last executing test programs:

2m37.41515774s ago: executing program 0 (id=1):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240", @ANYRESDEC=r0], 0xdc}}, 0x0)

2m37.247308266s ago: executing program 0 (id=13):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m36.319661375s ago: executing program 0 (id=26):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)={[{@utf8}, {@umask={'umask', 0x3d, 0x8000}}, {@uid={'uid', 0x3d, 0xee01}}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x7}}, {@utf8}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}]}, 0x1, 0x152b, &(0x7f0000002f80)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

2m35.659669306s ago: executing program 0 (id=34):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000100))

2m35.491756001s ago: executing program 32 (id=34):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2720, 0x0, &(0x7f0000000100))

3.268566029s ago: executing program 3 (id=2271):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

3.019411806s ago: executing program 3 (id=2278):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$rds(0x15, 0x5, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.89120049s ago: executing program 5 (id=2279):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010003b0c28bd7000fedbdf8eb4000000", @ANYRES32=r1, @ANYBLOB="0008000000620000300012800b00010065727370616e0000200002800400120006000f00f321000006000e"], 0x50}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0)

2.870391891s ago: executing program 3 (id=2281):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0xa)

2.751173544s ago: executing program 5 (id=2282):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x700, 0x8, 0x98f, 0xffff}})

2.2466373s ago: executing program 5 (id=2285):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="0000006526bbecefcae8f4ff93be00000000000000004c53be5b27001f925c5f", 0x20)

2.164974573s ago: executing program 5 (id=2287):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4}, {0x0, 0x8000000000000000}, 0x99, 0x0, 0x1}, {{@in=@local, 0x2, 0x3c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

2.012188498s ago: executing program 5 (id=2291):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@caif=@dgm={0x25, 0x14}, 0x80, 0x0}, 0x0)

1.859068973s ago: executing program 5 (id=2293):
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000580)=[{0xd5, 0x6c01, 0x3a, &(0x7f0000000500)="1a26926d72bd91105db561b7a05caa7a7328b33454224a32319dd15b62a84658edd8d43ce769018aac9ea5a02d41655fe7897edd2f369da7b73b"}], 0x1})

1.817173654s ago: executing program 3 (id=2294):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f00000002c0)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0})

1.711205967s ago: executing program 3 (id=2297):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x1, 0x2, 0x1b, @mcast2, @mcast2, 0x10, 0x8, 0x68, 0x6}})
syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a800008100000086dd60c4980b004a2f00fbfffffffffffb000000000000000000ff0200000000000000000000000000012420810000"], 0x0)

1.61927569s ago: executing program 3 (id=2298):
r0 = syz_usb_connect$uac2(0x0, 0xbf, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000020662410804000010203010902ad000301f81005080b0200010520080904000000010120000924"], 0x0)
syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0003860000008603"]}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1.61916705s ago: executing program 2 (id=2299):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "f105b5e9f9770000000000005ad100", "a7c947420000000000000000ff4a70f3"}, 0x207, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/11, 0xb}], 0x1, 0x3, 0x7a6b)

1.333299919s ago: executing program 4 (id=2301):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x4f00e92b878347d9, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x810)

1.251240341s ago: executing program 4 (id=2302):
r0 = socket(0x2b, 0x801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x800, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="99bf815d287888b96182d428422e5251", 0x10)

1.250683291s ago: executing program 4 (id=2303):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0ab0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3caa435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908ad10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb2a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984e1a2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce903eaf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962526528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca85bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58b58d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0342000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880ada682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x4, 0xa, 0x80, 0x140}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38)

1.149499395s ago: executing program 4 (id=2304):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfc, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x6}]}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0x6, 0x5}, {0x3, 0xf}}}, 0x24}}, 0x50)

1.149383865s ago: executing program 4 (id=2305):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
io_setup(0x29e, &(0x7f0000000140)=<r0=>0x0)
io_destroy(r0)

1.032303948s ago: executing program 4 (id=2306):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[], 0x1, 0x5537, &(0x7f0000005e80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000240)={0x1000, 0x44000000})

1.011008639s ago: executing program 2 (id=2307):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @private0, 0xe}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0)

911.237232ms ago: executing program 2 (id=2308):
prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)

772.178847ms ago: executing program 2 (id=2309):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r0, 0x1, 0xfffffffe, 0x25dfdbfc, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x8000)

654.37961ms ago: executing program 2 (id=2310):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f00000065c0)=ANY=[@ANYBLOB='discard=0x0000000000000004,quota,errors=continue,discard=0x0000000000000004,errors=continue,usrquota,nodiscard\x00nodiscard,resize=0x0000000000010000,umask=0x0000000000000002,quota,iocharset=koi8-u,resize=0x0000000000008045,resize,fsmagic=0x00000000000003ff,uid>', @ANYRESDEC=0x0, @ANYBLOB="2c6673632cf8ffe300000000060004000100000000"], 0x1, 0x6215, &(0x7f0000006700)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

546.364474ms ago: executing program 1 (id=2311):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})

432.699117ms ago: executing program 1 (id=2312):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)}, 0x4044004)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10)

337.9096ms ago: executing program 1 (id=2313):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x88)
sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f00000001c0)={0xa, 0x4e33, 0x6, @local}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000840)="8c692fa70df69a28cc2fbfbb72c37b1aee4a8085c11e96574d1dc109cda13aa7b97483b81a7ba1925aa3bfcad25ac73ec8bf2b3fe60e2a4e18024897c8987ac3c8d85ea58a226cd983711da04a3623474721ef46d53d8377494bf9006ab4d0e2922b0158774d29126b66b95b586ddd37e51354d2351808135f2a1df3fb7b6ba114d0a666bcd3c1238badcf931095c0493e54426cfee737fa1b06ed2dce760cb52ae4917205f4730a8fdf4932a9d9f0d8af274e706263179fbb1bf5db5a2dc6a25e7c322aa461a3ae6541ded5960fcc99d7c5645d4aa331642c80a8a260da88a599b98063b598f0a27738794217b5b204b1b27058c9e9478ac7f9b5fd4c88a14e361f300bae5eb1b6d5893087804066760f3f22bd2610dc37193aa2a5cbdb116cb7e759a5604f17b44a655ea410b6fe27df94ddb95a879d4980ce032c82a9c496e39fac51cc3609041e76bc137b3fbc10f20845da12433feff0f852bc075cc1a3721bc9149c71fbf7c7127237038e5e7ededf7afd0baa2a4f9efb928529df6a506423d527d1bbc4cda4adfa3d15e5a997ff5e0139b3d38b8c59ed6d6f7ebd40a9b2a3a4e6c34adb766b9b00c36d93df605bde139e5111001c2ac92d54d9bc3408758cd455487161e380cf649e6a55a6d0b8173fa8c38dd90a6ec9afab991d14733e783965a7657427b7f5bbc054bec8cd9d2d11b02cb9d4af78602250ccc24c50e295dc34b0f146d5a6169b26eecc56b97d02c63b59982426e48222199f08b8cea540406d5b3365fe64091f045f8a6435ac906c4cd87db3b21a198b9b2f30635434035f5171486abfc5be12b5f4056e0c23d97c67c4911d26092ecfd52462d3487921af53d0ad6c0b1eb0b4c4808276afeef3a18a3233c84915881c3fd83e3518f361989478ac3c84f25dc665e0f01e320f8f63bc36fc09ddcfec44c3d590a8726f5e048c5b20ad0efe778db7a6a10588caa1ea7a2447c224c1659b6a773d75728b5d368aeb7b236c82e32585c2b6f31a1bca5e096e5184c00e9ec3601ad6f6baa05e7efc7b85b165b83e5dbf40596653c780e4374cde5f8f2ea5238a366173f2b22fa017a4a0c4648ec293cb2abc9bfb7830063f97c79002f19cf1f554b56eb436b02d6a9cfd468968c358b8286ba28f940a9d8a108c97917f0cac80de945ca250e2351507a45b293ab8d332b87abb5f3d9654a42b53e42bc57547f3b03ab550168ad9e3889cded563ade48546c1567fa091ee2e97479901d94ae713ae732d2cf5d76514acd11af31c15f6bc52f68a490fa48701d1bce130f3400027538b00bf0291a09a7ab53816d09b0f9e0750339413674577a393b586eb203f8937349c9ff8d6bc5352065a413415cac26715684e652c07583ef1f230c4321e296d09dbd846c36ef619a29731cf06110a5225addb7c810319f76c67a8822854ca2b2e68911d16c2cfd0c5cdf128a4bcee2ebb176c885ec511884c864eb0f8ab11d2553a5c4afa8527cc7658f0f77507b552176ff1d63ddee007cd6f44f085b44f863bcc013ea6b5cd2b01dc20dbba78988b0de528659c3317aae3d90c1b818d794854a1aa2c9450d2a7f18e3ec4e99b2c76d2535559cf587f23c9093a09c8ac488f65c5b50a05c79bbe0394717e8dfc022d390e5d5c592c9a170c228c3c86d5bb7b65ab7f4e7db0aadb4e23a5c110660a5623612422d6da1abc2a0809c33ca62e4ebb15b4178a17346b441ee8bab4695412537374dd2eeeb0b5ea9ad2ee719abc202e7a483e835e17e7a1ae282cce10ee16b1ccb068ee35dd541e2ef3527d151082e0dd547d8109cebae1e68cef444c162fc699e0ce93884d2c0650b96c4c103ed15341d9237c79e1dbe756f49f35b8baaf95b6543240b525854a72d375a8dac0f3afd7b04b3d91a661ec05bc234f14e3f4aac60363b19867fdcb1980c09f1e065a1fd90fe50198ab48b12271d4ab837e153949f55f9b498682d45c2a3b0a7203f0ce8b7cc0fb5eec89c1531ac7a15a2b553ce6a39d3a03b6c7b224793a9db8e89789dc5f40926f333f73365d440fb88e3637c5e915a222dbfdc07ae91a080417440c7478aefbb962b69b006bb6a8c1edefa53bb54505b8ae7b0546f832a2c717c83f80694c42429b82d0deb6e8e42eedb3aa7789edc58530d3c8d2a1682df6647a1670ce420989b0938d34fe8e621b1c60b574f1bcc3f9ad627068d2ad2ecd844acb6691b78be7da54864885cf360f78533aa1a6052bd4b7d3ce181b27be5e25c38a6efc18a037cfc71d7c42da87b32de6a08b53314e568812c89488e4781a3f115d3be3192581692dcabd41257d8d4dc2718c616eaa1221f8cf00d36a80bc56d4509693f0e4c215fcdac553a043bfc51b5fc061ba9fdb66baf906439f7bf0e167213e244a53082eb8a4d3ff34b33644f57cb242fb73a91a17198051ded28800e2d7e1f17d6574c9cd8bfe3ed2b6357bea9861cd47077bdd2bc0d5093462f05152b55b45ba0da177b21076c4852fa4f551d79cddc378dd5aa7a45c1a3dbda0aa525f2ac6069d70617ef66e93b2cf374d87db3b93a51c2346da9b96f83a35916ad776698b7bd3f765f1805822861683dfd7be4043c0a63c9cc5ee5836f769f32fa7ce83e02a6442bb5981f744e938ac75d78f3bd6eb4e7e8bedf611cfbfef97350dc3f508d53b1c106af95583cc308e4906ab3d0a76a173ad707e832a8e35bb5fa1044bafdde78cee084ec49f08223a6beb8ba5c8d4a60a47606eae3afc7b04b375f2100b9f4b463d52c0b52993b45ee48b2d25a1d6e2bb05fad124939f53ba9064cf8b9844", 0x7c1}], 0x1}}], 0x2, 0x2000c081)

175.221615ms ago: executing program 1 (id=2314):
r0 = memfd_create(&(0x7f0000000cc0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xda\x00\x00\x00\x00?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%<\xd8w\x00k\x042Y\xd9\xc5\xe5\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x03\x00\x00\x00t\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xec9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00I\xe1\xe2?M\x8b\x853\xce\x19\xba\fA8\x8a\xa1\x04v\xcb\xa9c\xac\xee\x8e\x8d\xfa/\x83Wm#\xe2\x8b\x01\xc2\x97\"K\x1d\xc3\tuC<}_M\x18nik9\x8a\xb1(\x04\x11\x92\x1a\xff\xbb]\x12S\xc4D\xd2h0!\x899-\xec%\xd2\xa8\x1a\xc6Fe\xff?c+\xde\xa0[\xbc\x1d\xa0\xe3\xda+\xdcK\x86\xaa\x94AD\x00[\x9c\xb1!\x01N\xd9\x96so\\\xd5\x9d$_=\x86b[\xe1\xc7\x9a\xb4}\x1erI\xe4\xb2\xb7\xe6 \x1f\a}\xb5V\x89\x9d\x9fA\xa5\xa7\xd5\x1d\x15#\x1fY&\xf2\'\xe9\xb0.\xeb\xe7\xc4\x83\xa1\xe1\t\x94^\xd4\x99\xc9\x9f\x1e\xb9\x85\x9cX\xe7\xd1l1\x1d\xc8 \xc7FB\x91\xca\x17]#c\xf5\xea\x7fL=b\xec\"\x83\xfe\x818\x14\xcdCz\x9d\x1b\xb5Q^3\xc9\\\x7fQOU\xa2~\xbe\xa8E\xe0e~sl\aJ\xec\xb2(2D\x8f\xfc\x9a\x1d7\xdc\xcfA\xc7\x9b\x93\xbc\xb2\x1d\xbe\x8eY\xce!\x04\xae\x8d\x8e%x\xa1\xe8\xca\x14W\x0f\x04b\xf29UC\\~\v\xf7\xd8\xe3\\\x8d\xdbDY\x1a\v\xa3a\xde@\xac\xca\x80\x89\xc7/\xab0\'Bk\xfc\xa0\x04\xf9:p\xd4\x1a\x84\x98\xd1\xe7a\x97\x96{\xb8g{:\xfc]', 0x4)
fallocate(r0, 0x0, 0x0, 0x400001)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

106.609987ms ago: executing program 1 (id=2315):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00')
getdents64(r0, &(0x7f0000000740)=""/11, 0x7c)
getdents64(r0, 0xfffffffffffffffe, 0x64)

33.376029ms ago: executing program 1 (id=2316):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000040))
sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011)

