last executing test programs:

1m57.961508667s ago: executing program 3 (id=154):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060003000000050007000000000005000300df00000008000200", @ANYRES32=r0], 0x68}}, 0x0)

1m57.726373283s ago: executing program 3 (id=157):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2dc, 0x2)

1m56.489452033s ago: executing program 3 (id=166):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c04, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x187042, 0x15)
io_setup(0x43, &(0x7f0000000440)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x18, 0x8, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])

1m55.80549927s ago: executing program 3 (id=173):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x10068ad, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m53.464402458s ago: executing program 3 (id=196):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)

1m50.605519668s ago: executing program 3 (id=207):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xda9, &(0x7f0000001740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

1m49.797790258s ago: executing program 32 (id=207):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x3, 0xda9, &(0x7f0000001740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
syz_mount_image$vfat(&(0x7f0000000800), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

5.660271702s ago: executing program 2 (id=985):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0))
chdir(&(0x7f00000003c0)='./bus\x00')
symlinkat(&(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

4.554590829s ago: executing program 0 (id=990):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

4.177551598s ago: executing program 0 (id=993):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)
close(r0)

4.118004959s ago: executing program 0 (id=994):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xe, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x8000, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x4, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6252, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0x6, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x0, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0xfffffffc, 0x9, 0x80000000, 0xc, 0x1, 0x0, 0xfa, 0x7, 0x9f9, 0x1, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0x200ff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0xfc, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x6, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfa, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x7f, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x2, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0xff, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x4]}, 0x45c)

3.900197115s ago: executing program 1 (id=995):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mkdir(&(0x7f0000000000)='./file2\x00', 0x44)

3.753388978s ago: executing program 0 (id=997):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xa04080, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106)
truncate(&(0x7f0000000000)='./file1\x00', 0x103000)
fallocate(r0, 0x8, 0x4012, 0x10000)

3.517803614s ago: executing program 2 (id=998):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

3.511529634s ago: executing program 5 (id=999):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0xd)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x8, 0x10ffff, 0xfffffffb, 0x0, 0x4, 0xfc1})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)

2.841638831s ago: executing program 5 (id=1001):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="050000b11f3ac7c5d1e71d00000008000300", @ANYRES32=r2], 0x30}}, 0x0)

2.519794098s ago: executing program 5 (id=1002):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
inotify_add_watch(0xffffffffffffffff, 0x0, 0xa0000010)

2.390448482s ago: executing program 2 (id=1003):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/pci/drivers/dwc2-pci/new_id\x00', 0x1, 0x0)
write(r0, &(0x7f0000000080)='8', 0x1)

2.196767146s ago: executing program 1 (id=1005):
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8)
r0 = gettid()
tkill(r0, 0x12)
rt_sigtimedwait(&(0x7f00000000c0)={[0xffffffffffff8518]}, &(0x7f0000000100), 0x0, 0x8)

2.067877509s ago: executing program 2 (id=1006):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0)
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

1.820384385s ago: executing program 1 (id=1008):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0)
sendmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18}}], 0x1, 0x0)

1.677809669s ago: executing program 4 (id=1009):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x40, r1, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5fe}]}, 0x40}}, 0x0)

1.63594822s ago: executing program 2 (id=1010):
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x7b7306c040510a6})
ppoll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, &(0x7f0000000080), 0x0, 0x0)

1.557330642s ago: executing program 0 (id=1011):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
close(0x3)

1.509494233s ago: executing program 1 (id=1012):
r0 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

1.386394876s ago: executing program 4 (id=1013):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001a80200004801c00018008"], 0x44}}, 0x0)

1.327965428s ago: executing program 2 (id=1014):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x496}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@noauto_da_alloc}, {@nodiscard}, {@barrier_val={'barrier', 0x3d, 0x8001}}, {@nodioread_nolock}]}, 0x81, 0xbe3, &(0x7f0000001c40)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)

1.106603233s ago: executing program 4 (id=1015):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xf3f2}, &(0x7f0000000180)=0x8)

1.041148135s ago: executing program 1 (id=1016):
syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000010300)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES8=0x0, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x11f0, &(0x7f0000001b00)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)

846.55977ms ago: executing program 5 (id=1017):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x2005, 0x3, 'none\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)

783.530581ms ago: executing program 0 (id=1018):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@nodiscard}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f0000000140)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100070000000000040003000000000010000500000000002000"], 0x24, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20942, 0x3)

753.911871ms ago: executing program 4 (id=1019):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)
r1 = dup(r0)
fallocate(r1, 0x10, 0x0, 0x72000)

517.150518ms ago: executing program 5 (id=1020):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000340)={0x3c, r2, 0x601, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xdf}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "bd70e04747e702016a3e185ab2fc8a4a"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x8044)

392.515611ms ago: executing program 4 (id=1021):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xae}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x7fffffff, 0x200000000000000, 0x7fffffffffffffff}, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)

173.621016ms ago: executing program 5 (id=1022):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
pause()

106.426598ms ago: executing program 1 (id=1023):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0)
ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)=0x6)

0s ago: executing program 4 (id=1024):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', <r1=>0x0})
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @private2, 0x7800, 0x7f, 0xfffffffc, 0xdc66}})

kernel console output (not intermixed with test programs):

tdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.449635][ T4276] ocfs2: Unmounting device (7,4) on (node local)
[  126.764143][ T4423] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  127.004113][ T4423] usb 2-1: Using ep0 maxpacket: 32
[  127.012890][ T4423] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  127.052737][ T4423] usb 2-1: config 0 has no interface number 0
[  127.082577][ T4423] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  127.154035][ T4423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.162151][ T4423] usb 2-1: Product: syz
[  127.202547][ T4423] usb 2-1: Manufacturer: syz
[  127.214621][ T4893] loop9: detected capacity change from 0 to 524287936
[  127.232980][ T4423] usb 2-1: SerialNumber: syz
[  127.299719][ T4423] usb 2-1: config 0 descriptor??
[  127.322800][ T4423] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  127.536226][ T4423] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  127.639095][ T4423] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  127.904697][ T1195] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  127.967902][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  127.980854][ T4423] usb 2-1: USB disconnect, device number 3
[  128.016913][ T4423] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  128.064059][   T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  128.114181][ T4423] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  128.128160][ T1195] usb 3-1: config 0 interface 0 has no altsetting 0
[  128.146276][ T1195] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  128.164232][ T1195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.179294][ T4423] quatech2 2-1:0.51: device disconnected
[  128.213552][ T1195] usb 3-1: config 0 descriptor??
[  128.432902][ T4909] loop0: detected capacity change from 0 to 32768
[  128.446724][ T4909] (syz.0.216,4909,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  128.463457][ T4909] (syz.0.216,4909,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  128.480313][   T14] usb 5-1: Using ep0 maxpacket: 32
[  128.493958][   T14] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.511431][   T14] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.524550][   T14] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.553980][   T14] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  128.576092][ T4909] JBD2: Ignoring recovery information on journal
[  128.590597][   T14] usb 5-1: config 0 interface 0 has no altsetting 0
[  128.597463][   T14] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  128.606781][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.635186][   T14] usb 5-1: config 0 descriptor??
[  128.688039][ T4909] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  128.708733][ T4909] (syz.0.216,4909,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  128.719452][ T1195] a4tech 0003:09DA:000A.0003: unexpected long global item
[  128.773043][ T4909] (syz.0.216,4909,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  128.803725][ T1195] a4tech 0003:09DA:000A.0003: parse failed
[  128.850849][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  128.862823][ T1195] a4tech: probe of 0003:09DA:000A.0003 failed with error -22
[  128.870768][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  128.879303][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  128.895014][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  128.903770][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  128.913357][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  128.922065][ T4423] usb 3-1: USB disconnect, device number 3
[  129.053750][   T14] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  129.066714][   T14] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  129.077082][   T14] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  129.109608][   T14] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  129.123028][ T4283] ocfs2: Unmounting device (7,0) on (node local)
[  129.129898][   T14] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  129.183487][   T14] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[  129.206694][   T14] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints?
[  129.251405][    C0] hid-thrustmaster 0003:044F:B65D.0004: Unknown packet type 0x0, unable to proceed further with wheel init
[  129.429210][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.219'.
[  129.545579][   T14] usb 5-1: USB disconnect, device number 2
[  129.686561][ T4929] loop2: detected capacity change from 0 to 512
[  129.706553][ T4923] fido_id[4923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  129.813210][ T4929] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  129.857404][ T4929] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.252979][ T4286] EXT4-fs (loop2): unmounting filesystem.
[  130.545438][   T14] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  130.633739][    T9] device hsr_slave_0 left promiscuous mode
[  130.666568][    T9] device hsr_slave_1 left promiscuous mode
[  130.690492][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.718775][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.744104][   T14] usb 5-1: Using ep0 maxpacket: 16
[  130.761099][   T14] usb 5-1: config 0 has no interfaces?
[  130.768269][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.788278][   T14] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  130.800233][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.820314][    T9] device bridge_slave_1 left promiscuous mode
[  130.838326][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.846083][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.884068][   T14] usb 5-1: Product: syz
[  130.903264][   T14] usb 5-1: Manufacturer: syz
[  130.924722][   T14] usb 5-1: SerialNumber: syz
[  130.940223][    T9] device bridge_slave_0 left promiscuous mode
[  130.952519][   T14] r8152-cfgselector 5-1: config 0 descriptor??
[  130.959907][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.994135][ T4282] Bluetooth: hci2: command 0x0409 tx timeout
[  131.047847][    T9] device veth1_macvtap left promiscuous mode
[  131.079637][    T9] device veth0_macvtap left promiscuous mode
[  131.111211][    T9] device veth1_vlan left promiscuous mode
[  131.153474][    T9] device veth0_vlan left promiscuous mode
[  131.223169][   T14] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  131.440827][   T14] usb 5-1: USB disconnect, device number 3
[  132.180038][ T4989] syz.4.235 (4989) used greatest stack depth: 20656 bytes left
[  132.513509][    T9] team0 (unregistering): Port device team_slave_1 removed
[  132.638529][    T9] team0 (unregistering): Port device team_slave_0 removed
[  132.644684][ T4997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.238'.
[  132.682054][ T4997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.238'.
[  132.716362][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.812446][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.074097][ T4282] Bluetooth: hci2: command 0x041b tx timeout
[  133.207877][    T9] bond0 (unregistering): Released all slaves
[  133.319971][ T4915] chnl_net:caif_netlink_parms(): no params data found
[  133.664617][ T5008] loop0: detected capacity change from 0 to 4096
[  133.829640][ T4915] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.895552][ T4915] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.923291][ T5008] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  133.945387][ T4915] device bridge_slave_0 entered promiscuous mode
[  133.974247][ T5008] NILFS (loop0): error -5 reading inode: ino=2
[  133.992454][ T4915] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.013771][ T5008] NILFS (loop0): error -5 getting root inode
[  134.032547][ T4915] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.081406][ T4915] device bridge_slave_1 entered promiscuous mode
[  134.261736][ T4915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.327182][ T4915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.522675][ T4915] team0: Port device team_slave_0 added
[  134.571399][ T4915] team0: Port device team_slave_1 added
[  134.708933][ T4915] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.728436][ T4915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.741714][ T5028] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  134.816986][ T4915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.876060][ T4915] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.904656][ T4915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.008856][ T4915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.154078][ T4293] Bluetooth: hci2: command 0x040f tx timeout
[  135.337093][ T4915] device hsr_slave_0 entered promiscuous mode
[  135.376699][ T4915] device hsr_slave_1 entered promiscuous mode
[  135.405291][ T4915] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  135.451943][ T4915] Cannot create hsr debugfs directory
[  135.847273][ T5019] loop2: detected capacity change from 0 to 40427
[  135.929614][ T5019] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  135.995325][ T5019] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  136.033318][ T5019] F2FS-fs (loop2): invalid crc value
[  136.102278][ T5019] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597)
[  136.120785][ T5060] use of bytesused == 0 is deprecated and will be removed in the future,
[  136.184914][ T5060] use the actual size instead.
[  136.200177][ T4915] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  136.269914][ T4915] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  136.330041][ T4915] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  136.391765][ T4915] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  136.449845][ T5068] Zero length message leads to an empty skb
[  136.479092][ T5019] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  136.494278][ T5019] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  136.612153][ T5019] fscrypt (loop2, inode 3): Error -61 getting encryption context
[  136.887812][ T4915] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.003561][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.019109][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.072512][ T4915] 8021q: adding VLAN 0 to HW filter on device team0
[  137.094898][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  137.104818][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.113780][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.122942][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.160721][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  137.172700][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  137.189300][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.214273][ T4423] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  137.234000][ T4282] Bluetooth: hci2: command 0x0419 tx timeout
[  137.241217][ T4349] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.248487][ T4349] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.364792][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.409867][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.423384][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.447247][ T4423] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  137.461431][ T4423] usb 2-1: config 0 has no interface number 0
[  137.472017][ T4423] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  137.489851][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  137.510428][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  137.519779][ T4423] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  137.532181][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  137.541777][ T4423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.551664][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  137.560093][ T4423] usb 2-1: Product: syz
[  137.565924][ T4423] usb 2-1: Manufacturer: syz
[  137.572076][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  137.580428][ T4423] usb 2-1: SerialNumber: syz
[  137.588252][ T4423] usb 2-1: config 0 descriptor??
[  137.594536][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  137.625923][ T4915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.666469][ T4915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.689905][ T4423] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  137.703826][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  137.717817][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  138.254344][    C1] usb 2-1: yurex_control_callback - control failed: -2
[  138.263419][   T14] usb 2-1: USB disconnect, device number 4
[  138.316216][   T14] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  138.468765][ T5081] loop0: detected capacity change from 0 to 40427
[  138.552001][ T5081] F2FS-fs (loop0): invalid crc value
[  138.589052][ T5098] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  138.603389][ T5081] F2FS-fs (loop0): Found nat_bits in checkpoint
[  138.699515][ T5098] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  138.767580][ T5081] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  138.802137][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  138.853724][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  138.856518][ T5081] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  138.920634][ T4915] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.072520][ T5081] syz.0.265: attempt to access beyond end of device
[  139.072520][ T5081] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.460878][ T5120] capability: warning: `syz.1.269' uses deprecated v2 capabilities in a way that may be insecure
[  139.570105][ T5125] program syz.2.272 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  139.720006][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  139.727267][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  140.785627][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.817566][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.974039][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.004806][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.108243][ T4915] device veth0_vlan entered promiscuous mode
[  141.125532][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.135890][ T1117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.200806][ T4915] device veth1_vlan entered promiscuous mode
[  141.357637][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  141.384640][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  141.416074][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  141.449469][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  141.497965][ T4915] device veth0_macvtap entered promiscuous mode
[  141.552064][ T4915] device veth1_macvtap entered promiscuous mode
[  141.636650][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.679108][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.724219][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.762555][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.794114][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.847067][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.889359][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.923941][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.952118][ T5157] loop0: detected capacity change from 0 to 32768
[  141.966312][ T4915] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.975836][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  141.988953][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.030586][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  142.089452][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  142.121024][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.158032][ T5157] XFS (loop0): Mounting V5 Filesystem
[  142.164004][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.164055][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.164074][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.164087][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.164102][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.164113][ T4915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.164128][ T4915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.274531][ T4915] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.305847][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.316231][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.372402][ T4915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.402461][ T4915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.422708][ T4915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.453075][ T4915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.701173][ T5157] XFS (loop0): Ending clean mount
[  142.744464][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.752393][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.786428][ T5157] XFS (loop0): Quotacheck needed: Please wait.
[  142.896129][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.989965][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.013571][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.055250][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  143.089717][ T5157] XFS (loop0): Quotacheck: Done.
[  143.202095][ T5176] loop2: detected capacity change from 0 to 40427
