop1: detected capacity change from 0 to 32768
[  855.345638][T28274] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.10127 (28274)
[  855.370598][T28289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  855.394042][T28289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  855.402929][T28274] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  855.422346][T28274] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  855.433346][T28289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  855.446060][T28274] BTRFS info (device loop1): setting nodatacow, compression disabled
[  855.476270][T28274] BTRFS info (device loop1): max_inline at 0
[  855.482823][T28289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  855.498515][T28274] BTRFS info (device loop1): enabling disk space caching
[  855.519576][T28274] BTRFS info (device loop1): turning off barriers
[  855.544600][T28277] loop2: detected capacity change from 0 to 32768
[  855.551748][T28274] BTRFS info (device loop1): turning on flush-on-commit
[  855.558775][T28274] BTRFS info (device loop1): doing ref verification
[  855.594998][T28274] BTRFS info (device loop1): force clearing of disk cache
[  855.674413][T28274] BTRFS info (device loop1): enabling ssd optimizations
[  855.706767][T28274] BTRFS info (device loop1): max_inline at 4096
[  855.716869][T28274] BTRFS info (device loop1): disk space caching is enabled
[  855.753434][T28277] XFS (loop2): Mounting V5 Filesystem
[  855.835626][T28277] XFS (loop2): Ending clean mount
[  855.863987][T28277] XFS (loop2): Quotacheck needed: Please wait.
[  855.978435][T28290] loop7: detected capacity change from 0 to 32768
[  856.007794][T28325] loop5: detected capacity change from 0 to 64
[  856.016670][T28277] XFS (loop2): Quotacheck: Done.
[  856.030149][T28290] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  856.051669][T28274] BTRFS info (device loop1): rebuilding free space tree
[  856.125615][T28274] BTRFS info (device loop1): disabling free space tree
[  856.133039][T28290] OCFS2: ERROR (device loop7): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  856.187767][T28274] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  856.232321][T28274] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  856.243258][ T4252] XFS (loop2): Unmounting Filesystem
[  856.253164][T28290] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  856.322249][T28290] OCFS2: File system is now read-only.
[  856.370199][T28290] (syz.7.10123,28290,0):ocfs2_find_entry_dx:1029 ERROR: status = -30
[  856.392772][T28274] BTRFS info (device loop1: state M): max_inline at 0
[  856.409945][T28274] BTRFS info (device loop1: state M): doing ref verification
[  856.417401][T28274] BTRFS info (device loop1: state M): force clearing of disk cache
[  856.477594][T28274] BTRFS info (device loop1: state M): max_inline at 4096
[  856.514818][T26508] ocfs2: Unmounting device (7,7) on (node local)
[  856.639754][ T4249] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  857.317788][T28349] netlink: 'syz.7.10141': attribute type 24 has an invalid length.
[  857.624567][T28361] loop7: detected capacity change from 0 to 256
[  857.662449][T28361] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  857.679779][T28363] loop5: detected capacity change from 0 to 164
[  857.728214][T28363] rock: directory entry would overflow storage
[  857.738681][T28361] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  857.751198][T28363] rock: sig=0x66, size=4, remaining=3
[  857.810183][T28363] rock: directory entry would overflow storage
[  857.843994][T28363] rock: sig=0x66, size=4, remaining=3
[  857.895962][T28367] loop2: detected capacity change from 0 to 256
[  857.983630][T28367] FAT-fs (loop2): Directory bread(block 64) failed
[  858.008178][T28367] FAT-fs (loop2): Directory bread(block 65) failed
[  858.019521][T28371] loop1: detected capacity change from 0 to 164
[  858.075327][T28367] FAT-fs (loop2): Directory bread(block 66) failed
[  858.090750][T28367] FAT-fs (loop2): Directory bread(block 67) failed
[  858.097428][T28367] FAT-fs (loop2): Directory bread(block 68) failed
[  858.161636][T28377] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10154'.
[  858.162807][T28367] FAT-fs (loop2): Directory bread(block 69) failed
[  858.234023][T28367] FAT-fs (loop2): Directory bread(block 70) failed
[  858.248139][T28367] FAT-fs (loop2): Directory bread(block 71) failed
[  858.277198][T28367] FAT-fs (loop2): Directory bread(block 72) failed
[  858.302188][T28367] FAT-fs (loop2): Directory bread(block 73) failed
[  858.659031][T28392] cgroup: No subsys list or none specified
[  858.727235][T28396] loop1: detected capacity change from 0 to 64
[  858.789551][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10163'.
[  858.872705][T28400] loop5: detected capacity change from 0 to 256
[  858.886182][ T4297] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  858.919095][T28400] exfat: Deprecated parameter 'namecase'
[  859.001308][T28400] exfat: Deprecated parameter 'namecase'
[  859.004554][T28406] loop1: detected capacity change from 0 to 512
[  859.032691][T28400] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xec411bf1, utbl_chksum : 0xe619d30d)
[  859.092154][ T4297] usb 8-1: config 0 has an invalid interface number: 20 but max is 0
[  859.106848][ T4297] usb 8-1: config 0 has no interface number 0
[  859.126824][ T4297] usb 8-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  859.166624][T28406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  859.187857][T28412] loop2: detected capacity change from 0 to 128
[  859.191000][ T4297] usb 8-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  859.213745][ T4297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.224942][ T4297] usb 8-1: Product: syz
[  859.230169][ T4297] usb 8-1: Manufacturer: syz
[  859.235539][ T4297] usb 8-1: SerialNumber: syz
[  859.250192][ T4297] usb 8-1: config 0 descriptor??
[  859.257430][T28390] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  859.257570][T28412] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  859.267125][ T4297] usb-storage 8-1:0.20: USB Mass Storage device detected
[  859.302003][T28413] loop4: detected capacity change from 0 to 1024
[  859.339030][ T4297] usb-storage 8-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  859.341032][T28413] EXT4-fs: Ignoring removed orlov option
[  859.368424][T28412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  859.412602][T28413] EXT4-fs (loop4): Test dummy encryption mode enabled
[  859.457368][T28413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  859.482820][ T4297] scsi host1: usb-storage 8-1:0.20
[  859.511111][T28413] EXT4-fs: Ignoring removed orlov option
[  859.516970][T28413] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  859.573588][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  859.590342][T28413] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  859.706295][ T4538] usb 8-1: USB disconnect, device number 4
[  859.713081][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  860.108804][T28431] loop4: detected capacity change from 0 to 4096
[  860.146035][T28431] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  860.221711][T28431] ntfs3: loop4: failed to convert "c46c" to cp852
[  860.506658][T28439] loop2: detected capacity change from 0 to 4096
[  860.557438][T28439] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  860.572541][T28425] loop1: detected capacity change from 0 to 32768
[  860.587109][T28445] netlink: 'syz.4.10184': attribute type 1 has an invalid length.