0s ago: executing program 2 (id=2317):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0xa007ca, &(0x7f0000000080)={[{@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@nouid32}, {@resgid}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nojournal_checksum}, {@sb={'sb', 0x3d, 0x6}}]}, 0x0, 0x483, &(0x7f0000001040)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)=""/187, 0x841)

kernel console output (not intermixed with test programs):

oot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  142.103509][ T7529] hpfs: hpfs_map_4sectors(): unaligned read
[  142.107140][ T7525] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2.
[  142.117883][ T7529] hpfs: hpfs_map_4sectors(): unaligned read
[  142.133746][ T7525] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  142.169799][ T7537] sp0: Synchronizing with TNC
[  142.177082][ T7529] hpfs: filesystem error: unable to find root dir
[  142.219367][ T7525] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  142.293206][ T7525] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  142.315334][ T7525] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  142.347916][ T7525] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  142.415833][ T7525] ntfs: volume version 3.1.
[  142.433188][ T4456] dragonrise 0003:0079:0011.0012: ignoring exceeding usage max
[  142.456740][ T4456] dragonrise 0003:0079:0011.0012: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.5-1/input0
[  142.585211][ T7553] loop2: detected capacity change from 0 to 8
[  142.700248][ T4456] usb 6-1: USB disconnect, device number 7
[  142.727235][ T4462] kernel write not supported for file /media6 (pid: 4462 comm: kworker/1:12)
[  142.866565][ T7564] netlink: 'syz.3.1243': attribute type 2 has an invalid length.
[  142.922966][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1245'.
[  143.309967][ T4233] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  143.454533][ T7595] loop5: detected capacity change from 0 to 1024
[  143.598891][ T4240] hfsplus: b-tree write err: -5, ino 25
[  143.617716][ T4240] hfsplus: b-tree write err: -5, ino 4
[  143.633195][ T4240] hfsplus: b-tree write err: -5, ino 2
[  143.752489][ T7612] loop3: detected capacity change from 0 to 1024
[  143.805252][ T7612] EXT4-fs (loop3): Ignoring removed orlov option
[  143.843796][ T7612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  143.860141][ T4233] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  143.879976][ T7612] System zones: 0-1, 3-12
[  143.895152][ T7612] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,jqfmt=vfsv1,auto_da_alloc=0x0000000001800000,,errors=continue. Quota mode: none.
[  143.898028][ T7619] kernel read not supported for file / -Ö9÷mZr†
œ7³ÏüâW)ës“§Ç!Q�öì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|�Õ² (pid: 7619 comm: syz.5.1270)
[  143.923836][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.947007][ T4233] usb 2-1: Product: syz
[  143.952310][ T4233] usb 2-1: Manufacturer: syz
[  143.956927][ T4233] usb 2-1: SerialNumber: syz
[  143.967054][ T4233] usb 2-1: config 0 descriptor??
[  144.012002][ T4233] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  144.065321][ T4233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  144.110694][ T4233] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  144.160746][ T4233] usb 2-1: media controller created
[  144.206815][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  144.255061][ T7606] loop4: detected capacity change from 0 to 32768
[  144.319318][ T7632] loop5: detected capacity change from 0 to 256
[  144.381042][ T7632] exfat: Deprecated parameter 'namecase'
[  144.386764][ T7632] exfat: Deprecated parameter 'namecase'
[  144.417021][ T4233] DVB: Unable to find symbol mt352_attach()
[  144.484172][ T7632] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  144.538234][ T4233] DVB: Unable to find symbol nxt6000_attach()
[  144.557397][ T4233] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  144.615673][ T7643] tmpfs: Bad value for 'size'
[  144.658121][ T4233] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16
[  144.750374][ T4233] dvb-usb: schedule remote query interval to 1000 msecs.
[  144.757463][ T4233] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  144.849846][ T4233] dvb-usb: bulk message failed: -22 (7/0)
[  144.855629][ T4233] dvb-usb: bulk message failed: -22 (7/0)
[  144.920033][ T4233] usb 2-1: USB disconnect, device number 10
[  144.939140][ T7658] loop4: detected capacity change from 0 to 512
[  145.049206][ T4233] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  145.071430][ T7658] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  145.091147][ T7652] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  145.171835][ T7652] NILFS (loop1): mounting unchecked fs
[  145.212847][ T7658] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  145.230161][ T7658] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1288: Corrupt directory, running e2fsck is recommended
[  145.271067][ T7658] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  145.284898][ T7652] NILFS (loop1): recovery complete
[  145.303732][ T4180] udevd[4180]: incorrect nilfs2 checksum on /dev/loop1
[  145.342367][ T7658] EXT4-fs error (device loop4): ext4_iget_extra_inode:4573: inode #15: comm syz.4.1288: corrupted in-inode xattr
[  145.404610][ T7671] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.448013][ T7658] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.1288: couldn't read orphan inode 15 (err -117)
[  145.513884][ T7658] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.dax,resuid=0x0000000000000000,lazytime,grpid,,,errors=continue. Quota mode: writeback.
[  145.609477][ T7637] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.1277 (7637)
[  145.688711][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1297'.
[  145.702549][ T7637] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  145.752837][ T7637] BTRFS info (device loop2): force zlib compression, level 3
[  145.770057][ T7637] BTRFS info (device loop2): turning on flush-on-commit
[  145.828106][ T7637] BTRFS info (device loop2): max_inline at 4096
[  145.858419][ T7637] BTRFS info (device loop2): using free space tree
[  145.881096][   T21] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  145.882185][ T7637] BTRFS info (device loop2): has skinny extents
[  146.149571][   T21] usb 4-1: Using ep0 maxpacket: 16
[  146.280389][ T7637] BTRFS info (device loop2): enabling ssd optimizations
[  146.299716][   T21] usb 4-1: config index 0 descriptor too short (expected 52, got 36)
[  146.319764][   T21] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  146.328051][   T21] usb 4-1: config 0 has no interface number 0
[  146.350057][   T21] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  146.360284][   T21] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  146.446921][ T7687] XFS (loop1): Mounting V5 Filesystem
[  146.580119][   T21] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  146.589209][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.609586][   T21] usb 4-1: Product: syz
[  146.613796][   T21] usb 4-1: Manufacturer: syz
[  146.618402][   T21] usb 4-1: SerialNumber: syz
[  146.632392][   T21] usb 4-1: config 0 descriptor??
[  146.659805][ T7676] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  146.666918][ T7676] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  146.714982][ T7727] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.766778][ T7687] XFS (loop1): Ending clean mount
[  146.817565][ T7687] XFS (loop1): Quotacheck needed: Please wait.
[  146.893873][ T7676] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  146.926927][ T7676] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  147.165511][ T7687] XFS (loop1): Quotacheck: Done.
[  147.341130][ T4188] XFS (loop1): Unmounting Filesystem
[  147.402565][ T7742] set_capacity_and_notify: 5 callbacks suppressed
[  147.402581][ T7742] loop2: detected capacity change from 0 to 1024
[  147.429877][   T21] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  147.459682][   T21] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  147.492875][   T21] asix: probe of 4-1:0.251 failed with error -71
[  147.631672][   T21] usb 4-1: USB disconnect, device number 12
[  148.449048][ T7774] MPTCP: kernel_bind error, err=-99
[  148.466607][ T7748] loop4: detected capacity change from 0 to 40427
[  148.489999][ T5018] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  148.546913][ T7748] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff
[  148.589629][   T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  148.607624][ T7748] F2FS-fs (loop4): invalid crc value
[  148.634217][ T7750] loop5: detected capacity change from 0 to 40427
[  148.642919][ T7748] F2FS-fs (loop4): Found nat_bits in checkpoint
[  148.672095][ T7750] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff
[  148.727613][ T7750] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4
[  148.759039][ T7750] F2FS-fs (loop5): invalid crc value
[  148.769940][ T7748] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  148.803606][ T7750] F2FS-fs (loop5): Found nat_bits in checkpoint
[  148.875303][ T5018] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  148.895912][ T5018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.922794][ T7750] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  148.924440][ T4198] attempt to access beyond end of device
[  148.924440][ T4198] loop4: rw=2049, want=45104, limit=40427
[  148.971136][ T5018] usb 4-1: config 0 descriptor??
[  149.029839][   T21] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  149.031035][ T5018] cp210x 4-1:0.0: cp210x converter detected
[  149.048468][   T21] usb 3-1: config 2 interface 0 has no altsetting 0
[  149.249758][   T21] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  149.258875][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.258988][ T7787] loop1: detected capacity change from 0 to 256
[  149.305082][   T21] usb 3-1: Product: syz
[  149.309295][   T21] usb 3-1: Manufacturer: syz
[  149.330993][ T7787] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d)
[  149.349580][   T21] usb 3-1: SerialNumber: syz
[  149.401661][   T21] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  149.410823][   T21] usb 3-1: selecting invalid altsetting 0
[  149.440671][   T21] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  149.464376][ T5018] usb 4-1: cp210x converter now attached to ttyUSB0
[  149.469898][   T21] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  149.479285][   T21] usb 3-1: media controller created
[  149.572425][   T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  149.598133][ T7791] siw: device registration error -23
[  149.619284][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'.
[  149.633007][ T7793] netlink: 'syz.4.1336': attribute type 14 has an invalid length.
[  149.656292][ T7793] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1336'.
[  149.677019][ T5018] usb 4-1: USB disconnect, device number 13
[  149.743738][ T5018] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  149.788605][ T5018] cp210x 4-1:0.0: device disconnected
[  149.855736][   T21] usb 3-1: USB disconnect, device number 4
[  149.998724][ T7803] loop1: detected capacity change from 0 to 4096
[  150.159686][ T4232] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  150.186486][ T7813] loop5: detected capacity change from 0 to 128
[  150.525090][ T7826] loop3: detected capacity change from 0 to 4096
[  150.581987][ T4232] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  150.597543][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.628420][ T4232] usb 5-1: config 0 has no interface number 0
[  150.736647][ T7826] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  150.769756][ T4232] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  150.779835][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  150.787880][ T4232] usb 5-1: Manufacturer: syz
[  150.793075][ T4232] usb 5-1: SerialNumber: syz
[  150.799671][ T4232] usb 5-1: config 0 descriptor??
[  151.002244][ T7822] loop2: detected capacity change from 0 to 40427
[  151.049932][ T7822] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  151.063845][ T5019] usb 5-1: USB disconnect, device number 6
[  151.075915][ T7822] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  151.124513][ T7822] F2FS-fs (loop2): invalid crc value
[  151.168722][ T7822] F2FS-fs (loop2): Found nat_bits in checkpoint
[  151.209251][ T7848] loop3: detected capacity change from 0 to 512
[  151.233502][ T7848] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  151.270645][ T7848] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1358: bad orphan inode 131083
[  151.291485][ T7848] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  151.318487][ T7842] loop5: detected capacity change from 0 to 32768
[  151.335225][ T7822] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  151.342892][ T7822] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  151.358920][ T7848] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.1358: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  151.403416][ T7848] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem
[  151.475986][ T7848] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.1358: Deleting old file: nlink 4, error=-117
[  151.679192][ T7857] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  152.033520][ T7872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.135666][ T7867] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  152.987087][ T7922] set_capacity_and_notify: 2 callbacks suppressed
[  152.987103][ T7922] loop1: detected capacity change from 0 to 1024
[  153.104705][ T7891] loop5: detected capacity change from 0 to 32768
[  153.169080][ T7878] loop4: detected capacity change from 0 to 40427
[  153.250434][ T7891] XFS (loop5): Mounting V5 Filesystem
[  153.260232][ T7878] F2FS-fs (loop4): invalid crc value
[  153.353423][ T7878] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  153.527672][ T7891] XFS (loop5): Ending clean mount
[  153.576162][ T7891] XFS (loop5): Quotacheck needed: Please wait.
[  153.615786][ T7949] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1397'.
[  153.648364][ T7878] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  153.688534][ T7878] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  153.691250][ T7891] XFS (loop5): Quotacheck: Done.
[  153.709957][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1397'.
[  153.746847][ T7950] loop1: detected capacity change from 0 to 4096
[  153.834424][ T7921] loop2: detected capacity change from 0 to 40427
[  153.874730][ T7921] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[  153.907004][ T7921] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  153.971113][ T7921] F2FS-fs (loop2): invalid crc value
[  153.988578][ T4366] XFS (loop5): Unmounting Filesystem
[  154.004240][ T7955] loop3: detected capacity change from 0 to 64
[  154.047961][ T7921] F2FS-fs (loop2): Found nat_bits in checkpoint
[  154.188141][ T7950] ntfs3: Cannot use different iocharset when remounting!
[  154.241878][ T7921] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  154.259970][ T7921] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  154.374368][ T7921] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  154.498022][ T7965] sp0: Synchronizing with TNC
[  154.795217][   T25] kauditd_printk_skb: 56 callbacks suppressed
[  154.795231][   T25] audit: type=1326 audit(1778664303.729:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.4.1408" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f661b3dee59 code=0x0
[  155.251200][ T8000] loop1: detected capacity change from 0 to 4096
[  155.269834][ T4232] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  155.355350][ T8005] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.372871][ T8000] attempt to access beyond end of device
[  155.372871][ T8000] loop1: rw=0, want=88500, limit=4096
[  155.404624][ T8000] NILFS (loop1): I/O error reading node block for GC (ino=129, vblocknr=32768)
[  155.429266][ T8000] NILFS (loop1): error -5 preparing GC: cannot read source blocks
[  155.498409][ T8007] loop2: detected capacity change from 0 to 512
[  155.599770][ T7982] loop3: detected capacity change from 0 to 40427
[  155.617401][ T8007] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  155.646016][ T8007] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  155.655064][ T8011] loop1: detected capacity change from 0 to 4096
[  155.670425][ T8014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1423'.
[  155.686373][ T7982] F2FS-fs (loop3): invalid crc value
[  155.692310][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.711793][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.727329][ T7982] F2FS-fs (loop3): Found nat_bits in checkpoint
[  155.739080][ T4232] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  155.748942][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.771115][ T4232] usb 6-1: config 0 descriptor??
[  155.829794][ T8011] ntfs: (device loop1): parse_options(): NLS character set is not found. Using previous one default.
[  155.874796][ T8011] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  155.940449][ T7982] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[  155.965829][ T7982] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  155.989401][ T8011] ntfs: volume version 3.1.
[  156.005581][ T7982] F2FS-fs (loop3): Start checkpoint disabled!
[  156.085243][ T7982] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  156.157608][ T8011] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default.  You might want to try to use the mount option nls=utf8.
[  156.262648][ T4232] hid-led 0003:1D34:000A.0013: item fetching failed at offset 2/3
[  156.273911][ T8011] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  156.288710][ T4232] hid-led: probe of 0003:1D34:000A.0013 failed with error -22
[  156.403548][ T8034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1433'.
[  156.431752][ T8034] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1433'.
[  156.475998][ T8034] tipc: Invalid UDP bearer configuration
[  156.476052][ T8034] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  156.506829][  T154] attempt to access beyond end of device
[  156.506829][  T154] loop3: rw=2049, want=40992, limit=40427
[  156.522711][ T4460] usb 6-1: USB disconnect, device number 8
[  156.755341][ T8040] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  157.087952][ T8028] XFS (loop2): Mounting V5 Filesystem
[  157.105225][ T8058] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.246853][ T8028] XFS (loop2): Ending clean mount
[  157.310272][ T8028] XFS (loop2): Quotacheck needed: Please wait.
[  157.468534][ T8028] XFS (loop2): Quotacheck: Done.
[  157.533559][ T8075] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1445'.
[  157.569718][ T4200] XFS (loop2): Unmounting Filesystem
[  157.605174][ T8077] EXT4-fs (loop5): filesystem is read-only
[  157.625705][ T8077] EXT4-fs (loop5): Number of reserved GDT blocks insanely large: 3328
[  157.812993][ T8081] hfsplus: small file entry
