last executing test programs:

1m41.946149518s ago: executing program 3 (id=27):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000004700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0)
llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

1m41.008352051s ago: executing program 3 (id=35):
syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x3, 0x0, 0xf2, '\x00', {0x4, 0x6, '\x00', 0xd, 0x33, 0xff, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}}}}}}}, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a)

1m40.6217279s ago: executing program 3 (id=41):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00004b0000/0x2000)=nil, 0x201f}, 0x1})

1m40.517154473s ago: executing program 3 (id=44):
syz_mount_image$exfat(&(0x7f0000000300), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000002544,errors=remount-ro,iocharset=macturkish,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000000,namecase=1,umask=00000000000000000000165,fmask=00000000000000000166141,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c7a65726f5f73697a655f6469722c74696d655f6f66667365743d3078303030303030303030303030303030352c6572726f72733d636f6e74696e75030000213258e0b74d31428201eec914b0a1309eef6fa67f9c9acd3d0f7faecfc7606d1780acf362e8c2eb308f9f6bf0dbc2a6f3bbfd298af0966c8df51bff17a1d884d217f3d05e3184594b42b733f1401e6a7a99717441f7f836034df7231df364ad31334b3e1b0fd15371b2e2ee9dc35f553c93625b158095a0ab77f5b32eab3e4252e792f82e28c94d176244e9c652c8aa0a5b60222a3643598acaee5d91428250f1a54198f0b60a932f"], 0x1, 0x1535, &(0x7f0000001380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)

1m39.925466817s ago: executing program 3 (id=53):
set_mempolicy(0x2, 0x0, 0x2)
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)

1m39.507823787s ago: executing program 3 (id=69):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000400), 0x2}, 0x20)

1m39.347810751s ago: executing program 32 (id=69):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r1, &(0x7f0000000340), &(0x7f0000000400), 0x2}, 0x20)

6.016309823s ago: executing program 1 (id=1525):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
io_setup(0x7f, &(0x7f0000000580)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000cc0)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0xd, r0, &(0x7f00000005c0)='g\r', 0x2, 0x8}])

5.818660078s ago: executing program 1 (id=1527):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48050}, 0x20004800)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="68000000300005060000000d000000000000010054000100500001000900010067617465"], 0x68}], 0x1}, 0x0)

5.71159594s ago: executing program 1 (id=1529):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

5.366227888s ago: executing program 1 (id=1533):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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")
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1333406, 0x0)

5.080221595s ago: executing program 1 (id=1536):
mkdir(&(0x7f0000000000)='proc_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='proc_dir\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='proc_dir/scsi/scsi\x00', 0x0, 0x0)

4.740932402s ago: executing program 0 (id=1538):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setreuid(0x0, 0xee00)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000440)={0x3, 'vlan0\x00', {0x140}, 0x7})

4.668754183s ago: executing program 0 (id=1540):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xa}, 0x2)
connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

4.286650292s ago: executing program 1 (id=1541):
socket$inet6(0xa, 0xc0805, 0xfff)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000007c0)={0x1, 0x0, 0x1, 0x22, 0x10b, &(0x7f00000003c0)})

4.121416516s ago: executing program 33 (id=1541):
socket$inet6(0xa, 0xc0805, 0xfff)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000007c0)={0x1, 0x0, 0x1, 0x22, 0x10b, &(0x7f00000003c0)})

3.766733994s ago: executing program 0 (id=1552):
r0 = socket(0x2b, 0x1, 0x1)
listen(r0, 0x5)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10)

3.633046507s ago: executing program 0 (id=1555):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001800400038008"], 0x44}}, 0x20008000)

3.339416116s ago: executing program 0 (id=1559):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x67, 0x56, 0xa4, 0x20, 0x1415, 0x2000, 0x2b98, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xc, 0x6, 0x30, 0xea, "", [{{0x9, 0x4, 0xb7, 0xc, 0x0, 0x3f, 0x7d, 0xf, 0x6}}, {{0x9, 0x4, 0xe5, 0x2, 0x0, 0xd0, 0x7d, 0x2c, 0x10}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x10, 0x0})
ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0)

2.896482874s ago: executing program 2 (id=1567):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x5, 0x4)
recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40011161, 0x0)

2.746481477s ago: executing program 2 (id=1568):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x890b, &(0x7f0000000140)="00000000000000000000000000000000020000006c61706230")
connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)

2.687349678s ago: executing program 2 (id=1569):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file2\x00', 0x8c0, &(0x7f0000001300)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c7072656665727265645f736c6f743d30323030303030303030000000000000d63472656e63793d66756c6c2c636f686572656e63793d66756c2c6c6f63616c666c6f636b732c646174613d6f7264657265642c6e0000000000000000000000000046e1c17d213488411ce2a9d9e89c30e9954d5ca2a051aa1d6d146200688c6669d4482aeb5bf93c8dff420f4d87120a8041cd3cd2b02afddf2c2a1a69fbdd36986fe8d7c884e1970ba7050d2af1f784ca1247a7cbdb57e954"], 0x1, 0x4432, &(0x7f0000008940)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2054)

1.534738176s ago: executing program 2 (id=1570):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000000)={0x0, 0x989680})

1.527429837s ago: executing program 4 (id=1571):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000004c0)='4', 0xffe3}], 0x1}}], 0x1, 0x24000804)

1.33147266s ago: executing program 2 (id=1572):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000030000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28)

1.234664252s ago: executing program 0 (id=1573):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400d0503010002000000010902270001010080320904000003ff000000070581030800010705020200020007058302000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0)

1.164343984s ago: executing program 2 (id=1574):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x18, r1, 0x711, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

1.084193076s ago: executing program 5 (id=1575):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

967.354229ms ago: executing program 5 (id=1576):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000000)=0x5, 0x4)
write(r0, &(0x7f0000000040)='8', 0x1)

869.12739ms ago: executing program 5 (id=1577):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

802.374022ms ago: executing program 4 (id=1578):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000011c0)={0x2020}, 0x2020)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)={0x10, 0x0, 0x3}, 0x10)

784.753432ms ago: executing program 5 (id=1579):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f000000bcc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$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")
mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)
unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

762.578213ms ago: executing program 4 (id=1580):
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210080, &(0x7f0000001f00)={[{@uid={'uid', 0x3d, 0xee01}}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@dir_umask}, {@creator={'creator', 0x3d, "cdd165ab"}}, {@codepage={'codepage', 0x3d, 'cp862'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}]}, 0x41, 0x340, &(0x7f0000001bc0)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020)

606.561557ms ago: executing program 4 (id=1581):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r1}, 0x20)

486.89879ms ago: executing program 4 (id=1582):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x70bd24, 0x25dfdafc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x24000004)

152.777997ms ago: executing program 5 (id=1583):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x20, 0x1, 0x8, 0xfffff009}]}, 0x10)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB='\a'])

31.193089ms ago: executing program 5 (id=1584):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

0s ago: executing program 4 (id=1585):
openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4410, &(0x7f00000001c0), 0x2, 0xbdb, &(0x7f0000000980)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2des7sBvLDGsoc04lhEXEwiSq39aUQUG72hiFrzuPW1lenP11amk6jX//RJEklEPFxbmW6/VtLaHmkNhiLi3d8m8b1/dMZdWFqem6pWK/Ot8cnFK9dPLiwt/2L2ytTlyuXK1YnTv5o8NXl6/Mxkz2p99MG5O5/95Pcf1b54+cvbn/77pSTOxUhrbmsdvTIWYxt/JlsVImKq18FyMtCqZ2udSWGXJ6V9TgoAgK7SLfdwP4hSDMTmzVsp3nwv1+QAAACAnqgPRNQBAACAAy6x/gcAAIADrv05gIdrK9Ptlu8nEvbXg/MRMdqsf73VmjOFqDW2QzEYEYcfJrH1a61J82nPbCwiPrx/5rWsRcf3kP93qwchdlRbjYgfbnf+k0b9o41vcXfWn0bEeA/ijz023u+/f89S/7kexM+7fgBeTHfPNy9knde/dOP+J7a5/hW2uXY9jbyvf+37v/WO+7/N+ge63P/9cY8xbt76741uc1n9v77zu1fbLYufbZ+pqCfwYDXiR4Xt6k826k+61H9xjzFKX92odJvLu/76/yOOx/b1tyU7/z7RyZnZamW8+bhtjNV3Jl/pFj/v+rPzf7hL/e3ff+p2/q/vMcZfLlx4vWPn/c3uzvWnHxeTPzd6xdaev00tLs5PRBSTP3TuP7VDIrXNY9qvkdV/4qc7v/+3q3+g+XKNuWwtsNraZuO/Pxb2N7dvvtEtpfb674nP//CuR+xJVv+lLud/a/1vFzrP/z/3GONnb/3rRLe5revfrGXx22thAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IkkrS80U/TcjniSER8Pw6n1WsLiz+fufbXq5eyuYjRGExnZquV8YgoNcdJNp5o9DfHpx4b/zIijkbEf0rDjXF5+lr1Ut7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsOFIRIxEkpYjIo2I9VKalst5ZwUAAAD03GjeCQAAAAB9Z/0PAAAAB5/1PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH129Md37yURUTs73GiZYmtuMNfMgH5L804AyM1A3gkAuSnknQCQmydc47tdgAMo2WV+qOvMoZ7nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDz6/ixu/eSiKidHW60TLE1N5hrZkC/JZHknQKQk4GdJgv7lwew/7zF4cVljQ/s9r8AQ5vH1L45c6hvOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/BlptCQtR0Sxta9cjvhORIzGYDIzW62MR8R3I+L90uChbDyRc84AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03sLS8txUtVqZzzpptDobe74FnUialfQ9VitOLf+SdXrSKcZTPv1RvV7PO/m+d3L9ZwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJwsLC3PTVWrlfmFvDMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8rawtDw3Va1W5vvYybtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy83UAAAD///TgCwo=")
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2)

kernel console output (not intermixed with test programs):