[  860.668578][T28447] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10185'.
[  860.711401][T28425] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  860.769975][T28439] ntfs3: loop2: no free space to extend mft
[  860.807063][T28455] loop4: detected capacity change from 0 to 256
[  860.841280][T28455] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  860.869472][T28425] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 3630 but max bitmap bits of 2048
[  860.930848][T28425] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  860.967140][T28425] OCFS2: File system is now read-only.
[  860.991127][T28425] (syz.1.10173,28425,0):ocfs2_search_chain:1761 ERROR: status = -30
[  860.999200][T28425] (syz.1.10173,28425,0):ocfs2_search_chain:1871 ERROR: status = -30
[  861.031116][T28425] (syz.1.10173,28425,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[  861.084327][T28425] (syz.1.10173,28425,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  861.129496][T28425] (syz.1.10173,28425,0):ocfs2_claim_new_inode:2216 ERROR: status = -30
[  861.137827][T28425] (syz.1.10173,28425,0):ocfs2_claim_new_inode:2231 ERROR: status = -30
[  861.232579][T28425] (syz.1.10173,28425,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  861.267744][T28425] (syz.1.10173,28425,0):ocfs2_mknod:385 ERROR: status = -30
[  861.288600][T28425] (syz.1.10173,28425,0):ocfs2_mknod:502 ERROR: status = -30
[  861.319483][T28425] (syz.1.10173,28425,0):ocfs2_create:676 ERROR: status = -30
[  861.414743][ T4249] (syz-executor,4249,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  861.453355][T28469] loop7: detected capacity change from 0 to 1024
[  861.472688][ T4249] ocfs2: Unmounting device (7,1) on (node local)
[  861.520797][T28469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  861.593788][T28469] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  861.727192][T28469] EXT4-fs warning (device loop7): empty_inline_dir:1866: bad inline directory (dir #12) - no `..'
[  861.805341][T28471] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  861.819783][T28471] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  861.850540][T28471] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  861.858847][T28471] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  861.887012][T28479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  861.905999][T28471] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  861.917684][T28479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  861.928169][T26508] EXT4-fs (loop7): unmounting filesystem.
[  861.946621][T28479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  861.956124][T28471] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  861.996429][T28471] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  862.036864][T28471] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  862.092549][T28471] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  862.119756][T28471] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  862.126057][T28471] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  862.159952][T28471] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  862.191981][T28479] device ipvlan1 left promiscuous mode
[  862.282466][T28479] device erspan1 left promiscuous mode
[  862.296717][T28465] loop2: detected capacity change from 0 to 32768
[  862.364775][T28465] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.10191 (28465)
[  862.459892][T28465] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  862.498248][T28465] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  862.550155][T28465] BTRFS info (device loop2): force zlib compression, level 3
[  862.559880][T28465] BTRFS info (device loop2): force clearing of disk cache
[  862.599889][T28465] BTRFS info (device loop2): setting nodatasum
[  862.649782][T28465] BTRFS info (device loop2): use zlib compression, level 3
[  862.665061][T28465] BTRFS info (device loop2): allowing degraded mounts
[  862.709801][T28465] BTRFS info (device loop2): enabling disk space caching
[  862.717011][T28465] BTRFS info (device loop2): disk space caching is enabled
[  863.099221][T28465] BTRFS info (device loop2): enabling ssd optimizations
[  863.123173][T28465] BTRFS info (device loop2): rebuilding free space tree
[  863.200283][T28465] BTRFS info (device loop2): disabling free space tree
[  863.212736][T28465] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  863.227309][T28465] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  863.422172][ T4252] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  863.494709][ T4297] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  863.570008][T28533] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  863.593986][T28533] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  863.603058][T28533] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  863.657897][T28533] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  863.689532][T28533] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  863.695957][T28533] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  863.709669][ T4297] usb 2-1: Using ep0 maxpacket: 16
[  863.737912][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  863.738347][T28545] Bluetooth: hci0: Opcode 0x080f failed: -22
[  863.769750][T28533] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  863.781799][ T4297] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  863.798802][T28544] loop5: detected capacity change from 0 to 512
[  863.805700][T28533] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  863.815687][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.819532][T28533] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  863.834973][ T4297] usb 2-1: Product: syz
[  863.845686][ T4297] usb 2-1: Manufacturer: syz
[  863.856370][ T4297] usb 2-1: SerialNumber: syz
[  863.870836][ T4297] usb 2-1: config 0 descriptor??
[  863.877268][T28544] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  863.912066][ T4297] hub 2-1:0.0: bad descriptor, ignoring hub
[  863.918048][ T4297] hub: probe of 2-1:0.0 failed with error -5
[  863.930995][ T4297] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35
[  863.957205][T28533] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  863.999767][T28533] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  864.030248][T28533] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  864.045472][T28550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10224'.
[  864.210307][T10377] EXT4-fs (loop5): unmounting filesystem.
[  864.272185][T28554] device lo left promiscuous mode
[  864.278228][T28554] device tunl0 left promiscuous mode
[  864.338898][T28554] device gre0 left promiscuous mode
[  864.375315][T28554] device gretap0 left promiscuous mode
[  864.395132][T28554] device erspan0 left promiscuous mode
[  864.444823][T28554] device ip_vti0 left promiscuous mode
[  864.460634][T28554] device ip6_vti0 left promiscuous mode
[  864.484901][T28554] device sit0 left promiscuous mode
[  864.519554][T28554] device ip6tnl0 left promiscuous mode
[  864.527553][T28554] device ip6gre0 left promiscuous mode
[  864.546105][T28554] device ip6gretap0 left promiscuous mode
[  864.557332][T28554] device bridge0 left promiscuous mode
[  864.568897][T28554] device vcan0 left promiscuous mode
[  864.591124][T28554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  864.599082][T28554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  864.609793][T28554] device bond0 left promiscuous mode
[  864.617641][T28554] device macvlan0 left promiscuous mode
[  864.626242][T28554] device team0 left promiscuous mode
[  864.638569][T28554] device syz_tun left promiscuous mode
[  864.648026][T28554] device nlmon0 left promiscuous mode
[  864.666695][T28554] device caif0 left promiscuous mode
[  864.675418][T28554] device team_slave_1 left promiscuous mode
[  864.711598][T28554] device vlan0 left promiscuous mode
[  864.730884][T28554] device geneve3 left promiscuous mode
[  864.830791][T28567] netlink: 'syz.4.10232': attribute type 1 has an invalid length.
[  864.879942][T28567] netlink: 'syz.4.10232': attribute type 3 has an invalid length.
[  864.889020][T28567] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10232'.