[  157.818405][ T8090] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.079845][ T8095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1455'.
[  158.258921][ T8093] set_capacity_and_notify: 8 callbacks suppressed
[  158.258936][ T8093] loop5: detected capacity change from 0 to 8192
[  158.461383][ T8112] loop1: detected capacity change from 0 to 64
[  158.467857][ T8114] loop2: detected capacity change from 0 to 64
[  158.558632][ T8118] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.1466'.
[  158.569890][ T4232] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  158.795319][ T8121] loop1: detected capacity change from 0 to 256
[  158.844730][ T8121] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  158.950530][ T4232] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  158.982375][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  159.023836][ T4232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  159.090149][ T4232] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  159.105084][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.170751][ T4232] usb 4-1: config 0 descriptor??
[  159.199876][ T8102] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  159.319305][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1480'.
[  159.515364][ T8135] loop2: detected capacity change from 0 to 32768
[  159.587208][ T8159] loop4: detected capacity change from 0 to 512
[  159.653146][ T5019] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  159.671472][ T4232] dragonrise 0003:0079:0011.0014: ignoring exceeding usage max
[  159.710273][ T4232] dragonrise 0003:0079:0011.0014: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0
[  159.733514][ T8145] loop1: detected capacity change from 0 to 32768
[  159.909894][ T5019] usb 6-1: Using ep0 maxpacket: 16
[  159.944446][ T5662] usb 4-1: USB disconnect, device number 14
[  159.987128][ T8169] loop4: detected capacity change from 0 to 1024
[  160.030403][ T5019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.086332][ T5019] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.138128][ T5019] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  160.165675][ T5019] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.188989][ T5019] usb 6-1: config 0 descriptor??
[  160.319582][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1494'.
[  160.328483][ T8179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1494'.
[  160.464886][ T8185] loop1: detected capacity change from 0 to 4096
[  160.552952][ T8193] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.569631][   T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  160.598702][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[  160.632733][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 13 is already clean
[  160.642936][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.657410][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.665806][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.682589][ T5019] apple 0003:05AC:024B.0015: unknown global tag 0xe
[  160.700826][ T5019] apple 0003:05AC:024B.0015: item 0 1 1 14 parsing failed
[  160.710002][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.723881][ T5019] apple 0003:05AC:024B.0015: parse failed
[  160.735515][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.737080][ T8201] loop4: detected capacity change from 0 to 64
[  160.743903][ T5019] apple: probe of 0003:05AC:024B.0015 failed with error -22
[  160.757898][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.786396][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.795631][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.804012][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.812423][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.822357][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.840331][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.848898][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.859646][   T21] usb 3-1: Using ep0 maxpacket: 32
[  160.871941][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.899288][ T4232] usb 6-1: USB disconnect, device number 9
[  160.914494][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.941602][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.949799][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.976913][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  160.989889][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.003807][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.012154][   T21] usb 3-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00
[  161.022908][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.038257][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.049140][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.073798][ T8206] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  161.085918][   T21] usb 3-1: config 0 descriptor??
[  161.109022][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.160434][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.168295][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.221739][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.267959][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.278413][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.286636][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.295643][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.351825][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.365410][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.384858][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.399482][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.407319][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.451029][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.469964][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.477813][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.512462][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.529606][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.548520][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.562291][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.577969][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.584900][ T5018] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  161.586161][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.610813][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.629556][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.651475][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.659610][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.667427][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.676668][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.676738][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1518'.
[  161.685628][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.719363][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.747011][ T8229] ntfs: (device loop3): parse_options(): NLS character set is not found. Using previous one default.
[  161.758054][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.766689][ T8229] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  161.790933][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.798784][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.806815][   T21] usb 3-1: string descriptor 0 read error: -71
[  161.814350][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.822585][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.830633][   T21] uclogic 0003:5543:0081.0016: failed retrieving string descriptor #200: -71
[  161.853231][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.867957][ T8229] ntfs: volume version 3.1.
[  161.881540][   T21] uclogic 0003:5543:0081.0016: failed retrieving pen parameters: -71
[  161.889346][ T8236] netlink: 'syz.5.1520': attribute type 4 has an invalid length.
[  161.899497][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.907689][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.916487][   T21] uclogic 0003:5543:0081.0016: failed probing pen v2 parameters: -71
[  161.925129][   T21] uclogic 0003:5543:0081.0016: failed probing parameters: -71
[  161.934142][ T8229] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default.  You might want to try to use the mount option nls=utf8.
[  161.952661][ T8236] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1520'.
[  161.961041][ T5018] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  161.961880][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  161.980289][   T21] uclogic: probe of 0003:5543:0081.0016 failed with error -71
[  161.988057][ T5018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  161.998405][   T21] usb 3-1: USB disconnect, device number 5
[  162.007325][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.016158][ T5018] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  162.020973][ T8229] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  162.045470][ T5018] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  162.046995][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.058789][ T5018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.083003][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.104191][ T5018] usb 5-1: config 0 descriptor??
[  162.111135][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.118970][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.119904][ T8217] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  162.172855][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.217418][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.230534][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.248043][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.273299][ T8247] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.1527'.
[  162.304813][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.333939][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.353147][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.397168][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.415303][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.423911][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.446227][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.456318][ T8255] exfat: Deprecated parameter 'utf8'
[  162.459844][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.465877][ T8255] exfat: Deprecated parameter 'utf8'
[  162.471548][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.484876][ T8185] NILFS (loop1): nilfs_sufile_do_free: segment 0 is already clean
[  162.501433][ T8255] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  162.623184][ T5018] dragonrise 0003:0079:0011.0017: ignoring exceeding usage max
[  162.682659][ T5018] dragonrise 0003:0079:0011.0017: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.4-1/input0
[  162.719609][   T21] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  162.883785][ T5018] usb 5-1: USB disconnect, device number 7
[  162.928632][ T8266] fido_id[8266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  162.961596][ T8270] Set syz1 is full, maxelem 1029 reached
[  163.009739][   T21] usb 4-1: Using ep0 maxpacket: 32
[  163.042976][ T8268] ntfs: (device loop5): parse_options(): NLS character set is not found. Using previous one default.
[  163.084659][ T8268] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  163.131250][   T21] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  163.140670][ T8268] ntfs: volume version 3.1.
[  163.149905][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.197406][   T21] usb 4-1: config 0 descriptor??
[  163.207522][ T8268] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set default.  You might want to try to use the mount option nls=utf8.
[  163.242166][ T8268] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  163.281731][   T21] gspca_main: sq930x-2.14.0 probing 041e:403c
[  163.459382][ T8292] set_capacity_and_notify: 6 callbacks suppressed
[  163.459398][ T8292] loop2: detected capacity change from 0 to 2048
[  163.543715][ T4180]  loop2: p1 p4
[  163.543715][ T4180]  p1: <solaris:  cannot handle version 589825 vtoc>
[  163.579554][ T4180] loop2: p4 size 589824 extends beyond EOD, truncated
[  163.640287][ T8292]  loop2: p1 p4
[  163.640287][ T8292]  p1: <solaris:  cannot handle version 589825 vtoc>
[  163.658182][ T8292] loop2: p4 size 589824 extends beyond EOD, truncated
[  163.728053][ T8302] loop4: detected capacity change from 0 to 1024
[  163.805001][ T8302] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  163.879353][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  163.895167][ T7362] udevd[7362]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  163.926814][ T8291] loop1: detected capacity change from 0 to 40427
[  163.968587][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  163.979554][   T21] gspca_sq930x: reg_w 0305 fd00 failed -71
[  163.989263][ T7362] udevd[7362]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  164.005550][   T21] sq930x: probe of 4-1:0.0 failed with error -71
[  164.014767][   T21] usb 4-1: USB disconnect, device number 15
[  164.059108][ T8291] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff
[  164.078074][ T8291] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4
[  164.140744][ T8291] F2FS-fs (loop1): invalid crc value
[  164.165528][ T8291] F2FS-fs (loop1): Found nat_bits in checkpoint
[  164.225968][ T8320] loop4: detected capacity change from 0 to 512
[  164.296095][ T8291] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  164.312799][ T8320] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  164.359039][ T8320] ext4 filesystem being mounted at /331/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.571330][ T8327] loop4: detected capacity change from 0 to 2048
[  164.616608][ T8327]  loop4: p1 p2 p3
[  164.616608][ T8327]  p1: <netbsd: p5bad subpartition - ignored
[  164.616608][ T8327]  (ignored 752 more) >
[  164.635245][ T8317] loop2: detected capacity change from 0 to 32768
[  164.668315][ T8327] loop4: p2 size 458752 extends beyond EOD, truncated
[  164.685685][ T8327] loop4: p3 start 65280 is beyond EOD, truncated
[  164.739053][ T8337] loop5: detected capacity change from 0 to 256
[  164.771328][ T8317] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  164.865626][ T8344] loop1: detected capacity change from 0 to 512
[  164.931259][ T8337] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  164.984518][ T8344] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1559: iget: bad extra_isize 50264 (inode size 256)
[  165.005129][ T8350] sp0: Synchronizing with TNC
[  165.020671][ T4200] ocfs2: Unmounting device (7,2) on (node local)
[  165.059157][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  165.062644][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  165.106952][ T8344] EXT4-fs (loop1): Remounting filesystem read-only
[  165.117832][ T8355] loop3: detected capacity change from 0 to 1024
[  165.209775][ T8344] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1559: couldn't read orphan inode 15 (err -117)
[  165.274053][ T8344] EXT4-fs (loop1): Remounting filesystem read-only
[  165.313035][ T8344] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,journal_dev=0x0000000000000010,inode_readahead_blks=0x0000000000000000,noinit_itable,errors=continue,errors=continue,errors=remount-ro,inode_readahead_blks=0x0000000000000004,auto_da_alloc,norecovery,stripe=0x000000000. Quota mode: none.
[  165.798250][ T8378] loop5: detected capacity change from 0 to 1024
[  165.947464][ T8378] EXT4-fs (loop5): bad geometry: first data block 0 is beyond end of filesystem (0)
[  165.960163][ T8386] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  165.993020][ T4178] udevd[4178]: incorrect cramfs checksum on /dev/loop2
[  166.477571][ T8373] ERROR: (device loop3): diRead: i_ino != di_number
[  166.477571][ T8373] 
[  166.601722][ T8401] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  166.685430][ T8401] ntfs: volume version 3.1.
[  166.742433][ T8401] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii.  You might want to try to use the mount option nls=utf8.
[  166.885168][ T8401] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  166.952773][ T8415] EXT4-fs (loop2): Ignoring removed orlov option
[  166.968317][ T8383] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  167.022654][ T8383] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  167.043196][ T8415] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  167.172279][ T8383] F2FS-fs (loop4): invalid crc value
[  167.205010][ T8383] F2FS-fs (loop4): Found nat_bits in checkpoint
[  167.421981][ T8383] F2FS-fs (loop4): recover fsync data on readonly fs
[  167.445216][ T8383] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30
[  167.494384][ T8383] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  167.514924][ T8435] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.565587][ T8434] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  167.698634][ T8404] F2FS-fs (loop1): Found nat_bits in checkpoint
[  167.947391][ T8404] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  167.979948][ T8446] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  168.096912][ T4188] attempt to access beyond end of device
[  168.096912][ T4188] loop1: rw=2049, want=45104, limit=40427
[  168.388714][ T8453] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  168.428127][ T8453] NILFS (loop3): mounting unchecked fs
[  168.467411][ T4180] udevd[4180]: incorrect nilfs2 checksum on /dev/loop3
[  168.495860][ T8453] NILFS (loop3): recovery complete
[  168.544369][ T8461] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.739323][ T8469] set_capacity_and_notify: 11 callbacks suppressed
[  168.739338][ T8469] loop2: detected capacity change from 0 to 8
[  168.865132][ T8469] SQUASHFS error: lzo decompression failed, data probably corrupt
[  168.883769][ T8469] SQUASHFS error: Failed to read block 0x71: -5
[  168.904174][ T8469] SQUASHFS error: lzo decompression failed, data probably corrupt
[  168.913415][ T8469] SQUASHFS error: Failed to read block 0x71: -5
[  168.922721][   T25] audit: type=1800 audit(1778664317.859:108): pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1622" name="file0" dev="loop2" ino=3 res=0 errno=0
[  169.109097][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1629'.
[  169.151238][ T8486] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1629'.
[  169.220567][ T8493] loop4: detected capacity change from 0 to 64
[  169.476601][ T8505] loop4: detected capacity change from 0 to 256
[  169.515298][ T8505] exFAT-fs (loop4): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d)
[  169.779108][ T8483] loop1: detected capacity change from 0 to 32768
[  170.206854][   T25] audit: type=1326 audit(1778664319.139:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.5.1648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a9b30e59 code=0x7ffc0000
[  170.237702][ T8508] loop3: detected capacity change from 0 to 40427
[  170.267960][ T8508] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  170.270859][ T5662] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  170.279174][   T25] audit: type=1326 audit(1778664319.139:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.5.1648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a9b30e59 code=0x7ffc0000