 97.372021][ T4198] XFS (loop4): Unmounting Filesystem
[   97.393525][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 538 (0)
[   97.474449][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 539 (0)
[   97.527215][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 540 (0)
[   97.546804][ T5264] loop2: detected capacity change from 0 to 32768
[   97.580916][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 541 (0)
[   97.591261][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 542 (0)
[   97.601621][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 543 (0)
[   97.611933][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 544 (0)
[   97.635261][ T5264] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.376 (5264)
[   97.639005][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 545 (0)
[   97.639059][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 546 (0)
[   97.639080][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 547 (0)
[   97.639102][ T5217] REISERFS error (device loop0): vs-4010 is_reusable: block number is out of range 548 (0)
[   97.659191][ T5264] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   97.659409][ T5264] BTRFS info (device loop2): use zlib compression, level 3
[   97.659438][ T5264] BTRFS info (device loop2): turning on sync discard
[   97.659461][ T5264] BTRFS info (device loop2): using free space tree
[   97.659479][ T5264] BTRFS info (device loop2): has skinny extents
[   98.015414][ T4196] Bluetooth: hci5: CSR: Local version failed (-110)
[   98.053862][ T5264] BTRFS info (device loop2): enabling ssd optimizations
[   98.334342][ T5306] sch_fq: defrate 4294934527 ignored.
[   98.622865][ T5322] loop5: detected capacity change from 0 to 512
[   98.684594][ T5301] loop0: detected capacity change from 0 to 32768
[   98.721114][ T5322] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback.
[   98.771748][ T5301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.383 (5301)
[   98.843588][ T5322] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.863899][ T4177] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 9 scanned by udevd (4177)
[   98.880490][ T5301] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   98.903483][ T5301] BTRFS info (device loop0): using free space tree
[   98.913602][ T5301] BTRFS info (device loop0): has skinny extents
[   98.935036][ T5304] loop4: detected capacity change from 0 to 32768
[   99.137879][ T5350] loop2: detected capacity change from 0 to 64
[   99.193175][ T5304] JBD2: Ignoring recovery information on journal
[   99.289530][ T5301] BTRFS info (device loop0): enabling ssd optimizations
[   99.457228][ T5304] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   99.509197][ T5301] BTRFS warning (device loop0): can't set the default_subvol feature bit while mounted
[   99.661985][ T5304] (syz.4.387,5304,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[   99.703565][ T5304] (syz.4.387,5304,1):update_backups:188 ERROR: status = -12
[   99.710952][ T5304] ocfs2: Failed to update super blocks on 7,4 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[   99.804000][ T5378] binder: 5377:5378 ioctl 80089418 0 returned -22
[   99.824430][ T5378] binder: 5377:5378 ioctl c0046209 100000000000000 returned -22
[   99.972419][ T4198] ocfs2: Unmounting device (7,4) on (node local)
[  100.053523][ T5318] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  100.479048][ T5318] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.479083][ T5318] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  100.479108][ T5318] usb 6-1: config 0 interface 0 has no altsetting 0
[  100.479138][ T5318] usb 6-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  100.479162][ T5318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.480821][ T5318] usb 6-1: config 0 descriptor??
[  100.484661][ T5413] loop4: detected capacity change from 0 to 8
[  100.509947][ T5413] SQUASHFS error: lzo decompression failed, data probably corrupt
[  100.510006][ T5413] SQUASHFS error: Failed to read block 0x82: -5
[  100.510020][ T5413] SQUASHFS error: Unable to read metadata cache entry [80]
[  100.510032][ T5413] SQUASHFS error: Unable to read inode 0x11f
[  100.696905][ T5417] IPVS: Scheduler module ip_vs_sip not found
[  100.803412][ T5311] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  100.992247][ T5318] logitech-djreceiver 0003:046D:C714.0006: hidraw0: USB HID v0.00 Keyboard [HID 046d:c714] on usb-dummy_hcd.5-1/input0
[  101.173506][ T5380] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.181280][ T5311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.209371][ T5311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  101.254561][ T5318] usb 6-1: USB disconnect, device number 5
[  101.294743][ T5441] fido_id[5441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  101.333735][ T5311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  101.351766][ T5311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  101.378316][ T5311] usb 5-1: SerialNumber: syz
[  101.449405][ T5380] usb 1-1: Using ep0 maxpacket: 8
[  101.459877][ T5311] usb 5-1: 0:2 : does not exist
[  101.484990][ T5454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.428'.
[  101.554261][ T5457] tmpfs: Too few inodes for current use
[  101.589066][ T5380] usb 1-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.621118][ T5380] usb 1-1: config 0 interface 0 has no altsetting 0
[  101.629918][ T5380] usb 1-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00
[  101.645058][ T5380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.690610][ T5380] usb 1-1: config 0 descriptor??
[  101.862399][ T5432] loop2: detected capacity change from 0 to 40427
[  101.914927][ T5311] usb 5-1: USB disconnect, device number 4
[  101.941053][ T5432] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff
[  101.977735][ T5432] F2FS-fs (loop2): invalid crc value
[  102.054859][ T5432] F2FS-fs (loop2): Found nat_bits in checkpoint
[  102.183507][ T5432] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  102.206709][ T5380] wacom 0003:056A:00FB.0007: unknown main item tag 0xe
[  102.232506][ T5380] wacom 0003:056A:00FB.0007: unbalanced collection at end of report description
[  102.272771][ T5380] wacom 0003:056A:00FB.0007: parse failed
[  102.291394][ T5380] wacom: probe of 0003:056A:00FB.0007 failed with error -22
[  102.418937][ T4193] attempt to access beyond end of device
[  102.418937][ T4193] loop2: rw=2049, want=45104, limit=40427
[  102.437889][ T4228] usb 1-1: USB disconnect, device number 3
[  102.462136][ T5473] loop1: detected capacity change from 0 to 32768
[  102.538155][ T5490] netlink: 'syz.4.437': attribute type 15 has an invalid length.
[  102.548626][ T5473] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.434 (5473)
[  102.591822][ T5490] netlink: 'syz.4.437': attribute type 7 has an invalid length.
[  102.618874][ T5490] netlink: 52 bytes leftover after parsing attributes in process `syz.4.437'.
[  102.639743][ T5473] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  102.679572][ T5473] BTRFS info (device loop1): force zlib compression, level 3
[  102.695592][ T5479] loop5: detected capacity change from 0 to 32768
[  102.712331][ T5473] BTRFS info (device loop1): allowing degraded mounts
[  102.732821][ T5473] BTRFS info (device loop1): setting nodatasum
[  102.751387][ T5473] BTRFS info (device loop1): allowing degraded mounts
[  102.769389][ T5473] BTRFS info (device loop1): using free space tree
[  102.791829][ T5473] BTRFS info (device loop1): has skinny extents
[  102.904076][ T5479] XFS (loop5): Mounting V5 Filesystem
[  103.155682][ T5479] XFS (loop5): Ending clean mount
[  103.174440][ T5530] loop0: detected capacity change from 0 to 1024
[  103.199876][ T5479] XFS (loop5): Quotacheck needed: Please wait.
[  103.253561][ T5530] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  103.337472][ T5479] XFS (loop5): Quotacheck: Done.
[  103.372488][ T5540] loop4: detected capacity change from 0 to 1024
[  103.500917][ T5540] hfsplus: catalog record size mismatch (type 1, got 46, expected 88)
[  103.581298][ T4446] XFS (loop5): Unmounting Filesystem
[  103.654661][  T150] block nbd0: Attempted send on invalid socket
[  103.662602][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  103.898575][ T5562] loop4: detected capacity change from 0 to 1024
[  103.937135][ T5562] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  104.324118][ T5569] loop4: detected capacity change from 0 to 4096
[  104.365386][ T5569] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  104.483905][ T5582] netlink: 'syz.0.452': attribute type 5 has an invalid length.
[  104.712838][ T5556] loop2: detected capacity change from 0 to 40427
[  104.768422][ T5556] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  104.843358][ T5556] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  104.940563][ T5595] loop0: detected capacity change from 0 to 4096
[  104.958376][ T5556] F2FS-fs (loop2): Found nat_bits in checkpoint
[  105.039111][ T5595] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  105.073165][ T5595] ntfs3: loop0: Failed to load $Extend.
[  105.169930][ T5556] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  105.203640][ T5556] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  105.408468][ T5571] (syz.1.446,5571,0):ocfs2_find_slot:468 ERROR: no free slots available!
[  105.448541][ T5571] (syz.1.446,5571,1):ocfs2_mount_volume:1811 ERROR: status = -22
[  105.511675][ T5571] (syz.1.446,5571,0):ocfs2_fill_super:1177 ERROR: status = -22
[  105.647604][ T5628] set_capacity_and_notify: 1 callbacks suppressed
[  105.647620][ T5628] loop0: detected capacity change from 0 to 128
[  105.707728][ T5628] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  105.723570][   T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  105.793356][ T5628] hpfs: filesystem error: improperly stopped
[  105.799626][ T5628] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  105.876730][ T5628] hpfs: You really don't want any checks? You are crazy...
[  105.933358][ T5628] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  105.941564][ T5628] hpfs: code page support is disabled
[  105.953477][ T5628] hpfs: hpfs_map_4sectors(): unaligned read
[  105.973584][ T5628] hpfs: hpfs_map_4sectors(): unaligned read
[  105.979526][ T5628] hpfs: filesystem error: unable to find root dir
[  105.983627][   T23] usb 6-1: Using ep0 maxpacket: 32
[  106.089119][ T5601] loop4: detected capacity change from 0 to 40427
[  106.123794][   T23] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  106.136640][   T23] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  106.155599][   T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  106.171507][   T23] usb 6-1: config 1 has no interface number 0
[  106.196793][ T5642] netlink: 264 bytes leftover after parsing attributes in process `syz.1.468'.
[  106.208503][ T5601] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  106.226326][   T23] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  106.238399][ T5601] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  106.273840][ T5601] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6
[  106.275199][ T5642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.468'.
[  106.293614][   T23] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  106.327621][ T5601] F2FS-fs (loop4): invalid crc value
[  106.342609][   T23] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  106.375959][ T5601] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  106.387970][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.476496][   T23] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  106.539648][ T5654] tipc: Enabling <ib:lo> not permitted
[  106.557946][ T5654] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  106.627549][ T5601] F2FS-fs (loop4): Start checkpoint disabled!
[  106.670901][ T5601] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  106.678539][ T5601] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  106.704383][   T23] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  106.744279][ T5664] loop1: detected capacity change from 0 to 256
[  106.896374][ T4251] attempt to access beyond end of device
[  106.896374][ T4251] loop4: rw=2049, want=45104, limit=40427
[  107.456342][ T5698] loop1: detected capacity change from 0 to 512
[  107.466859][   T23] usb 6-1: USB disconnect, device number 6
[  107.484533][   T23] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  107.568425][ T5698] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.484: Invalid block bitmap block 0 in block_group 0
[  107.637134][ T5698] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  107.680916][ T5698] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.484: attempt to clear invalid blocks 983261 len 1
[  107.742765][ T5698] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.484: invalid indirect mapped block 2683928664 (level 0)
[  107.814162][ T5698] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.484: Invalid inode table block 0 in block_group 0
[  107.873510][ T5698] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  107.899509][ T5698] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  107.929214][ T5698] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.484: Invalid inode table block 0 in block_group 0
[  107.985854][ T5698] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  108.013621][ T5698] EXT4-fs error (device loop1): ext4_truncate:4286: inode #13: comm syz.1.484: mark_inode_dirty error
[  108.053028][ T5698] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  108.069305][ T5698] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.484: Invalid inode table block 0 in block_group 0
[  108.114172][ T5698] EXT4-fs (loop1): 1 truncate cleaned up
[  108.119892][ T5698] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none.
[  108.147153][ T5729] loop5: detected capacity change from 0 to 4096
[  108.175234][ T5729] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  108.214498][ T5729] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  108.251976][ T5729] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  108.290954][ T5729] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  108.349639][ T5729] ntfs: volume version 3.1.
[  108.500214][  T144] ntfs: (device loop5): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  108.538369][ T4446] ntfs: (device loop5): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  108.702042][ T5752] loop1: detected capacity change from 0 to 256
[  108.965468][ T5764] loop0: detected capacity change from 0 to 256
[  109.040675][ T5764] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  109.127456][ T5769] loop1: detected capacity change from 0 to 1024
[  109.169795][ T5769] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  109.241870][   T26] audit: type=1326 audit(1791570636.906:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.5.512" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb738c11d9 code=0x7ff00000
[  109.335053][   T26] audit: type=1326 audit(1791570636.936:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.5.512" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb738c11d9 code=0x7ff00000
[  109.390801][   T26] audit: type=1326 audit(1791570636.936:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.5.512" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb738c11d9 code=0x7ff00000
[  109.509182][ T5779] loop2: detected capacity change from 0 to 4096
[  109.523643][   T26] audit: type=1326 audit(1791570636.936:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5770 comm="syz.5.512" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb738c11d9 code=0x7ff00000
[  109.599236][ T5779] ntfs: volume version 3.1.
[  109.706189][ T5785] netlink: 'syz.5.519': attribute type 1 has an invalid length.
[  109.882329][ T5797] loop5: detected capacity change from 0 to 256
[  110.074711][ T5803] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  110.151362][ T5812] xt_connbytes: Forcing CT accounting to be enabled
[  110.180236][ T5773] XFS (loop0): Mounting V5 Filesystem
[  110.366484][ T5773] XFS (loop0): Ending clean mount
[  110.372754][ T5821] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  110.394884][ T5821] EXT4-fs (loop2): orphan cleanup on readonly fs
[  110.401318][ T5821] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.531: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  110.449630][ T5821] EXT4-fs error (device loop2): ext4_quota_enable:6447: comm syz.2.531: Bad quota inode: 4, type: 1
[  110.482308][ T5773] XFS (loop0): Quotacheck needed: Please wait.
[  110.492336][ T5821] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  110.532462][ T5836] netlink: 'syz.5.539': attribute type 10 has an invalid length.
[  110.541484][ T5836] netlink: 40 bytes leftover after parsing attributes in process `syz.5.539'.
[  110.551800][ T5836] device dummy0 entered promiscuous mode
[  110.566058][ T5836] bridge0: port 3(dummy0) entered blocking state
[  110.572720][ T5836] bridge0: port 3(dummy0) entered disabled state
[  110.588104][ T5821] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  110.603749][ T5830] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  110.609269][ T5836] bridge0: port 3(dummy0) entered blocking state