[  864.908687][T28567] NCSI netlink: No device for ifindex 52229
[  864.943126][T28570] loop7: detected capacity change from 0 to 8
[  865.077111][T28570] SQUASHFS error: Unable to read directory block [629:26]
[  865.489763][ T4260] Bluetooth: hci1: command 0x0406 tx timeout
[  865.679588][T28595] xt_TPROXY: Can be used only with -p tcp or -p udp
[  865.690225][T28596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10246'.
[  865.727701][T28596] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  865.736921][ T4267] Bluetooth: hci2: command 0x0406 tx timeout
[  865.810403][ T4260] Bluetooth: hci4: command 0x0406 tx timeout
[  865.816587][ T4260] Bluetooth: hci0: command 0x080f tx timeout
[  865.970696][ T4260] Bluetooth: hci3: command 0x0406 tx timeout
[  866.003807][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  866.003824][   T27] audit: type=1326 audit(866.417:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28606 comm="syz.2.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396e78d169 code=0x7ffc0000
[  866.058951][   T27] audit: type=1326 audit(866.447:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28606 comm="syz.2.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f396e78d169 code=0x7ffc0000
[  866.131988][   T27] audit: type=1326 audit(866.447:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28606 comm="syz.2.10253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396e78d169 code=0x7ffc0000
[  866.422573][T28620] netlink: 'syz.5.10256': attribute type 4 has an invalid length.
[  866.459466][T28620] netlink: 152 bytes leftover after parsing attributes in process `syz.5.10256'.
[  866.481169][T28581] loop1: detected capacity change from 0 to 32768
[  866.527880][T28620] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  866.559675][T28581] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  866.657016][T28581] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  866.841836][ T4249] ocfs2: Unmounting device (7,1) on (node local)
[  866.995121][T28632] netlink: 68 bytes leftover after parsing attributes in process `syz.7.10262'.
[  867.005442][T28634] device bond3 entered promiscuous mode
[  867.019869][T28632] netlink: 48 bytes leftover after parsing attributes in process `syz.7.10262'.
[  867.056629][T28614] loop2: detected capacity change from 0 to 32768
[  867.175741][T28614] XFS (loop2): Mounting V5 Filesystem
[  867.347702][T28614] XFS (loop2): Ending clean mount
[  867.359635][ T4536] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  867.421487][T28614] XFS (loop2): Quotacheck needed: Please wait.
[  867.459213][T28652] loop4: detected capacity change from 0 to 4096
[  867.525941][T28614] XFS (loop2): Quotacheck: Done.
[  867.551330][ T4536] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  867.563810][T28649] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  867.574305][T28614] XFS: no-recovery mounts must be read-only.
[  867.574362][ T4536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.608557][ T4536] usb 6-1: config 0 descriptor??
[  867.620785][T28649] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  867.640422][T28649] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  867.658037][T28649] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  867.668147][T28649] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  867.678440][T28649] Bluetooth: hci2: Suspend notifier action (1) failed: -4
[  867.689856][T28649] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  867.709483][ T4252] XFS (loop2): Unmounting Filesystem
[  867.726330][T28649] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  867.793408][T28649] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  867.808154][T28649] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  867.843316][T28649] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  867.854699][T28649] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  868.027058][ T4536] usb 6-1: Cannot set MAC address
[  868.032884][ T4536] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71
[  868.079697][ T4536] usb 6-1: USB disconnect, device number 23
[  868.112669][T28663] loop4: detected capacity change from 0 to 1024
[  868.126770][T28663] EXT4-fs: Ignoring removed orlov option
[  868.139757][ T4297] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  868.168486][T28663] EXT4-fs: Ignoring removed nomblk_io_submit option
[  868.218078][T28663] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002]
[  868.234742][T28663] System zones: 0-1, 3-36
[  868.256354][T28663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  868.339480][ T4297] usb 8-1: Using ep0 maxpacket: 32
[  868.347479][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  868.354114][ T4297] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  868.387151][ T4297] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  868.419437][ T4297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.454416][ T4297] usb 8-1: Product: syz
[  868.458858][ T4297] usb 8-1: Manufacturer: syz
[  868.464816][T28672] loop4: detected capacity change from 0 to 16
[  868.469017][ T4297] usb 8-1: SerialNumber: syz
[  868.478423][T28672] erofs: (device loop4): mounted with root inode @ nid 36.
[  868.489556][ T3608] usb 2-1: reset high-speed USB device number 46 using dummy_hcd
[  868.509212][ T4297] usb 8-1: config 0 descriptor??
[  868.525492][T28672] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  868.526070][ T4297] hub 8-1:0.0: bad descriptor, ignoring hub
[  868.579422][ T4297] hub: probe of 8-1:0.0 failed with error -5
[  868.589546][T28672] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -57 in[61, 4035] out[1851]
[  868.599943][ T4297] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input36
[  868.619532][T28672] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117]
[  868.673938][ T4297] usbtouchscreen 8-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  868.722046][ T3608] usb 2-1: device firmware changed
[  868.729079][ T4297] usbtouchscreen: probe of 8-1:0.0 failed with error -22
[  868.753772][T17354] usb 2-1: USB disconnect, device number 46
[  868.811141][ T4297] usb 8-1: USB disconnect, device number 5
[  869.004725][T28684] loop5: detected capacity change from 0 to 512
[  869.017069][T17354] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  869.091362][T28684] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  869.164848][T28690] netlink: 6 bytes leftover after parsing attributes in process `syz.4.10282'.
[  869.179759][T28690] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  869.209429][T17354] usb 2-1: Using ep0 maxpacket: 16
[  869.219598][T17354] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  869.224666][T28690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  869.235550][T17354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.261456][T10377] EXT4-fs (loop5): unmounting filesystem.
[  869.261458][T17354] usb 2-1: Product: syz
[  869.272460][T17354] usb 2-1: Manufacturer: syz
[  869.277093][T17354] usb 2-1: SerialNumber: syz
[  869.283912][T17354] usb 2-1: config 0 descriptor??
[  869.294193][T17354] visor 2-1:0.0: Sony Clie 3.5 converter detected
[  869.409734][ T4260] Bluetooth: hci1: command 0x0406 tx timeout
[  869.699270][T17354] usb 2-1: clie_3_5_startup: get interface number failed: -71
[  869.723505][T17354] visor: probe of 2-1:0.0 failed with error -71
[  869.729460][ T4260] Bluetooth: hci4: command 0x0406 tx timeout
[  869.735863][ T4260] Bluetooth: hci2: command 0x0406 tx timeout
[  869.783506][T17354] usb 2-1: USB disconnect, device number 47
[  869.813304][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  869.819740][ T4260] Bluetooth: hci3: command 0x0406 tx timeout
[  869.826548][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  869.984608][T28710] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  870.334670][T28700] loop7: detected capacity change from 0 to 32768
[  870.450487][T28700] XFS (loop7): Mounting V5 Filesystem
[  870.489026][T28730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10301'.