[  170.309405][ T8508] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  170.327969][   T25] audit: type=1326 audit(1778664319.159:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.5.1648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a9b30e59 code=0x7ffc0000
[  170.362623][ T8508] F2FS-fs (loop3): invalid crc value
[  170.379582][   T25] audit: type=1326 audit(1778664319.159:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.5.1648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a9b30e59 code=0x7ffc0000
[  170.434580][ T8508] F2FS-fs (loop3): Found nat_bits in checkpoint
[  170.495657][   T25] audit: type=1326 audit(1778664319.159:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.5.1648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f35a9b30e59 code=0x7ffc0000
[  170.528543][ T8536] loop5: detected capacity change from 0 to 4096
[  170.562317][   T25] audit: type=1326 audit(1778664319.159:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.5.1648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a9b30e59 code=0x7ffc0000
[  170.589325][   T25] audit: type=1326 audit(1778664319.159:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.5.1648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a9b30e59 code=0x7ffc0000
[  170.615119][ T8508] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  170.631680][ T8508] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  170.690377][   T25] audit: type=1326 audit(1778664319.159:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.5.1648" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f35a9b30e59 code=0x7ffc0000
[  170.700018][ T5662] usb 2-1: unable to get BOS descriptor or descriptor too short
[  170.735005][ T8536] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  170.902156][ T5662] usb 2-1: not running at top speed; connect to a high speed hub
[  170.980185][ T8546] loop2: detected capacity change from 0 to 4096
[  171.014992][ T5662] usb 2-1: config index 0 descriptor too short (expected 28771, got 10)
[  171.015118][ T8546] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  171.042535][ T5662] usb 2-1: config 114 has too many interfaces: 95, using maximum allowed: 32
[  171.068469][ T5662] usb 2-1: config 114 descriptor has 1 excess byte, ignoring
[  171.077205][ T5662] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 95
[  171.250050][ T5662] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f
[  171.278335][ T5662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.312208][ T8547] loop4: detected capacity change from 0 to 32768
[  171.318082][ T5662] usb 2-1: Product: syz
[  171.348542][ T5662] usb 2-1: Manufacturer: syz
[  171.359132][ T5662] usb 2-1: SerialNumber: syz
[  171.685071][ T5662] usb 2-1: USB disconnect, device number 11
[  171.764839][ T8549] loop5: detected capacity change from 0 to 32768
[  171.983383][ T8549] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  171.997755][ T8567] loop2: detected capacity change from 0 to 512
[  172.019371][ T8567] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  172.075694][ T4366] ocfs2: Unmounting device (7,5) on (node local)
[  172.134199][ T8567] EXT4-fs (loop2): 1 orphan inode deleted
[  172.186120][ T8567] EXT4-fs (loop2): 1 truncate cleaned up
[  172.232775][ T8567] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,errors=remount-ro,quota,. Quota mode: writeback.
[  172.379068][ T8567] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #12: block 7: comm syz.2.1665: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  172.428370][ T8567] EXT4-fs (loop2): Remounting filesystem read-only
[  172.464685][ T8553] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff
[  172.488303][ T8553] F2FS-fs (loop3): invalid crc value
[  172.550900][ T8553] F2FS-fs (loop3): Found nat_bits in checkpoint
[  172.687314][ T8584] sp0: Synchronizing with TNC
[  172.727751][ T8553] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  172.766022][  T154] hfsplus: b-tree write err: -5, ino 25
[  172.785859][  T154] hfsplus: b-tree write err: -5, ino 4
[  172.816649][  T154] hfsplus: b-tree write err: -5, ino 2
[  172.873817][ T4193] attempt to access beyond end of device
[  172.873817][ T4193] loop3: rw=2049, want=45104, limit=40427
[  172.989178][ T8588] hfsplus: catalog name length corrupted
[  173.350892][ T7362]  loop1: p1 < > p4 < >
[  173.356243][ T7362] loop1: partition table partially beyond EOD, truncated
[  173.400214][ T7362] loop1: p4 start 42180 is beyond EOD, truncated
[  173.452325][ T8602]  loop1: p1 < > p4 < >
[  173.456533][ T8602] loop1: partition table partially beyond EOD, truncated
[  173.525184][ T8602] loop1: p4 start 42180 is beyond EOD, truncated
[  173.654518][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1686'.
[  173.754674][ T8619] EXT4-fs (loop2): Ignoring removed bh option
[  173.805138][ T8629] set_capacity_and_notify: 8 callbacks suppressed
[  173.805153][ T8629] loop4: detected capacity change from 0 to 256
[  173.814246][ T8619] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,noblock_validity,stripe=0x0000000000000010,bh,init_itable,,errors=continue. Quota mode: none.
[  173.868455][ T8626] loop3: detected capacity change from 0 to 4096
[  173.870166][ T8619] EXT4-fs error (device loop2): __ext4_iget:4919: inode #13: block 127754: comm syz.2.1687: invalid block
[  173.923844][ T8626] __ntfs_warning: 1 callbacks suppressed
[  173.923861][ T8626] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  174.013178][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  174.030038][ T8626] ntfs: volume version 3.1.
[  174.040649][ T8629] FAT-fs (loop4): Directory bread(block 64) failed
[  174.040689][ T8629] FAT-fs (loop4): Directory bread(block 65) failed
[  174.040759][ T8629] FAT-fs (loop4): Directory bread(block 66) failed
[  174.040788][ T8629] FAT-fs (loop4): Directory bread(block 67) failed
[  174.040851][ T8629] FAT-fs (loop4): Directory bread(block 68) failed
[  174.040880][ T8629] FAT-fs (loop4): Directory bread(block 69) failed
[  174.040941][ T8629] FAT-fs (loop4): Directory bread(block 70) failed
[  174.040969][ T8629] FAT-fs (loop4): Directory bread(block 71) failed
[  174.041030][ T8629] FAT-fs (loop4): Directory bread(block 72) failed
[  174.041057][ T8629] FAT-fs (loop4): Directory bread(block 73) failed
[  174.119297][ T8626] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii.  You might want to try to use the mount option nls=utf8.
[  174.119327][ T8626] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  174.263349][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  174.319908][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  174.354542][ T5659] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  174.375647][ T5659] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  174.422980][ T4232] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  174.480789][ T8650] device bridge0 entered promiscuous mode
[  174.562903][ T8651] fido_id[8651]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  174.607437][ T8650] device macvtap1 entered promiscuous mode
[  174.709810][ T8660] netlink: 'syz.4.1705': attribute type 29 has an invalid length.
[  174.718397][ T4459] kernel write not supported for file /vcsa1 (pid: 4459 comm: kworker/1:9)
[  174.742135][ T8660] netlink: 'syz.4.1705': attribute type 29 has an invalid length.
[  174.785832][ T8664] netlink: 'syz.4.1705': attribute type 29 has an invalid length.
[  174.829161][ T8668] loop5: detected capacity change from 0 to 256
[  174.900512][ T8668] exfat: Deprecated parameter 'utf8'
[  174.906144][ T8668] exfat: Deprecated parameter 'utf8'
[  174.940507][ T8668] exfat: Deprecated parameter 'utf8'
[  174.989627][ T4232] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  174.997459][ T8668] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  175.019098][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.054236][ T4232] usb 2-1: Product: syz
[  175.058435][ T4232] usb 2-1: Manufacturer: syz
[  175.092357][ T4232] usb 2-1: SerialNumber: syz
[  175.128183][ T8676] loop2: detected capacity change from 0 to 4096
[  175.143791][ T4232] usb 2-1: config 0 descriptor??
[  175.206836][ T8676] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  175.230453][ T4232] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  175.279782][ T4232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  175.307150][ T8686] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1716'.
[  175.320341][ T4232] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  175.346427][ T4232] usb 2-1: media controller created
[  175.365699][ T8676] ntfs: volume version 3.1.
[  175.432059][ T8641] dvb-usb: bulk message failed: -22 (7/0)
[  175.443987][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  175.460839][ T8676] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii.  You might want to try to use the mount option nls=utf8.
[  175.509603][ T8676] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  175.567052][ T4232] DVB: Unable to find symbol mt352_attach()
[  175.658934][ T8699] loop5: detected capacity change from 0 to 16
[  175.668012][ T4232] DVB: Unable to find symbol nxt6000_attach()
[  175.684746][ T4232] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  175.744759][ T8699] erofs: (device loop5): mounted with root inode @ nid 36.
[  175.746811][ T8674] loop3: detected capacity change from 0 to 32768
[  175.779674][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  175.784522][ T5662] Bluetooth: hci0: command 0x0406 tx timeout
[  175.787580][ T4232] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17
[  175.800248][ T5662] Bluetooth: hci4: command 0x0406 tx timeout
[  175.828144][ T4232] dvb-usb: schedule remote query interval to 1000 msecs.
[  175.836574][ T4232] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  175.847778][ T4232] dvb-usb: bulk message failed: -22 (7/0)
[  175.853795][ T4232] dvb-usb: bulk message failed: -22 (7/0)
[  175.913717][ T4232] usb 2-1: USB disconnect, device number 12
[  175.920653][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  175.994785][ T4232] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  175.996180][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1725'.
[  176.053517][ T8674] XFS (loop3): Mounting V5 Filesystem
[  176.092029][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1725'.
[  176.157559][ T8674] XFS (loop3): Ending clean mount
[  176.167316][ T8674] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 
[  176.179901][ T8674] XFS (loop3): Unmount and run xfs_repair
[  176.185650][ T8674] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  176.193560][ T8674] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  176.202794][ T8674] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  176.212321][ T8674] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  176.221313][ T8674] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  176.230649][ T8674] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  176.240088][ T8674] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.254591][ T8674] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  176.264777][ T8674] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  176.277047][ T8674] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74
[  176.289154][ T8674] XFS (loop3): Failed to initialize disk quotas.
[  176.468601][ T4193] XFS (loop3): Unmounting Filesystem
[  176.531683][ T8736] loop1: detected capacity change from 0 to 4096
[  176.597614][ T8736] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  176.626250][ T8739] loop2: detected capacity change from 0 to 4096
[  176.795225][ T8736] ntfs: volume version 3.1.
[  176.803443][ T8744] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.834388][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean
[  176.870020][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 13 is already clean
[  176.895632][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  176.931168][ T8736] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii.  You might want to try to use the mount option nls=utf8.
[  176.956211][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  176.984284][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.001439][ T8736] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  177.019907][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.054962][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.099851][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.122061][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.131091][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.144756][ T8750] loop5: detected capacity change from 0 to 256
[  177.153181][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.170803][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.195881][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.204623][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.225698][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.269617][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.297226][ T8750] FAT-fs (loop5): Directory bread(block 64) failed
[  177.312127][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.329516][ T8750] FAT-fs (loop5): Directory bread(block 65) failed
[  177.336182][ T8750] FAT-fs (loop5): Directory bread(block 66) failed
[  177.356241][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.379559][ T8750] FAT-fs (loop5): Directory bread(block 67) failed
[  177.386234][ T8750] FAT-fs (loop5): Directory bread(block 68) failed
[  177.408303][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.423325][ T8759] loop4: detected capacity change from 0 to 16
[  177.439532][ T8750] FAT-fs (loop5): Directory bread(block 69) failed
[  177.446203][ T8750] FAT-fs (loop5): Directory bread(block 70) failed
[  177.457881][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.484729][ T8750] FAT-fs (loop5): Directory bread(block 71) failed
[  177.496704][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.517425][ T8759] erofs: (device loop4): mounted with root inode @ nid 36.
[  177.536754][ T8750] FAT-fs (loop5): Directory bread(block 72) failed
[  177.545449][ T8750] FAT-fs (loop5): Directory bread(block 73) failed
[  177.567339][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.596163][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.620484][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.628341][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.668424][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.688343][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.740809][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.741768][ T8765] device vlan2 entered promiscuous mode
[  177.754644][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.801154][ T8765] device bridge0 entered promiscuous mode
[  177.806741][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.828457][ T8767] devtmpfs: Bad value for 'gid'
[  177.854500][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.883794][ T8753] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  177.912597][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.980886][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  177.988741][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.000935][ T8771] netlink: 'syz.5.1750': attribute type 3 has an invalid length.
[  178.017877][ T4193] ocfs2: Unmounting device (7,3) on (node local)
[  178.025162][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.059837][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.125540][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.159835][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.173820][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.186024][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.197084][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.208679][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.233710][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.253654][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.262069][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.272085][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.286428][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.330896][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.338904][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.347483][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.356371][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.381475][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.390850][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.398948][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.407642][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.416162][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.425509][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.450100][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.505011][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.541840][ T8786] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010281, chksum : 0x636f305d, utbl_chksum : 0xe619d30d)
[  178.554355][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.562690][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.571752][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.579281][ T8788] EXT4-fs (loop1): Ignoring removed oldalloc option
[  178.588745][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.623238][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.644366][ T8788] EXT4-fs (loop1): 1 truncate cleaned up
[  178.644680][ T8776] JBD2: Ignoring recovery information on journal
[  178.654598][ T8788] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback.
[  178.694775][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.694839][ T8776] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  178.714044][ T8776] JBD2: bad block at offset 32
[  178.737628][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.758724][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.769684][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.777564][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.787728][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.795678][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.810180][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.818045][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.837382][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.845594][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.853978][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.862361][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.870378][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.878708][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.886788][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.895250][ T8796] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  178.906879][ T8739] NILFS (loop2): nilfs_sufile_do_free: segment 0 is already clean
[  178.928878][ T8776] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  179.057102][ T4198] ocfs2: Unmounting device (7,4) on (node local)