[  110.613006][ T5821] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x00000000000000b0,norecovery,journal_dev=0x0000000000000000,nobarrier,,errors=continue. Quota mode: writeback.
[  110.619527][ T5836] bridge0: port 3(dummy0) entered forwarding state
[  110.656080][ T5830] REISERFS (device loop1): using ordered data mode
[  110.671318][ T5773] XFS (loop0): Quotacheck: Done.
[  110.693639][ T5830] reiserfs: using flush barriers
[  110.709936][ T5830] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  110.726872][ T5830] REISERFS (device loop1): checking transaction log (loop1)
[  110.735533][ T5830] REISERFS (device loop1): Using r5 hash to sort names
[  110.756378][ T5830] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  110.823440][   T23] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  110.880685][ T4191] XFS (loop0): Unmounting Filesystem
[  111.040723][ T5848] set_capacity_and_notify: 3 callbacks suppressed
[  111.040737][ T5848] loop2: detected capacity change from 0 to 256
[  111.075109][ T5852] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.546'.
[  111.124789][ T5852] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes.
[  111.183665][   T23] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  111.231583][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[  111.283554][   T23] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  111.322857][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.332563][ T5856] openvswitch: netlink: Actions may not be safe on all matching packets
[  111.381912][   T23] usb 5-1: config 0 descriptor??
[  111.441455][ T5865] loop2: detected capacity change from 0 to 64
[  111.519974][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'.
[  111.530521][ T5868] nbd: socks must be embedded in a SOCK_ITEM attr
[  111.710102][ T4226] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  111.833441][ T4228] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  111.876364][   T23] hid-generic 0003:057E:2009.0008: item fetching failed at offset 0/6
[  111.893941][   T23] hid-generic: probe of 0003:057E:2009.0008 failed with error -22
[  112.032720][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.569'.
[  112.083946][ T4226] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.103538][ T4226] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.117686][ T4226] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.125678][ T4226] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  112.135744][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.146910][   T23] usb 5-1: USB disconnect, device number 5
[  112.157065][ T4226] usb 2-1: config 0 descriptor??
[  112.213675][ T4228] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.233658][ T4228] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.263086][ T5908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'.
[  112.323954][ T4228] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  112.340432][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  112.353855][ T4228] usb 3-1: SerialNumber: syz
[  112.386629][ T5912] Bluetooth: hci0: unsupported parameter 5134
[  112.392912][ T5912] Bluetooth: hci0: unsupported parameter 8192
[  112.408355][ T5912] Bluetooth: hci0: unsupported parameter 5134
[  112.421842][ T5912] Bluetooth: hci0: unsupported parameter 8192
[  112.465002][ T5914] loop0: detected capacity change from 0 to 256
[  112.550951][ T5906] loop5: detected capacity change from 0 to 32768
[  112.648074][ T4226] logitech 0003:046D:CA04.0009: unknown main item tag 0x0
[  112.665220][ T4228] usb 3-1: 0:2 : does not exist
[  112.728675][ T4228] usb 3-1: USB disconnect, device number 3
[  112.794312][ T4226] logitech 0003:046D:CA04.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.1-1/input0
[  112.843784][ T4226] logitech 0003:046D:CA04.0009: no inputs found
[  112.893033][ T4226] usb 2-1: USB disconnect, device number 4
[  112.969079][ T5930] loop5: detected capacity change from 0 to 1024
[  113.026994][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  113.072723][ T5930] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  113.101293][ T5933] fido_id[5933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  113.342702][ T5949] syz.5.592 uses obsolete (PF_INET,SOCK_PACKET)
[  113.560997][ T5967] loop1: detected capacity change from 0 to 64
[  113.588616][ T5966] loop2: detected capacity change from 0 to 1024
[  113.700259][ T5975] loop4: detected capacity change from 0 to 512
[  113.765382][  T154] hfsplus: b-tree write err: -5, ino 25
[  113.771138][  T154] hfsplus: b-tree write err: -5, ino 4
[  113.820964][  T154] hfsplus: b-tree write err: -5, ino 2
[  113.846745][ T5975] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.605: invalid indirect mapped block 4294967295 (level 1)
[  113.884852][ T5975] EXT4-fs (loop4): Remounting filesystem read-only
[  113.948435][ T5975] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.605: invalid indirect mapped block 4294967295 (level 1)
[  113.976299][ T5975] EXT4-fs (loop4): Remounting filesystem read-only
[  114.000335][ T5991] mmap: syz.0.611 (5991) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  114.010785][ T5975] EXT4-fs (loop4): 2 truncates cleaned up
[  114.043533][ T5975] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000004004,barrier=0x0000000000000005,. Quota mode: writeback.
[  114.098279][ T5975] EXT4-fs error (device loop4): ext4_get_parent:1908: inode #11: comm syz.4.605: bad parent inode number: 3
[  114.146576][ T5975] EXT4-fs (loop4): Remounting filesystem read-only
[  114.289951][ T6012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.622'.
[  114.502362][ T6027] loop2: detected capacity change from 0 to 16
[  114.600721][ T6027] erofs: (device loop2): mounted with root inode @ nid 36.
[  114.644998][ T6027] attempt to access beyond end of device
[  114.644998][ T6027] loop2: rw=524288, want=24, limit=16
[  114.712020][ T6027] attempt to access beyond end of device
[  114.712020][ T6027] loop2: rw=524288, want=1072, limit=16
[  114.750130][ T6027] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89
[  114.760991][ T6033] loop5: detected capacity change from 0 to 4096
[  114.797287][ T6033] ntfs3: Unknown parameter ''
[  114.825649][ T6027] erofs: (device loop2): z_erofs_readahead: readahead error at page 9 @ nid 89
[  114.865481][ T6027] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89
[  114.922294][ T6027] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 89
[  114.942552][ T6027] erofs: (device loop2): z_erofs_readahead: readahead error at page 7 @ nid 89
[  114.972547][ T6027] erofs: (device loop2): z_erofs_readahead: readahead error at page 5 @ nid 89
[  115.027813][ T6027] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89
[  115.057684][ T6027] attempt to access beyond end of device
[  115.057684][ T6027] loop2: rw=524288, want=56, limit=16
[  115.115367][ T6027] attempt to access beyond end of device
[  115.115367][ T6027] loop2: rw=0, want=24, limit=16
[  115.159738][ T6027] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -35 in[46, 4050] out[6145]
[  115.261968][   T26] kauditd_printk_skb: 123 callbacks suppressed
[  115.261982][   T26] audit: type=1800 audit(1791570642.926:133): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.628" name="file2" dev="loop2" ino=89 res=0 errno=0
[  115.333965][ T6062] exfat: Deprecated parameter 'namecase'
[  115.339756][ T6062] exfat: Deprecated parameter 'namecase'
[  115.420793][ T6062] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  115.532597][ T6044] XFS (loop0): Mounting V5 Filesystem
[  115.677688][ T6044] XFS (loop0): Ending clean mount
[  115.697817][ T6044] XFS (loop0): Quotacheck needed: Please wait.
[  115.793878][ T6044] XFS (loop0): Quotacheck: Done.
[  115.876763][ T4191] XFS (loop0): Unmounting Filesystem
[  116.393134][ T6082] set_capacity_and_notify: 4 callbacks suppressed
[  116.393150][ T6082] loop2: detected capacity change from 0 to 32768
[  116.411179][ T6082] XFS: attr2 mount option is deprecated.
[  116.488003][ T6082] XFS (loop2): Mounting V5 Filesystem
[  116.559499][ T6082] XFS (loop2): Ending clean mount
[  116.580305][ T6082] XFS (loop2): Quotacheck needed: Please wait.
[  116.628372][ T6082] XFS (loop2): Quotacheck: Done.
[  116.657702][ T6082] XFS (loop2): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  116.716710][ T4193] XFS (loop2): Unmounting Filesystem
[  116.736385][ T5316] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  116.880610][ T6127] loop4: detected capacity change from 0 to 4096
[  116.917810][ T6129] loop0: detected capacity change from 0 to 256
[  116.937767][ T6130] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.012558][ T6129] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x605ad3ec, utbl_chksum : 0xe619d30d)
[  117.071392][   T26] audit: type=1800 audit(1791570644.736:134): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.669" name="file1" dev="loop0" ino=1048662 res=0 errno=0
[  117.184540][ T5316] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.222742][ T6136] loop5: detected capacity change from 0 to 1024
[  117.231539][ T5316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  117.263685][ T5316] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  117.282317][ T5316] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  117.296144][ T5316] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  117.323333][ T5316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.335211][ T6136] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  117.673530][ T5308] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  117.674199][ T6169] loop2: detected capacity change from 0 to 4096
[  117.713576][ T5314] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  117.768537][ T6169] NILFS (loop2): invalid segment: Checksum error in segment payload
[  117.779505][ T6169] NILFS (loop2): trying rollback from an earlier position
[  117.810364][ T6169] NILFS (loop2): recovery complete
[  117.821291][ T6170] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.963462][ T5314] usb 5-1: Using ep0 maxpacket: 16
[  117.965478][ T4226] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  117.980201][ T6172] loop2: detected capacity change from 0 to 256
[  118.044212][ T5316] gud 2-1:1.0: Failed to get properties (error=-71)
[  118.052176][ T5316] gud: probe of 2-1:1.0 failed with error -71
[  118.092010][ T5316] usb 2-1: USB disconnect, device number 5
[  118.121181][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.132254][ T5308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.170853][ T5314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.186556][ T5308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.200076][ T5314] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  118.215480][ T5308] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  118.232112][ T5314] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  118.245530][ T5308] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00
[  118.258161][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.268631][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.284488][ T5308] usb 1-1: config 0 descriptor??
[  118.289749][ T5314] usb 5-1: config 0 descriptor??
[  118.333532][ T4226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.346357][ T4226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.356790][ T4226] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  118.369793][ T4226] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  118.379158][ T4226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.390503][ T4226] usb 6-1: config 0 descriptor??
[  118.633793][ T6185] loop1: detected capacity change from 0 to 512
[  118.669311][ T6185] EXT4-fs (loop1): 1 truncate cleaned up
[  118.675583][ T6185] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  118.776782][ T5314] microsoft 0003:045E:07DA.000B: No inputs registered, leaving
[  118.786438][ T5308] thrustmaster 0003:044F:B324.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 044f:b324] on usb-dummy_hcd.0-1/input0
[  118.808741][ T5314] microsoft 0003:045E:07DA.000B: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  118.823330][ T5308] thrustmaster 0003:044F:B324.000A: no inputs found
[  118.843060][ T5314] microsoft 0003:045E:07DA.000B: no inputs found
[  118.855658][ T5314] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway
[  118.896817][ T4226] plantronics 0003:047F:FFFF.000C: unbalanced collection at end of report description
[  118.925629][ T4226] plantronics 0003:047F:FFFF.000C: parse failed
[  118.945737][ T4226] plantronics: probe of 0003:047F:FFFF.000C failed with error -22
[  119.022257][ T4226] usb 1-1: USB disconnect, device number 4
[  119.034908][ T5314] usb 5-1: USB disconnect, device number 6
[  119.116858][ T2305] usb 6-1: USB disconnect, device number 7
[  119.123884][ T6193] fido_id[6193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  119.210689][ T6199] loop1: detected capacity change from 0 to 128
[  119.229080][ T6199] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  119.241093][ T6199] hpfs: filesystem error: improperly stopped
[  119.248101][ T6199] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  119.256545][ T6199] hpfs: You really don't want any checks? You are crazy...
[  119.265072][ T6199] hpfs: hpfs_map_sector(): read error
[  119.270579][ T6199] hpfs: code page support is disabled
[  119.276770][ T6199] hpfs: hpfs_map_4sectors(): unaligned read
[  119.282806][ T6199] hpfs: hpfs_map_4sectors(): unaligned read
[  119.289915][ T6199] hpfs: filesystem error: unable to find root dir
[  119.402558][ T6203] scsi_nl_rcv_msg: discarding partial message
[  119.619472][ T6215] loop1: detected capacity change from 0 to 512
[  119.690203][ T6215] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.707: inode has both inline data and extents flags
[  119.815875][ T6215] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.707: couldn't read orphan inode 15 (err -117)
[  119.890422][ T6215] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  119.906254][ T6231] loop2: detected capacity change from 0 to 4096
[  119.941462][ T6231] EXT4-fs (loop2): Ignoring removed nobh option
[  120.069583][ T6237] ip_tables: iptables: counters copy to user failed while replacing table
[  120.092422][ T6231] EXT4-fs (loop2): Test dummy encryption mode enabled
[  120.123877][ T6231] EXT4-fs (loop2): Ignoring removed bh option
[  120.182579][ T6242] mkiss: ax0: crc mode is auto.
[  120.196967][ T6231] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[  120.267031][ T6231] EXT4-fs (loop2): can't change dax mount option while remounting
[  120.885854][ T6258] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,nombcache,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noload,sysvgroups,bsddf,min_batch_time=0x0000000000000003,,errors=continue. Quota mode: none.
[  120.927906][ T6274] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.733'.
[  121.346741][ T4226] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  121.532830][ T6327] set_capacity_and_notify: 2 callbacks suppressed
[  121.532846][ T6327] loop1: detected capacity change from 0 to 256
[  121.551624][ T6326] loop0: detected capacity change from 0 to 1024
[  121.579732][ T6326] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  121.583743][ T2305] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  121.650126][ T6326] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback.
[  121.726792][ T4226] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.738709][ T4226] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  121.752001][ T4226] usb 3-1: config 0 interface 0 has no altsetting 0
[  121.759157][ T4226] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  121.768746][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.805187][ T4226] usb 3-1: config 0 descriptor??
[  121.845630][   T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  121.853853][ T2305] usb 5-1: Using ep0 maxpacket: 8
[  121.891139][ T6336] loop1: detected capacity change from 0 to 164
[  121.972783][ T6338] loop1: detected capacity change from 0 to 256
[  122.001971][ T6338] FAT-fs (loop1): Directory bread(block 64) failed
[  122.009804][ T6338] FAT-fs (loop1): Directory bread(block 65) failed
[  122.020591][ T2305] usb 5-1: unable to get BOS descriptor or descriptor too short
[  122.038597][ T6338] FAT-fs (loop1): Directory bread(block 66) failed
[  122.051630][ T6338] FAT-fs (loop1): Directory bread(block 67) failed
[  122.062752][ T6338] FAT-fs (loop1): Directory bread(block 68) failed
[  122.070550][ T6338] FAT-fs (loop1): Directory bread(block 69) failed
[  122.082431][ T6338] FAT-fs (loop1): Directory bread(block 70) failed
[  122.090296][   T23] usb 6-1: Using ep0 maxpacket: 8
[  122.100895][ T6338] FAT-fs (loop1): Directory bread(block 71) failed
[  122.113784][ T2305] usb 5-1: config 1 has an invalid interface number: 54 but max is 1
[  122.121893][ T2305] usb 5-1: config 1 has an invalid interface number: 54 but max is 1
[  122.131256][ T6338] FAT-fs (loop1): Directory bread(block 72) failed