[  870.567193][T28735] usb usb1: usbfs: process 28735 (syz.5.10302) did not claim interface 0 before use
[  870.638232][T28738] device vlan0 entered promiscuous mode
[  870.652894][T28736] loop2: detected capacity change from 0 to 512
[  870.680871][T28700] XFS (loop7): Ending clean mount
[  870.687935][T28700] XFS (loop7): Quotacheck needed: Please wait.
[  870.707305][T28736] EXT4-fs: Ignoring removed orlov option
[  870.742440][T28736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  870.754767][   T51] XFS (loop7): Metadata corruption detected at xfs_dinode_verify+0x336/0xfb0, inode 0x424 dinode
[  870.784930][   T51] XFS (loop7): Unmount and run xfs_repair
[  870.793254][T28736] EXT4-fs (loop2): orphan cleanup on readonly fs
[  870.816486][   T51] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  870.857144][T28736] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.10300: bg 0: block 248: padding at end of block bitmap is not set
[  870.864665][   T51] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  870.887419][   T51] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  870.896717][   T51] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[  870.908110][   T51] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 04 1a  4.Xh............
[  870.917258][   T51] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  870.926372][   T51] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 11 ad c0 55  ...............U
[  870.937132][   T51] 00000060: ff ff ff ff de 0a af 16 00 00 00 00 00 07 00 00  ................
[  870.946520][   T51] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  870.984926][T28736] Quota error (device loop2): write_blk: dquota write failed
[  870.994996][T28736] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  870.995105][T28700] XFS (loop7): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  871.055782][T28736] EXT4-fs error (device loop2): ext4_acquire_dquot:6795: comm syz.2.10300: Failed to acquire dquot type 1
[  871.084052][T28700] XFS (loop7): Metadata corruption detected at xfs_dinode_verify+0x336/0xfb0, inode 0x424 dinode
[  871.099625][T28700] XFS (loop7): Unmount and run xfs_repair
[  871.105797][T28700] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  871.114337][T28736] EXT4-fs (loop2): 1 truncate cleaned up
[  871.136885][T28736] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  871.165181][T28700] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  871.177126][T28751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10308'.
[  871.193483][T28700] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  871.210355][T28736] EXT4-fs: Ignoring removed orlov option
[  871.217603][T28736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  871.234634][T28700] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11  4.Xh....4.Xh....
[  871.246910][T28700] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 04 1a  4.Xh............
[  871.288463][T28736] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  871.307080][T28700] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  871.322917][T28700] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 11 ad c0 55  ...............U
[  871.342359][T28700] 00000060: ff ff ff ff de 0a af 16 00 00 00 00 00 07 00 00  ................
[  871.353014][T28736] EXT4-fs error (device loop2): __ext4_remount:6611: comm syz.2.10300: Abort forced by user
[  871.361798][T28700] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  871.373790][T28736] EXT4-fs (loop2): Remounting filesystem read-only
[  871.422342][T28736] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  871.489411][ T4260] Bluetooth: hci1: command 0x0c1a tx timeout
[  871.532009][T26508] XFS (loop7): Unmounting Filesystem
[  871.548329][ T4252] EXT4-fs (loop2): unmounting filesystem.
[  871.809561][ T4260] Bluetooth: hci2: command 0x0c1a tx timeout
[  871.815735][ T4260] Bluetooth: hci4: command 0x0c1a tx timeout
[  871.889761][ T4260] Bluetooth: hci3: command 0x0c1a tx timeout
[  871.912156][T28773] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  872.137720][T28781] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  872.163014][T28781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  872.177556][T28781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  872.197560][T28783] loop5: detected capacity change from 0 to 128
[  872.212685][T28781] device bridge_slave_1 left promiscuous mode
[  872.282658][T28781] device hsr0 left promiscuous mode
[  872.298298][T28786] netlink: 'syz.4.10324': attribute type 11 has an invalid length.
[  872.322048][T28781] device macvlan1 left promiscuous mode
[  872.345873][T28781] device netdevsim0 left promiscuous mode
[  872.400882][T28781] device gtp0 left promiscuous mode
[  872.416604][T28781] device bond3 left promiscuous mode
[  872.520251][T28791] device netdevsim0 entered promiscuous mode
[  872.579277][T28791] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  873.049949][T28807] netlink: 'syz.4.10337': attribute type 10 has an invalid length.
[  873.129248][T28807] team0: Device macvtap0 failed to register rx_handler
[  873.144590][T28811] loop2: detected capacity change from 0 to 256
[  873.199720][T28813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10340'.
[  873.250735][T28811] exfat: Deprecated parameter 'namecase'
[  873.298711][T28811] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  873.569527][ T4260] Bluetooth: hci1: command 0x0406 tx timeout
[  873.740797][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  873.799007][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  873.829791][T28827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  873.889488][ T4260] Bluetooth: hci4: command 0x0406 tx timeout
[  873.890676][ T4267] Bluetooth: hci2: command 0x0406 tx timeout
[  873.957246][T28832] loop4: detected capacity change from 0 to 1024
[  873.969708][ T4260] Bluetooth: hci3: command 0x0406 tx timeout
[  874.101929][T28832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  874.114741][T28809] loop5: detected capacity change from 0 to 40427
[  874.144098][T28809] F2FS-fs (loop5): build fault injection attr: rate: 4, type: 0x3ffff
[  874.159632][T28809] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4
[  874.196354][T28809] F2FS-fs (loop5): invalid crc value
[  874.204452][T28840] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  874.251001][T28809] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x289/0x590
[  874.269859][T28809] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x4ca/0xb60
[  874.330480][T28809] F2FS-fs (loop5): Found nat_bits in checkpoint
[  874.340896][ T4250] EXT4-fs (loop4): unmounting filesystem.
[  874.468010][T28809] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x4ca/0xb60
[  874.539904][T28809] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x4ca/0xb60
[  874.590456][T28809] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x289/0x590
[  874.679482][T28809] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  874.750009][T28809] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf6/0x8c0
[  874.755718][T28856] netlink: 2980 bytes leftover after parsing attributes in process `syz.7.10359'.
[  874.882218][T28862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10360'.
[  874.912535][T10377] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x65/0x210
[  875.242532][T28872] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  875.277928][T28872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  875.296801][T28872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  875.339523][ T4536] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  875.561272][ T4536] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  875.615832][ T4536] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  875.644333][ T4536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.687481][ T4536] usb 5-1: Product: syz
[  875.718021][ T4536] usb 5-1: Manufacturer: syz
[  875.742413][ T4536] usb 5-1: SerialNumber: syz
[  875.763039][ T4536] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  876.177584][ T4536] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  876.258800][ T4536] usb 5-1: USB disconnect, device number 35
[  876.291032][T28904] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10381'.