[  179.131144][ T8802] set_capacity_and_notify: 4 callbacks suppressed
[  179.131161][ T8802] loop5: detected capacity change from 0 to 512
[  179.236969][ T8802] EXT4-fs (loop5): orphan cleanup on readonly fs
[  179.289265][ T8802] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[  179.402133][ T8802] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  179.450284][ T8802] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.1763: Failed to acquire dquot type 1
[  179.557204][ T8802] EXT4-fs (loop5): 1 truncate cleaned up
[  179.585053][ T8802] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback.
[  179.659253][ T8802] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  179.694892][ T8802] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 8
[  179.740568][ T8835] usb usb8: usbfs: process 8835 (syz.4.1778) did not claim interface 0 before use
[  179.807258][ T8833] loop3: detected capacity change from 0 to 4096
[  179.993195][ T8846] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.024990][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean
[  180.069093][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 13 is already clean
[  180.118960][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.149955][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.170012][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.234419][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.270106][ T8856] loop1: detected capacity change from 0 to 1024
[  180.272343][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.344355][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.384576][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.398526][ T4240] hfsplus: b-tree write err: -5, ino 25
[  180.407143][ T4240] hfsplus: b-tree write err: -5, ino 4
[  180.424382][ T4240] hfsplus: b-tree write err: -5, ino 2
[  180.430702][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.458887][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.488809][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.498631][ T8863] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  180.533456][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.589847][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.619820][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.633629][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.650513][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.694791][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.734883][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.780111][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.801991][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.819408][ T8840] loop4: detected capacity change from 0 to 32768
[  180.835613][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.866193][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.876278][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.894447][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.958147][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.991041][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  180.998898][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.016365][ T8840] XFS (loop4): Mounting V5 Filesystem
[  181.056479][ T8898] loop5: detected capacity change from 0 to 1024
[  181.126336][ T8840] XFS (loop4): Ending clean mount
[  181.129485][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.132655][ T5662] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 
[  181.139204][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.139226][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.139244][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.139258][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.152983][ T5662] XFS (loop4): Unmount and run xfs_repair
[  181.189946][ T5662] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  181.198099][ T5662] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  181.207477][ T5662] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  181.216403][ T5662] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  181.225372][ T5662] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  181.234631][ T5662] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  181.250041][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.258339][ T5662] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  181.272408][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.299093][ T5662] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  181.314985][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.323193][    T9] hfsplus: b-tree write err: -5, ino 25
[  181.323384][    T9] hfsplus: b-tree write err: -5, ino 4
[  181.339142][ T5662] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  181.348843][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.370084][ T8840] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74
[  181.376472][    T9] hfsplus: b-tree write err: -5, ino 2
[  181.398239][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.406753][ T8840] XFS (loop4): Failed to initialize disk quotas.
[  181.440026][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.447883][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.506488][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.566455][ T8909] loop5: detected capacity change from 0 to 1024
[  181.577405][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.593179][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.603983][ T4198] XFS (loop4): Unmounting Filesystem
[  181.616702][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.680735][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.688594][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.769042][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.819023][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.842731][ T4246] hfsplus: b-tree write err: -5, ino 25
[  181.858616][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.868173][ T4246] hfsplus: b-tree write err: -5, ino 4
[  181.896251][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'.
[  181.905707][ T4246] hfsplus: b-tree write err: -5, ino 2
[  181.913308][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.922493][ T4246] hfsplus: b-tree write err: -5, ino 26
[  181.928200][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.938206][ T8919] netlink: 'syz.2.1816': attribute type 21 has an invalid length.
[  181.951308][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.960195][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.963860][ T8919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1816'.
[  181.968025][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.968047][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  181.968061][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.034839][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.060250][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.124865][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.130859][ T8923] loop5: detected capacity change from 0 to 256
[  182.169498][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.177353][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.186080][ T8923] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22de60d6, utbl_chksum : 0xe619d30d)
[  182.228672][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.267177][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.297605][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.334238][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.360708][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.378830][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.422023][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.458980][ T8915] loop1: detected capacity change from 0 to 32768
[  182.504173][ T8930] loop4: detected capacity change from 0 to 256
[  182.505232][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.548714][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.616814][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.617100][ T8933] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1821'.
[  182.642188][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.687614][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.749840][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.757698][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.775528][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.790150][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.798028][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.840163][ T8941] loop4: detected capacity change from 0 to 256
[  182.900549][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.952588][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.982018][ T8833] NILFS (loop3): nilfs_sufile_do_free: segment 0 is already clean
[  182.994879][ T8946] EXT4-fs (loop5): Test dummy encryption mode enabled
[  183.057012][ T8946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  183.069333][ T8946] System zones: 1-3, 19-19, 35-36
[  183.121646][ T8946] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  183.141546][ T8946] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.528758][ T8967] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1836'.
[  183.625225][ T8943] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1825 (8943)
[  183.735490][ T8943] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  183.769506][ T8943] BTRFS info (device loop2): enabling auto defrag
[  183.801727][ T8943] BTRFS info (device loop2): force clearing of disk cache
[  183.837376][ T8943] BTRFS info (device loop2): ignoring data csums
[  183.879482][ T8943] BTRFS info (device loop2): turning on async discard
[  183.906302][ T8943] BTRFS info (device loop2): setting nodatacow, compression disabled
[  183.928035][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  183.957782][ T8943] BTRFS info (device loop2): turning off async discard
[  184.000158][ T8943] BTRFS info (device loop2): disabling free space tree
[  184.007067][ T8943] BTRFS info (device loop2): has skinny extents
[  184.188146][ T8996] mkiss: ax0: crc mode is auto.
[  184.410880][ T8984] set_capacity_and_notify: 3 callbacks suppressed
[  184.410896][ T8984] loop3: detected capacity change from 0 to 32768
[  184.746907][ T9036] device vlan3 entered promiscuous mode
[  184.758622][ T9036] device macvlan1 entered promiscuous mode
[  184.891546][ T8984] XFS (loop3): Mounting V5 Filesystem
[  185.029011][ T8984] XFS (loop3): Ending clean mount
[  185.136028][ T8984] XFS (loop3): Quotacheck needed: Please wait.
[  185.168435][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1864'.
[  185.249805][ T8984] XFS (loop3): Quotacheck: Done.
[  185.333096][ T4193] XFS (loop3): Unmounting Filesystem
[  185.407548][ T9066] loop2: detected capacity change from 0 to 164
[  185.538539][ T9073] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  185.557160][ T9071] loop5: detected capacity change from 0 to 4096
[  185.708411][ T9075] loop4: detected capacity change from 0 to 256
[  185.780750][ T4366] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  185.790174][ T4366] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  185.840802][ T9075] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  186.009597][ T1107] Bluetooth: hci2: command 0x0406 tx timeout
[  186.180704][ T9086] loop2: detected capacity change from 0 to 2048
[  186.252064][ T9069] loop1: detected capacity change from 0 to 32768
[  186.366875][ T9086] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  186.798947][ T9093] loop3: detected capacity change from 0 to 32768
[  186.864217][ T9093] read_mapping_page failed!
[  186.874894][ T9093] ERROR: (device loop3): txCommit: 
[  186.874894][ T9093] 
[  186.881751][ T9089] loop4: detected capacity change from 0 to 40427
[  186.961495][ T4193] ERROR: (device loop3): diFree: numfree > numinos
[  186.961495][ T4193] 
[  186.972665][ T9089] F2FS-fs (loop4): invalid crc value
[  186.977928][ T9108] loop2: detected capacity change from 0 to 1024
[  186.985196][ T4232] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  187.048797][ T9089] F2FS-fs (loop4): Found nat_bits in checkpoint
[  187.161838][ T9089] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  187.162264][    T9] hfsplus: b-tree write err: -5, ino 25
[  187.214708][    T9] hfsplus: b-tree write err: -5, ino 4
[  187.222528][    T9] hfsplus: b-tree write err: -5, ino 2
[  187.228085][    T9] hfsplus: b-tree write err: -5, ino 26
[  187.259033][ T4198] attempt to access beyond end of device
[  187.259033][ T4198] loop4: rw=2049, want=45104, limit=40427
[  187.289533][ T4232] usb 2-1: Using ep0 maxpacket: 32
[  187.429802][ T4232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  187.463001][ T4232] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  187.473168][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.508404][ T4232] usb 2-1: config 0 descriptor??
[  187.844697][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1894'.
[  187.980278][ T4232] hid (null): bogus close delimiter
[  187.987958][ T4232] elecom 0003:056E:00E6.0019: unknown main item tag 0x2
[  188.005240][ T4232] elecom 0003:056E:00E6.0019: bogus close delimiter
[  188.022361][ T4232] elecom 0003:056E:00E6.0019: item 0 0 2 10 parsing failed
[  188.038084][ T9146] batman_adv: batadv0: Adding interface: gretap1
[  188.040005][ T4232] elecom: probe of 0003:056E:00E6.0019 failed with error -22
[  188.058214][ T9146] batman_adv: batadv0: Interface activated: gretap1
[  188.094306][ T9148] loop4: detected capacity change from 0 to 256
[  188.177655][ T9148] FAT-fs (loop4): Directory bread(block 64) failed
[  188.184770][ T4232] usb 2-1: USB disconnect, device number 13
[  188.233606][ T9148] FAT-fs (loop4): Directory bread(block 65) failed
[  188.254448][ T9148] FAT-fs (loop4): Directory bread(block 66) failed
[  188.267808][ T9148] FAT-fs (loop4): Directory bread(block 67) failed
[  188.276193][ T9148] FAT-fs (loop4): Directory bread(block 68) failed
[  188.316505][ T9148] FAT-fs (loop4): Directory bread(block 69) failed
[  188.338599][ T9148] FAT-fs (loop4): Directory bread(block 70) failed
[  188.345574][ T9148] FAT-fs (loop4): Directory bread(block 71) failed
[  188.362203][ T9148] FAT-fs (loop4): Directory bread(block 72) failed
[  188.369326][ T9148] FAT-fs (loop4): Directory bread(block 73) failed
[  188.556787][ T9130] XFS (loop2): Mounting V5 Filesystem
[  188.658740][ T9130] XFS (loop2): Ending clean mount
[  188.658942][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1914'.
[  188.780120][ T9142] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  188.816068][ T4200] XFS (loop2): Unmounting Filesystem
[  188.945169][ T9188] sp0: Synchronizing with TNC
[  188.967880][ T4366] XFS (loop5): Unmounting Filesystem
[  189.627651][ T9220] netlink: 'syz.2.1917': attribute type 1 has an invalid length.
[  189.740095][ T4227] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  190.110091][ T4227] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  190.118170][ T4227] usb 4-1: config 0 has no interface number 0
[  190.208719][ T9222] set_capacity_and_notify: 2 callbacks suppressed
[  190.208736][ T9222] loop1: detected capacity change from 0 to 32768
[  190.224438][ T4232] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  190.310255][ T4227] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  190.320778][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.333074][ T9225] loop4: detected capacity change from 0 to 32768
[  190.339988][ T4227] usb 4-1: Product: syz
[  190.344268][ T4227] usb 4-1: Manufacturer: syz
[  190.348870][ T4227] usb 4-1: SerialNumber: syz
[  190.387663][ T4227] usb 4-1: config 0 descriptor??
[  190.397574][ T9225] ialloc: diAlloc returned -5!
[  190.441813][ T4227] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  190.450981][ T4227] usb 4-1: selecting invalid altsetting 1
[  190.456700][ T4227] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  190.468419][ T4227] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  190.519577][ T4232] usb 6-1: Using ep0 maxpacket: 32
[  190.530061][ T5019] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  190.592871][ T9251] loop4: detected capacity change from 0 to 2048
[  190.644006][ T9210] usb 4-1: dvb_usb_ce6230: I2C read not implemented
[  190.684985][ T4232] usb 6-1: config 4 has an invalid interface number: 196 but max is 0
[  190.700244][ T4227] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  190.713597][ T4232] usb 6-1: config 4 has no interface number 0
[  190.729988][ T4227] usb 4-1: USB disconnect, device number 16
[  190.733861][ T4232] usb 6-1: config 4 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  190.741096][ T9251] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  190.766653][ T4232] usb 6-1: config 4 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  190.786981][ T4232] usb 6-1: config 4 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  190.789981][ T5019] usb 3-1: Using ep0 maxpacket: 32
[  190.799127][ T4232] usb 6-1: config 4 interface 196 has no altsetting 0
[  190.950509][ T5019] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.962465][ T5019] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.979871][ T4232] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  190.984004][ T5019] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.988924][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[  191.016100][ T4232] usb 6-1: Product: syz
[  191.024055][ T4232] usb 6-1: Manufacturer: syz
[  191.028750][ T4232] usb 6-1: SerialNumber: syz
[  191.059848][ T9235] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  191.160044][ T5019] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  191.169268][ T5019] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  191.177982][ T5019] usb 3-1: Product: syz
[  191.183487][ T5019] usb 3-1: Manufacturer: syz
[  191.188100][ T5019] usb 3-1: SerialNumber: syz
[  191.248499][ T5019] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input18
[  191.472696][ T1107] usb 3-1: USB disconnect, device number 6
[  191.489723][ T4232] ipheth 6-1:4.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  191.506555][ T9272] loop4: detected capacity change from 0 to 256
[  191.508659][ T4232] ipheth: probe of 6-1:4.196 failed with error -22
[  191.526365][ T9272] exfat: Deprecated parameter 'utf8'
[  191.562983][ T1107] appletouch 3-1:1.0: input: appletouch disconnected
[  191.567360][ T9272] exfat: Deprecated parameter 'utf8'
[  191.616263][ T9272] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  191.637069][ T9266] loop3: detected capacity change from 0 to 32768
[  191.747498][ T9266] JBD2: Ignoring recovery information on journal
[  191.779404][ T9266] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75
[  191.800136][ T9266] JBD2: bad block at offset 32
[  191.817925][ T4230] usb 6-1: USB disconnect, device number 10
[  191.862909][ T9266] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  192.024048][ T4193] ocfs2: Unmounting device (7,3) on (node local)
[  192.302611][ T9291] mkiss: ax0: crc mode is auto.
[  192.397996][ T9280] loop4: detected capacity change from 0 to 32768