[  122.138420][ T2305] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  122.144470][ T6338] FAT-fs (loop1): Directory bread(block 73) failed
[  122.148064][ T2305] usb 5-1: config 1 has no interface number 0
[  122.160258][ T2305] usb 5-1: config 1 interface 54 has no altsetting 0
[  122.213557][   T23] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  122.285816][ T4226] acrux 0003:1A34:0802.000D: unknown main item tag 0x2
[  122.301864][ T4226] acrux 0003:1A34:0802.000D: No inputs registered, leaving
[  122.311434][ T4226] acrux 0003:1A34:0802.000D: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0
[  122.324131][ T2305] usb 5-1: New USB device found, idVendor=1199, idProduct=0028, bcdDevice=e5.25
[  122.334641][ T4226] acrux 0003:1A34:0802.000D: no inputs found
[  122.341031][ T4226] acrux 0003:1A34:0802.000D: Failed to enable force feedback support, error: -19
[  122.350608][ T2305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.359066][ T2305] usb 5-1: Product: syz
[  122.363513][ T2305] usb 5-1: Manufacturer: syz
[  122.368149][ T2305] usb 5-1: SerialNumber: syz
[  122.373860][   T23] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  122.382954][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.391481][   T23] usb 6-1: Product: syz
[  122.397790][   T23] usb 6-1: Manufacturer: syz
[  122.402417][   T23] usb 6-1: SerialNumber: syz
[  122.411484][   T23] usb 6-1: config 0 descriptor??
[  122.465863][   T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  122.483713][   T23] usb 6-1: setting power ON
[  122.494123][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  122.526061][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  122.543961][ T4226] usb 3-1: USB disconnect, device number 4
[  122.554312][   T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  122.563350][   T23] usb 6-1: media controller created
[  122.585202][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  122.609694][   T23] usb 6-1: selecting invalid altsetting 6
[  122.616047][   T23] usb 6-1: digital interface selection failed (-22)
[  122.622666][   T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  122.663841][   T23] usb 6-1: setting power OFF
[  122.677679][ T6329] dvb-usb: bulk message failed: -22 (3/0)
[  122.688388][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  122.694903][ T6329] cxusb: i2c rd: len=150 is too big!
[  122.694903][ T6329] 
[  122.702734][   T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  122.717316][   T23] (NULL device *): no alternate interface
[  122.733828][ T2305] sierra 5-1:1.54: Sierra USB modem converter detected
[  122.765811][ T2305] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[  122.774755][   T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  122.794414][ T2305] usb 5-1: USB disconnect, device number 7
[  122.804047][   T23] usb 6-1: USB disconnect, device number 8
[  122.822344][ T2305] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  122.836443][ T2305] sierra 5-1:1.54: device disconnected
[  122.962115][ T6355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.769'.
[  122.972085][ T6355] netlink: 32 bytes leftover after parsing attributes in process `syz.1.769'.
[  123.038814][ T5311] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  123.350497][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.5.781'.
[  123.459984][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.481269][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.504469][ T5311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  123.537873][ T5311] usb 1-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00
[  123.561364][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.586000][ T5311] usb 1-1: config 0 descriptor??
[  123.651965][ T6378] loop1: detected capacity change from 0 to 32768
[  123.670329][ T6380] loop4: detected capacity change from 0 to 32768
[  123.702238][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.783'.
[  123.733595][ T6380] XFS (loop4): Mounting V5 Filesystem
[  123.810225][ T6380] XFS (loop4): Ending clean mount
[  123.853902][ T5308] Bluetooth: hci4: command 0x0411 tx timeout
[  123.878237][ T6378] XFS (loop1): Mounting V5 Filesystem
[  123.917421][ T4198] XFS (loop4): Unmounting Filesystem
[  124.055845][ T6378] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  124.094230][ T5311] thrustmaster 0003:044F:B324.000E: unbalanced collection at end of report description
[  124.110516][ T5311] thrustmaster 0003:044F:B324.000E: parse failed
[  124.123488][ T5311] thrustmaster: probe of 0003:044F:B324.000E failed with error -22
[  124.163892][ T6378] XFS (loop1): Starting recovery (logdev: internal)
[  124.221261][ T6378] XFS (loop1): Ending recovery (logdev: internal)
[  124.250431][   T26] audit: type=1800 audit(1791570651.916:135): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.779" name="file1" dev="loop1" ino=4422 res=0 errno=0
[  124.320749][ T5311] usb 1-1: USB disconnect, device number 5
[  124.423728][ T4187] XFS (loop1): Unmounting Filesystem
[  124.453407][ T6423] netlink: 256 bytes leftover after parsing attributes in process `syz.5.794'.
[  124.480865][ T6423] netlink: 72 bytes leftover after parsing attributes in process `syz.5.794'.
[  124.525485][ T6425] netlink: 100 bytes leftover after parsing attributes in process `syz.4.790'.
[  124.542706][ T6425] netlink: 32 bytes leftover after parsing attributes in process `syz.4.790'.
[  124.604573][ T6427] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  124.950464][ T6441] siw: device registration error -23
[  124.981858][ T6443] xt_connbytes: Forcing CT accounting to be enabled
[  125.237112][ T6431] loop5: detected capacity change from 0 to 32768
[  125.359544][ T6431] JBD2: Ignoring recovery information on journal
[  125.447858][ T6431] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  125.556633][ T6472] netlink: 140 bytes leftover after parsing attributes in process `syz.1.814'.
[  125.625246][ T6431] (syz.5.797,6431,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  125.626580][ T6465] loop0: detected capacity change from 0 to 4096
[  125.673148][ T6431] (syz.5.797,6431,1):update_backups:188 ERROR: status = -12
[  125.675386][ T6465] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  125.728084][ T6431] ocfs2: Failed to update super blocks on 7,5 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[  125.890014][ T6477] loop1: detected capacity change from 0 to 4096
[  125.913000][ T4446] ocfs2: Unmounting device (7,5) on (node local)
[  125.951582][ T6487] __nla_validate_parse: 1 callbacks suppressed
[  125.951601][ T6487] netlink: 104 bytes leftover after parsing attributes in process `syz.2.818'.
[  126.024463][ T6477] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  126.144995][ T6477] ntfs3: loop1: Failed to load root.
[  126.795535][ T6539] loop0: detected capacity change from 0 to 1024
[  126.841212][ T6539] EXT4-fs (loop0): Ignoring removed nobh option
[  126.874078][ T6539] EXT4-fs (loop0): Ignoring removed bh option
[  126.882718][ T6530] loop1: detected capacity change from 0 to 4096
[  126.949151][ T6530] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  126.958780][ T6539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  127.014223][ T6541] loop5: detected capacity change from 0 to 8192
[  127.039501][ T6539] System zones: 0-1, 3-12
[  127.070904][ T6539] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none.
[  127.071972][ T6541]  loop5: p1 p2 p3 p4[EZD]
[  127.182655][ T6530] ntfs3: loop1: Failed to load $Extend.
[  127.185033][ T6541] loop5: partition table partially beyond EOD, truncated
[  127.221209][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'.
[  127.222969][ T6541] loop5: p1 start 16384 is beyond EOD, truncated
[  127.292528][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'.
[  127.294831][ T6541] loop5: p2 size 150994944 extends beyond EOD, truncated
[  127.339938][ T6557] netlink: 'syz.2.844': attribute type 18 has an invalid length.
[  127.363786][ T6541] loop5: p3 start 67108864 is beyond EOD, truncated
[  127.381177][ T6541] loop5: p4 size 33555584 extends beyond EOD, truncated
[  127.460336][ T6567] netlink: 'syz.0.846': attribute type 2 has an invalid length.
[  127.568022][ T6564] loop4: detected capacity change from 0 to 4096
[  127.642323][ T6574] netlink: 'syz.0.850': attribute type 7 has an invalid length.
[  127.665144][ T6564] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  127.691182][ T6576] binder: 6575:6576 ioctl 541b 0 returned -22
[  127.711970][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'.
[  127.741699][ T6564] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  127.764519][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'.
[  127.826758][ T6564] ntfs: volume version 3.1.
[  127.854014][ T6564] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Directory index record with vcn 0x0 is corrupt.  Corrupt inode 0x5.  Run chkdsk.
[  127.888997][ T6564] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  127.918239][ T6564] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  127.991339][ T5915] udevd[5915]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  128.002034][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  128.012158][ T2305] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  128.043698][ T6564] ntfs: (device loop4): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters.
[  128.159015][ T6594] loop0: detected capacity change from 0 to 4096
[  128.231107][ T6594] EXT4-fs (loop0): Test dummy encryption mode enabled
[  128.251656][ T6594] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  128.332398][ T6606] vivid-008: disconnect
[  128.346476][ T6594] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,test_dummy_encryption=v1,data_err=abort,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,nouid32,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000017,,errors=continue. Quota mode: writeback.
[  128.384053][ T2305] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.403486][ T2305] usb 6-1: config 0 interface 0 has no altsetting 0
[  128.407562][ T6603] vivid-008: reconnect
[  128.412091][ T2305] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  128.428097][ T2305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.438713][ T2305] usb 6-1: config 0 descriptor??
[  128.505664][ T6614] loop2: detected capacity change from 0 to 512
[  128.629113][ T6614] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  128.659456][ T6614] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.700557][ T6624] loop1: detected capacity change from 0 to 164
[  128.739875][ T6614] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.868: corrupted xattr block 33
[  128.757646][ T6614] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.868: corrupted xattr block 33
[  128.837673][ T6624] isofs_fill_super: get root inode failed
[  128.845317][ T6614] fscrypt (loop2, inode 15): Error -117 getting encryption context
[  128.939836][ T2305] pantherlord 0003:0F30:0111.000F: unbalanced collection at end of report description
[  128.966865][ T2305] pantherlord 0003:0F30:0111.000F: parse failed
[  128.995988][ T2305] pantherlord: probe of 0003:0F30:0111.000F failed with error -22
[  129.179748][ T4228] usb 6-1: USB disconnect, device number 9
[  129.625274][ T6660] device ip6_vti0 entered promiscuous mode
[  129.760560][ T6667] loop0: detected capacity change from 0 to 64
[  129.793460][ T5308] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  129.889761][ T6674] loop2: detected capacity change from 0 to 256
[  129.950285][ T6674] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  129.963550][ T6674] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  129.972474][ T6674] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  129.993814][ T6674] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  130.018749][ T6674] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  130.050037][ T6674] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  130.059265][ T5308] usb 5-1: Using ep0 maxpacket: 16
[  130.090032][ T6674] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  130.113505][ T6674] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  130.134945][ T6674] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  130.164275][ T6674] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  130.185781][   T26] audit: type=1800 audit(1791570657.856:136): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.895" name="file1" dev="loop2" ino=1048666 res=0 errno=0
[  130.239323][ T6674] syz.2.895 (6674) used greatest stack depth: 20080 bytes left
[  130.248613][ T6686] loop0: detected capacity change from 0 to 16
[  130.373801][ T6686] erofs: (device loop0): mounted with root inode @ nid 36.
[  130.413602][ T5308] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  130.443333][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.472356][ T5308] usb 5-1: Product: syz
[  130.486141][ T5308] usb 5-1: Manufacturer: syz
[  130.493937][ T5308] usb 5-1: SerialNumber: syz
[  130.694704][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.909'.
[  130.832706][ T5308] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  130.851466][ T6709] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.887628][ T5308] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  130.905189][ T6703] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  130.915891][ T5308] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  130.929284][ T6707] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  130.942116][ T5308] usb 5-1: media controller created
[  130.951070][ T6703] Remounting filesystem read-only
[  130.973732][ T5308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  131.001546][ T6707] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.024654][ T4191] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  131.116843][ T5308] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5
[  131.189114][ T6717] netlink: 48 bytes leftover after parsing attributes in process `syz.0.913'.
[  131.306523][ T6719] tipc: Started in network mode
[  131.312535][ T4228] usb 5-1: USB disconnect, device number 8
[  131.329696][ T6719] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  131.351322][ T6719] tipc: Enabled bearer <udp:syz0>, priority 10
[  131.743783][ T6741] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  131.896916][ T6749] set_capacity_and_notify: 5 callbacks suppressed
[  131.896933][ T6749] loop1: detected capacity change from 0 to 128
[  131.994588][ T6749] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  132.143482][ T6749] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  132.371922][ T6739] loop0: detected capacity change from 0 to 32768
[  132.392824][ T6763] loop1: detected capacity change from 0 to 2048
[  132.471022][ T4228] tipc: Node number set to 4269801488
[  132.479278][ T6763] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.502921][ T6739] JBD2: Ignoring recovery information on journal
[  132.588632][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.595019][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.766631][ T6739] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  132.887289][ T6785] loop4: detected capacity change from 0 to 512
[  132.901895][ T6739] (syz.0.924,6739,1):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  132.910498][ T6739] (syz.0.924,6739,1):update_backups:188 ERROR: status = -12
[  132.920493][ T6739] ocfs2: Failed to update super blocks on 7,0 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[  132.967043][ T6785] EXT4-fs (loop4): Ignoring removed bh option
[  132.982760][ T4191] ocfs2: Unmounting device (7,0) on (node local)
[  133.037781][ T6790] loop2: detected capacity change from 0 to 4096
[  133.049733][ T6785] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,usrquota,noinit_itable,resuid=0x0000000000000000,errors=remount-ro,bh,. Quota mode: writeback.
[  133.064412][ T1109] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  133.073937][ T6785] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.103446][ T4228] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  133.190749][ T6793] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.346938][ T6798] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  133.444695][ T1109] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.473882][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.497054][ T4228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.507295][ T1109] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.537859][ T4228] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  133.551414][ T1109] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  133.584859][ T4228] usb 6-1: New USB device found, idVendor=0003, idProduct=ffff, bcdDevice= 0.00
[  133.594272][ T1109] usb 2-1: config 0 interface 0 has no altsetting 0
[  133.614951][ T1109] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  133.629865][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.653360][ T1109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.672737][ T4228] usb 6-1: config 0 descriptor??
[  133.695780][ T1109] usb 2-1: config 0 descriptor??
[  133.739072][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'.