[  876.515524][T28911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  876.542950][T28911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  876.572455][T28911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  876.610793][T28911] device vlan0 left promiscuous mode
[  876.694024][T28896] loop7: detected capacity change from 0 to 32768
[  876.790152][ T4297] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  876.803702][T28896] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  876.839626][T28919] netlink: 'syz.2.10388': attribute type 2 has an invalid length.
[  876.931708][T28896] OCFS2: ERROR (device loop7): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 3630 but max bitmap bits of 2048
[  876.969509][T28896] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  876.988232][T28896] OCFS2: File system is now read-only.
[  876.995884][ T4297] usb 2-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51
[  877.009747][T28896] (syz.7.10376,28896,1):ocfs2_search_chain:1761 ERROR: status = -30
[  877.017818][T28896] (syz.7.10376,28896,1):ocfs2_search_chain:1871 ERROR: status = -30
[  877.029560][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.066511][ T4297] usb 2-1: config 0 descriptor??
[  877.093444][T28896] (syz.7.10376,28896,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[  877.113623][ T4297] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4
[  877.158478][T28896] (syz.7.10376,28896,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  877.184784][T28896] (syz.7.10376,28896,1):ocfs2_claim_new_inode:2216 ERROR: status = -30
[  877.248468][T28896] (syz.7.10376,28896,0):ocfs2_claim_new_inode:2231 ERROR: status = -30
[  877.260296][T28896] (syz.7.10376,28896,0):ocfs2_mknod_locked:639 ERROR: status = -30
[  877.268513][T28896] (syz.7.10376,28896,0):ocfs2_mknod:385 ERROR: status = -30
[  877.320153][T28896] (syz.7.10376,28896,0):ocfs2_mknod:502 ERROR: status = -30
[  877.327585][T28896] (syz.7.10376,28896,0):ocfs2_create:676 ERROR: status = -30
[  877.405044][T26508] (syz-executor,26508,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  877.450382][T26508] ocfs2: Unmounting device (7,7) on (node local)
[  877.516638][ T4297] gspca_sn9c20x: Write register 1001 failed -71
[  877.523094][T17354] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  877.541237][ T4297] gspca_sn9c20x: Device initialization failed
[  877.547425][ T4297] gspca_sn9c20x: probe of 2-1:0.0 failed with error -71
[  877.596387][ T4297] usb 2-1: USB disconnect, device number 48
[  877.596815][T28940] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  877.658387][T28940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  877.685908][T28940] device bond3 left promiscuous mode
[  877.741761][T17354] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  877.772918][T17354] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  877.802943][T17354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  877.828211][T28932] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  878.201375][T17354] usb 6-1: USB disconnect, device number 24
[  878.802446][T28970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  878.843109][T28970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  878.877286][T28970] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  878.899024][T28947] loop4: detected capacity change from 0 to 32768
[  878.946764][T28947] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.10402 (28947)
[  878.995364][T28947] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  879.026385][T28947] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  879.078479][T28947] BTRFS info (device loop4): force zlib compression, level 3
[  879.129715][T28947] BTRFS info (device loop4): force clearing of disk cache
[  879.136925][T28947] BTRFS info (device loop4): setting nodatasum
[  879.174956][T28947] BTRFS info (device loop4): allowing degraded mounts
[  879.219523][T28947] BTRFS info (device loop4): enabling disk space caching
[  879.226628][T28947] BTRFS info (device loop4): disk space caching is enabled
[  879.322673][T28989] loop2: detected capacity change from 0 to 256
[  879.457285][T28947] BTRFS info (device loop4): rebuilding free space tree
[  879.474637][T29006] netlink: 'syz.7.10423': attribute type 8 has an invalid length.
[  879.567718][T28947] BTRFS info (device loop4): disabling free space tree
[  879.592703][T28947] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  879.635532][T28947] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  879.700082][T28947] BTRFS warning (device loop4): get dev_stats failed, device not found
[  879.789929][T29014] netlink: 'syz.2.10426': attribute type 10 has an invalid length.
[  879.866623][T29014] team0: Device macvtap0 failed to register rx_handler
[  879.890037][ T4250] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  880.229482][T29028] netlink: 'syz.5.10432': attribute type 2 has an invalid length.
[  880.543603][T29034] loop1: detected capacity change from 0 to 1024
[  880.720772][T29034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  880.849749][T29034] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 40: comm syz.1.10435: bad entry in directory: rec_len is smaller than minimal - offset=8192, inode=589824, rec_len=0, size=1024 fake=0
[  880.862196][T29046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  880.888271][T29050] libceph: resolve '0.' (ret=-3): failed
[  881.050272][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  881.106322][T29056] loop5: detected capacity change from 0 to 256
[  881.154162][T29056] exfat: Deprecated parameter 'utf8'
[  881.195070][T29056] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  881.409523][ T4538] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  881.601396][ T4538] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  881.634257][ T4538] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  881.674737][ T4538] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  881.720635][ T4538] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  881.729065][ T4538] usb 8-1: Product: syz
[  881.774780][ T4538] usb 8-1: Manufacturer: syz
[  881.793422][ T4538] hub 8-1:4.0: USB hub found
[  881.803002][T29079] netlink: 'syz.5.10454': attribute type 10 has an invalid length.
[  881.878971][T29079] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  881.996796][ T4538] hub 8-1:4.0: config failed, hub has too many ports! (err -19)
[  882.132467][T29089] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  882.319895][T17354] usb 8-1: USB disconnect, device number 6
[  882.451903][T29102] loop1: detected capacity change from 0 to 64
[  882.715126][T29110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10468'.
[  882.755478][T29110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10468'.
[  883.230029][T29128] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  883.486265][T29138] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10482'.
[  883.679394][T17354] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  883.690352][T29148] loop4: detected capacity change from 0 to 64
[  883.737498][   T27] audit: type=1800 audit(884.147:3727): pid=29148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10486" name="file2" dev="loop4" ino=6 res=0 errno=0
[  883.771619][T29148] Trying to free block not in datazone
[  883.777332][T29148] minix_free_block (loop4:21): bit already cleared
[  883.779927][ T4797] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  883.869448][T17354] usb 8-1: Using ep0 maxpacket: 8
[  883.877513][T17354] usb 8-1: config 252 has an invalid interface number: 104 but max is 0
[  883.916139][T17354] usb 8-1: config 252 has no interface number 0
[  883.927253][T17354] usb 8-1: config 252 interface 104 has no altsetting 0
[  883.961435][T17354] usb 8-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= b.c7
[  883.979589][ T4797] usb 3-1: Using ep0 maxpacket: 32
[  883.990302][ T4797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  884.007471][T17354] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.019476][T17354] usb 8-1: Product: syz
[  884.023712][T17354] usb 8-1: Manufacturer: syz
[  884.038537][T17354] usb 8-1: SerialNumber: syz
[  884.053544][ T4797] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[  884.057318][T17354] gspca_main: spca501-2.14.0 probing 0497:c001
[  884.074773][ T4797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  884.086401][ T4797] usb 3-1: Product: syz
[  884.097418][ T4797] usb 3-1: Manufacturer: syz
[  884.106009][ T4797] usb 3-1: SerialNumber: syz
[  884.141482][ T4797] usb 3-1: config 0 descriptor??