[  143.268558][ T5176] F2FS-fs (loop2): invalid crc value
[  143.318279][ T5203] loop4: detected capacity change from 0 to 1024
[  143.361250][ T5176] F2FS-fs (loop2): Found nat_bits in checkpoint
[  143.434949][ T5203] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  143.465525][ T5203] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.570891][ T4283] XFS (loop0): Unmounting Filesystem
[  143.610410][ T5176] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  143.671230][ T5193] loop1: detected capacity change from 0 to 32768
[  143.678436][ T5176] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  143.923050][ T5193] JBD2: Ignoring recovery information on journal
[  144.027265][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  144.098458][ T5193] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  144.183501][ T4286] syz-executor: attempt to access beyond end of device
[  144.183501][ T4286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  144.627910][ T5232] loop5: detected capacity change from 0 to 1024
[  144.710063][ T5232] EXT4-fs: Ignoring removed orlov option
[  144.717604][ T5234] program syz.4.301 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  144.746991][ T4273] ocfs2: Unmounting device (7,1) on (node local)
[  144.788233][ T5236] program syz.0.295 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  144.953164][ T5232] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  145.020176][ T5242] netlink: 'syz.4.303': attribute type 9 has an invalid length.
[  145.029966][ T5242] netlink: 668 bytes leftover after parsing attributes in process `syz.4.303'.
[  145.413562][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  145.702704][ T5261] loop2: detected capacity change from 0 to 512
[  145.869463][ T5261] FAT-fs (loop2): error, corrupted file size (i_pos 51, 9216)
[  145.952686][ T5268] loop1: detected capacity change from 0 to 2048
[  146.012511][ T5268] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  146.038562][ T5272] loop5: detected capacity change from 0 to 512
[  146.065744][ T5268] NILFS (loop1): mounting unchecked fs
[  146.148343][ T5268] NILFS (loop1): recovery complete
[  146.157549][ T4605] udevd[4605]: incorrect nilfs2 checksum on /dev/loop1
[  146.248817][ T5276] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.408259][ T5279] netlink: 128 bytes leftover after parsing attributes in process `syz.2.316'.
[  146.472064][ T5279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'.
[  146.534220][ T5279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'.
[  146.807298][ T5287] autofs4:pid:5287:autofs_fill_super: pipe file descriptor does not contain proper ops
[  146.870220][ T5272] EXT4-fs: Ignoring removed bh option
[  146.886351][ T5272] EXT4-fs (loop5): Test dummy encryption mode enabled
[  146.914021][ T5272] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  146.977457][ T5272] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.314: inode has both inline data and extents flags
[  146.997895][ T5272] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.314: couldn't read orphan inode 15 (err -117)
[  147.010400][ T5272] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  147.207433][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  147.410008][ T5277] loop0: detected capacity change from 0 to 32768
[  147.458048][ T5304] loop5: detected capacity change from 0 to 1024
[  148.147164][ T5321] loop2: detected capacity change from 0 to 256
[  148.239600][ T5322] loop5: detected capacity change from 0 to 1024
[  148.405350][ T5322] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #13: comm syz.5.326: iget: bad i_size value: -360287970189638630
[  148.570936][ T5322] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.326: couldn't read orphan inode 13 (err -117)
[  148.625695][ T5329] program syz.4.329 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.630722][ T5322] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  148.770969][ T5322] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  148.859887][ T5322] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  148.912801][ T5322] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.326: Failed to acquire dquot type 0
[  149.159016][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  149.192813][ T5340] loop1: detected capacity change from 0 to 1764
[  149.205339][ T5342] loop0: detected capacity change from 0 to 2048
[  149.227356][ T5340] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  149.307041][ T5342] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  149.381279][ T5342] EXT4-fs (loop0): shut down requested (2)
[  149.523228][ T4283] EXT4-fs (loop0): unmounting filesystem.
[  149.654063][   T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  149.845762][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.894949][ T5363] loop1: detected capacity change from 0 to 128
[  149.910030][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.950380][   T14] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  149.981245][ T5363] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  150.013950][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.037649][ T5363] hpfs: filesystem error: improperly stopped
[  150.065385][   T14] usb 6-1: config 0 descriptor??
[  150.079721][ T5363] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  150.129528][ T5363] hpfs: You really don't want any checks? You are crazy...
[  150.156003][ T5363] hpfs: Code page index out of array
[  150.162528][ T5363] hpfs: code page support is disabled
[  150.171978][ T5363] hpfs: hpfs_map_4sectors(): unaligned read
[  150.179414][ T5363] hpfs: hpfs_map_4sectors(): unaligned read
[  150.185749][ T5363] hpfs: filesystem error: unable to find root dir
[  150.285628][ T5363] hpfs: bad mount options.
[  150.704629][   T14] usb 6-1: language id specifier not provided by device, defaulting to English
[  150.912834][   T14] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71
[  150.959416][   T14] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[  150.989813][   T14] uclogic: probe of 0003:256C:006D.0005 failed with error -71
[  151.014032][   T14] usb 6-1: USB disconnect, device number 2
[  151.158110][ T5396] loop0: detected capacity change from 0 to 256
[  151.274284][ T5399] loop1: detected capacity change from 0 to 128
[  151.284733][ T5399] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.304912][ T5399] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  151.332896][ T5396] FAT-fs (loop0): Directory bread(block 64) failed
[  151.355524][ T5396] FAT-fs (loop0): Directory bread(block 65) failed
[  151.362268][ T5396] FAT-fs (loop0): Directory bread(block 66) failed
[  151.369231][ T4285] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  151.424104][ T5396] FAT-fs (loop0): Directory bread(block 67) failed
[  151.464135][ T5396] FAT-fs (loop0): Directory bread(block 68) failed
[  151.470792][ T5396] FAT-fs (loop0): Directory bread(block 69) failed
[  151.511209][ T5396] FAT-fs (loop0): Directory bread(block 70) failed
[  151.554170][ T5396] FAT-fs (loop0): Directory bread(block 71) failed
[  151.576118][ T4285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.594871][ T5396] FAT-fs (loop0): Directory bread(block 72) failed
[  151.601502][ T5396] FAT-fs (loop0): Directory bread(block 73) failed
[  151.613960][ T4285] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  151.622949][ T4285] usb 5-1: config 0 interface 0 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  151.693989][ T4285] usb 5-1: config 0 interface 0 has no altsetting 0
[  151.703611][ T5402] netlink: 'syz.5.356': attribute type 4 has an invalid length.
[  151.738698][ T5402] netlink: 17 bytes leftover after parsing attributes in process `syz.5.356'.
[  151.744495][ T4285] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  151.797795][ T5385] loop2: detected capacity change from 0 to 32768
[  151.804640][ T4285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.812964][ T4285] usb 5-1: Product: syz
[  151.854311][ T4285] usb 5-1: Manufacturer: syz
[  151.859028][ T4285] usb 5-1: SerialNumber: syz
[  151.891784][ T4285] usb 5-1: config 0 descriptor??
[  151.915976][ T5385] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  152.143407][ T4285] usb 5-1: Found UVC 34.00 device syz (8086:0b5b)
[  152.182460][ T4285] usb 5-1: No valid video chain found.
[  152.385160][ T4285] usb 5-1: USB disconnect, device number 4
[  152.420705][ T4286] ocfs2: Unmounting device (7,2) on (node local)
[  152.701776][ T5426] Driver unsupported XDP return value 0 on prog  (id 20) dev N/A, expect packet loss!
[  153.117642][ T5440] loop4: detected capacity change from 0 to 512
[  153.153607][ T5440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  153.192283][ T5440] EXT4-fs (loop4): 1 truncate cleaned up
[  153.202220][ T5440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  153.221345][   T27] audit: type=1800 audit(1785157873.850:5): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.368" name="file1" dev="loop4" ino=15 res=0 errno=0
[  153.307167][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  153.798886][ T5459] loop4: detected capacity change from 0 to 256
[  154.181212][ T5468] loop1: detected capacity change from 0 to 64
[  154.233478][ T5471] loop0: detected capacity change from 0 to 128
[  154.302465][ T5471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  154.369473][ T5468] hfs: request for non-existent node 131072 in B*Tree
[  154.385875][ T5471] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.425948][ T5475] loop4: detected capacity change from 0 to 16
[  154.432334][ T5468] hfs: request for non-existent node 131072 in B*Tree
[  154.478610][ T5475] erofs: (device loop4): mounted with root inode @ nid 36.
[  154.494269][ T5471] EXT4-fs warning (device loop0): ext4_group_extend:1894: will only finish group (8193 blocks, 8129 new)
[  154.536260][ T5471] EXT4-fs warning (device loop0): ext4_group_extend:1899: can't read last block, resize aborted
[  154.559509][   T27] audit: type=1800 audit(1785157875.190:6): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.380" name="file1" dev="loop4" ino=86 res=0 errno=0
[  154.700840][ T4283] EXT4-fs (loop0): unmounting filesystem.
[  154.948236][ T5483] loop1: detected capacity change from 0 to 2048
[  155.012949][ T5483] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  155.109554][ T5483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.733006][ T5501] tap0: tun_chr_ioctl cmd 1074025677
[  155.738974][ T5501] tap0: linktype set to 270
[  155.784072][ T4422] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  155.995703][ T4422] usb 6-1: Using ep0 maxpacket: 16
[  156.019263][ T4422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.070551][ T4422] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.108090][ T4422] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  156.144006][ T4422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.186277][ T4422] usb 6-1: config 0 descriptor??
[  156.197324][ T4293] Bluetooth: hci1: command 0x0401 tx timeout
[  156.443546][ T5516] loop0: detected capacity change from 0 to 512
[  156.468129][ T5516] EXT4-fs: Ignoring removed oldalloc option
[  156.554404][ T5516] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2752: inode #11: comm syz.0.400: corrupted xattr block 95
[  156.638084][ T4422] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  156.651089][ T4422] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  156.656841][ T5516] EXT4-fs (loop0): Remounting filesystem read-only
[  156.669649][ T4422] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  156.678002][ T4422] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  156.684668][ T5516] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  156.694173][ T4422] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  156.730386][ T4422] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0
[  156.756722][ T5516] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.400: bg 0: block 7: invalid block bitmap
[  156.778299][ T5516] EXT4-fs (loop0): Remounting filesystem read-only
[  156.796227][ T5516] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  156.837500][ T4422] corsair 0003:1B1C:1B02.0006: Read invalid backlight brightness: 54.
[  156.856892][ T5516] EXT4-fs (loop0): Remounting filesystem read-only
[  156.863679][ T5516] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2918: inode #11: comm syz.0.400: corrupted xattr block 95
[  156.899794][ T5519] loop4: detected capacity change from 0 to 4096
[  156.937176][ T5519] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  156.968885][ T5516] EXT4-fs (loop0): Remounting filesystem read-only
[  157.000315][ T5516] EXT4-fs warning (device loop0): ext4_evict_inode:301: xattr delete (err -117)
[  157.023726][ T5521] loop2: detected capacity change from 0 to 2048
[  157.033563][ T5516] EXT4-fs (loop0): 1 orphan inode deleted
[  157.078278][ T4422] usb 6-1: USB disconnect, device number 3
[  157.084548][ T5516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  157.212224][ T5524] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.304259][   T27] audit: type=1800 audit(1785157877.930:7): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.402" name="file2" dev="loop2" ino=16 res=0 errno=0
[  157.332569][ T5516] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz.0.400: path /72/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0
[  157.414919][ T5522] fido_id[5522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  157.450687][ T5516] EXT4-fs (loop0): Remounting filesystem read-only
[  157.548037][ T4276] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  157.583352][ T4276] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22.
[  157.613283][ T4276] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  157.691914][ T4283] EXT4-fs (loop0): unmounting filesystem.
[  157.964351][ T4422] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  158.164085][ T4320] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  158.185925][ T4422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  158.206374][ T4422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  158.219414][ T4422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  158.231260][ T4422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  158.253751][ T4422] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  158.278054][ T4422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.287195][ T4422] usb 2-1: Product: syz
[  158.291457][ T4422] usb 2-1: Manufacturer: syz
[  158.296500][ T4422] usb 2-1: SerialNumber: syz
[  158.312861][ T5543] loop2: detected capacity change from 0 to 1024
[  158.322529][ T4422] usb 2-1: config 0 descriptor??
[  158.344589][ T5543] hfsplus: Filesystem is marked locked, mounting read-only.
[  158.367744][ T4320] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  158.388991][ T4320] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  158.419165][ T4320] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  158.437210][ T5543] hfsplus: filesystem is marked locked, leaving read-only.
[  158.444722][ T4324] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  158.446568][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.501343][ T5535] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  158.584686][ T4422] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  158.654995][ T4324] usb 1-1: Using ep0 maxpacket: 8
[  158.664711][ T4324] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  158.733430][ T4324] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  158.762615][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.771911][ T4324] usb 1-1: Product: syz
[  158.776587][ T4324] usb 1-1: Manufacturer: syz
[  158.781497][ T4324] usb 1-1: SerialNumber: syz
[  158.803246][ T4324] usb 1-1: config 0 descriptor??
[  158.830646][ T4324] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  158.884715][ T4320] usb 6-1: USB disconnect, device number 4
[  158.907616][ T4324] usb 1-1: setting power ON
[  158.918571][ T4423] usb 2-1: USB disconnect, device number 5
[  158.939125][ T4324] dvb-usb: bulk message failed: -22 (2/0)
[  159.031180][ T5541] dvb-usb: bulk message failed: -22 (3/0)
[  159.047471][ T4324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  159.075110][ T5541] dvb-usb: bulk message failed: -22 (4/0)
[  159.092207][ T4324] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  159.106045][ T5558] cxusb: i2c rd: len=212 is too big!
[  159.106045][ T5558] 
[  159.123463][ T4324] usb 1-1: media controller created
[  159.200663][ T4324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.260003][ T4324] usb 1-1: selecting invalid altsetting 6
[  159.266802][ T4324] usb 1-1: digital interface selection failed (-22)
[  159.276009][ T4324] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  159.288551][ T4324] usb 1-1: setting power OFF
[  159.296156][ T4324] dvb-usb: bulk message failed: -22 (2/0)
[  159.302474][ T4324] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  159.317724][ T4324] (NULL device *): no alternate interface
[  159.430945][ T4324] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  159.503472][ T4324] usb 1-1: USB disconnect, device number 7
[  159.621603][ T5568] loop2: detected capacity change from 0 to 64