[  133.810861][ T6823] loop0: detected capacity change from 0 to 128
[  133.868131][ T6823] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  133.965021][   T26] audit: type=1800 audit(1791570661.636:137): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.957" name="file1" dev="loop0" ino=94 res=0 errno=0
[  134.054645][ T6831] loop4: detected capacity change from 0 to 4096
[  134.171201][ T4228] hid-generic 0003:0003:FFFF.0010: hidraw0: USB HID v0.00 Device [HID 0003:ffff] on usb-dummy_hcd.5-1/input0
[  134.188435][ T1109] hid-multitouch 0003:0EEF:72D0.0011: unknown main item tag 0x0
[  134.223408][ T1109] hid-multitouch 0003:0EEF:72D0.0011: unknown main item tag 0x0
[  134.231320][ T6841] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.261985][ T1109] hid-multitouch 0003:0EEF:72D0.0011: unknown main item tag 0x0
[  134.283565][ T1109] hid-multitouch 0003:0EEF:72D0.0011: unknown main item tag 0x0
[  134.291271][ T1109] hid-multitouch 0003:0EEF:72D0.0011: unknown main item tag 0x0
[  134.340697][ T1109] hid-multitouch 0003:0EEF:72D0.0011: unknown main item tag 0x0
[  134.358181][ T1109] hid-multitouch 0003:0EEF:72D0.0011: unknown main item tag 0x0
[  134.407458][ T1109] hid-multitouch 0003:0EEF:72D0.0011: unknown main item tag 0x0
[  134.460615][ T1109] hid-multitouch 0003:0EEF:72D0.0011: unknown main item tag 0x0
[  134.491606][ T1109] hid-multitouch 0003:0EEF:72D0.0011: No inputs registered, leaving
[  134.524641][ T1109] hid-multitouch 0003:0EEF:72D0.0011: hidraw1: USB HID v0.00 Joystick [HID 0eef:72d0] on usb-dummy_hcd.1-1/input0
[  134.556888][ T1109] usb 2-1: USB disconnect, device number 6
[  134.599921][ T2305] usb 6-1: USB disconnect, device number 10
[  134.741412][ T6860] fido_id[6860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  135.009944][ T6878] loop1: detected capacity change from 0 to 1024
[  135.132821][ T6884] xt_hashlimit: size too large, truncated to 1048576
[  135.142883][ T6878] hfsplus: failed to extend attributes file
[  135.461630][ T6880] loop5: detected capacity change from 0 to 32768
[  135.565703][ T6880] XFS (loop5): Mounting V5 Filesystem
[  135.653325][ T5316] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  135.664884][ T6880] XFS (loop5): Ending clean mount
[  135.680147][ T6880] XFS (loop5): Quotacheck needed: Please wait.
[  135.751371][ T6880] XFS (loop5): Quotacheck: Done.
[  135.822983][ T4446] XFS (loop5): Unmounting Filesystem
[  135.994556][ T6866] loop0: detected capacity change from 0 to 65536
[  136.181552][ T6866] XFS (loop0): Mounting V5 Filesystem
[  136.264487][ T5316] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  136.292208][ T5316] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  136.315453][ T5316] usb 2-1: Product: syz
[  136.319670][ T5316] usb 2-1: Manufacturer: syz
[  136.328088][ T5316] usb 2-1: SerialNumber: syz
[  136.347855][ T6866] XFS (loop0): Ending clean mount
[  136.357651][ T6916] ubi0: attaching mtd0
[  136.385838][ T5316] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  136.412373][ T5314] XFS (loop0): Metadata CRC error detected at xfs_agi_read_verify+0x192/0x250, xfs_agi block 0x8002 
[  136.442692][ T5314] XFS (loop0): Unmount and run xfs_repair
[  136.457295][ T5314] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  136.493619][ T5314] 00000000: 58 41 47 49 00 00 08 00 00 00 00 00 00 00 40 00  XAGI..........@.
[  136.521673][ T5314] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00  ................
[  136.549121][ T5314] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.583297][ T5314] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.596379][ T6906] overlayfs: upper fs needs to support d_type.
[  136.613247][ T6906] overlayfs: upper fs does not support tmpfile.
[  136.620418][ T5314] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.640605][ T5314] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.660189][ T5314] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.672702][ T6906] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  136.691925][ T6906] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  136.691925][ T6906] 
[  136.710312][ T5314] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  136.730125][ T6906] overlayfs: failed to verify origin (/, ino=2, err=-5)
[  136.737796][ T6866] XFS (loop0): metadata I/O error in "xfs_read_agi+0x230/0x540" at daddr 0x8002 len 1 error 74
[  136.754623][ T6906] overlayfs: failed to verify upper root origin
[  136.819120][ T4191] XFS (loop0): Unmounting Filesystem
[  136.843749][ T5316] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  136.861420][ T5316] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  136.929853][ T6927] set_capacity_and_notify: 1 callbacks suppressed
[  136.929870][ T6927] loop5: detected capacity change from 0 to 1024
[  137.005258][ T6927] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  137.005749][  T154] read_mapping_page failed!
[  137.046889][ T5316] usb 2-1: USB disconnect, device number 7
[  137.063394][  T154] ERROR: (device loop2): txCommit: 
[  137.063394][  T154] 
[  137.112055][  T154] jfs_write_inode: jfs_commit_inode failed!
[  137.456502][ T6935] loop0: detected capacity change from 0 to 64
[  137.738566][ T6943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'.
[  137.774647][ T2305] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  137.811334][ T6948] netlink: 'syz.0.1003': attribute type 1 has an invalid length.
[  137.846128][ T6948] netlink: 'syz.0.1003': attribute type 2 has an invalid length.
[  137.932751][ T6955] loop0: detected capacity change from 0 to 1024
[  138.043628][ T6955] hfsplus: failed to extend attributes file
[  138.153738][ T2305] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.187790][ T2305] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.219184][ T6963] loop0: detected capacity change from 0 to 2048
[  138.230357][ T2305] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.265769][ T2305] usb 6-1: config 0 interface 0 has no altsetting 0
[  138.272448][ T2305] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  138.289813][ T2305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.300777][ T6963] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  138.331441][ T2305] usb 6-1: config 0 descriptor??
[  138.371577][ T6963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.483185][ T6971] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1015'.
[  138.496162][ T6971] netlink: 'syz.2.1015': attribute type 2 has an invalid length.
[  138.550633][ T6974] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  138.559224][ T6974] ALSA: mixer_oss: invalid index 1374389
[  138.645358][ T6977] RDS: rds_bind could not find a transport for ::ff00:0:0:0, load rds_tcp or rds_rdma?
[  138.768153][ T6987] loop1: detected capacity change from 0 to 256
[  138.798511][ T6987] exfat: Bad value for 'uid'
[  138.807485][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'.
[  139.049454][ T7004] loop4: detected capacity change from 0 to 764
[  139.083983][ T2305] sony 0003:054C:042F.0012: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[  139.117813][ T2305] sony 0003:054C:042F.0012: hidraw0: USB HID v0.00 Joystick [HID 054c:042f] on usb-dummy_hcd.5-1/input0
[  139.142979][ T7004] rock: directory entry would overflow storage
[  139.161166][ T2305] sony 0003:054C:042F.0012: failed to claim input
[  139.168578][ T7004] rock: sig=0x5850, size=36, remaining=22
[  139.221426][ T2305] usb 6-1: USB disconnect, device number 11
[  139.332694][ T7022] loop2: detected capacity change from 0 to 8
[  139.390773][ T7018] fido_id[7018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  139.501920][ T7026] loop1: detected capacity change from 0 to 256
[  139.782404][ T7033] loop5: detected capacity change from 0 to 256
[  139.849598][ T7035] Bluetooth: hci0: unsupported parameter 5135
[  139.870900][ T7033] FAT-fs (loop5): Directory bread(block 64) failed
[  139.888995][ T7033] FAT-fs (loop5): Directory bread(block 65) failed
[  139.899160][ T7035] Bluetooth: hci0: unsupported parameter 8192
[  139.904925][ T7033] FAT-fs (loop5): Directory bread(block 66) failed
[  139.909147][ T7035] Bluetooth: hci0: unsupported parameter 5135
[  139.921918][ T7033] FAT-fs (loop5): Directory bread(block 67) failed
[  139.936509][ T7033] FAT-fs (loop5): Directory bread(block 68) failed
[  139.938829][ T7035] Bluetooth: hci0: unsupported parameter 8192
[  139.957165][ T7033] FAT-fs (loop5): Directory bread(block 69) failed
[  139.970754][ T7033] FAT-fs (loop5): Directory bread(block 70) failed
[  139.985252][ T7033] FAT-fs (loop5): Directory bread(block 71) failed
[  140.000735][ T7033] FAT-fs (loop5): Directory bread(block 72) failed
[  140.015216][ T7033] FAT-fs (loop5): Directory bread(block 73) failed
[  140.046010][ T7017] loop0: detected capacity change from 0 to 32768
[  140.144319][ T7017] XFS (loop0): Mounting V5 Filesystem
[  140.256493][ T7020] XFS (loop4): Mounting V5 Filesystem
[  140.276933][ T7017] XFS (loop0): Ending clean mount
[  140.385803][ T7020] XFS (loop4): Ending clean mount
[  140.411558][ T7020] XFS (loop4): Quotacheck needed: Please wait.
[  140.429222][ T4191] XFS (loop0): Unmounting Filesystem
[  140.489760][ T7053] NILFS (loop5): invalid segment: Checksum error in segment payload
[  140.557758][ T7053] NILFS (loop5): trying rollback from an earlier position
[  140.566852][ T7020] XFS (loop4): Quotacheck: Done.
[  140.650432][ T7053] NILFS (loop5): recovery complete
[  140.680750][ T7065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.708494][ T4198] XFS (loop4): Unmounting Filesystem
[  140.714069][ T7066] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.814891][ T7053] NILFS (loop5): nilfs_palloc_freev (ino=3): entry number 127 already freed
[  140.835383][ T7053] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  141.318514][ T7081] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  141.337497][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop1
[  141.437306][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop1
[  141.511398][ T7062] XFS (loop2): Mounting V5 Filesystem
[  141.639949][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'.
[  141.670349][ T7062] XFS (loop2): Ending clean mount
[  141.730854][   T26] audit: type=1800 audit(1791570669.396:138): pid=7062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1050" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  141.804144][ T7113] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  141.824690][ T5915] udevd[5915]: incorrect cramfs checksum on /dev/loop4
[  141.831690][ T4193] XFS (loop2): Unmounting Filesystem
[  141.895390][ T5915] udevd[5915]: incorrect cramfs checksum on /dev/loop4
[  141.908067][ T7111] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  142.070300][ T7126] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1074'.
[  142.189387][ T7132] set_capacity_and_notify: 9 callbacks suppressed
[  142.189403][ T7132] loop0: detected capacity change from 0 to 256
[  142.342913][ T7141] comedi comedi3: mpc624: I/O port conflict (0x1f,16)
[  142.499876][ T7147] loop1: detected capacity change from 0 to 8
[  142.572173][ T7151] ip_tables: iptables: counters copy to user failed while replacing table
[  142.589489][ T7147] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  142.606435][ T7153] netlink: 'syz.0.1084': attribute type 1 has an invalid length.
[  142.645120][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop1
[  142.696601][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop1
[  142.821817][ T7161] loop0: detected capacity change from 0 to 4096
[  142.845168][ T7166] ALSA: mixer_oss: invalid OSS volume 'LIDE'
[  142.934156][ T7169] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.962145][ T7162] loop4: detected capacity change from 0 to 8192
[  142.998887][ T7161] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  143.116575][ T7161] Remounting filesystem read-only
[  143.125567][ T7173] loop2: detected capacity change from 0 to 1024
[  143.181271][ T7140] loop5: detected capacity change from 0 to 32768
[  143.243688][ T7173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.364100][ T7179] syz.1.1096[7179] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  143.364265][ T7179] syz.1.1096[7179] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  143.621357][ T7188] loop1: detected capacity change from 0 to 1024
[  143.766395][ T7198] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1105'.
[  143.780436][ T7199] loop2: detected capacity change from 0 to 136
[  143.809715][ T7188] hfsplus: xattr searching failed
[  143.842639][ T7199] Attempt to read inode for relocated directory
[  143.890907][ T7199] attempt to access beyond end of device
[  143.890907][ T7199] loop2: rw=524288, want=335544432, limit=136
[  143.936531][ T7199] attempt to access beyond end of device
[  143.936531][ T7199] loop2: rw=0, want=335544432, limit=136
[  143.993743][   T26] audit: type=1800 audit(1791570671.666:139): pid=7199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1106" name="file1" dev="loop2" ino=1487 res=0 errno=0
[  144.308245][ T7216] sd 0:0:1:0: device reset
[  144.393571][ T7220] loop0: detected capacity change from 0 to 2048
[  144.469646][ T7220] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  144.497721][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'.
[  144.572925][ T7231] loop5: detected capacity change from 0 to 512
[  144.743776][ T7231] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  144.787783][ T7231] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.012768][ T7248] device macsec1 entered promiscuous mode
[  145.104714][ T7260] erofs: (device loop2): mounted with root inode @ nid 36.
[  145.138676][ T7260] attempt to access beyond end of device
[  145.138676][ T7260] loop2: rw=0, want=34359736328, limit=16
[  145.243654][ T1109] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  145.415350][ T7237] JBD2: Ignoring recovery information on journal
[  145.493365][ T1109] usb 6-1: Using ep0 maxpacket: 32
[  145.547318][ T7237] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  145.664385][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[  145.665224][   T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  145.683705][ T7262] F2FS-fs (loop4): invalid crc value
[  145.722104][ T7262] F2FS-fs (loop4): Found nat_bits in checkpoint
[  145.773989][ T1109] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  145.793747][ T1109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.822138][ T1109] usb 6-1: Product: syz
[  145.842375][ T1109] usb 6-1: Manufacturer: syz
[  145.861234][ T1109] usb 6-1: SerialNumber: syz
[  145.882673][ T1109] usb 6-1: config 0 descriptor??
[  145.891266][ T7262] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  145.917894][   T23] usb 3-1: Using ep0 maxpacket: 32
[  145.945698][ T1109] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  145.978928][ T1109] dvb-usb: bulk message failed: -22 (4/0)
[  145.998802][ T1109] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  146.002332][ T7264] F2FS-fs (loop0): invalid crc value
[  146.019684][ T1109] dvb-usb: bulk message failed: -22 (5/0)
[  146.027082][ T1109] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  146.048339][ T1109] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  146.063452][   T23] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  146.085745][ T7264] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  146.119230][ T7276] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e019, mo2=0002]
[  146.123946][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.143469][ T7276] System zones: 0-2, 18-18, 34-34
[  146.153836][ T1109] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  146.161886][ T1109] usb 6-1: media controller created
[  146.179184][ T7254] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO.
[  146.212744][   T23] usb 3-1: config 0 descriptor??
[  146.225847][ T7254] dvb-usb: bulk message failed: -22 (7/0)
[  146.231910][ T7254] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  146.242439][ T7254] ttusb2: i2c transfer failed.
[  146.249255][ T7276] EXT4-fs (loop1): 1 orphan inode deleted
[  146.255338][ T7276] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000000,debug,nombcache,,errors=continue. Quota mode: none.
[  146.272086][ T7276] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.312141][ T1109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  146.326144][   T23] gspca_main: nw80x-2.14.0 probing 055f:d001
[  146.349777][ T7264] F2FS-fs (loop0): Start checkpoint disabled!
[  146.359861][ T1109] usb 6-1: selecting invalid altsetting 3
[  146.365691][ T1109] ttusb2: set interface to alts=3 failed
[  146.380570][ T4198] attempt to access beyond end of device
[  146.380570][ T4198] loop4: rw=2049, want=45104, limit=40427
[  146.420945][ T7264] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e7
[  146.444061][ T1109] DVB: Unable to find symbol tda10086_attach()
[  146.450260][ T1109] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  146.514004][ T1109] dvb-usb: bulk message failed: -22 (4/0)
[  146.519854][ T1109] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  146.553425][   T23] gspca_nw80x: reg_w err -71