[  884.331382][   T27] audit: type=1326 audit(884.747:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.4.10496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cec78d169 code=0x7ffc0000
[  884.353321][    C1] vkms_vblank_simulate: vblank timer overrun
[  884.367372][ T4797] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  884.465854][T17354] gspca_spca501: reg write: error -71
[  884.469471][   T27] audit: type=1326 audit(884.747:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.4.10496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cec78d169 code=0x7ffc0000
[  884.471574][T17354] spca501 8-1:252.104: Reg write failed for 0x02,0xa048,0x00
[  884.568517][T29171] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  884.570191][T17354] spca501: probe of 8-1:252.104 failed with error -22
[  884.594317][   T27] audit: type=1326 audit(884.797:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.4.10496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f3cec78d169 code=0x7ffc0000
[  884.615044][T17354] usb 8-1: USB disconnect, device number 7
[  884.636783][   T27] audit: type=1326 audit(884.797:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.4.10496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cec78d169 code=0x7ffc0000
[  884.645530][ T4328] usb 3-1: USB disconnect, device number 50
[  884.734619][   T27] audit: type=1326 audit(884.797:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29165 comm="syz.4.10496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cec78d169 code=0x7ffc0000
[  884.862619][T29180] netlink: 'syz.5.10502': attribute type 3 has an invalid length.
[  885.892445][T29216] netlink: 'syz.7.10519': attribute type 2 has an invalid length.
[  885.919466][T29216] netlink: 'syz.7.10519': attribute type 1 has an invalid length.
[  886.122439][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10523'.
[  886.460203][T29237] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10531'.
[  886.835354][T29249] xt_NFQUEUE: number of total queues is 0
[  887.318169][T29259] loop2: detected capacity change from 0 to 4096
[  887.425429][T29262] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  887.481497][T29259] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  887.540815][T29266] loop7: detected capacity change from 0 to 8
[  887.553345][T29259] Remounting filesystem read-only
[  887.581420][T29266] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  887.656356][T29266] cramfs: Error -5 while decompressing!
[  887.699376][T29266] cramfs: ffffffff97553568(26)->ffff88804ff00000(4096)
[  887.709270][ T4252] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  887.739078][T29266] cramfs: Error -3 while decompressing!
[  887.779085][T29266] cramfs: ffffffff97553582(26)->ffff88805082e000(4096)
[  887.798831][T29266] cramfs: Error -3 while decompressing!
[  887.805183][T29268] loop4: detected capacity change from 0 to 4096
[  887.830856][T29268] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  887.849577][T29266] cramfs: ffffffff9755359c(16)->ffff888051322000(4096)
[  887.856561][T29266] cramfs: Error -5 while decompressing!
[  887.903641][T29266] cramfs: ffffffff97553568(26)->ffff88804ff00000(4096)
[  887.949747][T29257] loop1: detected capacity change from 0 to 32768
[  887.961242][   T27] audit: type=1800 audit(888.377:3733): pid=29266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10544" name="file2" dev="loop7" ino=348 res=0 errno=0
[  888.037559][T29257] ERROR: (device loop1): diAllocAG: error reading iag
[  888.037559][T29257] 
[  888.146068][T29257] ERROR: (device loop1): remounting filesystem as read-only
[  888.185631][T29257] ialloc: diAlloc returned -5!
[  888.242892][T29276] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10551'.
[  888.279505][T29276] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10551'.
[  888.309561][T29282] loop4: detected capacity change from 0 to 2048
[  888.401285][T29282] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  888.443233][T29282] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  888.507419][T29282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  889.421933][T29320] loop1: detected capacity change from 0 to 2048
[  889.459774][T29320] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  889.525750][T29327] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  890.105590][T29344] loop2: detected capacity change from 0 to 256
[  890.778700][T29368] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  891.196128][T29386] IPVS: stopping backup sync thread 21794 ...
[  891.364897][T29393] loop4: detected capacity change from 0 to 256
[  891.406553][T29393] exfat: Deprecated parameter 'namecase'
[  891.415879][T29393] exfat: Deprecated parameter 'namecase'
[  891.461586][T29393] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  891.570990][T29402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10607'.
[  891.881009][   T27] audit: type=1107 audit(892.297:3734): pid=29411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='�L<5'
[  892.381082][T29430] loop2: detected capacity change from 0 to 256
[  892.435851][T29430] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  892.489863][T29436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10623'.
[  892.539000][T29436] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  892.561725][T29430] fuse: Bad value for 'fd'
[  892.878902][T29446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10629'.
[  892.934315][T29450] loop5: detected capacity change from 0 to 190
[  892.984732][T29450] ntfs: (device loop5): is_boot_sector_ntfs(): Invalid boot sector checksum.
[  893.017353][T29450] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  893.079425][T29450] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  893.147573][T29450] ntfs: volume version 0.0.
[  893.152279][T29450] ntfs: (device loop5): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0).
[  893.250479][T29450] ntfs: (device loop5): ntfs_read_locked_inode(): Inode is not in use!
[  893.253787][T29460] loop1: detected capacity change from 0 to 128
[  893.258788][T29450] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x2 as bad.  Run chkdsk.
[  893.258858][T29450] ntfs: (device loop5): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  893.311000][T29460] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  893.418615][T29450] syz.5.10631: attempt to access beyond end of device
[  893.418615][T29450] loop5: rw=0, sector=552, nr_sectors = 8 limit=190
[  893.515216][T29450] ntfs: (device loop5): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x45.
[  893.549119][T29450] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 5.
[  893.669409][T17354] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  893.799844][T29472] loop7: detected capacity change from 0 to 1024
[  893.871184][T17354] usb 2-1: config 0 has an invalid interface number: 216 but max is 0
[  893.898662][T17354] usb 2-1: config 0 has no interface number 0
[  893.924056][T17354] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  893.984394][T17354] usb 2-1: config 0 interface 216 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  894.017144][   T75] hfsplus: b-tree write err: -5, ino 4
[  894.035839][T17354] usb 2-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7
[  894.063118][T17354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  894.086750][T17354] usb 2-1: Product: syz
[  894.110111][T17354] usb 2-1: Manufacturer: syz
[  894.114783][T17354] usb 2-1: SerialNumber: syz
[  894.145606][T17354] usb 2-1: config 0 descriptor??