[  159.994257][  T127] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  160.201646][  T127] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  160.224429][  T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.232958][  T127] usb 5-1: Product: syz
[  160.242053][  T127] usb 5-1: Manufacturer: syz
[  160.252448][  T127] usb 5-1: SerialNumber: syz
[  160.577483][  T127] rtl8150 5-1:1.0: couldn't reset the device
[  160.596568][  T127] rtl8150: probe of 5-1:1.0 failed with error -5
[  160.611707][ T5591] program syz.0.425 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  160.641100][  T127] usb 5-1: USB disconnect, device number 5
[  161.003964][ T4324] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  161.207260][ T4324] usb 2-1: Using ep0 maxpacket: 32
[  161.218754][ T4324] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  161.249538][ T4324] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  161.278622][ T5610] loop4: detected capacity change from 0 to 256
[  161.295227][ T4324] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  161.315745][ T5610] exfat: Deprecated parameter 'namecase'
[  161.329339][ T4324] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  161.346671][ T5610] exfat: Deprecated parameter 'namecase'
[  161.372761][ T4324] usb 2-1: config 0 interface 0 has no altsetting 0
[  161.391993][ T4324] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  161.412088][ T5610] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  161.434111][ T4324] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  161.451137][ T4324] usb 2-1: Product: syz
[  161.477512][ T4324] usb 2-1: Manufacturer: syz
[  161.482213][ T4324] usb 2-1: SerialNumber: syz
[  161.518761][ T4324] usb 2-1: config 0 descriptor??
[  161.550142][ T4324] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  161.612165][ T4324] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  161.760735][ T5617] loop2: detected capacity change from 0 to 2048
[  161.885319][ T5599] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  161.888286][ T4324] usb 2-1: USB disconnect, device number 6
[  161.900437][    C0] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  161.908822][ T5620] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.940604][ T4324] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  162.101882][ T5620] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  162.155106][ T5620] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  162.226263][ T5620] Remounting filesystem read-only
[  162.372355][ T4286] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  162.680627][   T27] audit: type=1400 audit(1785157883.310:8): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26262F5083A0768E5D4332352BE40EB41E3406DE4498E740A470141032EA251C144CDB5352D8049281898C72F13A5D3509C9C77308FE45016ABFD7D42B1A022A60B9A5BBCECE7C0A10BF9F157995465729B38FDCADD0D977574636206982A6B4E8F24BC75E3EB054FB9AE81E878AFD24CFA9756F6368616E676570726F66696C65203A2F2F26CCD938681A7387ED22A0E3A8284D3182AA7EF1905A267850FC405494D7079F6D0364287CF7B16DC2310B15BC49FB68D1A96075CB5F30F4FC2EC0C51D0B7E806E78F108F4060A55B8C23B3C89A2F2FA321D5138019C417A504D230EC496583933DABA2998E20D8F9A2E6798F681 pid=5639 comm="syz.0.443"
[  162.740318][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.094070][ T4324] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  163.304085][ T4324] usb 5-1: Using ep0 maxpacket: 32
[  163.311537][ T4324] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  163.348288][ T5660] loop5: detected capacity change from 0 to 256
[  163.367514][ T4324] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  163.393121][ T4324] usb 5-1: config 0 interface 0 has no altsetting 0
[  163.436389][ T4324] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  163.462856][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.502945][ T4324] usb 5-1: Product: syz
[  163.513091][ T4324] usb 5-1: Manufacturer: syz
[  163.543524][ T4324] usb 5-1: SerialNumber: syz
[  163.564822][ T4324] usb 5-1: config 0 descriptor??
[  163.574152][  T127] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  163.771677][  T127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  163.808322][  T127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  163.832360][  T127] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  163.849054][  T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.876890][  T127] usb 1-1: config 0 descriptor??
[  163.884826][ T5656] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  163.997511][ T4324] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  164.025875][ T5650] loop2: detected capacity change from 0 to 32768
[  164.156287][ T5650] XFS (loop2): Mounting V5 Filesystem
[  164.301674][ T5650] XFS (loop2): Ending clean mount
[  164.351861][  T127] logitech 0003:046D:C29C.0007: unknown main item tag 0x2
[  164.363813][  T127] logitech 0003:046D:C29C.0007: unknown main item tag 0x4
[  164.428100][  T127] logitech 0003:046D:C29C.0007: unknown main item tag 0xd
[  164.454269][  T127] logitech 0003:046D:C29C.0007: unknown main item tag 0x1
[  164.480081][  T127] logitech 0003:046D:C29C.0007: unknown main item tag 0x3
[  164.497799][  T127] logitech 0003:046D:C29C.0007: unknown main item tag 0x1
[  164.522054][ T4324] usb 5-1: USB disconnect, device number 6
[  164.534980][  T127] logitech 0003:046D:C29C.0007: hidraw0: USB HID v80.09 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0
[  164.650409][ T4286] XFS (loop2): Unmounting Filesystem
[  164.761924][  T127] logitech 0003:046D:C29C.0007: no inputs found
[  164.799425][  T127] usb 1-1: USB disconnect, device number 8
[  165.067883][ T5696] fido_id[5696]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  165.162870][ T5701] loop5: detected capacity change from 0 to 2048
[  165.202958][ T5703] loop4: detected capacity change from 0 to 256
[  165.259354][ T5701] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  165.363971][   T27] audit: type=1800 audit(1785157885.990:9): pid=5703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.461" name="file1" dev="loop4" ino=1048638 res=0 errno=0
[  165.410988][ T5703] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  165.453812][ T5701] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  165.495922][ T5701] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  165.564858][ T5701] EXT4-fs (loop5): This should not happen!! Data will be lost
[  165.564858][ T5701] 
[  165.664869][ T5701] EXT4-fs (loop5): Total free blocks count 0
[  165.671442][ T5701] EXT4-fs (loop5): Free/Dirty block details
[  165.688595][ T5701] EXT4-fs (loop5): free_blocks=2415919104
[  165.724371][ T5701] EXT4-fs (loop5): dirty_blocks=16
[  165.729596][ T5701] EXT4-fs (loop5): Block reservation details
[  165.843927][ T5701] EXT4-fs (loop5): i_reserved_data_blocks=1
[  165.882573][ T5717] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  166.008488][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  166.014889][ T5719] mkiss: ax0: crc mode is auto.
[  166.322446][ T5732] Need at least one configuration in g1.
[  166.371197][ T5732] udc dummy_udc.0: failed to start g1: -22
[  166.404317][ T5732] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  166.474908][ T5732] UDC core: g1: couldn't find an available UDC or it's busy
[  166.612475][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'.
[  166.682011][ T5746] loop2: detected capacity change from 0 to 512
[  166.760073][ T5746] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.475: inode #1: comm syz.2.475: iget: illegal inode #
[  166.930401][ T5746] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.475: error while reading EA inode 1 err=-117
[  166.974794][ T5746] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.475: inode #1: comm syz.2.475: iget: illegal inode #
[  167.049230][ T5746] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.475: error while reading EA inode 1 err=-117
[  167.119812][ T5746] EXT4-fs (loop2): 1 orphan inode deleted
[  167.154052][ T5746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  167.321136][ T5746] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.475: invalid indirect mapped block 234881024 (level 0)
[  167.458585][ T5766] loop5: detected capacity change from 0 to 16
[  167.516307][ T5766] erofs: (device loop5): mounted with root inode @ nid 36.
[  167.588947][ T4286] EXT4-fs (loop2): unmounting filesystem.
[  168.088281][ T5781] device macvlan1 entered promiscuous mode
[  168.146876][ T5781] device macvlan1 left promiscuous mode
[  168.226372][ T5756] loop4: detected capacity change from 0 to 32768
[  168.449980][ T5789] Need at least one configuration in g1.
[  168.474298][ T5789] udc dummy_udc.0: failed to start g1: -22
[  168.480220][ T5789] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  168.534856][ T5789] UDC core: g1: couldn't find an available UDC or it's busy
[  168.966289][ T5804] loop0: detected capacity change from 0 to 512
[  169.035708][ T5804] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002]
[  169.057080][ T5804] System zones: 1-12
[  169.062796][ T5804] EXT4-fs (loop0): 1 truncate cleaned up
[  169.074055][ T5804] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  169.124970][ T5809] loop4: detected capacity change from 0 to 1024
[  169.142779][ T5809] EXT4-fs: Ignoring removed orlov option
[  169.173248][ T5809] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  169.206123][ T5809] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  169.225142][ T5809] EXT4-fs (loop4): orphan cleanup on readonly fs
[  169.239438][ T5809] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.496: Invalid inode table block 0 in block_group 0
[  169.259003][ T5809] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  169.279750][ T5809] EXT4-fs error (device loop4): ext4_quota_write:7253: inode #3: comm syz.4.496: mark_inode_dirty error
[  169.294407][ T5809] Quota error (device loop4): write_blk: dquota write failed
[  169.302355][ T5809] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  169.313519][ T5809] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.496: Failed to acquire dquot type 0
[  169.326172][ T5809] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.496: Invalid inode table block 0 in block_group 0
[  169.347598][ T5809] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  169.358420][   T27] audit: type=1800 audit(1785157889.990:10): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.492" name="file1" dev="loop0" ino=13 res=0 errno=0
[  169.363120][ T5809] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.496: mark_inode_dirty error
[  169.462506][ T5809] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.496: Invalid inode table block 0 in block_group 0
[  169.538753][ T5809] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  169.564932][ T4283] EXT4-fs (loop0): unmounting filesystem.
[  169.584226][ T5809] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  169.642620][ T5809] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz.4.496: Invalid inode table block 0 in block_group 0
[  169.722220][ T5809] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  169.812550][ T5809] EXT4-fs error (device loop4): ext4_truncate:4325: inode #15: comm syz.4.496: mark_inode_dirty error
[  169.866173][ T5809] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  169.932018][ T5809] EXT4-fs (loop4): 1 truncate cleaned up
[  169.952247][ T5809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  170.040690][ T5823] loop1: detected capacity change from 0 to 512
[  170.088134][ T5823] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  170.152144][ T5823] EXT4-fs (loop1): 1 truncate cleaned up
[  170.188318][ T5823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  170.256709][ T5809] EXT4-fs (loop4): shut down requested (2)
[  170.268696][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  170.357343][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  170.537357][ T5799] loop5: detected capacity change from 0 to 32768
[  170.658518][ T5799] JBD2: Ignoring recovery information on journal
[  170.807996][ T5799] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  170.904384][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'.
[  170.935686][ T5844] netlink: 'syz.1.506': attribute type 15 has an invalid length.
[  170.964203][ T5844] netlink: 'syz.1.506': attribute type 25 has an invalid length.
[  170.994125][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'.
[  171.082044][   T27] audit: type=1800 audit(1785157891.710:11): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.493" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  171.206438][ T5853] loop2: detected capacity change from 0 to 128
[  171.242398][ T5853] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  171.257850][ T4915] ocfs2: Unmounting device (7,5) on (node local)
[  171.320288][ T5853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.094877][ T5873] gadgetfs: bound to dummy_udc driver
[  172.454317][ T5847] loop4: detected capacity change from 0 to 32768
[  172.534499][ T5847] XFS (loop4): Mounting V5 Filesystem
[  172.585395][ T5896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.522'.
[  172.757953][ T5847] XFS (loop4): Ending clean mount
[  172.774090][ T1195] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  172.852630][ T5847] XFS (loop4): Quotacheck needed: Please wait.
[  172.978255][ T1195] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid maxpacket 65535, setting to 64
[  173.000060][ T5847] XFS (loop4): Quotacheck: Done.
[  173.026088][ T1195] usb 2-1: config 0 interface 0 has no altsetting 0
[  173.078300][ T1195] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  173.124132][ T1195] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  173.163168][ T1195] usb 2-1: Product: syz
[  173.175016][ T1195] usb 2-1: Manufacturer: syz
[  173.200160][ T1195] usb 2-1: SerialNumber: syz
[  173.220798][ T1195] usb 2-1: config 0 descriptor??
[  173.240322][ T5886] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  173.290230][ T4276] XFS (loop4): Unmounting Filesystem
[  173.297945][ T1195] usb 2-1: selecting invalid altsetting 0
[  173.610264][ T5886] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled
[  173.731541][ T5895] loop0: detected capacity change from 0 to 40427
[  173.767380][ T5895] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  173.784286][ T4324] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  173.802513][ T5895] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  173.825212][ T5895] F2FS-fs (loop0): invalid crc value
[  173.847675][ T5919] siw: device registration error -23
[  173.863618][ T5895] F2FS-fs (loop0): Found nat_bits in checkpoint
[  173.984262][ T4324] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  174.010858][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.048379][ T4324] usb 3-1: Product: syz
[  174.058059][ T5895] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  174.066777][ T4324] usb 3-1: Manufacturer: syz
[  174.075893][ T5895] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  174.085768][ T4324] usb 3-1: SerialNumber: syz
[  174.405251][ T4324] rtl8150 3-1:1.0: couldn't reset the device
[  174.427273][ T4324] rtl8150: probe of 3-1:1.0 failed with error -5
[  174.481862][ T4324] usb 3-1: USB disconnect, device number 4
[  175.094076][  T127] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  175.261031][ T5927] loop4: detected capacity change from 0 to 32768
[  175.293378][  T127] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  175.309897][ T5927] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  175.336069][  T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.350408][  T127] usb 6-1: Product: syz
[  175.367675][  T127] usb 6-1: Manufacturer: syz
[  175.376311][  T127] usb 6-1: SerialNumber: syz
[  175.391464][  T127] usb 6-1: config 0 descriptor??
[  175.452112][  T127] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  175.768274][ T4605] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  175.860308][  T127] gspca_stk1135: reg_w 0x0 err -71
[  175.870949][  T127] gspca_stk1135: serial bus timeout: status=0x00
[  175.886650][  T127] gspca_stk1135: Sensor write failed
[  175.898933][  T127] gspca_stk1135: serial bus timeout: status=0x00
[  175.917807][  T127] gspca_stk1135: Sensor write failed
[  175.930092][  T127] gspca_stk1135: serial bus timeout: status=0x00
[  175.944945][  T127] gspca_stk1135: Sensor read failed
[  175.957222][  T127] gspca_stk1135: serial bus timeout: status=0x00
[  175.976324][  T127] gspca_stk1135: Sensor read failed
[  175.991125][  T127] gspca_stk1135: Detected sensor type unknown (0x0)
[  176.009146][  T127] gspca_stk1135: serial bus timeout: status=0x00
[  176.028374][  T127] gspca_stk1135: Sensor read failed
[  176.043080][  T127] gspca_stk1135: serial bus timeout: status=0x00
[  176.052890][  T127] gspca_stk1135: Sensor read failed
[  176.059353][  T127] gspca_stk1135: serial bus timeout: status=0x00
[  176.067005][  T127] gspca_stk1135: Sensor write failed
[  176.077547][  T127] gspca_stk1135: serial bus timeout: status=0x00
[  176.084405][  T127] gspca_stk1135: Sensor write failed
[  176.090110][  T127] stk1135: probe of 6-1:0.0 failed with error -71
[  176.123695][  T127] usb 6-1: USB disconnect, device number 5
[  176.352825][ T5957] loop2: detected capacity change from 0 to 32768