[  192.489149][ T9304] program syz.1.1971 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  192.617895][ T9310] damon: kdamond (9310) starts
[  192.834382][ T9325] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  192.865298][ T9328] vivid-002: disconnect
[  192.881420][ T9325] team0: Device macvlan2 is already an upper device of the team interface
[  192.905732][ T9326] vivid-002: reconnect
[  192.912638][ T9329] loop2: detected capacity change from 0 to 1024
[  192.992177][ T9329] hfsplus: bad catalog entry type
[  193.063124][    T9] hfsplus: b-tree write err: -5, ino 25
[  193.078885][    T9] hfsplus: b-tree write err: -5, ino 4
[  193.100037][    T9] hfsplus: b-tree write err: -5, ino 2
[  193.338177][ T9348] netlink: 'syz.1.1990': attribute type 2 has an invalid length.
[  193.367551][ T9350] netlink: 'syz.4.1993': attribute type 2 has an invalid length.
[  193.405024][ T9353] loop5: detected capacity change from 0 to 256
[  193.432317][ T9353] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  193.582441][ T9362] loop3: detected capacity change from 0 to 64
[  193.752059][ T9362] attempt to access beyond end of device
[  193.752059][ T9362] loop3: rw=2049, want=268435470, limit=64
[  193.791547][ T9368] loop1: detected capacity change from 0 to 2048
[  193.803716][ T9362] Buffer I/O error on dev loop3, logical block 134217734, lost async page write
[  193.827030][ T9370] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  193.846673][ T9370] team0: Device macvlan2 is already an upper device of the team interface
[  193.898271][ T9368] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  194.171574][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.177945][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.232352][ T4230] kernel write not supported for file /sg0 (pid: 4230 comm: kworker/0:6)
[  194.467409][ T9391] sp0: Synchronizing with TNC
[  194.819982][ T5019] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  194.923482][ T9414] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  194.959765][ T9414] team0: Device macvlan2 is already an upper device of the team interface
[  195.069841][ T5019] usb 3-1: Using ep0 maxpacket: 16
[  195.189703][ T5019] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  195.218742][ T9404] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2026 (9404)
[  195.345116][ T9404] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  195.385800][ T9404] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  195.406186][ T5019] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  195.427969][ T5019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.442654][ T9404] BTRFS info (device loop3): use zstd compression, level 3
[  195.452571][ T9428] set_capacity_and_notify: 2 callbacks suppressed
[  195.452586][ T9428] loop5: detected capacity change from 0 to 256
[  195.454879][ T5019] usb 3-1: Product: syz
[  195.479049][ T9404] BTRFS info (device loop3): using free space tree
[  195.500032][ T9404] BTRFS info (device loop3): has skinny extents
[  195.506554][ T5019] usb 3-1: Manufacturer: syz
[  195.511537][ T5019] usb 3-1: SerialNumber: syz
[  195.520907][ T5019] r8152-cfgselector 3-1: config 0 descriptor??
[  195.679315][ T9404] BTRFS info (device loop3): enabling ssd optimizations
[  195.779937][ T5019] r8152-cfgselector 3-1: Unknown version 0x0000
[  195.871665][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2031'.
[  195.925877][ T9455] loop5: detected capacity change from 0 to 2048
[  196.011802][ T9455] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  196.023889][ T5019] r8152-cfgselector 3-1: Unknown version 0x0000
[  196.033038][ T9455] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.042717][ T5019] r8152-cfgselector 3-1: USB disconnect, device number 7
[  196.106656][ T9426] loop4: detected capacity change from 0 to 32768
[  196.198812][ T9455] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.2032: corrupted xattr block 128
[  196.360142][ T9455] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.2032: corrupted xattr block 128
[  196.473353][ T9466] loop1: detected capacity change from 0 to 256
[  196.497735][ T9455] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2032: bg 0: block 345: padding at end of block bitmap is not set
[  196.564671][ T9455] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  196.681704][ T9466] FAT-fs (loop1): Directory bread(block 64) failed
[  196.688322][ T9466] FAT-fs (loop1): Directory bread(block 65) failed
[  196.723248][ T9466] FAT-fs (loop1): Directory bread(block 66) failed
[  196.779988][ T9466] FAT-fs (loop1): Directory bread(block 67) failed
[  196.786686][ T9466] FAT-fs (loop1): Directory bread(block 68) failed
[  196.815901][ T9470] atomic_op ffff88802aed1198 conn xmit_atomic 0000000000000000
[  196.822026][ T9466] FAT-fs (loop1): Directory bread(block 69) failed
[  196.893790][ T9466] FAT-fs (loop1): Directory bread(block 70) failed
[  196.935543][ T9466] FAT-fs (loop1): Directory bread(block 71) failed
[  196.998088][ T9466] FAT-fs (loop1): Directory bread(block 72) failed
[  197.019831][ T9466] FAT-fs (loop1): Directory bread(block 73) failed
[  197.227281][ T9484] loop2: detected capacity change from 0 to 1024
[  197.238628][ T9486] loop4: detected capacity change from 0 to 8
[  197.375780][ T9488] loop1: detected capacity change from 0 to 256
[  197.471315][  T154] hfsplus: b-tree write err: -5, ino 25
[  197.477551][  T154] hfsplus: b-tree write err: -5, ino 4
[  197.488966][ T9488] FAT-fs (loop1): Directory bread(block 64) failed
[  197.504926][ T9488] FAT-fs (loop1): Directory bread(block 65) failed
[  197.523603][  T154] hfsplus: b-tree write err: -5, ino 2
[  197.544867][ T9488] FAT-fs (loop1): Directory bread(block 66) failed
[  197.569852][ T9488] FAT-fs (loop1): Directory bread(block 67) failed
[  197.629929][ T9488] FAT-fs (loop1): Directory bread(block 68) failed
[  197.650194][ T9488] FAT-fs (loop1): Directory bread(block 69) failed
[  197.656853][ T9488] FAT-fs (loop1): Directory bread(block 70) failed
[  197.718843][ T9496] loop3: detected capacity change from 0 to 64
[  197.769536][ T9488] FAT-fs (loop1): Directory bread(block 71) failed
[  197.776395][ T9488] FAT-fs (loop1): Directory bread(block 72) failed
[  197.829522][ T9488] FAT-fs (loop1): Directory bread(block 73) failed
[  197.838800][ T9498] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2050'.
[  198.280722][ T9513] loop5: detected capacity change from 0 to 256
[  198.332655][ T9513] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  198.631913][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'.
[  198.664278][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'.
[  198.687794][   T25] audit: type=1326 audit(1778664347.619:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9535 comm="syz.3.2067" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2c2c95e59 code=0x0
[  198.693309][ T9533] netlink: 'syz.2.2065': attribute type 14 has an invalid length.
[  198.985404][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2071'.
[  199.085460][ T9552] loop4: detected capacity change from 0 to 512
[  199.291789][ T9552] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  199.306696][ T9552] EXT4-fs (loop4): orphan cleanup on readonly fs
[  199.329005][ T9552] Quota error (device loop4): v2_read_file_info: Free block number too big (8 >= 6).
[  199.426861][ T9552] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  199.443771][ T9552] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  199.451136][ T9552] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.2075: bad orphan inode 67108864
[  199.460621][ T9560] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  199.491211][ T9552] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  199.563415][ T9529] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  199.688373][ T9560] ntfs: volume version 3.1.
[  199.739200][ T4188] XFS (loop1): Unmounting Filesystem
[  200.052526][ T4501] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  200.392283][ T9558] XFS (loop2): Mounting V5 Filesystem
[  200.591234][ T9574] XFS (loop3): Mounting V5 Filesystem
[  200.599923][ T9558] XFS (loop2): Ending clean mount
[  200.807200][ T9574] XFS (loop3): Ending clean mount
[  200.846319][ T9590] set_capacity_and_notify: 5 callbacks suppressed
[  200.846333][ T9590] loop4: detected capacity change from 0 to 32768
[  200.885753][ T4200] XFS (loop2): Unmounting Filesystem
[  200.916214][ T9574] XFS (loop3): Quotacheck needed: Please wait.
[  201.088205][ T9574] XFS (loop3): Quotacheck: Done.
[  201.260308][ T4193] XFS (loop3): Unmounting Filesystem
[  201.656278][ T9618] loop5: detected capacity change from 0 to 32768
[  201.788646][ T9618] XFS (loop5): Mounting V5 Filesystem
[  201.867784][ T9618] XFS (loop5): Ending clean mount
[  201.936477][ T9618] XFS (loop5): Quotacheck needed: Please wait.
[  202.024050][ T9656] loop3: detected capacity change from 0 to 1024
[  202.083690][ T9661] device veth0_to_team entered promiscuous mode
[  202.214885][ T9618] XFS (loop5): Quotacheck: Done.
[  202.261818][   T25] audit: type=1800 audit(1778664351.199:119): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2094" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  202.319803][  T154] hfsplus: b-tree write err: -5, ino 25
[  202.325584][  T154] hfsplus: b-tree write err: -5, ino 4
[  202.337288][ T9670] loop2: detected capacity change from 0 to 1024
[  202.347332][  T154] hfsplus: b-tree write err: -5, ino 2
[  202.347961][ T4366] XFS (loop5): Unmounting Filesystem
[  202.365722][ T9672] loop1: detected capacity change from 0 to 16
[  202.425612][ T9672] erofs: (device loop1): mounted with root inode @ nid 36.
[  202.506416][ T9670] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,nodioread_nolock,max_batch_time=0x00000000000012fb,journal_dev=0x0000000000000fff,delalloc,grpjquota=,,errors=continue. Quota mode: none.
[  202.529768][ T9670] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.617484][ T9682] loop3: detected capacity change from 0 to 2048
[  202.687573][ T9670] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 2: comm syz.2.2113: lblock 2 mapped to illegal pblock 2 (length 4)
[  202.911471][ T9682] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  203.444677][ T9728] device bridge0 entered promiscuous mode
[  203.475406][ T9728] device macvlan2 entered promiscuous mode
[  203.494548][ T9733] loop5: detected capacity change from 0 to 128
[  203.513518][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'.
[  203.567962][ T9733] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  203.589696][ T9733] hpfs: filesystem error: improperly stopped
[  203.600410][ T9733] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  203.622477][ T9733] hpfs: You really don't want any checks? You are crazy...
[  203.648958][ T9733] hpfs: hpfs_map_sector(): read error
[  203.662446][ T9746] fuse: Bad value for 'fd'
[  203.689102][ T9733] hpfs: code page support is disabled
[  203.711968][ T9733] hpfs: hpfs_map_4sectors(): unaligned read
[  203.738726][ T9733] hpfs: hpfs_map_4sectors(): unaligned read
[  203.746353][ T9733] hpfs: filesystem error: unable to find root dir
[  203.753303][ T9749] loop1: detected capacity change from 0 to 2048
[  203.786623][ T9751] loop4: detected capacity change from 0 to 2048
[  203.864995][ T9751] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,jqfmt=vfsv1,noquota,grpid,,errors=continue. Quota mode: none.
[  203.896419][ T9749] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  203.952351][ T9749] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.026353][ T9749] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.2149: corrupted xattr block 128
[  204.051009][ T9749] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.2149: corrupted xattr block 128
[  204.064305][ T9749] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2149: bg 0: block 345: padding at end of block bitmap is not set
[  204.084359][ T9749] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  204.204785][ T9775] loop5: detected capacity change from 0 to 1024
[  204.268363][ T9783] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) !
[  204.347321][    T9] hfsplus: b-tree write err: -5, ino 25
[  204.361346][    T9] hfsplus: b-tree write err: -5, ino 4
[  204.366928][    T9] hfsplus: b-tree write err: -5, ino 2
[  204.403000][    T9] hfsplus: b-tree write err: -5, ino 26
[  204.569160][ T9794] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 2: comm syz.5.2169: lblock 2 mapped to illegal pblock 2 (length 1)
[  204.599143][ T9794] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  204.619927][ T9794] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 48: comm syz.5.2169: lblock 0 mapped to illegal pblock 48 (length 1)
[  204.665587][ T9794] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  204.698509][ T9794] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.2169: Failed to acquire dquot type 0
[  204.735186][ T9794] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  204.796545][ T9794] EXT4-fs error (device loop5): ext4_evict_inode:284: inode #11: comm syz.5.2169: mark_inode_dirty error
[  204.829311][ T9794] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  204.855975][ T9794] EXT4-fs (loop5): 1 orphan inode deleted
[  204.870248][ T4501] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  204.899940][ T9794] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none.
[  204.924936][ T4230] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  204.945989][ T9813] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  204.975129][ T4501] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  204.977125][ T9794] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.2169: Invalid inode table block 1 in block_group 0
[  205.014702][ T9813] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.027753][ T4501] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0
[  205.060374][ T9813] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.2175: corrupted xattr block 128
[  205.075938][ T9813] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.2175: corrupted xattr block 128
[  205.092761][ T9813] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2175: bg 0: block 345: padding at end of block bitmap is not set
[  205.114476][ T9794] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  205.131552][   T25] audit: type=1800 audit(1778664354.069:120): pid=9827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2183" name="file1" dev="loop1" ino=20 res=0 errno=0
[  205.154691][ T9813] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  205.208769][ T1183] hfsplus: b-tree write err: -5, ino 25
[  205.231040][ T1183] hfsplus: b-tree write err: -5, ino 4
[  205.239680][   T21] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  205.257019][ T1183] hfsplus: b-tree write err: -5, ino 2
[  205.278215][ T4366] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  205.305732][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.318720][ T4366] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  205.330053][ T4230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.356782][ T9831] set match dimension is over the limit!
[  205.357665][ T4366] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  205.378109][ T4230] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  205.405104][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.437403][ T4230] usb 4-1: config 0 descriptor??
[  205.659669][   T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  205.682967][   T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  205.703358][ T9839] binder_alloc: binder_alloc_mmap_handler: 9838 200000ffe000-200001000000 already mapped failed -16
[  205.714370][   T21] usb 5-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  205.723897][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.744381][   T21] usb 5-1: config 0 descriptor??
[  205.769866][ T9829] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  205.803259][ T4460] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  205.951882][ T4230] arvo 0003:1E7D:30D4.001A: unknown main item tag 0x3
[  205.959032][ T4230] arvo 0003:1E7D:30D4.001A: item fetching failed at offset 5/7
[  205.968226][ T4230] arvo 0003:1E7D:30D4.001A: parse failed
[  205.974422][ T9851] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  205.974747][ T9851] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 4 out of range (1000000..45000000)
[  205.999392][ T4230] arvo: probe of 0003:1E7D:30D4.001A failed with error -22
[  206.154105][ T4230] usb 4-1: USB disconnect, device number 17
[  206.238691][ T9868] set_capacity_and_notify: 4 callbacks suppressed
[  206.238701][ T9868] loop1: detected capacity change from 0 to 4096
[  206.250237][   T21] hid (null): unknown global tag 0xe
[  206.257419][ T4460] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.268965][   T21] hid (null): unknown global tag 0xe
[  206.274338][   T21] hid (null): unknown global tag 0xe
[  206.280865][ T4460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.293518][   T21] wacom 0003:056A:00D8.001B: unknown main item tag 0x3
[  206.318677][ T4460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.331138][ T9869] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  206.338652][   T21] wacom 0003:056A:00D8.001B: unknown global tag 0xe
[  206.351737][ T4460] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  206.360882][   T21] wacom 0003:056A:00D8.001B: item 0 2 1 14 parsing failed
[  206.368441][   T21] wacom 0003:056A:00D8.001B: parse failed
[  206.375808][ T4460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.399481][   T21] wacom: probe of 0003:056A:00D8.001B failed with error -22
[  206.420715][ T4460] usb 3-1: config 0 descriptor??
[  206.467415][ T4230] usb 5-1: USB disconnect, device number 8
[  206.724740][ T9887] loop3: detected capacity change from 0 to 256
[  206.771147][ T9887] exfat: Deprecated parameter 'utf8'
[  206.776587][ T9887] exfat: Deprecated parameter 'namecase'
[  206.784158][ T9887] exfat: Deprecated parameter 'namecase'
[  206.825989][ T9887] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  206.892350][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2215'.
[  206.914601][ T4460] hid-rmi 0003:0461:4E72.001C: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0
[  207.095926][ T9903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2219'.
[  207.117418][ T4460] usb 3-1: USB disconnect, device number 8
[  207.124949][ T9906] loop5: detected capacity change from 0 to 1024
[  207.170566][ T9900] fido_id[9900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  207.330830][ T9906] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  207.745332][ T9923] loop5: detected capacity change from 0 to 4096
[  207.787631][ T9925] loop2: detected capacity change from 0 to 4096
[  207.796854][ T9905] loop4: detected capacity change from 0 to 40427
[  207.856532][ T9926] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.870992][ T9925] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  207.916688][ T9905] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  207.970227][ T9905] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  207.987210][ T9914] loop1: detected capacity change from 0 to 32768