[  894.171664][T17354] usb 2-1: Interface #216 referenced by multiple IADs
[  894.268441][T17354] snd-usb-audio: probe of 2-1:0.216 failed with error -2
[  894.353588][ T5409] udevd[5409]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  894.427696][T17354] usb 2-1: USB disconnect, device number 49
[  894.527579][T29494] loop2: detected capacity change from 0 to 64
[  894.687704][T29491] loop4: detected capacity change from 0 to 8192
[  894.734438][T29491] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  894.864622][T29491] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  894.912887][T29491] REISERFS (device loop4): using ordered data mode
[  894.928544][T29491] reiserfs: using flush barriers
[  894.939797][T29491] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  894.984111][T29491] REISERFS (device loop4): checking transaction log (loop4)
[  895.024083][T29491] REISERFS (device loop4): Using r5 hash to sort names
[  895.060032][T29491] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  895.177240][T29507] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10659'.
[  895.206507][T29507] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10659'.
[  895.305449][T29486] syz.5.10649 (29486): drop_caches: 3
[  895.742975][T29520] xt_TCPMSS: Only works on TCP SYN packets
[  896.641860][T29552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10682'.
[  896.644024][T29554] loop2: detected capacity change from 0 to 64
[  896.806979][T29554] 
[  896.809381][T29554] ======================================================
[  896.816425][T29554] WARNING: possible circular locking dependency detected
[  896.823477][T29554] 6.1.132-syzkaller #0 Not tainted
[  896.828695][T29554] ------------------------------------------------------
[  896.835737][T29554] syz.2.10681/29554 is trying to acquire lock:
[  896.841915][T29554] ffff888074d44ef8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x1440
[  896.852770][T29554] 
[  896.852770][T29554] but task is already holding lock:
[  896.860162][T29554] ffff888055c7e0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x16a/0x1e0
[  896.869733][T29554] 
[  896.869733][T29554] which lock already depends on the new lock.
[  896.869733][T29554] 
[  896.874507][T29532] loop7: detected capacity change from 0 to 32768
[  896.880138][T29554] 
[  896.880138][T29554] the existing dependency chain (in reverse order) is:
[  896.880150][T29554] 
[  896.880150][T29554] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}:
[  896.880195][T29554]        lock_acquire+0x1f8/0x5a0
[  896.908758][T29554]        __mutex_lock+0x132/0xd80
[  896.913813][T29554]        hfs_find_init+0x16a/0x1e0
[  896.918980][T29554]        hfs_extend_file+0x317/0x1440
[  896.924374][T29554]        hfs_bmap_reserve+0xd5/0x3f0
[  896.929707][T29554]        hfs_cat_create+0x1e6/0x8e0
[  896.934923][T29554]        hfs_mkdir+0x68/0xe0
[  896.939568][T29554]        vfs_mkdir+0x3b6/0x590
[  896.944353][T29554]        do_mkdirat+0x225/0x360
[  896.949217][T29554]        __x64_sys_mkdir+0x6a/0x80
[  896.954342][T29554]        do_syscall_64+0x3b/0xb0
[  896.959287][T29554]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  896.965724][T29554] 
[  896.965724][T29554] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}:
[  896.974942][T29554]        validate_chain+0x1661/0x5950
[  896.980324][T29554]        __lock_acquire+0x125b/0x1f80
[  896.985718][T29554]        lock_acquire+0x1f8/0x5a0
[  896.990756][T29554]        __mutex_lock+0x132/0xd80
[  896.995794][T29554]        hfs_extend_file+0xfb/0x1440
[  897.001090][T29554]        hfs_bmap_reserve+0xd5/0x3f0
[  897.006386][T29554]        __hfs_ext_write_extent+0x22e/0x4f0
[  897.012291][T29554]        hfs_ext_write_extent+0x150/0x1d0
[  897.018026][T29554]        hfs_write_inode+0xb8/0xb50
[  897.023236][T29554]        __writeback_single_inode+0x67d/0x11e0
[  897.029402][T29554]        writeback_single_inode+0x22c/0x960
[  897.035308][T29554]        write_inode_now+0x1cf/0x260
[  897.040621][T29554]        hfs_file_fsync+0x9e/0x140
[  897.045752][T29554]        generic_file_write_iter+0x29d/0x310
[  897.051757][T29554]        vfs_write+0x857/0xbc0
[  897.056526][T29554]        ksys_write+0x19c/0x2c0
[  897.061400][T29554]        do_syscall_64+0x3b/0xb0
[  897.066358][T29554]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  897.072792][T29554] 
[  897.072792][T29554] other info that might help us debug this:
[  897.072792][T29554] 
[  897.083109][T29554]  Possible unsafe locking scenario:
[  897.083109][T29554] 
[  897.090560][T29554]        CPU0                    CPU1
[  897.095924][T29554]        ----                    ----
[  897.101286][T29554]   lock(&tree->tree_lock#2/1);
[  897.106162][T29554]                                lock(&HFS_I(tree->inode)->extents_lock);
[  897.114668][T29554]                                lock(&tree->tree_lock#2/1);
[  897.122065][T29554]   lock(&HFS_I(tree->inode)->extents_lock);
[  897.128047][T29554] 
[  897.128047][T29554]  *** DEADLOCK ***
[  897.128047][T29554] 
[  897.136195][T29554] 4 locks held by syz.2.10681/29554:
[  897.141482][T29554]  #0: ffff88807537bc68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360
[  897.150729][T29554]  #1: ffff888055d48460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[  897.159802][T29554]  #2: ffff888074d40fa8 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: hfs_file_fsync+0x94/0x140
[  897.170356][T29554]  #3: ffff888055c7e0b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x16a/0x1e0
[  897.180308][T29554] 
[  897.180308][T29554] stack backtrace:
[  897.186197][T29554] CPU: 0 PID: 29554 Comm: syz.2.10681 Not tainted 6.1.132-syzkaller #0
[  897.194440][T29554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  897.204503][T29554] Call Trace:
[  897.207791][T29554]  <TASK>
[  897.210725][T29554]  dump_stack_lvl+0x1e3/0x2cb
[  897.215410][T29554]  ? nf_tcp_handle_invalid+0x647/0x647
[  897.220906][T29554]  ? print_circular_bug+0x12b/0x1a0