[  176.376646][ T4324] usb 2-1: USB disconnect, device number 7
[  176.442099][   T27] audit: type=1800 audit(1785157897.070:12): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.537" name="file1" dev="loop2" ino=4 res=0 errno=0
[  176.729270][ T5971] loop5: detected capacity change from 0 to 128
[  176.816343][ T5971] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  176.835683][ T5971] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  177.141614][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  177.268613][ T5990] loop0: detected capacity change from 0 to 512
[  177.335837][ T5990] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  177.388938][  T127] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  177.398109][ T5992] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  177.481630][ T5992] overlayfs: overlapping lowerdir path
[  177.608488][ T4349] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  177.639669][  T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  177.672205][  T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.749128][  T127] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  177.793241][  T127] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  177.829582][  T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.872601][  T127] usb 3-1: config 0 descriptor??
[  177.901209][ T6003] loop5: detected capacity change from 0 to 4096
[  177.947374][ T6003] EXT4-fs (loop5): Test dummy encryption mode enabled
[  177.994174][ T4324] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  178.058485][ T6003] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  178.224084][ T4324] usb 5-1: Using ep0 maxpacket: 32
[  178.232118][ T4324] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  178.244196][ T4324] usb 5-1: config 0 has no interface number 0
[  178.276570][ T4324] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  178.293943][ T4324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.315661][  T127] hid-generic 0003:0457:07DA.0008: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[  178.339494][ T4324] usb 5-1: Product: syz
[  178.343763][ T4324] usb 5-1: Manufacturer: syz
[  178.386850][ T4324] usb 5-1: SerialNumber: syz
[  178.407274][ T6003] EXT4-fs (loop5): re-mounted. Quota mode: writeback.
[  178.418854][ T4324] usb 5-1: config 0 descriptor??
[  178.450724][ T4324] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  178.486069][ T4324] usb 5-1: selecting invalid altsetting 1
[  178.518034][ T4324] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  178.553047][ T4320] usb 3-1: USB disconnect, device number 5
[  178.588055][ T4324] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  178.659055][ T4324] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  178.672575][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  178.714050][ T4324] usb 5-1: media controller created
[  178.791568][ T4324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  178.801925][ T6013] fido_id[6013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  178.956159][ T4324] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  178.976157][ T4324] zl10353_read_register: readreg error (reg=127, ret==-71)
[  179.021759][ T4324] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  179.069324][ T6001] loop1: detected capacity change from 0 to 32768
[  179.198126][ T4324] usb 5-1: USB disconnect, device number 7
[  179.249096][ T6001] XFS (loop1): Mounting V5 Filesystem
[  179.366701][ T6001] XFS (loop1): Ending clean mount
[  179.437125][ T6001] XFS (loop1): Quotacheck needed: Please wait.
[  179.625453][ T6001] XFS (loop1): Quotacheck: Done.
[  180.029238][ T4273] XFS (loop1): Unmounting Filesystem
[  180.147643][ T6052] loop5: detected capacity change from 0 to 4096
[  180.310420][ T6052] ntfs: volume version 3.1.
[  180.332431][ T6052] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  180.381837][ T6052] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  180.384215][ T4320] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  180.429670][ T6061] loop2: detected capacity change from 0 to 64
[  180.436908][ T6052] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  180.466582][ T6052] ntfs: (device loop5): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  180.585318][ T6052] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  180.619082][ T4320] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  180.633971][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.643218][ T6052] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  180.693921][ T4320] usb 5-1: Product: syz
[  180.708598][ T4320] usb 5-1: Manufacturer: syz
[  180.713300][ T4320] usb 5-1: SerialNumber: syz
[  180.780297][ T4320] usb 5-1: config 0 descriptor??
[  180.938474][ T6065] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  181.027559][ T6065] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  181.036709][ T6065] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  181.045827][ T6065] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  181.054927][ T6065] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  181.064280][ T6065] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  181.073314][ T6065] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  181.082409][ T6065] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  181.091541][ T6065] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  181.100644][ T6065] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5
[  181.218732][ T4320] usb 5-1: Firmware: major: 160, minor: 18, hardware type: UNKNOWN (79)
[  181.238856][ T6042] loop0: detected capacity change from 0 to 40427
[  181.264003][ T6042] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  181.271825][ T6042] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  181.343434][ T6042] F2FS-fs (loop0): Found nat_bits in checkpoint
[  181.432126][ T4320] usb 5-1: failed to fetch extended address, random address set
[  181.447215][ T4320] usb 5-1: atusb_probe: initialization failed, error = -524
[  181.468947][ T4320] atusb: probe of 5-1:0.0 failed with error -524
[  181.498999][ T4320] usb 5-1: USB disconnect, device number 8
[  181.599356][ T6042] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  181.639675][ T6042] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  182.112607][ T6081] loop5: detected capacity change from 0 to 256
[  182.169144][ T6081] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  182.276663][ T6085] loop4: detected capacity change from 0 to 1024
[  182.315073][ T6085] EXT4-fs: Ignoring removed nomblk_io_submit option
[  182.321822][ T6085] EXT4-fs: inline encryption not supported
[  182.387364][ T6085] EXT4-fs: Ignoring removed nomblk_io_submit option
[  182.405982][ T6085] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  182.522029][ T6085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  182.547332][ T6085] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.711394][ T6085] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.571: bg 0: block 112: padding at end of block bitmap is not set
[  182.774309][ T6085] EXT4-fs (loop4): Remounting filesystem read-only
[  183.028616][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  183.080230][ T6096] loop1: detected capacity change from 0 to 4096
[  183.219805][ T6096] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  183.595362][ T6089] loop2: detected capacity change from 0 to 32768
[  183.599753][ T6094] loop5: detected capacity change from 0 to 32768
[  183.654237][ T6094] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  183.869590][ T4273] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  184.168554][ T5555] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  184.309389][ T6116] loop5: detected capacity change from 0 to 4096
[  184.546378][ T6121] loop2: detected capacity change from 0 to 4096
[  184.619805][ T6121] EXT4-fs: inline encryption not supported
[  184.645159][ T6121] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  184.676158][ T6121] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003]
[  184.697790][ T6121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  184.918475][ T4286] EXT4-fs (loop2): unmounting filesystem.
[  185.232553][ T6108] loop0: detected capacity change from 0 to 32768
[  185.483604][ T6108] XFS (loop0): Mounting V5 Filesystem
[  185.815886][ T6108] XFS (loop0): Ending clean mount
[  185.925056][   T27] audit: type=1800 audit(1785157906.560:13): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.581" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  186.021466][   T27] audit: type=1804 audit(1785157906.650:14): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.581" name="/newroot/116/bus/file1" dev="loop0" ino=9286 res=1 errno=0
[  186.185190][ T6158] loop1: detected capacity change from 0 to 256
[  186.296895][ T6158] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  186.332932][ T4283] XFS (loop0): Unmounting Filesystem
[  186.478006][ T6147] loop4: detected capacity change from 0 to 32768
[  186.601796][   T27] audit: type=1800 audit(1785157907.230:15): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.593" name="file1" dev="loop4" ino=4 res=0 errno=0
[  186.731547][ T6148] loop5: detected capacity change from 0 to 32768
[  186.838553][ T6148] XFS (loop5): Mounting V5 Filesystem
[  186.959593][ T6148] XFS (loop5): Ending clean mount
[  186.966685][ T6148] XFS (loop5): Quotacheck needed: Please wait.
[  187.086512][ T6148] XFS (loop5): Quotacheck: Done.
[  187.158943][ T6148] XFS (loop5): User initiated shutdown received.
[  187.212971][ T6148] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  187.250530][ T6148] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  187.347094][ T4915] XFS (loop5): Unmounting Filesystem
[  187.922354][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'.
[  188.061014][ T6195] loop5: detected capacity change from 0 to 164
[  188.116933][ T6195] rock: directory entry would overflow storage
[  188.123230][ T6195] rock: sig=0x4543, size=28, remaining=18
[  188.421579][ T6199] loop2: detected capacity change from 0 to 4096
[  188.439968][ T6183] loop4: detected capacity change from 0 to 32768
[  188.501973][ T6199] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  188.546530][ T4285] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  188.555371][   T27] audit: type=1800 audit(1785157909.190:16): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.601" name="file2" dev="loop4" ino=5 res=0 errno=0
[  188.636705][   T27] audit: type=1800 audit(1785157909.220:17): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.601" name="file2" dev="loop4" ino=5 res=0 errno=0
[  188.774082][ T4285] usb 2-1: Using ep0 maxpacket: 8
[  188.783441][ T4285] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  188.823569][ T4285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.869850][ T4285] pvrusb2: Hardware description: Terratec Grabster AV400
[  188.910825][ T4286] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  188.915736][ T4285] pvrusb2: **********
[  188.939261][ T4285] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  188.957314][ T6207] loop5: detected capacity change from 0 to 4096
[  188.979374][ T4285] pvrusb2: Important functionality might not be entirely working.
[  189.015381][ T6207] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  189.025424][ T4285] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  189.050358][ T4285] pvrusb2: **********
[  189.108906][ T2314] pvrusb2: Invalid write control endpoint
[  189.327709][ T6201] pvrusb2: Killing an I2C write to 4 that is too large (desired=62 limit=61)
[  189.383364][ T4285] usb 2-1: USB disconnect, device number 8
[  189.525180][ T2314] pvrusb2: Invalid write control endpoint
[  189.531441][ T2314] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  189.593924][ T2314] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  189.623249][ T2314] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  189.650938][ T2314] pvrusb2: Device being rendered inoperable
[  189.669624][ T2314] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  189.701211][ T2314] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  189.757177][ T2314] pvrusb2: Attached sub-driver cx25840
[  189.802750][ T2314] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  189.845893][ T2314] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  189.951483][ T6229] program syz.0.624 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  190.067926][ T6232] input: syz0 as /devices/virtual/input/input5
[  190.210307][ T6234] netlink: 64 bytes leftover after parsing attributes in process `syz.5.627'.
[  190.412467][ T6239] netlink: 56 bytes leftover after parsing attributes in process `syz.0.629'.
[  190.500262][ T6242] loop4: detected capacity change from 0 to 128
[  190.572911][ T6242] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  190.646994][ T6242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.334234][ T6270] loop2: detected capacity change from 0 to 64
[  191.804105][ T4324] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  191.938251][ T6285] loop1: detected capacity change from 0 to 512
[  192.028041][ T4324] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  192.047964][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  192.057545][ T6285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  192.071021][ T4324] usb 6-1: Product: syz
[  192.076074][ T4324] usb 6-1: Manufacturer: syz
[  192.080889][ T4324] usb 6-1: SerialNumber: syz
[  192.090005][ T4324] usb 6-1: config 0 descriptor??
[  192.097788][ T6285] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.197014][ T6293] loop0: detected capacity change from 0 to 128
[  192.257656][ T6293] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  192.299349][ T6293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.364131][ T4324] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  192.418708][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  192.448801][ T4423] usb 6-1: USB disconnect, device number 6
[  192.574055][ T4324] usb 3-1: Using ep0 maxpacket: 16
[  192.587147][ T4324] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  192.633205][ T4324] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  192.669839][ T4324] usb 3-1: config 1 has no interface number 0
[  192.684118][ T4324] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  192.707846][ T4324] usb 3-1: config 1 interface 105 has no altsetting 0
[  192.733607][ T4324] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  192.753486][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  192.794884][ T4324] usb 3-1: Product: syz
[  192.799137][ T4324] usb 3-1: Manufacturer: syz
[  192.803771][ T4324] usb 3-1: SerialNumber: syz
[  193.056262][ T4324] aqc111: probe of 3-1:1.105 failed with error -22
[  193.143927][ T4423] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  193.212110][ T6296] loop4: detected capacity change from 0 to 32768
[  193.244092][ T6296] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.652 (6296)
[  193.273219][ T4324] usb 3-1: USB disconnect, device number 6
[  193.301981][ T6296] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  193.315399][ T6296] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  193.327060][ T6296] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  193.339158][ T6296] BTRFS info (device loop4): use zstd compression, level 3
[  193.346867][ T6296] BTRFS info (device loop4): using free space tree
[  193.354319][ T4423] usb 2-1: config 127 has an invalid interface number: 57 but max is 0
[  193.362659][ T4423] usb 2-1: config 127 has no interface number 0
[  193.372599][ T4423] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  193.398931][ T4423] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  193.416223][ T4423] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.439437][ T4423] usb 2-1: Product: syz
[  193.449542][ T4423] usb 2-1: Manufacturer: syz
[  193.482231][ T4423] usb 2-1: SerialNumber: syz
[  193.504738][ T6304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  193.512230][ T6296] BTRFS info (device loop4): enabling ssd optimizations
[  193.543985][ T4422] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  193.696609][ T6330] loop0: detected capacity change from 0 to 128
[  193.738577][ T6330] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  193.745012][ T4422] usb 6-1: Using ep0 maxpacket: 32
[  193.770916][ T4422] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  193.800871][ T4422] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  193.822519][ T4422] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  193.863034][ T6330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  193.863642][ T4422] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  193.937637][ T4422] usb 6-1: config 0 interface 0 has no altsetting 0
[  193.975174][ T6304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  193.987974][ T4422] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  194.028821][ T4422] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  194.039819][ T6334] loop2: detected capacity change from 0 to 256
[  194.048503][ T4276] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  194.059405][ T4422] usb 6-1: Product: syz