[  146.558128][   T23] nw80x: probe of 3-1:0.0 failed with error -71
[  146.565067][ T1109] dvb-usb: bulk message failed: -22 (5/0)
[  146.579608][ T1109] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  146.608400][   T23] usb 3-1: USB disconnect, device number 5
[  146.631568][ T1109] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  146.713735][ T1109] usb 6-1: USB disconnect, device number 12
[  146.744997][ T1109] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  147.226963][ T7316] syz.2.1148[7316] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.227155][ T7316] syz.2.1148[7316] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.283371][ T5314] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  147.394671][ T1109] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  147.438040][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1154'.
[  147.643380][ T1109] usb 5-1: Using ep0 maxpacket: 16
[  147.718932][ T5314] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.724604][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'.
[  147.737619][ T5314] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  147.758266][ T5314] usb 6-1: config 0 interface 0 has no altsetting 0
[  147.765210][ T5314] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  147.779875][ T7352] netlink: 'syz.2.1163': attribute type 22 has an invalid length.
[  147.783993][ T5314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.795969][ T7351] program syz.1.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  147.804874][ T7352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1163'.
[  147.821406][ T5314] usb 6-1: config 0 descriptor??
[  147.855934][ T7335] set_capacity_and_notify: 5 callbacks suppressed
[  147.855948][ T7335] loop0: detected capacity change from 0 to 32768
[  147.897058][ T7335] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.1155 (7335)
[  147.924004][ T1109] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  147.943211][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.961693][ T1109] usb 5-1: Product: syz
[  147.966112][ T1109] usb 5-1: Manufacturer: syz
[  147.970722][ T1109] usb 5-1: SerialNumber: syz
[  147.999679][ T1109] usb 5-1: config 0 descriptor??
[  148.022978][ T7335] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  148.045941][ T7335] BTRFS info (device loop0): using free space tree
[  148.052496][ T7335] BTRFS info (device loop0): has skinny extents
[  148.058939][ T1109] gspca_main: spca508-2.14.0 probing 041e:4018
[  148.133881][ T7369] jffs2: notice: (7369) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  148.172412][ T7374] device bridge0 entered promiscuous mode
[  148.179700][ T7374] device macvlan2 entered promiscuous mode
[  148.260407][ T7387] loop2: detected capacity change from 0 to 512
[  148.273614][ T1109] gspca_spca508: reg_read err -32
[  148.315477][ T5314] sony 0003:054C:0268.0013: invalid report_size -1378840695
[  148.328236][ T7387] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  148.340032][ T7387] FAT-fs (loop2): Filesystem has been set read-only
[  148.343706][ T5314] sony 0003:054C:0268.0013: item 0 4 1 7 parsing failed
[  148.360538][ T7335] BTRFS info (device loop0): enabling ssd optimizations
[  148.376461][ T5314] sony 0003:054C:0268.0013: parse failed
[  148.382285][ T5314] sony: probe of 0003:054C:0268.0013 failed with error -22
[  148.472566][ T7397] xt_HMARK: spi-set and port-set can't be combined
[  148.517562][ T7399] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes
[  148.533440][ T1109] gspca_spca508: reg_read err -71
[  148.552909][ T5314] usb 6-1: USB disconnect, device number 13
[  148.556706][ T1109] gspca_spca508: reg_read err -71
[  148.583720][ T1109] gspca_spca508: reg_read err -71
[  148.603605][ T1109] gspca_spca508: reg write: error -71
[  148.615076][ T1109] spca508: probe of 5-1:0.0 failed with error -71
[  148.651635][ T1109] usb 5-1: USB disconnect, device number 9
[  148.745944][ T7410] netlink: 'syz.1.1182': attribute type 16 has an invalid length.
[  149.011039][ T7423] loop0: detected capacity change from 0 to 2048
[  149.020485][ T7421] loop2: detected capacity change from 0 to 4096
[  149.112508][ T7423] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  149.162002][ T7421] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  149.223437][ T4228] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  149.257716][ T7421] ntfs3: loop2: failed to convert "0080" to cp737
[  149.341545][ T7421] ntfs3: loop2: failed to convert name for inode 1e.
[  149.468027][ T7451] loop5: detected capacity change from 0 to 256
[  149.483620][ T4228] usb 2-1: Using ep0 maxpacket: 8
[  149.549970][ T7451] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  149.616328][ T4228] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  149.632954][ T4228] usb 2-1: config 179 has no interface number 0
[  149.687849][ T4228] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  149.727092][ T4228] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  149.757591][ T4228] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  149.781263][ T7468] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1206'.
[  149.804855][ T4228] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  149.833457][ T4228] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  149.863514][ T4228] usb 2-1: config 179 interface 65 has no altsetting 0
[  149.874368][ T4228] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  149.893432][ T4228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.960050][ T4228] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14
[  150.221080][ T7480] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1213'.
[  150.237655][ T2305] usb 2-1: USB disconnect, device number 8
[  150.246617][ T2305] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  150.831327][ T7516] loop2: detected capacity change from 0 to 16
[  150.863092][ T7516] erofs: (device loop2): mounted with root inode @ nid 36.
[  150.879169][ T7516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  150.903005][ T7516] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -37 in[64, 4032] out[1851]
[  150.963530][ T7516] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  151.111033][ T7528] loop1: detected capacity change from 0 to 1024
[  151.138712][ T7532] loop2: detected capacity change from 0 to 256
[  151.209529][ T7528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.231847][ T7500] loop5: detected capacity change from 0 to 32768
[  151.243455][ T7532] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  151.436637][ T7538] loop0: detected capacity change from 0 to 4096
[  151.539135][ T7538] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  151.579491][ T7538] NILFS (loop0): mounting unchecked fs
[  151.595433][ T7538] NILFS (loop0): recovery required for readonly filesystem
[  151.624289][ T7538] NILFS (loop0): write access will be enabled during recovery
[  151.696280][ T5915] udevd[5915]: incorrect nilfs2 checksum on /dev/loop0
[  151.734657][ T7538] NILFS (loop0): norecovery option specified, skipping roll-forward recovery
[  151.940763][ T4177] udevd[4177]: incorrect nilfs2 checksum on /dev/loop0
[  152.411934][ T7555] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,nogrpid,max_dir_size_kb=0x0000000000000004,quota,,errors=continue. Quota mode: writeback.
[  152.533816][ T7562] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  152.543908][ T7555] EXT4-fs error (device loop0): ext4_ext_precache:626: inode #2: comm syz.0.1247: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  152.554923][ T7548] XFS: ikeep mount option is deprecated.
[  152.730230][ T7548] XFS (loop5): Mounting V5 Filesystem
[  152.789708][ T7542] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1242 (7542)
[  152.968975][ T7536] F2FS-fs (loop4): invalid crc value
[  152.981761][ T7542] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  153.009178][ T7542] BTRFS info (device loop2): enabling auto defrag
[  153.012994][ T7548] XFS (loop5): Starting recovery (logdev: internal)
[  153.036394][ T7542] BTRFS info (device loop2): max_inline at 4096
[  153.042710][ T7542] BTRFS info (device loop2): using free space tree
[  153.067976][ T7548] XFS (loop5): Ending recovery (logdev: internal)
[  153.078211][ T7536] F2FS-fs (loop4): Found nat_bits in checkpoint
[  153.130912][ T7542] BTRFS info (device loop2): has skinny extents
[  153.141797][ T4446] XFS (loop5): Unmounting Filesystem
[  153.199922][ T7579] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1252'.
[  153.234803][ T7579] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1252'.
[  153.270034][ T7536] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  153.415496][ T4198] attempt to access beyond end of device
[  153.415496][ T4198] loop4: rw=2049, want=45104, limit=40427
[  153.523440][ T7542] BTRFS info (device loop2): enabling ssd optimizations
[  154.252697][ T7629] sock: sock_set_timeout: `syz.0.1269' (pid 7629) tries to set negative timeout
[  154.462394][ T7647] sctp: [Deprecated]: syz.5.1274 (pid 7647) Use of struct sctp_assoc_value in delayed_ack socket option.
[  154.462394][ T7647] Use struct sctp_sack_info instead
[  154.672625][ T7660] set_capacity_and_notify: 6 callbacks suppressed
[  154.672641][ T7660] loop4: detected capacity change from 0 to 128
[  154.735665][ T7660] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  154.778064][ T7632] loop1: detected capacity change from 0 to 32768
[  154.788354][ T7660] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.891202][ T7632] JBD2: Ignoring recovery information on journal
[  155.048402][ T7632] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  155.174550][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[  155.452311][ T7712] loop5: detected capacity change from 0 to 64
[  155.479914][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'.
[  155.509543][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'.
[  155.685681][ T7726] loop2: detected capacity change from 0 to 1024
[  155.806902][ T7726] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  155.869499][ T7725] loop4: detected capacity change from 0 to 4096
[  155.888330][ T7730] loop5: detected capacity change from 0 to 4096
[  156.031778][ T7725] ntfs3: loop4: Failed to load $Extend.
[  156.051974][ T7734] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.233070][ T7722] loop1: detected capacity change from 0 to 40427
[  156.382782][ T7722] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  156.403700][ T7722] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  156.446552][ T7722] F2FS-fs (loop1): invalid crc value
[  156.507721][ T7722] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  156.680738][ T7722] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  156.690300][ T7722] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  156.781700][ T7736] loop2: detected capacity change from 0 to 32768
[  157.050748][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1330'.
[  157.086250][ T4228] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  157.470781][ T7769] loop2: detected capacity change from 0 to 40427
[  157.478075][ T4228] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  157.489939][ T7787] Bluetooth: hci0: Invalid link address type 20 for 66:55:44:33:22:11
[  157.504481][ T7769] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  157.513429][ T7413] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  157.520757][ T4228] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  157.539245][ T4228] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.548371][ T7769] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  157.568462][ T4228] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  157.589278][ T7769] F2FS-fs (loop2): invalid crc value
[  157.594750][ T4228] usb 6-1: config 0 interface 0 has no altsetting 0
[  157.621507][ T7769] F2FS-fs (loop2): Found nat_bits in checkpoint
[  157.632678][ T4228] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  157.676728][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.710369][ T4228] usb 6-1: config 0 descriptor??
[  157.760568][ T7769] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  157.783437][ T7769] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  157.903569][ T7413] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.923316][ T7413] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.949669][ T7783] loop1: detected capacity change from 0 to 32768
[  157.956203][ T7413] usb 1-1: config 0 interface 0 has no altsetting 0
[  157.962841][ T7413] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  157.975416][ T7413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.985671][ T7413] usb 1-1: config 0 descriptor??
[  158.100894][ T7783] XFS (loop1): Mounting V5 Filesystem
[  158.236686][ T4228] hid-alps 0003:044E:120C.0014: unknown main item tag 0x0
[  158.285887][ T4228] hid-alps 0003:044E:120C.0014: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.5-1/input0
[  158.367781][ T7794] XFS (loop4): Mounting V5 Filesystem
[  158.380125][ T7783] XFS (loop1): Ending clean mount
[  158.470216][ T7413] hid-multitouch 0003:0EEF:72C4.0015: unbalanced delimiter at end of report description
[  158.470242][ T4228] usb 6-1: USB disconnect, device number 14
[  158.482660][ T7413] hid-multitouch: probe of 0003:0EEF:72C4.0015 failed with error -22
[  158.550226][ T7794] XFS (loop4): Ending clean mount
[  158.558948][ T4187] XFS (loop1): Unmounting Filesystem
[  158.576200][ T7794] XFS (loop4): Quotacheck needed: Please wait.
[  158.670458][ T5316] usb 1-1: USB disconnect, device number 6
[  158.688802][ T7794] XFS (loop4): Quotacheck: Done.
[  158.789591][ T4198] XFS (loop4): Unmounting Filesystem
[  159.008166][ T7810] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288)
[  159.022156][ T7810] F2FS-fs (loop2): invalid crc value
[  159.075014][ T7810] F2FS-fs (loop2): Found nat_bits in checkpoint
[  159.236291][ T7810] F2FS-fs (loop2): recover fsync data on readonly fs
[  159.262237][ T7810] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  159.274862][ T7810] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  159.300323][ T7810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  159.356206][ T7828] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  159.482370][ T7823] ntfs: volume version 3.1.
[  159.739167][ T7819] set_capacity_and_notify: 3 callbacks suppressed
[  159.739183][ T7819] loop5: detected capacity change from 0 to 32768
[  159.786848][ T7819] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1342 (7819)
[  159.863010][ T7819] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  159.883931][ T7819] BTRFS info (device loop5): using free space tree
[  159.890485][ T7819] BTRFS info (device loop5): has skinny extents
[  160.177546][ T7819] BTRFS info (device loop5): enabling ssd optimizations
[  160.185079][ T2305] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  160.252147][ T7888] loop2: detected capacity change from 0 to 256
[  160.293870][ T7886] bridge0: port 3(ipvlan2) entered blocking state
[  160.300588][ T7886] bridge0: port 3(ipvlan2) entered disabled state
[  160.425767][ T2305] usb 1-1: Using ep0 maxpacket: 8
[  160.543808][ T2305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.563340][ T2305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.573136][ T2305] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  160.603571][ T2305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.641430][ T2305] usb 1-1: config 0 descriptor??
[  160.698336][ T7890] loop1: detected capacity change from 0 to 32768
[  160.811073][ T7890] JBD2: Ignoring recovery information on journal
[  160.864472][ T7890] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  160.873172][ T7890] JBD2: bad block at offset 32
[  160.882638][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'.
[  160.994878][ T7890] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  161.108433][ T4187] ocfs2: Unmounting device (7,1) on (node local)
[  161.126291][ T2305] uclogic 0003:145F:0212.0016: interface is invalid, ignoring
[  161.326756][ T2305] usb 1-1: USB disconnect, device number 7
[  161.433858][ T7939] netlink: 200 bytes leftover after parsing attributes in process `syz.5.1385'.
[  161.688699][ T7954] tipc: Started in network mode
[  161.704230][ T7954] tipc: Node identity 2e7766554433221100ffeeddccbbaa99, cluster identity 4711
[  161.811127][ T7937] loop2: detected capacity change from 0 to 32768
[  161.953663][ T7902] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  161.994842][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1397'.
[  162.015193][ T7966] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1397'.
[  162.028226][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1397'.
[  162.039372][ T7962] loop0: detected capacity change from 0 to 4096
[  162.093639][ T5316] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  162.111709][ T7962] NILFS (loop0): invalid segment: Checksum error in segment payload
[  162.130729][ T7962] NILFS (loop0): trying rollback from an earlier position
[  162.168044][ T7962] NILFS (loop0): recovery complete