[  897.226114][T29554]  check_noncircular+0x2fa/0x3b0
[  897.231061][T29554]  ? add_chain_block+0x850/0x850
[  897.236027][T29554]  ? lockdep_lock+0x11f/0x2a0
[  897.240724][T29554]  ? _find_first_zero_bit+0xd0/0x100
[  897.246018][T29554]  validate_chain+0x1661/0x5950
[  897.250874][T29554]  ? reacquire_held_locks+0x660/0x660
[  897.256264][T29554]  ? __lock_acquire+0x125b/0x1f80
[  897.261314][T29554]  ? reacquire_held_locks+0x660/0x660
[  897.266698][T29554]  ? mark_lock+0x9a/0x340
[  897.271030][T29554]  ? look_up_lock_class+0x77/0x140
[  897.276156][T29554]  ? register_lock_class+0x100/0x990
[  897.281459][T29554]  ? is_dynamic_key+0x260/0x260
[  897.286670][T29554]  ? mark_lock+0x9a/0x340
[  897.291007][T29554]  __lock_acquire+0x125b/0x1f80
[  897.295880][T29554]  lock_acquire+0x1f8/0x5a0
[  897.300397][T29554]  ? hfs_extend_file+0xfb/0x1440
[  897.305352][T29554]  ? read_lock_is_recursive+0x10/0x10
[  897.310829][T29554]  ? __might_sleep+0xb0/0xb0
[  897.315426][T29554]  ? __schedule+0x1447/0x4570
[  897.320119][T29554]  __mutex_lock+0x132/0xd80
[  897.324635][T29554]  ? hfs_extend_file+0xfb/0x1440
[  897.329584][T29554]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  897.335232][T29554]  ? hfs_extend_file+0xfb/0x1440
[  897.340293][T29554]  ? mutex_lock_nested+0x10/0x10
[  897.345243][T29554]  ? lock_acquire+0x26f/0x5a0
[  897.349943][T29554]  ? preempt_schedule+0xd9/0xe0
[  897.354810][T29554]  hfs_extend_file+0xfb/0x1440
[  897.359585][T29554]  ? schedule_preempt_disabled+0x20/0x20
[  897.365238][T29554]  ? hfs_get_block+0xb60/0xb60
[  897.370018][T29554]  ? preempt_schedule_thunk+0x16/0x18
[  897.375409][T29554]  ? __mutex_lock+0x30b/0xd80
[  897.380100][T29554]  ? hfs_brec_find+0x193/0x570
[  897.384909][T29554]  ? hfs_find_init+0x16a/0x1e0
[  897.389683][T29554]  hfs_bmap_reserve+0xd5/0x3f0
[  897.394460][T29554]  __hfs_ext_write_extent+0x22e/0x4f0
[  897.399846][T29554]  hfs_ext_write_extent+0x150/0x1d0
[  897.405054][T29554]  ? hfs_ext_keycmp+0x300/0x300
[  897.409912][T29554]  ? __lock_acquire+0x125b/0x1f80
[  897.414957][T29554]  hfs_write_inode+0xb8/0xb50
[  897.419645][T29554]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  897.425030][T29554]  ? __writeback_single_inode+0x4c6/0x11e0
[  897.430849][T29554]  ? do_raw_spin_unlock+0x137/0x8a0
[  897.436063][T29554]  __writeback_single_inode+0x67d/0x11e0
[  897.441713][T29554]  writeback_single_inode+0x22c/0x960
[  897.447093][T29554]  ? write_inode_now+0x260/0x260
[  897.452050][T29554]  write_inode_now+0x1cf/0x260
[  897.456820][T29554]  ? bdi_split_work_to_wbs+0x990/0x990
[  897.462291][T29554]  ? clear_nonspinnable+0x60/0x60
[  897.467329][T29554]  ? clear_nonspinnable+0x60/0x60
[  897.472367][T29554]  ? __up_read+0x690/0x690
[  897.476794][T29554]  hfs_file_fsync+0x9e/0x140
[  897.481398][T29554]  generic_file_write_iter+0x29d/0x310
[  897.486866][T29554]  vfs_write+0x857/0xbc0
[  897.491120][T29554]  ? file_end_write+0x250/0x250
[  897.495979][T29554]  ? __fget_files+0x28/0x4a0
[  897.500575][T29554]  ? __fget_files+0x435/0x4a0
[  897.505267][T29554]  ? __fdget_pos+0x2ba/0x360
[  897.509878][T29554]  ? ksys_write+0x77/0x2c0
[  897.514324][T29554]  ksys_write+0x19c/0x2c0
[  897.518682][T29554]  ? print_irqtrace_events+0x210/0x210
[  897.524218][T29554]  ? __ia32_sys_read+0x80/0x80
[  897.529099][T29554]  ? syscall_enter_from_user_mode+0x2e/0x230
[  897.535091][T29554]  ? lockdep_hardirqs_on+0x94/0x130
[  897.540299][T29554]  ? syscall_enter_from_user_mode+0x2e/0x230
[  897.546295][T29554]  do_syscall_64+0x3b/0xb0
[  897.550746][T29554]  ? clear_bhb_loop+0x45/0xa0
[  897.555433][T29554]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  897.561345][T29554] RIP: 0033:0x7f396e78d169
[  897.565768][T29554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  897.585384][T29554] RSP: 002b:00007f396f5b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  897.593806][T29554] RAX: ffffffffffffffda RBX: 00007f396e9a5fa0 RCX: 00007f396e78d169
[  897.601787][T29554] RDX: 0000000000000b00 RSI: 0000200000000940 RDI: 0000000000000004
[  897.609764][T29554] RBP: 00007f396e80e2a0 R08: 0000000000000000 R09: 0000000000000000
[  897.617740][T29554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  897.625716][T29554] R13: 0000000000000000 R14: 00007f396e9a5fa0 R15: 00007ffdda7dddf8
[  897.633701][T29554]  </TASK>
[  897.665197][T29532] JBD2: Ignoring recovery information on journal
[  897.668970][T29558] loop1: detected capacity change from 0 to 128
[  897.736844][T29532] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  897.748508][ T4252] hfs: node 4:3 still has 1 user(s)!
[  897.775224][ T4249] sysv_free_block: flc_count > flc_size
[  897.779536][ T4538] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  897.796842][ T4249] sysv_free_block: flc_count > flc_size
[  897.805845][ T4249] sysv_free_block: flc_count > flc_size
[  897.808948][T26508] ocfs2: Unmounting device (7,7) on (node local)
[  897.812671][ T4249] sysv_free_block: flc_count > flc_size
[  897.827235][ T4249] sysv_free_block: flc_count > flc_size
[  897.833248][ T4249] sysv_free_block: flc_count > flc_size
[  897.842065][ T4249] sysv_free_block: flc_count > flc_size
[  897.847665][ T4249] sysv_free_block: flc_count > flc_size
[  897.853444][ T4249] sysv_free_block: flc_count > flc_size
[  897.859019][ T4249] sysv_free_block: flc_count > flc_size
[  897.871155][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  897.970807][ T4538] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  897.980763][ T4538] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00
[  897.990186][ T4538] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.000193][ T4538] usb 6-1: config 0 descriptor??
[  898.411910][ T4538] cmedia_hs100b 0003:0D8C:0014.0001: unbalanced collection at end of report description
[  898.422242][ T4538] cmedia_hs100b: probe of 0003:0D8C:0014.0001 failed with error -22
[  898.622531][T17354] usb 6-1: USB disconnect, device number 25