[  194.075623][ T4422] usb 6-1: Manufacturer: syz
[  194.080382][ T4422] usb 6-1: SerialNumber: syz
[  194.126769][ T4422] usb 6-1: config 0 descriptor??
[  194.169115][ T4422] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  194.211697][ T4423] asix 2-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random
[  194.222630][ T4422] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  194.424603][ T4423] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  194.444737][ T4423] asix 2-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  194.464570][ T4324] usb 6-1: USB disconnect, device number 7
[  194.479605][ T4423] asix: probe of 2-1:127.57 failed with error -71
[  194.488741][ T4324] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  194.516227][ T4423] usb 2-1: USB disconnect, device number 9
[  195.434031][ T4324] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  195.629474][ T4324] usb 6-1: Using ep0 maxpacket: 8
[  195.629931][ T6364] loop4: detected capacity change from 0 to 256
[  195.643010][ T4324] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  195.678403][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.700088][ T4324] usb 6-1: Product: syz
[  195.711650][ T4324] usb 6-1: Manufacturer: syz
[  195.736692][ T4324] usb 6-1: SerialNumber: syz
[  195.756786][ T6364] FAT-fs (loop4): Directory bread(block 64) failed
[  195.757679][ T4324] usb 6-1: config 0 descriptor??
[  195.763482][ T6364] FAT-fs (loop4): Directory bread(block 65) failed
[  195.844238][ T6364] FAT-fs (loop4): Directory bread(block 66) failed
[  195.850990][ T6364] FAT-fs (loop4): Directory bread(block 67) failed
[  195.888263][ T6364] FAT-fs (loop4): Directory bread(block 68) failed
[  195.914015][ T6364] FAT-fs (loop4): Directory bread(block 69) failed
[  195.920788][ T6364] FAT-fs (loop4): Directory bread(block 70) failed
[  195.953946][ T6364] FAT-fs (loop4): Directory bread(block 71) failed
[  195.960705][ T6364] FAT-fs (loop4): Directory bread(block 72) failed
[  196.001417][ T6364] FAT-fs (loop4): Directory bread(block 73) failed
[  196.023658][ T4324] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  196.093582][ T6351] loop2: detected capacity change from 0 to 40427
[  196.110616][ T6351] F2FS-fs (loop2): invalid crc value
[  196.189777][ T6351] F2FS-fs (loop2): Found nat_bits in checkpoint
[  196.367296][ T6351] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  196.440412][ T6351] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  196.460443][ T4324] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[  196.496872][ T4324] usb 6-1: USB disconnect, device number 8
[  196.584111][ T6378] loop4: detected capacity change from 0 to 128
[  196.634371][ T6378] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  196.708252][ T4286] syz-executor: attempt to access beyond end of device
[  196.708252][ T4286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  196.731922][ T6380] netlink: 'syz.0.674': attribute type 5 has an invalid length.
[  197.216010][ T6389] netlink: 16 bytes leftover after parsing attributes in process `syz.5.679'.
[  197.238635][ T6389] netem: invalid attributes len -19
[  197.264009][ T6389] netem: change failed
[  197.756734][ T6402] loop2: detected capacity change from 0 to 512
[  197.871606][ T6402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  197.940287][ T6402] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  198.245786][ T6400] loop4: detected capacity change from 0 to 32768
[  198.270759][ T6412] net_ratelimit: 1527 callbacks suppressed
[  198.270798][ T6412] Set syz1 is full, maxelem 2 reached
[  198.360311][ T4286] EXT4-fs (loop2): unmounting filesystem.
[  198.463403][ T6400] XFS (loop4): Mounting V5 Filesystem
[  198.645846][ T6400] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  198.665380][ T6406] loop0: detected capacity change from 0 to 32768
[  198.733152][ T6400] XFS (loop4): Starting recovery (logdev: internal)
[  198.818428][ T6400] XFS (loop4): Ending recovery (logdev: internal)
[  199.047269][ T6431] XFS (loop4): Metadata corruption detected at xfs_btree_lookup_get_block+0x43b/0x660, xfs_bnobt block 0x8
[  199.101314][ T6431] XFS (loop4): Unmount and run xfs_repair
[  199.303420][ T4276] XFS (loop4): Unmounting Filesystem
[  199.632368][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'.
[  199.880098][ T6449] loop5: detected capacity change from 0 to 2048
[  200.018951][ T6451] loop1: detected capacity change from 0 to 1024
[  200.814242][ T4423] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  201.013997][ T4423] usb 1-1: Using ep0 maxpacket: 8
[  201.025217][ T4423] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  201.046637][ T4423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.087934][ T4423] pvrusb2: Hardware description: Terratec Grabster AV400
[  201.096337][ T4423] pvrusb2: **********
[  201.100394][ T4423] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  201.111410][ T6341] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  201.121587][ T4423] pvrusb2: Important functionality might not be entirely working.
[  201.135000][ T4423] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  201.157742][ T4423] pvrusb2: **********
[  201.167266][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  201.174087][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  201.270505][ T2314] pvrusb2: Invalid write control endpoint
[  201.304091][ T6341] usb 6-1: Using ep0 maxpacket: 8
[  201.311529][ T6341] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  201.342356][ T6341] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  201.378875][ T6341] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  201.430049][ T6341] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  201.492364][ T6341] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  201.515594][ T6465] pvrusb2: Killing an I2C write to 4 that is too large (desired=62 limit=61)
[  201.543433][ T6341] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.567147][ T2314] pvrusb2: Invalid write control endpoint
[  201.581575][ T2314] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  201.601555][ T4423] usb 1-1: USB disconnect, device number 9
[  201.610863][ T2314] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  201.626976][ T2314] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  201.658886][ T2314] pvrusb2: Device being rendered inoperable
[  201.679374][ T2314] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  201.687184][ T2314] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  201.707875][ T2314] pvrusb2: Attached sub-driver cx25840
[  201.723977][ T2314] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  201.765223][ T2314] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  201.809862][ T6341] usb 6-1: GET_CAPABILITIES returned 0
[  201.822787][ T6341] usbtmc 6-1:16.0: can't read capabilities
[  202.033302][ T4285] usb 6-1: USB disconnect, device number 9
[  202.689808][ T6516] loop0: detected capacity change from 0 to 2048
[  202.810708][ T6526] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.042643][ T6526] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  203.055872][  T127] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  203.097114][ T6526] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  203.133480][ T6526] Remounting filesystem read-only
[  203.153028][ T4283] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  203.269481][  T127] usb 2-1: Using ep0 maxpacket: 16
[  203.277647][  T127] usb 2-1: config 0 has no interfaces?
[  203.306427][  T127] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  203.344833][ T6530] loop0: detected capacity change from 0 to 64
[  203.351860][  T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.386522][  T127] usb 2-1: Product: syz
[  203.390787][  T127] usb 2-1: Manufacturer: syz
[  203.423644][  T127] usb 2-1: SerialNumber: syz
[  203.441879][  T127] usb 2-1: config 0 descriptor??
[  203.575608][ T4283] hfs: node 4:3 still has 1 user(s)!
[  203.585205][ T6518] loop4: detected capacity change from 0 to 32768
[  203.634530][ T6518] (syz.4.728,6518,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  203.718197][ T6518] (syz.4.728,6518,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  203.808878][ T6341] usb 2-1: USB disconnect, device number 10
[  203.821939][ T6518] JBD2: Ignoring recovery information on journal
[  203.983773][ T6518] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  204.059096][ T6536] loop5: detected capacity change from 0 to 4096
[  204.093353][ T6536] EXT4-fs: inline encryption not supported
[  204.115215][ T6536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  204.175673][ T6536] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002]
[  204.202051][ T6536] System zones: 0-5
[  204.230461][ T6545] loop2: detected capacity change from 0 to 128
[  204.256881][ T6536] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  204.308869][ T4276] ocfs2: Unmounting device (7,4) on (node local)
[  204.395943][ T6536] EXT4-fs (loop5): Online resizing not supported with bigalloc
[  204.571123][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  204.918967][ T6556] loop5: detected capacity change from 0 to 4096
[  204.938909][ T6560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.744'.
[  204.969038][ T6556] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  205.060628][ T4605] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  205.135111][ T6556] NILFS (loop5): device size too small
[  206.186270][ T6593] loop5: detected capacity change from 0 to 2048
[  206.236673][ T6587] loop1: detected capacity change from 0 to 8192
[  206.266780][ T6593] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  206.312162][ T6587] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  206.326252][ T6587] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  206.337031][ T6587] REISERFS (device loop1): using ordered data mode
[  206.353763][ T6587] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  206.381118][ T6587] REISERFS (device loop1): checking transaction log (loop1)
[  206.411036][ T6587] REISERFS (device loop1): Using r5 hash to sort names
[  206.438481][ T6587] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  206.455990][ T6587] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  206.461148][ T6593] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  206.542656][ T6593] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2 with error 28
[  206.578344][ T6587] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  206.644238][ T6593] EXT4-fs (loop5): This should not happen!! Data will be lost
[  206.644238][ T6593] 
[  206.691976][ T6593] EXT4-fs (loop5): Total free blocks count 0
[  206.723983][ T6593] EXT4-fs (loop5): Free/Dirty block details
[  206.730203][ T6593] EXT4-fs (loop5): free_blocks=2415919104
[  206.743946][ T6593] EXT4-fs (loop5): dirty_blocks=32
[  206.759443][ T6593] EXT4-fs (loop5): Block reservation details
[  206.787146][ T6603] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  206.790333][ T6593] EXT4-fs (loop5): i_reserved_data_blocks=2
[  206.898776][ T6606] loop2: detected capacity change from 0 to 4096
[  207.068797][ T6611] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.095544][   T46] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  207.543520][ T6618] comedi comedi0: Minor 3 specified more than once!
[  207.692557][ T6624] loop1: detected capacity change from 0 to 128
[  207.761971][ T6624] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  207.781063][ T6624] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  207.882012][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'.
[  207.913559][ T6630] loop4: detected capacity change from 0 to 1024
[  208.114846][ T4339] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  208.132931][ T6630] syz.4.772: attempt to access beyond end of device
[  208.132931][ T6630] loop4: rw=0, sector=393222, nr_sectors = 2 limit=1024
[  208.247516][ T6630] syz.4.772: attempt to access beyond end of device
[  208.247516][ T6630] loop4: rw=2049, sector=5778, nr_sectors = 2 limit=1024
[  208.329436][ T6630] Buffer I/O error on dev loop4, logical block 2889, lost async page write
[  208.390936][ T6630] syz.4.772: attempt to access beyond end of device
[  208.390936][ T6630] loop4: rw=2049, sector=393216, nr_sectors = 2 limit=1024
[  208.463702][ T6630] Buffer I/O error on dev loop4, logical block 196608, lost async page write
[  208.477595][ T6637] loop2: detected capacity change from 0 to 4096
[  208.522679][ T6637] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  208.540952][ T6630] syz.4.772: attempt to access beyond end of device
[  208.540952][ T6630] loop4: rw=2049, sector=393218, nr_sectors = 2 limit=1024
[  208.611058][ T6637] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  208.642650][ T6630] Buffer I/O error on dev loop4, logical block 196609, lost async page write
[  208.669014][ T6637] NILFS (loop2): mounting unchecked fs
[  208.693661][ T6630] syz.4.772: attempt to access beyond end of device
[  208.693661][ T6630] loop4: rw=2049, sector=393220, nr_sectors = 2 limit=1024
[  208.756931][   T27] audit: type=1326 audit(1785157929.390:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6647 comm="syz.1.780" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ebaf9de99 code=0x0
[  208.801392][ T6630] Buffer I/O error on dev loop4, logical block 196610, lost async page write
[  208.804154][ T6637] NILFS (loop2): recovery complete
[  208.862493][ T4605] udevd[4605]: incorrect nilfs2 checksum on /dev/loop2
[  208.873755][ T6651] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.921297][ T6656] loop0: detected capacity change from 0 to 512
[  208.955332][ T6656] FAT-fs (loop0): bogus logical sector size 1
[  208.975567][ T6656] FAT-fs (loop0): Can't find a valid FAT filesystem
[  209.020627][ T6656] netlink: 'syz.0.782': attribute type 16 has an invalid length.
[  209.051967][ T6656] netlink: 'syz.0.782': attribute type 3 has an invalid length.
[  209.075613][ T6656] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.782'.
[  209.314529][ T6663] loop2: detected capacity change from 0 to 8
[  209.965497][ T6678] device bond_slave_0 entered promiscuous mode
[  209.972454][ T6678] device bond_slave_1 entered promiscuous mode
[  210.003294][ T6680] loop0: detected capacity change from 0 to 512
[  210.045518][ T6678] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  210.107322][ T6678] device bond_slave_0 left promiscuous mode
[  210.113608][ T6678] device bond_slave_1 left promiscuous mode
[  210.545949][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'.
[  210.589184][ T6691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'.
[  210.624181][ T6691] netlink: 'syz.4.795': attribute type 20 has an invalid length.
[  210.992896][   T27] audit: type=1800 audit(1785157931.620:19): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.797" name="b_vendor_code" dev="configfs" ino=40949 res=0 errno=0
[  211.341410][ T6709] loop2: detected capacity change from 0 to 512
[  211.465836][ T6709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  211.491515][ T6709] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.832647][ T4286] EXT4-fs (loop2): unmounting filesystem.
[  211.907629][ T6700] loop4: detected capacity change from 0 to 32768
[  212.062549][ T6700] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root
[  212.062549][ T6700] 
[  212.112111][ T6700] ERROR: (device loop4): remounting filesystem as read-only
[  212.134474][ T6726] loop2: detected capacity change from 0 to 512
[  212.531613][ T6738] loop5: detected capacity change from 0 to 8
[  213.300711][ T6751] loop5: detected capacity change from 0 to 8192
[  213.370421][ T6751] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  213.416734][ T6759] loop4: detected capacity change from 0 to 1024
[  213.534014][ T6751] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  213.545301][ T6759] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 2: comm syz.4.817: lblock 2 mapped to illegal pblock 2 (length 1)
[  213.556474][ T6751] REISERFS (device loop5): using ordered data mode
[  213.605015][ T6751] reiserfs: using flush barriers
[  213.649070][ T6751] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  213.666194][ T6759] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  213.681973][ T6759] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 48: comm syz.4.817: lblock 0 mapped to illegal pblock 48 (length 1)
[  213.698166][ T6751] REISERFS (device loop5): checking transaction log (loop5)
[  213.764075][ T6759] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  213.783976][ T6759] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.817: Failed to acquire dquot type 0
[  213.806546][ T6759] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  213.817003][ T6751] REISERFS (device loop5): Using r5 hash to sort names
[  213.910625][ T6759] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #11: comm syz.4.817: mark_inode_dirty error
[  213.974526][ T6759] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  214.003951][ T6759] EXT4-fs (loop4): 1 orphan inode deleted
[  214.009793][ T6759] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  214.029994][ T4349] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  214.132682][ T4349] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  214.162648][ T4349] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 0