[  162.195245][ T7972] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.239098][ T7962] NILFS (loop0): Segment number 13903790157999918 to be freed is out of range
[  162.273524][ T5314] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  162.373474][ T7902] usb 5-1: unable to get BOS descriptor or descriptor too short
[  162.443101][ T7985] loop0: detected capacity change from 0 to 1024
[  162.453688][ T7902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.478837][ T7902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  162.523370][ T5314] usb 3-1: Using ep0 maxpacket: 32
[  162.543525][ T5316] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  162.565297][ T5316] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  162.570393][ T4251] hfsplus: b-tree write err: -5, ino 8
[  162.607455][ T5316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.643508][ T7902] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  162.653225][ T7902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.688133][ T7902] usb 5-1: Product: syz
[  162.700283][ T7902] usb 5-1: Manufacturer: syz
[  162.708539][ T7902] usb 5-1: SerialNumber: syz
[  162.778311][ T7902] usb 5-1: selecting invalid altsetting 1
[  162.786458][ T7902] usb 5-1: unit 6 not found!
[  162.819132][ T7987] loop5: detected capacity change from 0 to 32768
[  162.873574][ T5314] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  162.888341][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.898227][ T5314] usb 3-1: Product: syz
[  162.902496][ T5314] usb 3-1: Manufacturer: syz
[  162.911635][ T5314] usb 3-1: SerialNumber: syz
[  162.924111][ T7987] JBD2: Ignoring recovery information on journal
[  162.931573][ T5314] usb 3-1: config 0 descriptor??
[  162.936845][ T5316] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  162.947917][ T5316] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input15
[  162.981355][ T5316] usb 2-1: USB disconnect, device number 9
[  162.987294][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  162.998269][ T5314] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  163.004889][ T7902] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3
[  163.006058][ T5314] dvb-usb: bulk message failed: -22 (4/0)
[  163.021365][ T5314] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  163.026002][ T7987] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  163.043164][ T5314] dvb-usb: bulk message failed: -22 (5/0)
[  163.049150][ T5314] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  163.061916][ T5314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  163.072350][ T7902] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2)
[  163.096072][ T5314] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  163.118754][ T5314] usb 3-1: media controller created
[  163.142759][ T5314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  163.176907][ T7902] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  163.184398][ T5314] usb 3-1: selecting invalid altsetting 3
[  163.192275][ T5314] ttusb2: set interface to alts=3 failed
[  163.202921][ T7968] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO.
[  163.213903][ T7968] dvb-usb: bulk message failed: -22 (7/0)
[  163.221560][ T7968] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  163.250069][ T7968] ttusb2: i2c transfer failed.
[  163.272312][ T4446] ocfs2: Unmounting device (7,5) on (node local)
[  163.274286][ T5314] DVB: Unable to find symbol tda10086_attach()
[  163.285376][ T5314] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  163.325866][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.343422][ T5314] dvb-usb: bulk message failed: -22 (4/0)
[  163.349492][ T5314] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  163.360770][ T5314] dvb-usb: bulk message failed: -22 (5/0)
[  163.374184][ T5314] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  163.376623][ T7902] usb 5-1: USB disconnect, device number 10
[  163.409821][ T5314] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  163.449114][ T5314] usb 3-1: USB disconnect, device number 6
[  163.596833][ T5314] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  164.246270][ T8037] loop5: detected capacity change from 0 to 512
[  164.334827][ T8037] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  164.543081][ T8037] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1428: bg 0: block 384: padding at end of block bitmap is not set
[  164.598811][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  164.641673][ T8037] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  164.701940][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  164.727292][ T8015] loop1: detected capacity change from 0 to 40427
[  164.744216][ T8037] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.1428: attempt to clear invalid blocks 983260 len 1
[  164.815648][ T8015] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  164.822287][ T8015] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  164.860438][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  164.881214][ T8037] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1428: Invalid inode table block 0 in block_group 0
[  164.886071][ T8026] loop0: detected capacity change from 0 to 131072
[  164.934007][ T8026] XFS: ikeep mount option is deprecated.
[  164.955481][ T8015] F2FS-fs (loop1): Found nat_bits in checkpoint
[  164.996612][ T8033] loop4: detected capacity change from 0 to 32768
[  165.023349][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  165.046302][ T8037] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  165.060540][ T8015] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  165.068569][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  165.075460][ T8026] XFS (loop0): Mounting V5 Filesystem
[  165.083392][ T8015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  165.096093][ T8037] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  165.141228][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  165.147936][ T8037] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1428: Invalid inode table block 0 in block_group 0
[  165.173305][ T8033] JBD2: Ignoring recovery information on journal
[  165.190918][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  165.198848][ T8033] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  165.261193][ T8033] JBD2: bad block at offset 32
[  165.265224][ T8026] XFS (loop0): Starting recovery (logdev: internal)
[  165.272768][ T8037] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  165.284897][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  165.316659][ T8037] EXT4-fs error (device loop5): ext4_truncate:4286: inode #11: comm syz.5.1428: mark_inode_dirty error
[  165.331184][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  165.331387][ T8033] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  165.348413][ T8037] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  165.361935][ T8026] XFS (loop0): Ending recovery (logdev: internal)
[  165.381155][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  165.390560][ T8037] EXT4-fs (loop5): 1 truncate cleaned up
[  165.443396][ T8037] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none.
[  165.495179][ T4191] XFS (loop0): Unmounting Filesystem
[  165.606266][ T4198] ocfs2: Unmounting device (7,4) on (node local)
[  165.621718][ T8067] loop2: detected capacity change from 0 to 1024
[  165.647278][ T8037] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz.5.1428: Invalid inode table block 0 in block_group 0
[  165.746774][ T8037] EXT4-fs (loop5): Remounting filesystem read-only
[  165.756165][ T8067] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  165.957952][ T8069] smc: net device lo applied user defined pnetid SYZ0
[  166.279052][ T4196] Bluetooth: hci4: link tx timeout
[  166.284761][ T4196] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  166.294637][ T5318] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  166.460059][ T8071] loop5: detected capacity change from 0 to 32768
[  166.555945][ T5318] usb 2-1: Using ep0 maxpacket: 32
[  166.873563][ T5318] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  166.889712][ T5318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.918497][ T5318] usb 2-1: Product: syz
[  166.922713][ T5318] usb 2-1: Manufacturer: syz
[  166.937115][ T5318] usb 2-1: SerialNumber: syz
[  166.964861][ T5318] usb 2-1: config 0 descriptor??
[  166.978043][ T7413] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  167.005546][ T5318] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  167.005605][ T5318] dvb-usb: bulk message failed: -22 (4/0)
[  167.005622][ T5318] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  167.005691][ T5318] dvb-usb: bulk message failed: -22 (5/0)
[  167.005706][ T5318] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  167.014457][ T5318] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  167.034168][ T5318] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  167.034244][ T5318] usb 2-1: media controller created
[  167.060433][ T5318] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  167.108541][ T8122] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4198] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           
[  167.110391][ T5318] usb 2-1: selecting invalid altsetting 3
[  167.110410][ T5318] ttusb2: set interface to alts=3 failed
[  167.154126][ T5318] DVB: Unable to find symbol tda10086_attach()
[  167.154142][ T5318] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  167.194479][ T5318] dvb-usb: bulk message failed: -22 (4/0)
[  167.194501][ T5318] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  167.194560][ T5318] dvb-usb: bulk message failed: -22 (5/0)
[  167.194575][ T5318] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  167.194612][ T5318] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  167.330929][    C0] vkms_vblank_simulate: vblank timer overrun
[  167.354369][ T8073] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO.
[  167.354458][ T8073] dvb-usb: bulk message failed: -22 (7/0)
[  167.354497][ T8073] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  167.354528][ T8073] ttusb2: i2c transfer failed.
[  167.357261][ T7902] usb 2-1: USB disconnect, device number 10
[  167.400104][ T7902] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  167.406839][ T8107] loop5: detected capacity change from 0 to 32768
[  167.423594][ T7413] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  167.423627][ T7413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.434291][ T8129] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  167.466209][ T8107] JBD2: Ignoring recovery information on journal
[  167.527560][ T8107] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  167.585537][   T26] audit: type=1800 audit(1791570695.256:140): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1456" name="bus" dev="loop5" ino=17058 res=0 errno=0
[  167.674336][ T4446] ocfs2: Unmounting device (7,5) on (node local)
[  167.730792][ T7413] usb 3-1: NFC: Reader power on cmd error 0
[  167.730816][ T7413] pn533_usb 3-1:1.0: NFC: Couldn't poweron the reader (error -22)
[  167.730893][ T7413] pn533_usb: probe of 3-1:1.0 failed with error -22
[  167.737542][ T7413] usb 3-1: USB disconnect, device number 7
[  168.172873][ T8159] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  168.183483][ T4230] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  168.343530][ T7413] Bluetooth: hci4: command 0x0406 tx timeout
[  168.478224][ T8154] loop1: detected capacity change from 0 to 32768
[  168.543619][ T4230] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  168.551670][ T4230] usb 6-1: config 0 has no interface number 0
[  168.600188][ T8187] loop0: detected capacity change from 0 to 512
[  168.621778][ T8154] XFS (loop1): Mounting V5 Filesystem
[  168.668995][ T8187] EXT4-fs error (device loop0): __ext4_iget:4919: inode #11: block 1: comm syz.0.1490: invalid block
[  168.713925][ T8187] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1490: couldn't read orphan inode 11 (err -117)
[  168.733808][ T4230] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  168.742889][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.779011][ T8187] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  168.800314][ T4230] usb 6-1: Product: syz
[  168.820616][ T4230] usb 6-1: Manufacturer: syz
[  168.838457][ T4230] usb 6-1: SerialNumber: syz
[  168.861137][ T8154] XFS (loop1): Ending clean mount
[  168.870809][ T4230] usb 6-1: config 0 descriptor??
[  168.898698][ T8206] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1498'.
[  168.908058][ T8206] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1498'.
[  168.972534][ T4187] XFS (loop1): Unmounting Filesystem
[  169.159785][ T4230] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  169.193016][ T4230] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  169.209108][ T4230] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  169.218223][ T4230] usb 6-1: media controller created
[  169.268767][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  169.449330][ T8231] netlink: 'syz.1.1500': attribute type 2 has an invalid length.
[  169.619145][ T2305] usb 6-1: USB disconnect, device number 15
[  169.787409][ T8245] loop1: detected capacity change from 0 to 4096
[  169.795885][ T8249] loop2: detected capacity change from 0 to 1024
[  169.824045][ T8245] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  169.840239][ T8245] EXT4-fs (loop1): Test dummy encryption mode enabled
[  169.875279][ T8245] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,noinit_itable,test_dummy_encryption,inode_readahead_blks=0x0000000000000400,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  169.971077][ T8249] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,init_itable=0x00000000000000c5,,errors=continue. Quota mode: none.
[  170.114825][ T8247] loop4: detected capacity change from 0 to 32768
[  170.147326][ T8219] loop0: detected capacity change from 0 to 40427
[  170.182313][ T8219] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288)
[  170.189308][ T8247] (syz.4.1517,8247,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  170.252122][ T8247] (syz.4.1517,8247,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  170.282240][ T8219] F2FS-fs (loop0): invalid crc value
[  170.288448][ T8256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1522'.
[  170.325791][ T8219] F2FS-fs (loop0): Found nat_bits in checkpoint
[  170.382725][ T8247] JBD2: Ignoring recovery information on journal
[  170.491306][ T8219] F2FS-fs (loop0): recover fsync data on readonly fs
[  170.514554][ T8219] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  170.521302][ T8219] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  170.558167][ T8219] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  170.614454][ T8247] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  170.926842][ T8273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1527'.
[  170.943552][ T8273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1527'.
[  170.986433][ T4198] ocfs2: Unmounting device (7,4) on (node local)
[  171.011888][ T8262] loop2: detected capacity change from 0 to 32768
[  171.102315][ T8275] netlink: 'syz.1.1529': attribute type 12 has an invalid length.
[  171.105108][ T8282] loop0: detected capacity change from 0 to 512
[  171.131312][ T8275] netlink: 'syz.1.1529': attribute type 29 has an invalid length.
[  171.140069][ T8275] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1529'.
[  171.161368][ T8262] XFS (loop2): Mounting V5 Filesystem
[  171.209274][ T8275] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1529'.
[  171.244933][ T8282] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.1526: inode has both inline data and extents flags
[  171.269728][ T8282] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1526: couldn't read orphan inode 15 (err -117)
[  171.369808][ T8282] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=,,errors=continue. Quota mode: writeback.
[  171.430011][ T8262] XFS (loop2): Ending clean mount
[  171.462664][   T26] audit: type=1800 audit(1791570699.126:141): pid=8262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1520" name="file1" dev="loop2" ino=7430 res=0 errno=0
[  171.485027][ T8295] loop1: detected capacity change from 0 to 164
[  171.595047][ T8289] loop5: detected capacity change from 0 to 32768
[  171.642335][ T4187] iso9660: Corrupted directory entry in block 2 of inode 1920
[  171.676582][ T4193] XFS (loop2): Unmounting Filesystem
[  171.719958][ T4187] ISOFS: unable to read i-node block
[  171.727193][ T8289] JBD2: Ignoring recovery information on journal
[  171.800785][ T4187] ISOFS: unable to read i-node block
[  171.918545][ T8289] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  172.092162][ T4446] ocfs2: Unmounting device (7,5) on (node local)
[  172.149696][ T8298] loop4: detected capacity change from 0 to 32768
[  172.355846][ T1490] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.533417][ T1490] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.631254][ T1490] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.747838][ T1490] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.941872][ T8334] netlink: 310 bytes leftover after parsing attributes in process `syz.5.1549'.