[  208.010681][ T9925] ntfs: volume version 3.1.
[  208.034711][ T9905] F2FS-fs (loop4): invalid crc value
[  208.096215][ T9930] loop5: detected capacity change from 0 to 16
[  208.154802][ T9914] XFS (loop1): Mounting V5 Filesystem
[  208.172662][ T9905] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  208.189376][ T4501] ntfs: (device loop2): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  208.227172][ T9919] loop3: detected capacity change from 0 to 40427
[  208.229272][ T9930] erofs: (device loop5): mounted with root inode @ nid 36.
[  208.274495][ T9919] F2FS-fs (loop3): Invalid log blocks per segment (4278190089)
[  208.324757][ T9914] XFS (loop1): Ending clean mount
[  208.374510][ T9919] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  208.386415][ T9914] XFS (loop1): Quotacheck needed: Please wait.
[  208.484250][ T9919] F2FS-fs (loop3): invalid crc value
[  208.508150][ T9914] XFS (loop1): Quotacheck: Done.
[  208.557929][ T9905] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  208.570749][ T9919] F2FS-fs (loop3): Found nat_bits in checkpoint
[  208.605989][ T4188] XFS (loop1): Unmounting Filesystem
[  208.618421][ T9941] loop2: detected capacity change from 0 to 4096
[  208.634152][ T9905] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  208.741552][ T9941] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  208.741696][ T9919] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  208.789596][ T9919] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  208.797982][ T4198] attempt to access beyond end of device
[  208.797982][ T4198] loop4: rw=2049, want=45104, limit=40427
[  208.810073][ T1107] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  208.850808][ T9941] ntfs3: loop2: Failed to load $Extend.
[  208.916129][ T9919] F2FS-fs (loop3): Corrupted max_depth of 3: 255
[  208.937367][ T9941] ntfs3: loop2: ino=1e, "file1" fallocate(0x10) is not supported
[  208.969706][ T9919] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  209.103296][ T1107] usb 6-1: Using ep0 maxpacket: 32
[  209.389906][ T1107] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  209.398992][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.449944][ T1107] usb 6-1: Product: syz
[  209.464037][ T9962] Unable to read rock-ridge attributes
[  209.487125][ T1107] usb 6-1: Manufacturer: syz
[  209.502901][ T1107] usb 6-1: SerialNumber: syz
[  209.511221][ T9962] Unable to read rock-ridge attributes
[  209.529063][ T1107] usb 6-1: config 0 descriptor??
[  209.595565][ T1107] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  209.603939][ T1107] dvb-usb: bulk message failed: -22 (2/0)
[  209.630302][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  209.679780][ T1107] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  209.698070][ T1107] usb 6-1: media controller created
[  209.754083][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  209.773802][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2242'.
[  209.797023][ T9946] dvb-usb: bulk message failed: -22 (3/0)
[  209.875516][ T1107] usb 6-1: selecting invalid altsetting 7
[  209.882158][ T9973] EXT4-fs (loop4): inline encryption not supported
[  209.911581][ T1107] cxusb: set interface failed
[  209.914821][ T9973] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,inlinecrypt,. Quota mode: none.
[  209.916835][ T1107] dvb-usb: bulk message failed: -22 (1/0)
[  209.941844][ T9975] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2245'.
[  209.956489][ T9975] tipc: Started in network mode
[  209.963686][ T9975] tipc: Node identity 7f000001, cluster identity 4711
[  209.973036][ T9975] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  209.979653][ T9973] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.201233][ T1107] DVB: Unable to find symbol lgdt330x_attach()
[  210.207446][ T1107] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  210.368139][ T9996] netlink: 'syz.4.2252': attribute type 12 has an invalid length.
[  210.419678][ T9996] netlink: 'syz.4.2252': attribute type 29 has an invalid length.
[  210.430778][ T1107] rc_core: IR keymap rc-dvico-portable not found
[  210.437517][ T1107] Registered IR keymap rc-empty
[  210.469840][ T9994] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  210.474215][ T1107] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  210.499922][ T9996] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2252'.
[  210.549562][ T9996] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2252'.
[  210.569104][ T1107] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input19
[  210.601711][T10003] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  210.631758][ T1107] dvb-usb: schedule remote query interval to 100 msecs.
[  210.648501][ T1107] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  210.702475][ T1107] usb 6-1: USB disconnect, device number 11
[  210.779000][   T25] audit: type=1800 audit(1778664359.709:121): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2254" name="file1" dev="loop3" ino=15 res=0 errno=0
[  210.835904][ T9994] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  210.853183][ T1107] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  210.874736][   T13] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  210.888609][ T9994] Remounting filesystem read-only
[  211.075917][T10020] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  211.132818][   T13] usb 3-1: Using ep0 maxpacket: 8
[  211.304462][   T13] usb 3-1: unable to get BOS descriptor or descriptor too short
[  211.340861][T10023] hfsplus: xattr searching failed
[  211.415389][   T13] usb 3-1: config 8 has an invalid interface number: 187 but max is 0
[  211.426758][   T13] usb 3-1: config 8 has no interface number 0
[  211.438573][   T13] usb 3-1: config 8 interface 187 altsetting 72 has an invalid endpoint with address 0xEB, skipping
[  211.469685][   T13] usb 3-1: config 8 interface 187 has no altsetting 0
[  211.626353][T10044] set_capacity_and_notify: 8 callbacks suppressed
[  211.626369][T10044] loop4: detected capacity change from 0 to 1024
[  211.647375][   T13] usb 3-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=7b.bd
[  211.669768][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.675452][T10046] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2277'.
[  211.677778][   T13] usb 3-1: Product: syz
[  211.677798][   T13] usb 3-1: Manufacturer: syz
[  211.677812][   T13] usb 3-1: SerialNumber: syz
[  211.743250][T10038] loop1: detected capacity change from 0 to 8192
[  211.814908][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2279'.
[  211.882082][T10038] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  211.911188][T10038] REISERFS (device loop1): using ordered data mode
[  211.917813][T10038] reiserfs: using flush barriers
[  211.946048][T10038] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  212.036123][T10038] REISERFS (device loop1): checking transaction log (loop1)
[  212.045725][   T13] ums-sddr55 3-1:8.187: USB Mass Storage device detected
[  212.077339][T10038] REISERFS (device loop1): Using rupasov hash to sort names
[  212.132230][T10038] REISERFS (device loop1): using 3.5.x disk format
[  212.139060][T10038] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  212.145091][   T13] usb 3-1: USB disconnect, device number 9
[  212.154239][T10057] loop5: detected capacity change from 0 to 4096
[  212.209323][T10038] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  212.224834][T10038] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  212.237564][T10038] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  212.305392][T10062] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.367440][T10038] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  212.428598][T10038] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  212.724396][ T4460] Bluetooth: hci2: command 0x0405 tx timeout
[  212.779009][T10079] netlink: 'syz.1.2288': attribute type 30 has an invalid length.
[  212.807369][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2288'.
[  213.159529][ T1107] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  213.182429][T10087] loop1: detected capacity change from 0 to 32768
[  213.250580][T10087] XFS (loop1): Mounting V5 Filesystem
[  213.304517][T10087] XFS (loop1): Ending clean mount
[  213.329584][ T4232] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  213.359272][ T4188] XFS (loop1): Unmounting Filesystem
[  213.409607][ T1107] usb 6-1: Using ep0 maxpacket: 8
[  213.529787][ T1107] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  213.589723][ T4232] usb 4-1: Using ep0 maxpacket: 32
[  213.693777][T10118] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  213.729836][ T1107] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  213.739049][ T4232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.760138][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.780120][ T4232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  213.791943][ T1107] usb 6-1: Product: syz
[  213.796127][ T1107] usb 6-1: Manufacturer: syz
[  213.809798][ T1107] usb 6-1: SerialNumber: syz
[  213.821972][ T1107] usb 6-1: config 0 descriptor??
[  213.891775][ T1107] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  213.910721][ T1107] usb 6-1: setting power ON
[  213.915604][ T1107] dvb-usb: bulk message failed: -22 (2/0)
[  213.928213][T10123] loop1: detected capacity change from 0 to 256
[  213.936776][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  213.949935][ T4232] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  213.963483][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.972071][ T4232] usb 4-1: Product: syz
[  213.976453][ T4232] usb 4-1: Manufacturer: syz
[  213.992264][T10123] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  214.004865][ T1107] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  214.013519][ T4232] usb 4-1: SerialNumber: syz
[  214.018346][ T1107] usb 6-1: media controller created
[  214.053565][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  214.087074][T10083] dvb-usb: bulk message failed: -22 (3/0)
[  214.099850][T10083] dvb-usb: bulk message failed: -22 (4/0)
[  214.119057][T10083] cxusb: i2c read failed
[  214.134565][ T1107] usb 6-1: selecting invalid altsetting 6
[  214.162394][ T1107] usb 6-1: digital interface selection failed (-22)
[  214.173679][ T1107] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  214.240096][ T1107] usb 6-1: setting power OFF
[  214.245563][ T1107] dvb-usb: bulk message failed: -22 (2/0)
[  214.266759][ T1107] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  214.285580][ T1107] (NULL device *): no alternate interface
[  214.325104][ T1107] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  214.384388][ T1107] usb 6-1: USB disconnect, device number 12
[  214.451775][T10116] loop4: detected capacity change from 0 to 40427
[  214.533951][T10127] loop2: detected capacity change from 0 to 32768
[  214.573453][T10116] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  214.585115][T10116] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  214.631760][T10116] F2FS-fs (loop4): invalid crc value
[  214.661439][T10116] F2FS-fs (loop4): Found nat_bits in checkpoint
[  214.692655][T10142] 
[  214.695012][T10142] =====================================================
[  214.701940][T10142] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  214.709406][T10142] syzkaller #0 Not tainted
[  214.713816][T10142] -----------------------------------------------------
[  214.720757][T10142] syz.1.2316/10142 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  214.728477][T10142] ffffffff8c00a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xcb/0x390
[  214.737111][T10142] 
[  214.737111][T10142] and this task is already holding:
[  214.744464][T10142] ffff888022815a38 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x390
[  214.753332][T10142] which would create a new lock dependency:
[  214.759202][T10142]  (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2}
[  214.766933][T10142] 
[  214.766933][T10142] but this new dependency connects a HARDIRQ-irq-safe lock:
[  214.776366][T10142]  (&dev->event_lock#2){-.-.}-{2:2}
[  214.776394][T10142] 
[  214.776394][T10142] ... which became HARDIRQ-irq-safe at:
[  214.789261][T10142]   lock_acquire+0x19e/0x400
[  214.793853][T10142]   _raw_spin_lock_irqsave+0xb0/0x100
[  214.799213][T10142]   input_event+0x76/0xb0
[  214.803526][T10142]   psmouse_report_standard_packet+0x4f/0x200
[  214.809577][T10142]   psmouse_process_byte+0x42b/0x620
[  214.814854][T10142]   psmouse_handle_byte+0x43/0x490
[  214.819957][T10142]   psmouse_interrupt+0x699/0x1130
[  214.825062][T10142]   serio_interrupt+0x87/0x130
[  214.829811][T10142]   i8042_interrupt+0x363/0x710
[  214.834648][T10142]   __handle_irq_event_percpu+0x299/0x9d0
[  214.840358][T10142]   handle_irq_event+0xa5/0x220
[  214.845197][T10142]   handle_edge_irq+0x243/0xb20
[  214.850035][T10142]   __common_interrupt+0xd7/0x1e0
[  214.855049][T10142]   common_interrupt+0xb0/0xd0
[  214.859798][T10142]   asm_common_interrupt+0x22/0x40
[  214.864895][T10142]   _raw_spin_unlock_irqrestore+0xbc/0x120
[  214.870683][T10142]   i8042_aux_write+0x105/0x170
[  214.875521][T10142]   ps2_do_sendbyte+0x1f9/0x6f0
[  214.880364][T10142]   ps2_sendbyte+0x5b/0x110
[  214.884855][T10142]   cypress_send_ext_cmd+0x240/0x930
[  214.890124][T10142]   cypress_detect+0x8f/0x1a0
[  214.894783][T10142]   psmouse_extensions+0xc00/0x1490
[  214.899966][T10142]   psmouse_switch_protocol+0x2e1/0x840
[  214.905498][T10142]   psmouse_connect+0x9ad/0x14b0
[  214.910421][T10142]   serio_driver_probe+0x76/0x90
[  214.915341][T10142]   really_probe+0x284/0xc80
[  214.919919][T10142]   __driver_probe_device+0x18c/0x330
[  214.925274][T10142]   driver_probe_device+0x4f/0x420
[  214.930370][T10142]   __driver_attach+0x46b/0x670
[  214.935205][T10142]   bus_for_each_dev+0x182/0x1f0
[  214.940127][T10142]   serio_handle_event+0x29c/0x840
[  214.945225][T10142]   process_one_work+0x85f/0x1010
[  214.950237][T10142]   worker_thread+0xaa6/0x1290
[  214.954985][T10142]   kthread+0x436/0x520
[  214.959127][T10142]   ret_from_fork+0x1f/0x30
[  214.963617][T10142] 
[  214.963617][T10142] to a HARDIRQ-irq-unsafe lock:
[  214.970614][T10142]  (tasklist_lock){.+.+}-{2:2}
[  214.970638][T10142] 
[  214.970638][T10142] ... which became HARDIRQ-irq-unsafe at:
[  214.983236][T10142] ...
[  214.983243][T10142]   lock_acquire+0x19e/0x400
[  214.990386][T10142]   _raw_read_lock+0x32/0x40
[  214.994966][T10142]   do_wait+0x293/0xac0
[  214.999108][T10142]   kernel_wait+0xd3/0x1c0
[  215.003507][T10142]   call_usermodehelper_exec_work+0xb5/0x220
[  215.009480][T10142]   process_one_work+0x85f/0x1010
[  215.014493][T10142]   worker_thread+0xaa6/0x1290
[  215.019245][T10142]   kthread+0x436/0x520
[  215.023387][T10142]   ret_from_fork+0x1f/0x30
[  215.027877][T10142] 
[  215.027877][T10142] other info that might help us debug this:
[  215.027877][T10142] 
[  215.038099][T10142] Chain exists of:
[  215.038099][T10142]   &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock
[  215.038099][T10142] 
[  215.051301][T10142]  Possible interrupt unsafe locking scenario:
[  215.051301][T10142] 
[  215.059600][T10142]        CPU0                    CPU1
[  215.064946][T10142]        ----                    ----
[  215.070292][T10142]   lock(tasklist_lock);
[  215.074521][T10142]                                local_irq_disable();
[  215.081254][T10142]                                lock(&dev->event_lock#2);
[  215.088438][T10142]                                lock(&f->f_owner.lock);
[  215.095443][T10142]   <Interrupt>
[  215.098877][T10142]     lock(&dev->event_lock#2);
[  215.103715][T10142] 
[  215.103715][T10142]  *** DEADLOCK ***
[  215.103715][T10142] 
[  215.111834][T10142] 2 locks held by syz.1.2316/10142:
[  215.117011][T10142]  #0: ffff88807ae37e90 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x353/0x800
[  215.125527][T10142]  #1: ffff888022815a38 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x390
[  215.134823][T10142] 
[  215.134823][T10142] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  215.145224][T10142]    -> (&dev->event_lock#2){-.-.}-{2:2} {
[  215.151035][T10142]       IN-HARDIRQ-W at:
[  215.155259][T10142]                           lock_acquire+0x19e/0x400
[  215.161924][T10142]                           _raw_spin_lock_irqsave+0xb0/0x100
[  215.169367][T10142]                           input_event+0x76/0xb0
[  215.175768][T10142]                           psmouse_report_standard_packet+0x4f/0x200
[  215.183912][T10142]                           psmouse_process_byte+0x42b/0x620
[  215.191270][T10142]                           psmouse_handle_byte+0x43/0x490
[  215.198451][T10142]                           psmouse_interrupt+0x699/0x1130
[  215.205632][T10142]                           serio_interrupt+0x87/0x130
[  215.212466][T10142]                           i8042_interrupt+0x363/0x710
[  215.219387][T10142]                           __handle_irq_event_percpu+0x299/0x9d0
[  215.227181][T10142]                           handle_irq_event+0xa5/0x220
[  215.234103][T10142]                           handle_edge_irq+0x243/0xb20
[  215.241024][T10142]                           __common_interrupt+0xd7/0x1e0
[  215.248116][T10142]                           common_interrupt+0xb0/0xd0
[  215.254953][T10142]                           asm_common_interrupt+0x22/0x40
[  215.262131][T10142]                           _raw_spin_unlock_irqrestore+0xbc/0x120
[  215.270005][T10142]                           i8042_aux_write+0x105/0x170
[  215.276927][T10142]                           ps2_do_sendbyte+0x1f9/0x6f0
[  215.283851][T10142]                           ps2_sendbyte+0x5b/0x110
[  215.290427][T10142]                           cypress_send_ext_cmd+0x240/0x930
[  215.297785][T10142]                           cypress_detect+0x8f/0x1a0
[  215.304532][T10142]                           psmouse_extensions+0xc00/0x1490
[  215.311805][T10142]                           psmouse_switch_protocol+0x2e1/0x840
[  215.319420][T10142]                           psmouse_connect+0x9ad/0x14b0
[  215.326433][T10142]                           serio_driver_probe+0x76/0x90
[  215.333443][T10142]                           really_probe+0x284/0xc80
[  215.340104][T10142]                           __driver_probe_device+0x18c/0x330
[  215.347546][T10142]                           driver_probe_device+0x4f/0x420
[  215.354727][T10142]                           __driver_attach+0x46b/0x670
[  215.361647][T10142]                           bus_for_each_dev+0x182/0x1f0
[  215.368658][T10142]                           serio_handle_event+0x29c/0x840
[  215.375843][T10142]                           process_one_work+0x85f/0x1010
[  215.382949][T10142]                           worker_thread+0xaa6/0x1290
[  215.389779][T10142]                           kthread+0x436/0x520
[  215.396003][T10142]                           ret_from_fork+0x1f/0x30
[  215.402579][T10142]       IN-SOFTIRQ-W at:
[  215.406805][T10142]                           lock_acquire+0x19e/0x400