[  214.272131][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  214.324586][ T4276] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  214.360373][ T6776] loop2: detected capacity change from 0 to 256
[  214.389111][ T4276] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  214.429268][ T6776] exFAT-fs (loop2): failed to load upcase table (idx : 0x000103c2, chksum : 0xe64499b9, utbl_chksum : 0xe619d30d)
[  214.450509][ T4276] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  214.462466][ T6782] dyndbg: expected <4096 bytes into control
[  214.694165][ T4423] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  214.904049][ T4423] usb 6-1: Using ep0 maxpacket: 16
[  214.921049][ T4423] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  214.953907][ T4423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.972080][ T4423] usb 6-1: Product: syz
[  214.977653][ T4423] usb 6-1: Manufacturer: syz
[  214.987570][ T4423] usb 6-1: SerialNumber: syz
[  215.015869][ T4423] usb 6-1: config 0 descriptor??
[  215.029143][ T4423] gspca_main: spca508-2.14.0 probing 041e:4018
[  215.124422][ T4285] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  215.233786][ T4423] gspca_spca508: reg_read err -32
[  215.242670][ T4423] gspca_spca508: reg_read err -32
[  215.304098][ T6341] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  215.323962][ T4285] usb 5-1: Using ep0 maxpacket: 8
[  215.331391][ T4285] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  215.352719][ T4285] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  215.375694][ T4285] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  215.390815][ T4285] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  215.401835][ T4285] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.416161][ T4285] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  215.425996][ T4285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.440767][ T6803] loop1: detected capacity change from 0 to 256
[  215.461431][ T4423] gspca_spca508: reg_read err -71
[  215.472489][ T4423] gspca_spca508: reg_read err -71
[  215.495495][ T4423] gspca_spca508: reg write: error -71
[  215.509421][ T4423] spca508: probe of 6-1:0.0 failed with error -71
[  215.524020][ T6341] usb 3-1: Using ep0 maxpacket: 32
[  215.529523][ T6803] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  215.545165][ T6341] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  215.570777][ T4423] usb 6-1: USB disconnect, device number 10
[  215.580127][ T6341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.634774][ T6341] usb 3-1: config 0 descriptor??
[  215.655577][ T4285] usb 5-1: GET_CAPABILITIES returned 0
[  215.661167][ T4285] usbtmc 5-1:16.0: can't read capabilities
[  215.852158][ T6341] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  215.880705][ T6341] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  215.907366][ T6342] usb 5-1: USB disconnect, device number 9
[  215.914042][ T6341] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  215.922627][ T6807] netlink: 'syz.0.841': attribute type 7 has an invalid length.
[  215.928690][ T6341] usb 3-1: media controller created
[  215.958342][ T6341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  215.959700][ T6807] netem: change failed
[  216.051666][ T6341] az6027: usb out operation failed. (-71)
[  216.083553][ T6341] az6027: usb out operation failed. (-71)
[  216.115407][ T6341] stb0899_attach: Driver disabled by Kconfig
[  216.127557][ T6341] az6027: no front-end attached
[  216.127557][ T6341] 
[  216.136906][ T6341] az6027: usb out operation failed. (-71)
[  216.142710][ T6341] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  216.166273][ T6341] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6
[  216.224511][ T6341] dvb-usb: schedule remote query interval to 400 msecs.
[  216.249190][ T6341] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  216.274163][ T6341] usb 3-1: USB disconnect, device number 7
[  217.220139][ T6831] IPv6: addrconf: prefix option has invalid lifetime
[  217.438281][ T6341] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  217.591682][ T6841] loop2: detected capacity change from 0 to 128
[  217.623352][ T6841] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  217.735847][ T6843] loop5: detected capacity change from 0 to 256
[  217.778480][ T6835] loop1: detected capacity change from 0 to 8192
[  217.803991][ T6843] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  217.824293][ T6340] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  217.844223][ T6843] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  217.858188][ T6835] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  217.951073][ T6843] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  218.002899][ T4349] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  218.036971][ T6340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  218.067639][ T6340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.104525][ T6340] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  218.113684][ T6340] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.230804][ T6340] usb 1-1: config 0 descriptor??
[  218.476998][ T6852] loop2: detected capacity change from 0 to 1024
[  218.516084][ T6852] EXT4-fs: Ignoring removed orlov option
[  218.604695][ T6852] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  218.657156][ T6340] hid (null): unknown global tag 0xe
[  218.692922][ T6340] hid (null): global environment stack underflow
[  218.729118][ T6340] hid (null): unknown global tag 0x52
[  218.760519][ T6340] wacom 0003:056A:5000.0009: unknown main item tag 0x0
[  218.770034][ T6340] wacom 0003:056A:5000.0009: unknown main item tag 0x0
[  218.816900][ T6340] wacom 0003:056A:5000.0009: unknown main item tag 0x0
[  218.827593][ T6859] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.861: bit already cleared for inode 15
[  218.863957][ T6340] wacom 0003:056A:5000.0009: unknown main item tag 0x0
[  218.872645][ T6340] wacom 0003:056A:5000.0009: unknown main item tag 0x0
[  218.895461][ T6859] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  218.914132][ T6340] wacom 0003:056A:5000.0009: unknown main item tag 0x0
[  218.926685][ T6340] wacom 0003:056A:5000.0009: ignoring exceeding usage max
[  218.939439][ T6840] loop4: detected capacity change from 0 to 32768
[  218.955641][ T6340] wacom 0003:056A:5000.0009: unknown global tag 0xe
[  218.964881][ T6340] wacom 0003:056A:5000.0009: item 0 1 1 14 parsing failed
[  218.984556][ T6340] wacom 0003:056A:5000.0009: parse failed
[  218.993623][ T6340] wacom: probe of 0003:056A:5000.0009 failed with error -22
[  219.026587][ T6340] usb 1-1: USB disconnect, device number 10
[  219.051389][ T4286] EXT4-fs (loop2): unmounting filesystem.
[  219.075052][ T6840] XFS (loop4): Mounting V5 Filesystem
[  219.175768][ T6840] XFS (loop4): Ending clean mount
[  219.198691][ T6840] XFS (loop4): Quotacheck needed: Please wait.
[  219.251070][ T6871] program syz.1.865 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  219.416306][ T6840] XFS (loop4): Quotacheck: Done.
[  219.641959][ T6879] loop1: detected capacity change from 0 to 512
[  219.671279][ T6879] EXT4-fs (loop1): orphan cleanup on readonly fs
[  219.719001][ T4276] XFS (loop4): Unmounting Filesystem
[  219.754581][ T6879] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.867: invalid indirect mapped block 28777 (level 2)
[  219.844049][ T6340] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  219.934186][ T6879] EXT4-fs (loop1): 1 truncate cleaned up
[  219.940235][ T6879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  220.022145][ T6879] EXT4-fs: Ignoring removed bh option
[  220.029262][ T6879] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  220.071971][ T6886] loop5: detected capacity change from 0 to 128
[  220.100972][ T6879] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  220.113871][ T6340] usb 3-1: Using ep0 maxpacket: 8
[  220.123145][ T6340] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  220.156235][ T6340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  220.164972][ T6340] usb 3-1: Product: syz
[  220.169347][ T6340] usb 3-1: Manufacturer: syz
[  220.174349][ T6340] usb 3-1: SerialNumber: syz
[  220.189957][ T6340] usb 3-1: config 0 descriptor??
[  220.210358][ T6886] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  220.234240][ T6886] hpfs: filesystem error: improperly stopped
[  220.240336][ T6886] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  220.255753][ T6886] hpfs: You really don't want any checks? You are crazy...
[  220.263433][ T6886] hpfs: Code page index out of array
[  220.279326][ T6886] hpfs: code page support is disabled
[  220.287914][ T6886] hpfs: hpfs_map_4sectors(): unaligned read
[  220.294479][ T6340] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  220.304207][ T6886] hpfs: hpfs_map_4sectors(): unaligned read
[  220.321613][ T6886] hpfs: filesystem error: unable to find root dir
[  220.360270][ T6886] hpfs: hpfs_map_4sectors(): unaligned read
[  220.371536][ T6886] hpfs: hpfs_map_sector(): read error
[  220.385632][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  220.425643][ T6340] gspca_sn9c2028: read1 error -32
[  220.441518][ T6340] gspca_sn9c2028: read1 error -32
[  220.674088][ T4285] usb 3-1: USB disconnect, device number 8
[  220.704748][ T6895] loop5: detected capacity change from 0 to 512
[  220.790228][ T6895] EXT4-fs (loop5): 1 orphan inode deleted
[  220.819031][ T6895] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  220.961079][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'.
[  220.975547][ T6895] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.875: invalid indirect mapped block 234881024 (level 0)
[  221.062979][ T6895] EXT4-fs (loop5): Remounting filesystem read-only
[  221.317604][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  222.107527][ T6919] loop2: detected capacity change from 0 to 4096
[  222.177983][ T6919] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  222.691146][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.894'.
[  223.673962][ T6341] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  223.897369][ T6341] usb 2-1: config 150 has an invalid interface number: 204 but max is 2
[  223.933902][ T6341] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  223.964155][ T6341] usb 2-1: config 150 has no interface number 0
[  223.985705][ T6341] usb 2-1: config 150 interface 204 has no altsetting 0
[  224.025899][ T6341] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  224.043927][ T6341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.080990][ T6341] usb 2-1: Product: syz
[  224.086544][ T6341] usb 2-1: Manufacturer: syz
[  224.105783][ T6341] usb 2-1: SerialNumber: syz
[  224.350934][ T6341] xr_serial 2-1:150.204: skipping garbage
[  224.364002][ T6341] xr_serial 2-1:150.204: xr_serial converter detected
[  224.402906][ T6972] loop2: detected capacity change from 0 to 32768
[  224.468310][ T6972] JBD2: Ignoring recovery information on journal
[  224.504044][ T4285] psmouse serio2: Failed to reset mouse on : -5
[  224.541003][ T6972] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  224.630381][ T6993] input: syz1 as /devices/virtual/input/input8
[  224.759477][ T4286] ocfs2: Unmounting device (7,2) on (node local)
[  224.968394][ T6341] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  224.983472][ T6341] xr_serial: probe of ttyUSB0 failed with error -71
[  225.006579][ T6341] usb 2-1: USB disconnect, device number 11
[  225.015589][ T6341] xr_serial 2-1:150.204: device disconnected
[  225.030897][ T7001] bridge0: port 3(syz_tun) entered blocking state
[  225.061475][ T7001] bridge0: port 3(syz_tun) entered disabled state
[  225.089612][ T7001] device syz_tun entered promiscuous mode
[  225.099609][ T7001] bridge0: port 3(syz_tun) entered blocking state
[  225.107143][ T7001] bridge0: port 3(syz_tun) entered forwarding state
[  225.195542][ T7008] sctp: [Deprecated]: syz.2.922 (pid 7008) Use of struct sctp_assoc_value in delayed_ack socket option.
[  225.195542][ T7008] Use struct sctp_sack_info instead
[  225.226583][ T7010] loop4: detected capacity change from 0 to 512
[  225.303399][ T7010] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  225.341493][ T7010] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.554700][ T7010] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  225.604879][ T7010] Quota error (device loop4): write_blk: dquota write failed
[  225.638079][ T7010] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  225.676338][ T7010] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.923: Failed to acquire dquot type 0
[  225.870878][ T4276] EXT4-fs (loop4): unmounting filesystem.
[  226.146467][   T27] audit: type=1326 audit(1785158202.774:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.5.932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00dd9de99 code=0x7ffc0000
[  226.170514][    C0] vkms_vblank_simulate: vblank timer overrun
[  226.229780][   T27] audit: type=1326 audit(1785158202.774:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.5.932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd00dd9de99 code=0x7ffc0000
[  226.253659][    C0] vkms_vblank_simulate: vblank timer overrun
[  226.329348][   T27] audit: type=1326 audit(1785158202.804:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.5.932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00dd9de99 code=0x7ffc0000
[  226.353366][    C0] vkms_vblank_simulate: vblank timer overrun
[  226.395262][   T27] audit: type=1326 audit(1785158202.814:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.5.932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd00dd9de99 code=0x7ffc0000
[  226.419168][    C0] vkms_vblank_simulate: vblank timer overrun
[  226.443024][   T27] audit: type=1326 audit(1785158202.814:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.5.932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00dd9de99 code=0x7ffc0000
[  226.467089][    C0] vkms_vblank_simulate: vblank timer overrun
[  226.483549][   T27] audit: type=1326 audit(1785158202.814:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.5.932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00dd9de99 code=0x7ffc0000
[  226.561479][   T27] audit: type=1326 audit(1785158202.814:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.5.932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd00dd9de99 code=0x7ffc0000
[  226.585608][    C0] vkms_vblank_simulate: vblank timer overrun
[  226.598493][   T27] audit: type=1326 audit(1785158202.814:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7030 comm="syz.5.932" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00dd9de99 code=0x7ffc0000
[  226.622452][    C0] vkms_vblank_simulate: vblank timer overrun
[  227.391528][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'.
[  227.608907][ T7075] loop1: detected capacity change from 0 to 256
[  227.625199][ T4324] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  227.764876][ T7081] program syz.5.953 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  227.814081][ T4324] usb 3-1: Using ep0 maxpacket: 8
[  227.821660][ T4324] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  227.848816][ T4324] usb 3-1: config 179 has no interface number 0
[  227.864029][ T4324] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  227.894062][ T4324] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  227.913996][ T4324] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  227.940805][ T4324] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  227.974210][ T4324] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  227.999204][ T4324] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  228.019165][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.046184][ T7065] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  228.103963][ T4285] misc userio: Buffer overflowed, userio client isn't keeping up
[  228.350727][  T127] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input9
[  228.545288][  T127] usb 3-1: USB disconnect, device number 9
[  228.545343][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  228.545381][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  228.585294][ T7086] loop5: detected capacity change from 0 to 32768
[  228.586583][  T127] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  228.635223][ T7086] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  228.654057][ T6342] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  228.668523][ T7086] JBD2: Ignoring recovery information on journal
[  228.716729][ T7086] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  228.837776][ T7086] overlayfs: upper fs does not support tmpfile.
[  228.854603][ T6342] usb 5-1: Using ep0 maxpacket: 8
[  228.878356][ T6342] usb 5-1: unable to get BOS descriptor or descriptor too short
[  228.905259][ T7086] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  228.912534][ T6342] usb 5-1: no configurations
[  228.924060][ T6342] usb 5-1: can't read configurations, error -22
[  228.930745][ T7086] overlayfs: failed to set xattr on upper
[  228.941219][ T7086] overlayfs: ...falling back to index=off,metacopy=off.
[  228.949620][ T7086] overlayfs: upper fs missing required features.