[  173.053081][ T8333] loop2: detected capacity change from 0 to 8192
[  173.133950][ T8333] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  173.293942][ T8354] loop5: detected capacity change from 0 to 64
[  173.320751][ T8339] hsr0 speed is unknown, defaulting to 1000
[  173.321271][ T1490] tipc: Left network mode
[  173.735167][ T7902] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  173.877045][ T8339] chnl_net:caif_netlink_parms(): no params data found
[  173.984153][ T7902] usb 1-1: Using ep0 maxpacket: 32
[  173.984555][ T7413] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  174.120572][ T8339] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.143591][ T7902] usb 1-1: unable to get BOS descriptor or descriptor too short
[  174.152882][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.182913][ T8339] device bridge_slave_0 entered promiscuous mode
[  174.224030][ T7902] usb 1-1: config 12 has an invalid interface number: 183 but max is 1
[  174.239620][ T7902] usb 1-1: config 12 has an invalid interface number: 229 but max is 1
[  174.267458][ T7902] usb 1-1: config 12 has no interface number 0
[  174.288079][ T7902] usb 1-1: config 12 has no interface number 1
[  174.307681][ T7902] usb 1-1: config 12 interface 183 has no altsetting 0
[  174.328214][ T7902] usb 1-1: config 12 interface 229 has no altsetting 0
[  174.356129][ T8339] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.368171][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.387168][ T8339] device bridge_slave_1 entered promiscuous mode
[  174.503765][ T7902] usb 1-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98
[  174.516608][ T8339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.536405][ T7902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.554257][ T7413] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  174.557702][ T7902] usb 1-1: Product: syz
[  174.575704][ T8339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.592453][ T8388] loop4: detected capacity change from 0 to 32768
[  174.593377][ T7413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.602867][ T7902] usb 1-1: Manufacturer: syz
[  174.618758][ T7902] usb 1-1: SerialNumber: syz
[  174.633352][ T7413] usb 6-1: Product: syz
[  174.646672][ T7413] usb 6-1: Manufacturer: syz
[  174.656843][ T7413] usb 6-1: SerialNumber: syz
[  174.681668][ T7413] usb 6-1: config 0 descriptor??
[  174.706539][ T8339] team0: Port device team_slave_0 added
[  174.732145][ T8396] JBD2: Ignoring recovery information on journal
[  174.752892][ T1490] device hsr_slave_0 left promiscuous mode
[  174.765937][ T7413] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  174.796216][ T7413] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  174.812589][ T1490] device hsr_slave_1 left promiscuous mode
[  174.820337][ T1490] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.828386][ T7413] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  174.838285][ T7413] usb 6-1: media controller created
[  174.848526][ T1490] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.860855][ T7413] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  174.880331][ T8388] XFS (loop4): Mounting V5 Filesystem
[  174.920989][ T8396] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  174.941320][ T1490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.955405][  T155] (kworker/u4:3,155,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1
[  174.982691][ T8372] dvb-usb: bulk message failed: -22 (7/0)
[  174.986910][ T1490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.005624][ T7902] usb 1-1: USB disconnect, device number 8
[  175.045263][ T8388] XFS (loop4): Ending clean mount
[  175.060640][ T1490] device bridge_slave_1 left promiscuous mode
[  175.070444][ T5318] Bluetooth: hci0: command 0x0409 tx timeout
[  175.101819][ T7413] DVB: Unable to find symbol mt352_attach()
[  175.173814][ T1490] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.195341][ T1490] device bridge_slave_0 left promiscuous mode
[  175.195365][ T4198] XFS (loop4): Unmounting Filesystem
[  175.201596][ T1490] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.219254][ T4193] ocfs2: Unmounting device (7,2) on (node local)
[  175.257766][ T7413] DVB: Unable to find symbol nxt6000_attach()
[  175.267910][ T7413] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  175.325588][ T1490] device bridge0 left promiscuous mode
[  175.351098][ T7413] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16
[  175.380102][ T7413] dvb-usb: schedule remote query interval to 1000 msecs.
[  175.389747][ T7413] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  175.413853][ T7413] dvb-usb: bulk message failed: -22 (7/0)
[  175.423745][ T7413] dvb-usb: bulk message failed: -22 (7/0)
[  175.452486][ T7413] usb 6-1: USB disconnect, device number 16
[  175.535476][ T1490] device veth1_macvtap left promiscuous mode
[  175.551772][ T1490] device veth0_macvtap left promiscuous mode
[  175.578068][ T1490] device veth1_vlan left promiscuous mode
[  175.585323][ T7413] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  175.606577][ T1490] device veth0_vlan left promiscuous mode
[  175.783567][ T4230] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  175.979408][ T8443] set_capacity_and_notify: 1 callbacks suppressed
[  175.979424][ T8443] loop4: detected capacity change from 0 to 64
[  176.029670][ T8443] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  176.143449][ T4230] usb 1-1: New USB device found, idVendor=050d, idProduct=0103, bcdDevice= 2.00
[  176.156406][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.235122][ T4230] belkin_sa 1-1:1.0: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  176.270729][ T4230] usb 1-1: bcdDevice: 0200, bfc: 1
[  176.285162][ T1490] team0 (unregistering): Port device team_slave_1 removed
[  176.301935][ T4230] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  176.354902][ T1490] team0 (unregistering): Port device team_slave_0 removed
[  176.390041][ T1490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.418205][ T1490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.480540][ T8442] loop5: detected capacity change from 0 to 32768
[  176.579580][ T1490] bond0 (unregistering): Released all slaves
[  176.655062][ T8339] team0: Port device team_slave_1 added
[  176.690057][ T7902] hsr0 speed is unknown, defaulting to 1000
[  176.732835][ T7902] ==================================================================
[  176.741401][ T7902] BUG: KASAN: use-after-free in siw_query_port+0x359/0x450
[  176.748640][ T7902] Read of size 4 at addr ffff88801e4de0d8 by task kworker/1:18/7902
[  176.756647][ T7902] 
[  176.759031][ T7902] CPU: 1 PID: 7902 Comm: kworker/1:18 Not tainted syzkaller #0
[  176.766590][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  176.776668][ T7902] Workqueue: infiniband ib_cache_event_task
[  176.782609][ T7902] Call Trace:
[  176.785910][ T7902]  <TASK>
[  176.788871][ T7902]  dump_stack_lvl+0x188/0x250
[  176.793610][ T7902]  ? show_regs_print_info+0x20/0x20
[  176.798841][ T7902]  ? _printk+0xda/0x130
[  176.803045][ T7902]  ? load_image+0x410/0x410
[  176.807578][ T7902]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  176.813085][ T7902]  print_address_description+0x60/0x2d0
[  176.818670][ T7902]  ? siw_query_port+0x359/0x450
[  176.823553][ T7902]  kasan_report+0xdf/0x130
[  176.828003][ T7902]  ? siw_query_port+0x359/0x450
[  176.832886][ T7902]  siw_query_port+0x359/0x450
[  176.837599][ T7902]  ib_cache_update+0x1bd/0x9c0
[  176.842409][ T7902]  ? ib_cache_setup_one+0x5c0/0x5c0
[  176.847639][ T7902]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  176.853661][ T7902]  ? __lock_acquire+0x7d40/0x7d40
[  176.858720][ T7902]  ? read_lock_is_recursive+0x10/0x10
[  176.864117][ T7902]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  176.870036][ T7902]  ? _raw_spin_unlock+0x40/0x40
[  176.874920][ T7902]  ib_cache_event_task+0xcf/0x1c0
[  176.879974][ T7902]  process_one_work+0x867/0xff0
[  176.884871][ T7902]  ? worker_detach_from_pool+0x240/0x240
[  176.890551][ T7902]  ? lockdep_hardirqs_off+0x70/0x100
[  176.895864][ T7902]  ? _raw_spin_lock_irq+0xb7/0xf0
[  176.900922][ T7902]  ? _raw_spin_lock_irqsave+0x100/0x100
[  176.906508][ T7902]  ? wq_worker_running+0x97/0x170
[  176.911561][ T7902]  worker_thread+0xad7/0x12a0
[  176.916298][ T7902]  kthread+0x42e/0x520
[  176.920400][ T7902]  ? rcu_lock_release+0x20/0x20
[  176.925293][ T7902]  ? kthread_blkcg+0xd0/0xd0
[  176.929925][ T7902]  ret_from_fork+0x1f/0x30
[  176.934397][ T7902]  </TASK>
[  176.937448][ T7902] 
[  176.939787][ T7902] Allocated by task 4187:
[  176.944143][ T7902]  __kasan_kmalloc+0xaf/0xe0
[  176.948765][ T7902]  kvmalloc_node+0x84/0x130
[  176.953301][ T7902]  alloc_netdev_mqs+0x84/0xc40
[  176.958100][ T7902]  rtnl_create_link+0x2fd/0xa90
[  176.962983][ T7902]  rtnl_newlink+0x12b6/0x1920
[  176.967683][ T7902]  rtnetlink_rcv_msg+0x7f1/0xf10
[  176.972643][ T7902]  netlink_rcv_skb+0x1e9/0x430
[  176.977438][ T7902]  netlink_unicast+0x78f/0x940
[  176.982222][ T7902]  netlink_sendmsg+0x8ba/0xbe0
[  176.987000][ T7902]  __sys_sendto+0x46d/0x620
[  176.991536][ T7902]  __x64_sys_sendto+0xda/0xf0
[  176.996224][ T7902]  do_syscall_64+0x4c/0xa0
[  177.000663][ T7902]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  177.006598][ T7902] 
[  177.008949][ T7902] Freed by task 1490:
[  177.012946][ T7902]  kasan_set_track+0x4b/0x70
[  177.017557][ T7902]  kasan_set_free_info+0x1f/0x40
[  177.022550][ T7902]  ____kasan_slab_free+0xd5/0x110
[  177.027609][ T7902]  slab_free_freelist_hook+0xec/0x170
[  177.033006][ T7902]  kfree+0xef/0x2a0
[  177.036863][ T7902]  device_release+0x92/0x1c0
[  177.041484][ T7902]  kobject_put+0x217/0x450
[  177.045921][ T7902]  netdev_run_todo+0x942/0xac0
[  177.050708][ T7902]  default_device_exit_batch+0x369/0x3c0
[  177.056353][ T7902]  cleanup_net+0x78e/0xba0
[  177.060790][ T7902]  process_one_work+0x867/0xff0
[  177.065036][ T8451] loop4: detected capacity change from 0 to 4096
[  177.065655][ T7902]  worker_thread+0xad7/0x12a0
[  177.076674][ T7902]  kthread+0x42e/0x520
[  177.080766][ T7902]  ret_from_fork+0x1f/0x30
[  177.085224][ T7902] 
[  177.087576][ T7902] The buggy address belongs to the object at ffff88801e4de000
[  177.087576][ T7902]  which belongs to the cache kmalloc-cg-4k of size 4096
[  177.101912][ T7902] The buggy address is located 216 bytes inside of
[  177.101912][ T7902]  4096-byte region [ffff88801e4de000, ffff88801e4df000)
[  177.115304][ T7902] The buggy address belongs to the page:
[  177.120982][ T7902] page:ffffea0000793600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e4d8
[  177.131171][ T7902] head:ffffea0000793600 order:3 compound_mapcount:0 compound_pincount:0
[  177.139526][ T7902] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  177.147559][ T7902] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801784c280
[  177.156170][ T7902] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000
[  177.164768][ T7902] page dumped because: kasan: bad access detected
[  177.171216][ T7902] page_owner tracks the page as allocated
[  177.176940][ T7902] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4193, ts 67181938349, free_ts 67007341136
[  177.197806][ T7902]  get_page_from_freelist+0x24f6/0x2670
[  177.203380][ T7902]  __alloc_pages+0x1ee/0x480
[  177.207988][ T7902]  new_slab+0xc0/0x4b0
[  177.212057][ T7902]  ___slab_alloc+0x807/0xdd0
[  177.216651][ T7902]  __kmalloc_node+0x142/0x3a0
[  177.221330][ T7902]  kvmalloc_node+0x84/0x130
[  177.225926][ T7902]  alloc_netdev_mqs+0x84/0xc40
[  177.230696][ T7902]  rtnl_create_link+0x2fd/0xa90
[  177.235550][ T7902]  veth_newlink+0x2e1/0xe20
[  177.240095][ T7902]  rtnl_newlink+0x139e/0x1920
[  177.244782][ T7902]  rtnetlink_rcv_msg+0x7f1/0xf10
[  177.249733][ T7902]  netlink_rcv_skb+0x1e9/0x430
[  177.254504][ T7902]  netlink_unicast+0x78f/0x940
[  177.259286][ T7902]  netlink_sendmsg+0x8ba/0xbe0
[  177.264056][ T7902]  __sys_sendto+0x46d/0x620
[  177.268595][ T7902]  __x64_sys_sendto+0xda/0xf0
[  177.273281][ T7902] page last free stack trace:
[  177.277972][ T7902]  free_unref_page_prepare+0x637/0x6c0
[  177.283435][ T7902]  free_unref_page+0x8f/0x2a0
[  177.288119][ T7902]  qlist_free_all+0x35/0x90
[  177.292630][ T7902]  kasan_quarantine_reduce+0x150/0x160
[  177.298109][ T7902]  __kasan_slab_alloc+0x2f/0xc0
[  177.302991][ T7902]  slab_post_alloc_hook+0x4c/0x380
[  177.308110][ T7902]  kmem_cache_alloc_node+0x184/0x2c0
[  177.313400][ T7902]  __alloc_skb+0xf4/0x750
[  177.317761][ T7902]  alloc_skb_with_frags+0xa7/0x720
[  177.322879][ T7902]  sock_alloc_send_pskb+0x87f/0x9a0
[  177.328086][ T7902]  unix_dgram_sendmsg+0x6f8/0x19c0
[  177.333230][ T7902]  __sys_sendto+0x46d/0x620
[  177.337776][ T7902]  __x64_sys_sendto+0xda/0xf0
[  177.342477][ T7902]  do_syscall_64+0x4c/0xa0
[  177.346921][ T7902]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  177.352847][ T7902] 
[  177.355175][ T7902] Memory state around the buggy address:
[  177.360804][ T7902]  ffff88801e4ddf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  177.368871][ T7902]  ffff88801e4de000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.376950][ T7902] >ffff88801e4de080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.385099][ T7902]                                                     ^
[  177.392035][ T7902]  ffff88801e4de100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.400102][ T7902]  ffff88801e4de180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  177.408163][ T7902] ==================================================================
[  177.416225][ T7902] Disabling lock debugging due to kernel taint
[  177.448029][ T8451] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  177.468829][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.478076][ T8459] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1586'.
[  177.511193][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.537643][ T8459] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1586'.
[  177.537680][ T8459] netlink: 'syz.2.1586': attribute type 5 has an invalid length.
[  177.537692][ T8459] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1586'.
[  177.564151][ T8451] Quota error (device loop4): find_tree_dqentry: Getting block too big (65537 >= 6)
[  177.576756][ T8451] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  177.586603][ T8451] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1585: Failed to acquire dquot type 1
[  177.616084][ T8339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.644726][ T8339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.650413][ T7902] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  177.658908][ T7902] CPU: 1 PID: 7902 Comm: kworker/1:18 Tainted: G    B             syzkaller #0
[  177.666353][ T8339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.667943][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  177.693894][ T8339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.703882][ T7902] Workqueue: infiniband ib_cache_event_task
[  177.720282][ T7902] Call Trace:
[  177.723579][ T7902]  <TASK>
[  177.726527][ T7902]  dump_stack_lvl+0x188/0x250
[  177.731220][ T7902]  ? show_regs_print_info+0x20/0x20
[  177.736435][ T7902]  ? load_image+0x410/0x410
[  177.740969][ T7902]  panic+0x2f8/0x850
[  177.744883][ T7902]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  177.751058][ T7902]  ? bpf_jit_dump+0xd0/0xd0
[  177.755606][ T7902]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  177.761612][ T7902]  ? _raw_spin_unlock+0x40/0x40
[  177.766507][ T7902]  ? siw_query_port+0x359/0x450
[  177.771378][ T7902]  check_panic_on_warn+0x80/0xa0
[  177.776343][ T7902]  ? siw_query_port+0x359/0x450
[  177.781207][ T7902]  end_report+0x6d/0xf0
[  177.785384][ T7902]  kasan_report+0x102/0x130
[  177.789908][ T7902]  ? siw_query_port+0x359/0x450
[  177.794785][ T7902]  siw_query_port+0x359/0x450
[  177.799503][ T7902]  ib_cache_update+0x1bd/0x9c0
[  177.804292][ T7902]  ? ib_cache_setup_one+0x5c0/0x5c0
[  177.809532][ T7902]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  177.815535][ T7902]  ? __lock_acquire+0x7d40/0x7d40
[  177.820579][ T7902]  ? read_lock_is_recursive+0x10/0x10
[  177.825969][ T7902]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  177.831889][ T7902]  ? _raw_spin_unlock+0x40/0x40
[  177.836763][ T7902]  ib_cache_event_task+0xcf/0x1c0
[  177.841828][ T7902]  process_one_work+0x867/0xff0
[  177.846708][ T7902]  ? worker_detach_from_pool+0x240/0x240
[  177.852362][ T7902]  ? lockdep_hardirqs_off+0x70/0x100
[  177.857679][ T7902]  ? _raw_spin_lock_irq+0xb7/0xf0
[  177.862735][ T7902]  ? _raw_spin_lock_irqsave+0x100/0x100
[  177.868311][ T7902]  ? wq_worker_running+0x97/0x170
[  177.873366][ T7902]  worker_thread+0xad7/0x12a0
[  177.878081][ T7902]  kthread+0x42e/0x520
[  177.882170][ T7902]  ? rcu_lock_release+0x20/0x20
[  177.887049][ T7902]  ? kthread_blkcg+0xd0/0xd0
[  177.891667][ T7902]  ret_from_fork+0x1f/0x30
[  177.896114][ T7902]  </TASK>
[  177.899505][ T7902] Kernel Offset: disabled
[  177.903852][ T7902] Rebooting in 86400 seconds..