[  215.413466][T10142]                           _raw_spin_lock_irqsave+0xb0/0x100
[  215.420906][T10142]                           input_inject_event+0x9e/0x2c0
[  215.428002][T10142]                           led_trigger_event+0x10a/0x1e0
[  215.435095][T10142]                           kbd_bh+0x195/0x2a0
[  215.441236][T10142]                           tasklet_action_common+0x2ad/0x410
[  215.448770][T10142]                           handle_softirqs+0x339/0x830
[  215.455691][T10142]                           __irq_exit_rcu+0x13b/0x230
[  215.462521][T10142]                           irq_exit_rcu+0x5/0x20
[  215.468917][T10142]                           sysvec_apic_timer_interrupt+0xa0/0xc0
[  215.476709][T10142]                           asm_sysvec_apic_timer_interrupt+0x16/0x20
[  215.484866][T10142]                           _raw_spin_unlock_irqrestore+0xbc/0x120
[  215.492750][T10142]                           do_con_write+0x449c/0x6b10
[  215.499585][T10142]                           con_write+0x1f/0x40
[  215.505812][T10142]                           n_tty_write+0xd2e/0x1210
[  215.512471][T10142]                           file_tty_write+0x557/0x910
[  215.519305][T10142]                           vfs_write+0x745/0xd60
[  215.525705][T10142]                           ksys_write+0x152/0x260
[  215.532187][T10142]                           do_syscall_64+0x4c/0xa0
[  215.538758][T10142]                           entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  215.546810][T10142]       INITIAL USE at:
[  215.550948][T10142]                          lock_acquire+0x19e/0x400
[  215.557523][T10142]                          _raw_spin_lock_irqsave+0xb0/0x100
[  215.564881][T10142]                          input_inject_event+0x9e/0x2c0
[  215.571889][T10142]                          led_trigger_event+0x10a/0x1e0
[  215.578896][T10142]                          kbd_led_trigger_activate+0xb9/0x100
[  215.586428][T10142]                          led_trigger_set+0x50c/0x910
[  215.593266][T10142]                          led_trigger_set_default+0x19c/0x1e0
[  215.600792][T10142]                          led_classdev_register_ext+0x6df/0x8c0
[  215.608495][T10142]                          input_leds_connect+0x51d/0x750
[  215.615588][T10142]                          input_register_device+0xda7/0x1140
[  215.623032][T10142]                          atkbd_connect+0x766/0xa20
[  215.629696][T10142]                          serio_driver_probe+0x76/0x90
[  215.636613][T10142]                          really_probe+0x284/0xc80
[  215.643187][T10142]                          __driver_probe_device+0x18c/0x330
[  215.650541][T10142]                          driver_probe_device+0x4f/0x420
[  215.657632][T10142]                          __driver_attach+0x46b/0x670
[  215.664461][T10142]                          bus_for_each_dev+0x182/0x1f0
[  215.671383][T10142]                          serio_handle_event+0x29c/0x840
[  215.678478][T10142]                          process_one_work+0x85f/0x1010
[  215.685484][T10142]                          worker_thread+0xaa6/0x1290
[  215.692232][T10142]                          kthread+0x436/0x520
[  215.698372][T10142]                          ret_from_fork+0x1f/0x30
[  215.704870][T10142]     }
[  215.707617][T10142]     ... key      at: [<ffffffff9663f0c0>] input_allocate_device.__key.6+0x0/0x20
[  215.716893][T10142]   -> (&client->buffer_lock){....}-{2:2} {
[  215.722788][T10142]      INITIAL USE at:
[  215.726837][T10142]                        lock_acquire+0x19e/0x400
[  215.733245][T10142]                        _raw_spin_lock+0x2a/0x40
[  215.739644][T10142]                        evdev_pass_values+0xcb/0xab0
[  215.746401][T10142]                        evdev_events+0x1c0/0x2f0
[  215.752811][T10142]                        input_pass_values+0x87e/0x1210
[  215.759735][T10142]                        input_handle_event+0xb3f/0x1490
[  215.766747][T10142]                        input_inject_event+0x1b9/0x2c0
[  215.773673][T10142]                        evdev_write+0x35b/0x490
[  215.779990][T10142]                        vfs_write+0x30b/0xd60
[  215.786128][T10142]                        ksys_write+0x152/0x260
[  215.792352][T10142]                        do_syscall_64+0x4c/0xa0
[  215.798663][T10142]                        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  215.806465][T10142]    }
[  215.809130][T10142]    ... key      at: [<ffffffff9663f380>] evdev_open.__key.22+0x0/0x20
[  215.817452][T10142]    ... acquired at:
[  215.821414][T10142]    _raw_spin_lock+0x2a/0x40
[  215.826081][T10142]    evdev_pass_values+0xcb/0xab0
[  215.831097][T10142]    evdev_events+0x1c0/0x2f0
[  215.835758][T10142]    input_pass_values+0x87e/0x1210
[  215.840950][T10142]    input_handle_event+0xb3f/0x1490
[  215.846236][T10142]    input_inject_event+0x1b9/0x2c0
[  215.851424][T10142]    evdev_write+0x35b/0x490
[  215.856006][T10142]    vfs_write+0x30b/0xd60
[  215.860414][T10142]    ksys_write+0x152/0x260
[  215.864904][T10142]    do_syscall_64+0x4c/0xa0
[  215.869488][T10142]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  215.875539][T10142] 
[  215.877843][T10142]  -> (&new->fa_lock){....}-{2:2} {
[  215.883040][T10142]     INITIAL USE at:
[  215.886999][T10142]                      lock_acquire+0x19e/0x400
[  215.893227][T10142]                      _raw_write_lock_irq+0xab/0xf0
[  215.899885][T10142]                      fasync_remove_entry+0xf0/0x1c0
[  215.906638][T10142]                      pipe_fasync+0x107/0x1f0
[  215.912776][T10142]                      __fput+0x7c4/0x930
[  215.918482][T10142]                      task_work_run+0x125/0x1a0
[  215.924794][T10142]                      exit_to_user_mode_loop+0x10f/0x130
[  215.931885][T10142]                      exit_to_user_mode_prepare+0xee/0x180
[  215.939151][T10142]                      syscall_exit_to_user_mode+0x16/0x40
[  215.946337][T10142]                      do_syscall_64+0x58/0xa0
[  215.952476][T10142]                      entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  215.960094][T10142]     INITIAL READ USE at:
[  215.964499][T10142]                           lock_acquire+0x19e/0x400
[  215.971162][T10142]                           _raw_read_lock_irqsave+0xb8/0x100
[  215.978602][T10142]                           kill_fasync+0x16d/0x490
[  215.985187][T10142]                           pipe_release+0x1ba/0x330
[  215.991867][T10142]                           __fput+0x234/0x930
[  215.998011][T10142]                           task_work_run+0x125/0x1a0
[  216.004764][T10142]                           exit_to_user_mode_loop+0x10f/0x130
[  216.012299][T10142]                           exit_to_user_mode_prepare+0xee/0x180
[  216.020002][T10142]                           syscall_exit_to_user_mode+0x16/0x40
[  216.027622][T10142]                           do_syscall_64+0x58/0xa0
[  216.034196][T10142]                           entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.042255][T10142]   }
[  216.044826][T10142]   ... key      at: [<ffffffff96343780>] fasync_insert_entry.__key+0x0/0x20
[  216.053575][T10142]   ... acquired at:
[  216.057447][T10142]    _raw_read_lock_irqsave+0xb8/0x100
[  216.062899][T10142]    kill_fasync+0x16d/0x490
[  216.067483][T10142]    evdev_pass_values+0x54b/0xab0
[  216.072578][T10142]    evdev_events+0x1c0/0x2f0
[  216.077236][T10142]    input_pass_values+0x87e/0x1210
[  216.082523][T10142]    input_handle_event+0xb3f/0x1490
[  216.087808][T10142]    input_inject_event+0x1b9/0x2c0
[  216.092992][T10142]    evdev_write+0x35b/0x490
[  216.097564][T10142]    vfs_write+0x30b/0xd60
[  216.101963][T10142]    ksys_write+0x152/0x260
[  216.106450][T10142]    do_syscall_64+0x4c/0xa0
[  216.111025][T10142]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.117082][T10142] 
[  216.119391][T10142] -> (&f->f_owner.lock){....}-{2:2} {
[  216.124764][T10142]    INITIAL USE at:
[  216.128638][T10142]                    lock_acquire+0x19e/0x400
[  216.134693][T10142]                    _raw_write_lock_irq+0xab/0xf0
[  216.141175][T10142]                    __f_setown+0x37/0x330
[  216.146975][T10142]                    fcntl_dirnotify+0x6a7/0x8b0
[  216.153286][T10142]                    do_fcntl+0x5be/0x1360
[  216.159077][T10142]                    __se_sys_fcntl+0xcc/0x190
[  216.165214][T10142]                    do_syscall_64+0x4c/0xa0
[  216.171183][T10142]                    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.178629][T10142]    INITIAL READ USE at:
[  216.182939][T10142]                         lock_acquire+0x19e/0x400
[  216.189429][T10142]                         _raw_read_lock_irqsave+0xb8/0x100
[  216.196700][T10142]                         send_sigio+0x2f/0x330
[  216.202930][T10142]                         kill_fasync+0x20a/0x490
[  216.209329][T10142]                         pipe_release+0x1ba/0x330
[  216.215815][T10142]                         __fput+0x234/0x930
[  216.221780][T10142]                         task_work_run+0x125/0x1a0
[  216.228357][T10142]                         exit_to_user_mode_loop+0x10f/0x130
[  216.235709][T10142]                         exit_to_user_mode_prepare+0xee/0x180
[  216.243235][T10142]                         syscall_exit_to_user_mode+0x16/0x40
[  216.250681][T10142]                         do_syscall_64+0x58/0xa0
[  216.257080][T10142]                         entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.264957][T10142]  }
[  216.267434][T10142]  ... key      at: [<ffffffff96342b00>] __alloc_file.__key+0x0/0x10
[  216.275488][T10142]  ... acquired at:
[  216.279270][T10142]    _raw_read_lock_irqsave+0xb8/0x100
[  216.284714][T10142]    send_sigio+0x2f/0x330
[  216.289117][T10142]    kill_fasync+0x20a/0x490
[  216.293694][T10142]    pipe_release+0x1ba/0x330
[  216.298353][T10142]    __fput+0x234/0x930
[  216.302492][T10142]    task_work_run+0x125/0x1a0
[  216.307242][T10142]    exit_to_user_mode_loop+0x10f/0x130
[  216.312778][T10142]    exit_to_user_mode_prepare+0xee/0x180
[  216.318479][T10142]    syscall_exit_to_user_mode+0x16/0x40
[  216.324102][T10142]    do_syscall_64+0x58/0xa0
[  216.328680][T10142]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.334736][T10142] 
[  216.337041][T10142] 
[  216.337041][T10142] the dependencies between the lock to be acquired
[  216.337048][T10142]  and HARDIRQ-irq-unsafe lock:
[  216.350531][T10142] -> (tasklist_lock){.+.+}-{2:2} {
[  216.355640][T10142]    HARDIRQ-ON-R at:
[  216.359603][T10142]                     lock_acquire+0x19e/0x400
[  216.365751][T10142]                     _raw_read_lock+0x32/0x40
[  216.371891][T10142]                     do_wait+0x293/0xac0
[  216.377597][T10142]                     kernel_wait+0xd3/0x1c0
[  216.383560][T10142]                     call_usermodehelper_exec_work+0xb5/0x220
[  216.391085][T10142]                     process_one_work+0x85f/0x1010
[  216.397661][T10142]                     worker_thread+0xaa6/0x1290
[  216.403979][T10142]                     kthread+0x436/0x520
[  216.409680][T10142]                     ret_from_fork+0x1f/0x30
[  216.415735][T10142]    SOFTIRQ-ON-R at:
[  216.419696][T10142]                     lock_acquire+0x19e/0x400
[  216.425837][T10142]                     _raw_read_lock+0x32/0x40
[  216.431974][T10142]                     do_wait+0x293/0xac0
[  216.437677][T10142]                     kernel_wait+0xd3/0x1c0
[  216.443641][T10142]                     call_usermodehelper_exec_work+0xb5/0x220
[  216.451170][T10142]                     process_one_work+0x85f/0x1010
[  216.457752][T10142]                     worker_thread+0xaa6/0x1290
[  216.464076][T10142]                     kthread+0x436/0x520
[  216.469782][T10142]                     ret_from_fork+0x1f/0x30
[  216.475835][T10142]    INITIAL USE at:
[  216.479712][T10142]                    lock_acquire+0x19e/0x400
[  216.485768][T10142]                    _raw_write_lock_irq+0xab/0xf0
[  216.492259][T10142]                    copy_process+0x236f/0x3e20
[  216.498487][T10142]                    kernel_clone+0x23f/0x990
[  216.504536][T10142]                    kernel_thread+0xfa/0x160
[  216.510592][T10142]                    rest_init+0x21/0x330
[  216.516299][T10142]                    start_kernel+0x489/0x540
[  216.522350][T10142]                    secondary_startup_64_no_verify+0xb1/0xbb
[  216.529793][T10142]    INITIAL READ USE at:
[  216.534101][T10142]                         lock_acquire+0x19e/0x400
[  216.540590][T10142]                         _raw_read_lock+0x32/0x40
[  216.547078][T10142]                         do_wait+0x293/0xac0
[  216.553128][T10142]                         kernel_wait+0xd3/0x1c0
[  216.559441][T10142]                         call_usermodehelper_exec_work+0xb5/0x220
[  216.567314][T10142]                         process_one_work+0x85f/0x1010
[  216.574243][T10142]                         worker_thread+0xaa6/0x1290
[  216.580917][T10142]                         kthread+0x436/0x520
[  216.586967][T10142]                         ret_from_fork+0x1f/0x30
[  216.593371][T10142]  }
[  216.595853][T10142]  ... key      at: [<ffffffff8c00a058>] tasklist_lock+0x18/0x40
[  216.603560][T10142]  ... acquired at:
[  216.607346][T10142]    _raw_read_lock+0x32/0x40
[  216.612012][T10142]    send_sigurg+0xcb/0x390
[  216.616501][T10142]    sk_send_sigurg+0x6b/0xc0
[  216.621164][T10142]    queue_oob+0x622/0x800
[  216.625569][T10142]    unix_stream_sendmsg+0xb71/0xc90
[  216.630843][T10142]    ____sys_sendmsg+0x5b7/0x8f0
[  216.635767][T10142]    ___sys_sendmsg+0x236/0x2e0
[  216.640600][T10142]    __se_sys_sendmsg+0x1af/0x290
[  216.645609][T10142]    do_syscall_64+0x4c/0xa0
[  216.650183][T10142]    entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.656241][T10142] 
[  216.658545][T10142] 
[  216.658545][T10142] stack backtrace:
[  216.664432][T10142] CPU: 0 PID: 10142 Comm: syz.1.2316 Not tainted syzkaller #0
[  216.671874][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  216.681917][T10142] Call Trace:
[  216.685181][T10142]  <TASK>
[  216.688098][T10142]  dump_stack_lvl+0x188/0x250
[  216.692766][T10142]  ? load_image+0x400/0x400
[  216.697252][T10142]  ? show_regs_print_info+0x20/0x20
[  216.702432][T10142]  ? load_image+0x400/0x400
[  216.706921][T10142]  ? print_shortest_lock_dependencies+0xf0/0x160
[  216.713237][T10142]  __lock_acquire+0x6688/0x7d10
[  216.718086][T10142]  ? verify_lock_unused+0x140/0x140
[  216.723272][T10142]  ? verify_lock_unused+0x140/0x140
[  216.728456][T10142]  ? __alloc_skb+0x473/0x750
[  216.733037][T10142]  lock_acquire+0x19e/0x400
[  216.737531][T10142]  ? send_sigurg+0xcb/0x390
[  216.742030][T10142]  ? _raw_read_lock_irqsave+0x8b/0x100
[  216.747477][T10142]  ? read_lock_is_recursive+0x10/0x10
[  216.752843][T10142]  ? do_raw_read_lock+0x39/0x80
[  216.757681][T10142]  ? _raw_read_lock_irqsave+0xc4/0x100
[  216.763133][T10142]  ? _raw_read_lock+0x40/0x40
[  216.767796][T10142]  ? __lock_acquire+0x7d10/0x7d10
[  216.772810][T10142]  ? do_raw_spin_lock+0x128/0x2f0
[  216.777820][T10142]  _raw_read_lock+0x32/0x40
[  216.782307][T10142]  ? send_sigurg+0xcb/0x390
[  216.786798][T10142]  send_sigurg+0xcb/0x390
[  216.791119][T10142]  sk_send_sigurg+0x6b/0xc0
[  216.795613][T10142]  queue_oob+0x622/0x800
[  216.799848][T10142]  ? scm_stat_add+0xb0/0xb0
[  216.804341][T10142]  ? apparmor_socket_getpeersec_dgram+0x5/0x10
[  216.810478][T10142]  ? security_socket_getpeersec_dgram+0x9d/0xc0
[  216.816711][T10142]  unix_stream_sendmsg+0xb71/0xc90
[  216.821826][T10142]  ? aa_sk_perm+0x7dc/0x910
[  216.826318][T10142]  ? unix_show_fdinfo+0xa0/0xa0
[  216.831155][T10142]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  216.837559][T10142]  ? aa_sock_msg_perm+0x94/0x150
[  216.842484][T10142]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  216.847755][T10142]  ? security_socket_sendmsg+0x7c/0xa0
[  216.853200][T10142]  ? unix_show_fdinfo+0xa0/0xa0
[  216.858038][T10142]  ____sys_sendmsg+0x5b7/0x8f0
[  216.862796][T10142]  ? __sys_sendmsg_sock+0x30/0x30
[  216.867812][T10142]  ? import_iovec+0x6f/0xa0
[  216.872304][T10142]  ___sys_sendmsg+0x236/0x2e0
[  216.876971][T10142]  ? __sys_sendmsg+0x2a0/0x2a0
[  216.881736][T10142]  __se_sys_sendmsg+0x1af/0x290
[  216.886577][T10142]  ? __x64_sys_sendmsg+0x80/0x80
[  216.891500][T10142]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  216.897474][T10142]  ? lockdep_hardirqs_on+0x94/0x140
[  216.902663][T10142]  do_syscall_64+0x4c/0xa0
[  216.907071][T10142]  ? clear_bhb_loop+0x30/0x80
[  216.911735][T10142]  ? clear_bhb_loop+0x30/0x80
[  216.916400][T10142]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.922297][T10142] RIP: 0033:0x7fb4ee830e59
[  216.926711][T10142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.946301][T10142] RSP: 002b:00007fb4eca8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  216.954707][T10142] RAX: ffffffffffffffda RBX: 00007fb4eeaa9fa0 RCX: 00007fb4ee830e59
[  216.962676][T10142] RDX: 0000000024004011 RSI: 0000200000002740 RDI: 0000000000000003
[  216.970633][T10142] RBP: 00007fb4ee8c6d6f R08: 0000000000000000 R09: 0000000000000000
[  216.978595][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.986550][T10142] R13: 00007fb4eeaaa038 R14: 00007fb4eeaa9fa0 R15: 00007ffe2e7b3c78
[  216.994549][T10142]  </TASK>
[  217.121748][ T4232] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  217.144388][ T4232] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  217.151459][T10144] loop2: detected capacity change from 0 to 512
[  217.152742][ T4232] usb 4-1: USB disconnect, device number 18
[  217.226002][T10144] EXT4-fs warning (device loop2): ext4_xattr_inode_get:492: inode #11: comm syz.2.2317: ea_inode file size=4 entry size=6
[  217.271900][T10144] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.2317: corrupted inode contents
[  217.290069][T10144] EXT4-fs (loop2): Remounting filesystem read-only
[  217.296614][T10144] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #15: comm syz.2.2317: mark_inode_dirty error
[  217.309401][T10144] EXT4-fs (loop2): Remounting filesystem read-only
[  217.339775][T10144] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.2317: corrupted inode contents
[  217.354630][T10144] EXT4-fs (loop2): Remounting filesystem read-only
[  217.361569][T10144] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2952: inode #15: comm syz.2.2317: mark_inode_dirty error
[  217.373984][T10144] EXT4-fs (loop2): Remounting filesystem read-only
[  217.381065][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  217.389624][T10144] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2955: inode #15: comm syz.2.2317: mark inode dirty (error -117)
[  217.409708][T10144] EXT4-fs (loop2): Remounting filesystem read-only
[  217.423238][T10144] EXT4-fs warning (device loop2): ext4_evict_inode:304: xattr delete (err -117)
[  217.432398][T10144] EXT4-fs (loop2): 1 orphan inode deleted
[  217.438126][T10144] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,journal_dev=0x00000000000000ff,init_itable=0x0000000000008d55,nouid32,resgid=0x0000000000000000,acl,debug_want_extra_isize=0x000000000000005c,nojournal_checksum,sb=0x0000000000000006,. Quota mode: none.