[  229.030765][ T4915] ocfs2: Unmounting device (7,5) on (node local)
[  229.376231][ T4285] input: PS/2 Generic Mouse as /devices/serio2/input/input7
[  229.445392][ T7116] loop2: detected capacity change from 0 to 256
[  229.634196][ T4285] psmouse serio2: Failed to enable mouse on 
[  230.141218][ T7132] bridge0: port 3(syz_tun) entered blocking state
[  230.153915][ T7132] bridge0: port 3(syz_tun) entered disabled state
[  230.170114][ T6341] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  230.188652][ T7132] device syz_tun entered promiscuous mode
[  230.205682][ T7132] bridge0: port 3(syz_tun) entered blocking state
[  230.212347][ T7132] bridge0: port 3(syz_tun) entered forwarding state
[  230.361665][ T6341] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  230.383256][ T6341] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  230.388948][ T7118] loop4: detected capacity change from 0 to 40427
[  230.419393][ T6341] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  230.434120][ T7118] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  230.476989][ T6341] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  230.484755][ T7118] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  230.505439][ T7118] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff
[  230.533328][ T6341] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.534421][ T7118] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8
[  230.590544][ T6341] usb 1-1: config 0 descriptor??
[  230.591432][ T7118] F2FS-fs (loop4): invalid crc value
[  230.612716][ T7128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  230.640753][ T7118] F2FS-fs (loop4): Found nat_bits in checkpoint
[  230.753512][ T7118] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  230.763616][ T7118] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  230.829757][ T7118] syz.4.969: attempt to access beyond end of device
[  230.829757][ T7118] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  231.021120][ T7152] loop2: detected capacity change from 0 to 64
[  231.035428][ T6341] hid-multitouch 0003:1FD2:6007.000A: ignoring exceeding usage max
[  231.061935][ T6341] hid-multitouch 0003:1FD2:6007.000A: unknown main item tag 0x2
[  231.113138][ T6341] hid-multitouch 0003:1FD2:6007.000A: hidraw0: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[  231.126353][ T7154] loop1: detected capacity change from 0 to 1024
[  231.289812][ T6341] usb 1-1: USB disconnect, device number 11
[  232.300154][ T7164] fido_id[7164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  232.349493][ T7170] loop5: detected capacity change from 0 to 512
[  232.418719][ T7170] EXT4-fs: inline encryption not supported
[  232.504493][ T7170] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  232.643895][ T7170] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.989: corrupted in-inode xattr
[  232.787295][ T7176] loop4: detected capacity change from 0 to 1024
[  232.805605][ T7170] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.989: couldn't read orphan inode 15 (err -117)
[  232.862112][ T7170] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  232.918261][ T7176] hfsplus: bad catalog entry type
[  232.984329][ T7156] loop2: detected capacity change from 0 to 32768
[  233.081075][ T7156] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  233.104899][ T4339] hfsplus: b-tree write err: -5, ino 25
[  233.111680][ T4339] hfsplus: b-tree write err: -5, ino 4
[  233.174588][ T4339] hfsplus: b-tree write err: -5, ino 2
[  233.402638][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.996'.
[  233.431719][ T4286] ocfs2: Unmounting device (7,2) on (node local)
[  233.461697][ T4915] EXT4-fs (loop5): unmounting filesystem.
[  233.655884][ T7194] loop2: detected capacity change from 0 to 1024
[  233.695166][ T7194] EXT4-fs: Ignoring removed orlov option
[  233.832515][ T7194] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  234.198425][ T7209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1001'.
[  234.524920][ T4286] EXT4-fs (loop2): unmounting filesystem.
[  234.672231][ T7191] loop0: detected capacity change from 0 to 40427
[  234.743498][ T7191] F2FS-fs (loop0): invalid crc value
[  234.781051][ T7191] F2FS-fs (loop0): Found nat_bits in checkpoint
[  234.986016][ T7191] F2FS-fs (loop0): Start checkpoint disabled!
[  235.063194][ T7191] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  235.100502][ T7224] cifs: Unknown parameter 'f,'
[  235.507862][   T46] kworker/u4:3: attempt to access beyond end of device
[  235.507862][   T46] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  235.842766][ T7238] loop2: detected capacity change from 0 to 4096
[  235.918837][ T7238] EXT4-fs: inline encryption not supported
[  235.948955][ T7238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  235.988834][ T7238] EXT4-fs (loop2): blocks per group (196608) and clusters per group (0) inconsistent
[  236.285447][ T7251] loop0: detected capacity change from 0 to 512
[  236.351088][ T7244] loop1: detected capacity change from 0 to 8192
[  236.448532][ T7251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  236.474095][ T7251] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  236.571281][ T7251] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.1018: corrupted inode contents
[  236.677323][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1021'.
[  236.693878][ T7251] EXT4-fs (loop0): Remounting filesystem read-only
[  236.720884][ T7251] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.1018: mark_inode_dirty error
[  236.819919][ T7251] EXT4-fs (loop0): Remounting filesystem read-only
[  236.846462][ T7251] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.1018: corrupted inode contents
[  236.931857][ T7251] EXT4-fs (loop0): Remounting filesystem read-only
[  236.989073][ T7257] 
[  236.991502][ T7257] ======================================================
[  236.998569][ T7257] WARNING: possible circular locking dependency detected
[  237.005641][ T7257] syzkaller #0 Not tainted
[  237.010102][ T7257] ------------------------------------------------------
[  237.017255][ T7257] syz.0.1018/7257 is trying to acquire lock:
[  237.023278][ T7257] ffff888055226b28 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  237.032499][ T7257] 
[  237.032499][ T7257] but task is already holding lock:
[  237.039909][ T7257] ffff888055258288 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90
[  237.049583][ T7257] 
[  237.049583][ T7257] which lock already depends on the new lock.
[  237.049583][ T7257] 
[  237.060036][ T7257] 
[  237.060036][ T7257] the existing dependency chain (in reverse order) is:
[  237.069093][ T7257] 
[  237.069093][ T7257] -> #2 (&ei->i_data_sem/2){++++}-{3:3}:
[  237.076983][ T7257]        down_write+0x36/0x60
[  237.081854][ T7257]        ext4_map_blocks+0x914/0x1a90
[  237.087292][ T7257]        ext4_getblk+0x1c5/0x720
[  237.092276][ T7257]        ext4_bread+0x26/0x170
[  237.097185][ T7257]        ext4_quota_write+0x237/0x580
[  237.102688][ T7257]        find_free_dqentry+0x68c/0xc30
[  237.108289][ T7257]        do_insert_tree+0x717/0x1060
[  237.113717][ T7257]        do_insert_tree+0x9f5/0x1060
[  237.119056][ T7257]        do_insert_tree+0x9f5/0x1060
[  237.124392][ T7257]        do_insert_tree+0x9f5/0x1060
[  237.129996][ T7257]        qtree_write_dquot+0x49b/0x5d0
[  237.135510][ T7257]        v2_write_dquot+0x108/0x190
[  237.140755][ T7257]        dquot_acquire+0x2d5/0x520
[  237.145923][ T7257]        ext4_acquire_dquot+0x2e3/0x4a0
[  237.151531][ T7257]        dqget+0x713/0xbb0
[  237.156000][ T7257]        __dquot_initialize+0x3a9/0xd00
[  237.161596][ T7257]        ext4_process_orphan+0x4c/0x2e0
[  237.167285][ T7257]        ext4_orphan_cleanup+0xc32/0x1470
[  237.173065][ T7257]        ext4_fill_super+0x6f0c/0x78f0
[  237.178580][ T7257]        get_tree_bdev+0x3e6/0x610
[  237.183855][ T7257]        vfs_get_tree+0x88/0x270
[  237.189034][ T7257]        do_new_mount+0x247/0xa40
[  237.194191][ T7257]        __se_sys_mount+0x2e3/0x3d0
[  237.199438][ T7257]        do_syscall_64+0x4c/0xa0
[  237.204486][ T7257]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.210976][ T7257] 
[  237.210976][ T7257] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  237.219140][ T7257]        down_read+0x42/0x2d0
[  237.223932][ T7257]        v2_read_dquot+0x4a/0x110
[  237.229010][ T7257]        dquot_acquire+0x152/0x520
[  237.234183][ T7257]        ext4_acquire_dquot+0x2e3/0x4a0
[  237.239793][ T7257]        dqget+0x713/0xbb0
[  237.244262][ T7257]        __dquot_initialize+0x3a9/0xd00
[  237.250037][ T7257]        ext4_file_open+0x2da/0x6f0
[  237.255519][ T7257]        do_dentry_open+0x7dd/0x10b0
[  237.260944][ T7257]        path_openat+0x2674/0x2f10
[  237.266162][ T7257]        do_filp_open+0x1ee/0x420
[  237.271247][ T7257]        do_sys_openat2+0x14b/0x4f0
[  237.276514][ T7257]        __x64_sys_openat+0x135/0x160
[  237.281945][ T7257]        do_syscall_64+0x4c/0xa0
[  237.286949][ T7257]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.293424][ T7257] 
[  237.293424][ T7257] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  237.301132][ T7257]        __lock_acquire+0x2d18/0x7c40
[  237.306887][ T7257]        lock_acquire+0x1bb/0x4a0
[  237.311981][ T7257]        __mutex_lock+0x12d/0xae0
[  237.317067][ T7257]        dquot_commit+0x5a/0x410
[  237.322094][ T7257]        ext4_write_dquot+0x1f0/0x360
[  237.327518][ T7257]        mark_all_dquot_dirty+0xf9/0x400
[  237.333204][ T7257]        __dquot_alloc_space+0x5f6/0xe50
[  237.338890][ T7257]        ext4_mb_new_blocks+0xf55/0x44d0
[  237.344583][ T7257]        ext4_ext_map_blocks+0x18d1/0x6640
[  237.350529][ T7257]        ext4_map_blocks+0x9d7/0x1a90
[  237.355969][ T7257]        ext4_getblk+0x1c5/0x720
[  237.360975][ T7257]        ext4_bread+0x26/0x170
[  237.365791][ T7257]        ext4_append+0x2bb/0x560
[  237.370888][ T7257]        ext4_add_entry+0x8eb/0xda0
[  237.376167][ T7257]        ext4_mkdir+0x520/0xc90
[  237.381089][ T7257]        vfs_mkdir+0x386/0x570
[  237.385906][ T7257]        do_mkdirat+0x1d8/0x440
[  237.390869][ T7257]        __x64_sys_mkdirat+0x85/0x90
[  237.396212][ T7257]        do_syscall_64+0x4c/0xa0
[  237.401201][ T7257]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.407667][ T7257] 
[  237.407667][ T7257] other info that might help us debug this:
[  237.407667][ T7257] 
[  237.417940][ T7257] Chain exists of:
[  237.417940][ T7257]   &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2
[  237.417940][ T7257] 
[  237.431677][ T7257]  Possible unsafe locking scenario:
[  237.431677][ T7257] 
[  237.439169][ T7257]        CPU0                    CPU1
[  237.444572][ T7257]        ----                    ----
[  237.449969][ T7257]   lock(&ei->i_data_sem/2);
[  237.454624][ T7257]                                lock(&s->s_dquot.dqio_sem);
[  237.462042][ T7257]                                lock(&ei->i_data_sem/2);
[  237.469207][ T7257]   lock(&dquot->dq_lock);
[  237.473659][ T7257] 
[  237.473659][ T7257]  *** DEADLOCK ***
[  237.473659][ T7257] 
[  237.481837][ T7257] 4 locks held by syz.0.1018/7257:
[  237.487023][ T7257]  #0: ffff88802fb0c460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  237.496251][ T7257]  #1: ffff888055258400 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  237.506976][ T7257]  #2: ffff888055258288 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90
[  237.517194][ T7257]  #3: ffffffff8cc750a8 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x16e/0xe50
[  237.526842][ T7257] 
[  237.526842][ T7257] stack backtrace:
[  237.532798][ T7257] CPU: 1 PID: 7257 Comm: syz.0.1018 Not tainted syzkaller #0
[  237.540408][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  237.550634][ T7257] Call Trace:
[  237.554022][ T7257]  <TASK>
[  237.557133][ T7257]  dump_stack_lvl+0x188/0x24e
[  237.561964][ T7257]  ? load_image+0x410/0x410
[  237.566559][ T7257]  ? show_regs_print_info+0x12/0x12
[  237.571823][ T7257]  ? print_circular_bug+0x12b/0x1a0
[  237.577104][ T7257]  check_noncircular+0x296/0x330
[  237.582126][ T7257]  ? add_chain_block+0x9b0/0x9b0
[  237.587133][ T7257]  ? lockdep_lock+0xf1/0x1f0
[  237.591787][ T7257]  ? _find_first_zero_bit+0xd2/0x100
[  237.597316][ T7257]  __lock_acquire+0x2d18/0x7c40
[  237.602223][ T7257]  ? __bfs+0x27a/0x560
[  237.606350][ T7257]  ? add_chain_block+0x9b0/0x9b0
[  237.611344][ T7257]  ? lockdep_lock+0xf1/0x1f0
[  237.615988][ T7257]  ? verify_lock_unused+0x140/0x140
[  237.621234][ T7257]  ? lockdep_unlock+0x142/0x2e0
[  237.626146][ T7257]  ? lockdep_lock+0x1f0/0x1f0
[  237.631037][ T7257]  ? __lock_acquire+0x28d6/0x7c40
[  237.636107][ T7257]  lock_acquire+0x1bb/0x4a0
[  237.640643][ T7257]  ? dquot_commit+0x5a/0x410
[  237.645261][ T7257]  ? __might_sleep+0xd0/0xd0
[  237.650028][ T7257]  ? read_lock_is_recursive+0x10/0x10
[  237.655440][ T7257]  __mutex_lock+0x12d/0xae0
[  237.660019][ T7257]  ? dquot_commit+0x5a/0x410
[  237.664755][ T7257]  ? __might_sleep+0xd0/0xd0
[  237.669453][ T7257]  ? dquot_commit+0x5a/0x410
[  237.674103][ T7257]  ? mutex_lock_nested+0x10/0x10
[  237.679085][ T7257]  ? ext4_journal_check_start+0x17d/0x240
[  237.684834][ T7257]  dquot_commit+0x5a/0x410
[  237.689279][ T7257]  ext4_write_dquot+0x1f0/0x360
[  237.694245][ T7257]  mark_all_dquot_dirty+0xf9/0x400
[  237.699377][ T7257]  __dquot_alloc_space+0x5f6/0xe50
[  237.704510][ T7257]  ? __dquot_alloc_space+0x16e/0xe50
[  237.709857][ T7257]  ext4_mb_new_blocks+0xf55/0x44d0
[  237.715009][ T7257]  ? ext4_find_extent+0x372/0xde0
[  237.720084][ T7257]  ? rcu_is_watching+0x11/0xa0
[  237.724980][ T7257]  ? ext4_ext_search_right+0x376/0x800
[  237.730467][ T7257]  ? memcpy+0x3c/0x60
[  237.734548][ T7257]  ? ext4_mb_pa_callback+0xd0/0xd0
[  237.739872][ T7257]  ? ext4_ext_find_goal+0xed/0x1d0
[  237.745015][ T7257]  ext4_ext_map_blocks+0x18d1/0x6640
[  237.750454][ T7257]  ? ext4_ext_release+0x10/0x10
[  237.755335][ T7257]  ? rwsem_write_trylock+0x135/0x1c0
[  237.760653][ T7257]  ? ext4_es_lookup_extent+0x638/0xb00
[  237.766142][ T7257]  ext4_map_blocks+0x9d7/0x1a90
[  237.771024][ T7257]  ? ext4_issue_zeroout+0x250/0x250
[  237.776265][ T7257]  ext4_getblk+0x1c5/0x720
[  237.780711][ T7257]  ? ext4_get_block_unwritten+0x100/0x100
[  237.786457][ T7257]  ? memset+0x1e/0x40
[  237.790492][ T7257]  ? fscrypt_setup_filename+0x94/0xa50
[  237.796065][ T7257]  ext4_bread+0x26/0x170
[  237.800342][ T7257]  ext4_append+0x2bb/0x560
[  237.804804][ T7257]  ? ext4_init_new_dir+0x550/0x550
[  237.809950][ T7257]  ext4_add_entry+0x8eb/0xda0
[  237.814666][ T7257]  ? ext4_inc_count+0x1b0/0x1b0
[  237.819552][ T7257]  ? __ext4_mark_inode_dirty+0x4e8/0x760
[  237.825216][ T7257]  ? ext4_init_new_dir+0x478/0x550
[  237.830362][ T7257]  ext4_mkdir+0x520/0xc90
[  237.834728][ T7257]  ? ext4_symlink+0x940/0x940
[  237.839442][ T7257]  ? inode_permission+0xef/0x480
[  237.844491][ T7257]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  237.849655][ T7257]  ? security_inode_mkdir+0xb3/0x100
[  237.855025][ T7257]  vfs_mkdir+0x386/0x570
[  237.859296][ T7257]  do_mkdirat+0x1d8/0x440
[  237.863646][ T7257]  ? vfs_mkdir+0x570/0x570
[  237.868091][ T7257]  __x64_sys_mkdirat+0x85/0x90
[  237.872877][ T7257]  do_syscall_64+0x4c/0xa0
[  237.877340][ T7257]  ? clear_bhb_loop+0x60/0xb0
[  237.882063][ T7257]  ? clear_bhb_loop+0x60/0xb0
[  237.886773][ T7257]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.892716][ T7257] RIP: 0033:0x7f118999cd07
[  237.897226][ T7257] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.916903][ T7257] RSP: 002b:00007f118a787e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  237.925418][ T7257] RAX: ffffffffffffffda RBX: 00007f118a787ee0 RCX: 00007f118999cd07
[  237.933421][ T7257] RDX: 00000000000001ff RSI: 0000200000000140 RDI: 00000000ffffff9c
[  237.941438][ T7257] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000
[  237.950138][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140
[  237.958137][ T7257] R13: 00007f118a787ea0 R14: 0000000000000000 R15: 0000000000000000
[  237.966146][ T7257]  </TASK>
[  238.087852][ T7257] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.1018: corrupted inode contents
[  238.110726][ T7257] EXT4-fs (loop0): Remounting filesystem read-only
[  238.125390][ T7257] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.1018: mark_inode_dirty error
[  238.137406][ T7257] EXT4-fs (loop0): Remounting filesystem read-only
[  238.149801][ T7257] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.1018: corrupted inode contents
[  238.163462][ T7257] EXT4-fs (loop0): Remounting filesystem read-only
[  238.171005][ T7257] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1018: mark_inode_dirty error
[  238.185914][ T7257] EXT4-fs (loop0): Remounting filesystem read-only
[  238.192727][ T7257] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.1018: corrupted inode contents
[  238.207389][ T7257] EXT4-fs (loop0): Remounting filesystem read-only
[  238.215783][ T7257] EXT4-fs error (device loop0): ext4_dirty_inode:6156: inode #2: comm syz.0.1018: mark_inode_dirty error
[  238.230976][ T7257] EXT4-fs (loop0): Remounting filesystem read-only
[  238.292917][ T7251] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #2: comm syz.0.1018: corrupted inode contents